{ "Event": { "published": true, "date": "2025-12-21", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2025-12-21", "timestamp": 1766361781, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "409efe57-8bd3-4c39-bbab-7cb1b1b2205a", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c7e66a5-dec4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359539, "uuid": "27cd9fca-b55d-4e0e-8be1-985046880ec8", "comment": "Malware payload (Mirai)", "value": "307a5c89a0b364f406b669588ce3ce3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359539, "uuid": "785249f7-eda5-4338-8bf5-47a269384269", "comment": "Malware payload (Mirai)", "value": "000b03b1ac1152525503e65266ba1d1697f92a48a9594a3da36293214492af31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359539, "uuid": "308004aa-06c8-46f3-a30c-d0ad169be867", "comment": "Malware payload (Mirai)", "value": "dc6abc4d1f239af969d0fb7d3ff164f0a76ea68e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359539, "uuid": "c272cc05-971c-41bc-89ca-43de14df2f0d", "comment": "Malware payload (Mirai)", "value": "40fa91338952273e058b166b00a5a398c57a33f939bfbc65209f9605e0cf3038fa54e49d6e4e252c878d90f74ea73706", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359539, "uuid": "633d2bc3-83a2-4442-92e9-b6752f60baf6", "value": "T14E63AE26C87E9D54C85C9670A4B1EB751713A40096922FF75E99CEB18003DECF68C7FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359539, "uuid": "26b686ed-c134-4965-aabc-8afc6eab1f1d", "value": "1536:HYSJR8i0vym0gaJKHS/EeUcrvYLsCanmeb1TAbVRXF:Hj8dLGxocrvYLsDmeJTA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359539, "uuid": "9275e606-fe0f-477a-b27c-3b128ee3384e", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359539, "uuid": "76311b19-2a7b-4f33-97fe-0894d426910c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359539, "uuid": "49274c2e-bdef-485f-b781-7e21a5153cdc", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4d36729-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335286, "uuid": "5eff4483-98cb-4ef0-b870-67b5a5cce64b", "comment": "Malware payload (Mirai)", "value": "dec0df940caaf2dccf2db7f8c4f17bf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335286, "uuid": "11669bd7-061f-4a17-ab0b-6d93237f961a", "comment": "Malware payload (Mirai)", "value": "002bfd6bbf31e7ae4b4e0f83cbfb2d040d96117fc9d78fbf90a306e8ab55f765", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335286, "uuid": "810b7dc0-96a9-4dd3-a003-b587b0c9f947", "comment": "Malware payload (Mirai)", "value": "9cd09752d963921077f270b0426b235a307ae3af", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335286, "uuid": "24d37bcb-b444-4119-8521-e0f7df0152cc", "comment": "Malware payload (Mirai)", "value": "91ffd7a8cf9398340fcf639ac6ac4c4c7013cfc02859612f9a83bf35e72fea82e01dd14024f77057cd50ec61dbe2cc0a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335286, "uuid": "ffac90ec-2f7c-4e83-9c3d-6064476ef618", "value": "T104332942B22C094BF9E65AB0353F0FE093BFE98024E4B585695EEA458136F335586F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335286, "uuid": "d98f78f9-4470-42dc-883d-df3444a6f58b", "value": "768:/KfsbnHAt1ezbnAgCN7RkIV3fgB1+RNRR7Eg3tbv6VFssuWXwdyrB:k6HAt1ezbnAXZUBa33tbC/3XwWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335286, "uuid": "bbdd4ffd-488e-4caf-8531-5ab3048abfcb", "value": 51332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335286, "uuid": "63b98b25-eac1-48c1-bd67-876fa18803e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335286, "uuid": "88d5c75c-cfae-4801-bacb-5f7b7cd43c06", "value": "Josho.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10214228-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329776, "uuid": "ea924fc6-1ab9-4aef-b133-4d6d5e6d74ee", "comment": "Malware payload (Mirai)", "value": "c14632bdec4354befb98785b107ce970", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329776, "uuid": "119278bb-078d-46ab-9283-92cc345bcdd9", "comment": "Malware payload (Mirai)", "value": "0073d8470a001ed1db75c8466c388cdf8608edf64f64289e7545d92702d8759a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329776, "uuid": "03a87da0-35e5-4d34-a38f-ec7343bef413", "comment": "Malware payload (Mirai)", "value": "e2528163c3ac9488de4a31d2d8a5f17861e934f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329776, "uuid": "c7597f55-516b-4259-8808-d31e0b7defbf", "comment": "Malware payload (Mirai)", "value": "5b75b0e108a675ae8932c614e34d88509ba0b215709b3012e5e513c0711194ee3919d373b6ba7e790a4d4b84dbc85187", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329776, "uuid": "de1e238d-9648-40de-a2f6-7efc60ca4ab6", "value": "T15C338C66DDAE9E54E55C56B0B4318F3B4B136000A3872FFA4566DA399003D8CF68E7F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329776, "uuid": "6954c3bc-c36c-435e-b02e-2959cf0441a5", "value": "1536:wKp0uGJGsY0UjFcvUnJ52eqRdpCpMp1xTlbVR:BcGvY8nL2eqRDsSLTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329776, "uuid": "16b6cb01-0a1a-4c61-be97-c60cab6ec358", "value": 54524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329776, "uuid": "8a31a201-9a54-4a88-a4b9-901703ee6dbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329776, "uuid": "c34272c3-5393-4da7-842c-0c5bee265f6e", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34636b98-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347875, "uuid": "fa939389-62f6-4e42-853f-bbca01c49ca5", "comment": "Malware payload (Mirai)", "value": "1de98cc94d40f74fee764bad776a2d9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347875, "uuid": "2ebc6fc3-4ecf-4ef5-93cf-3bf87fe0c4ff", "comment": "Malware payload (Mirai)", "value": "00785c8e6d89c617b02e7f59bcdc4a829c1c974fdb3eb1aec75320c1677ea32b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347875, "uuid": "01cdaff2-0573-4208-af1b-ea33a2939ea7", "comment": "Malware payload (Mirai)", "value": "1891f2cfd78fdf66f05c9d95c3b7fc98e68cd98b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347875, "uuid": "bdc96f83-e9a2-4852-ad7e-e62e2cca6001", "comment": "Malware payload (Mirai)", "value": "67069330125dcf6f9d88e36a11b32ffe6f8a0f299ff251491607fc155fe244b1cf950c5df170459975b102462f93346b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347875, "uuid": "ec2ab372-7646-41c1-bfd1-27bfbf6bc6de", "value": "T1C6146C2BB3C39CD6C51067308C316362776FD7081958EAFFDA0B3794AA977225A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347875, "uuid": "ba0e5264-40d3-4d85-9ae3-a326eb01a991", "value": "6144:lNdOm515myuemNfafzHn4OItprX7IKTtw:OyuNqzYHzX7IN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347875, "uuid": "b6cc8d93-789d-48f2-aa6c-1f53dde4592f", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347875, "uuid": "1bda0b9b-d138-4b6d-8824-461be09c9abe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347875, "uuid": "62e309be-37e4-4317-ab4b-c5c3e0d2e917", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fb22b72-de92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338016, "uuid": "e95ff940-172b-48cf-be4d-00080c302f15", "comment": "Malware payload (Mirai)", "value": "6d8db690aca0b9a2d418e15adc6f0831", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338016, "uuid": "5a201209-2a9d-4071-8c62-53e2354eed8a", "comment": "Malware payload (Mirai)", "value": "018c165b8ec312332772f89005cf386e7cd5959f65cf4adba0b02f23258ed243", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338016, "uuid": "3eaced6c-26fc-4556-a4c8-40f00cb9967b", "comment": "Malware payload (Mirai)", "value": "62088f7fe08715471f0dc53947d85bd1461aa46b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338016, "uuid": "ed640c97-7d0b-45ec-b78a-ddf68ae5d3ef", "comment": "Malware payload (Mirai)", "value": "245c04fecb2d2a2a4daef27c9a3054a3ce053a47ecc4521cd851f4b17f0fb0b191c6eda9e99b55cfee968fc56e16dfb2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338016, "uuid": "8ec7d010-b6ec-48a4-ad18-ba54c1a99db0", "value": "T13424B70AAF510EB7DCABCD3702E91B0129CC645722A53B357674D918F54BA4F1AE3CB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338016, "uuid": "d501ae10-ed67-4e19-8776-b80c77cf95d5", "value": "3072:6Lo8jU1kVlD5itHug8vwiWd/CEoeP2toEmsR+eXk:6Lo8jEkV3itHcFWd/B72tnmsR+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338016, "uuid": "29741551-793e-442a-92ab-86c3506c486b", "value": 210780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338016, "uuid": "dbb2a22b-2bbf-425b-8958-9637673ffca8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338016, "uuid": "a13e870c-0919-4ad0-b881-32a407da7c48", "value": "yamaha.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "738bf231-de00-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766275396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275396, "uuid": "99d4fba7-faea-4598-b7c6-25c4ae47ae43", "comment": "Malware payload (Mirai)", "value": "b2251114f6904051a40e0bd986f9049a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275396, "uuid": "7bf8e65e-4c1e-4e9f-99f1-7a31a182aca8", "comment": "Malware payload (Mirai)", "value": "01f971261eb12eba92ad0287208be83c779fe8d3819834e73b8765447fc76c77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275396, "uuid": "dd9149e2-f06c-449d-b75f-6d0ff0c901ba", "comment": "Malware payload (Mirai)", "value": "a0a08293b03eb69a72bf423d37fddd66ccfc1875", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275396, "uuid": "c0f71a04-c577-4bd9-80fd-a315a4b42ee0", "comment": "Malware payload (Mirai)", "value": "fa37802c92f099d687e026b1f51219cbf885e8a32bd2783b98ed6a3a15501484e837b38226d3d9801ec6b5529af17c67", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275396, "uuid": "fbf917c7-de37-4525-953d-92fd17f05a6c", "value": "T151043C46B6814E13C0D7277AF6EF42453322A7A5D3DB73059924BFB43F826AE0E63605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275396, "uuid": "57e3fbef-58bd-4481-af11-a7575e8e03dd", "value": "3072:aSwwC20EgzNxJnlbdgeeagL8EM0PWKQ2AqFTxGsE+GXPM/9FdxxxkRDJ:aSwwC20EgzNxnxBeagL8EMuWkAIVpE+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766275396, "uuid": "0b676373-fad8-4c11-a71d-564b921d5e82", "value": 176552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766275396, "uuid": "cc6ccae1-2957-408e-9150-46388e1cf868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275396, "uuid": "7fbe9bee-7de7-4ea7-9480-d121bbad7755", "value": "sdxkzX_UXA229x.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "111dc342-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344380, "uuid": "97260631-9b6d-42cd-891b-baf204a06929", "comment": "Malware payload (Mirai)", "value": "038bed12c4cf03f9e3c64b4c7ac6b441", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344380, "uuid": "dcd9f65b-8238-4007-9e4e-ea54b764d81e", "comment": "Malware payload (Mirai)", "value": "02c0f561c8d3afd029ba1d62ac60c5acaab53885d5b76e1cd34c07173c2d113b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344380, "uuid": "ed6b1d79-2191-4ba3-9ff7-00bd9ee8a3a6", "comment": "Malware payload (Mirai)", "value": "606a740ffda73ed42b1eac105fd28ebbbf670cef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344380, "uuid": "36c1cfa7-1776-4dc3-bf15-1d5dbac5eec3", "comment": "Malware payload (Mirai)", "value": "e30e618268051726a35221cb0ffc3d754399803927da92bff808df81a56bdf1ecb9be0b7f011901962324c2efed9c884", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344380, "uuid": "3faa5ba8-2852-475d-9afc-793b3eeda10f", "value": "T14F04871E6E128F7DF678873047B74E259B6C23DA26E1D645E2ACC1106E2025E641FFEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344380, "uuid": "c6a077fe-097c-4668-bbae-762664686f37", "value": "3072:LgSrXFZ1kmwhFUIq0Cg/GFIGBfPaubSb7s:LgSrXFvkmbIlCCG1aQSb7s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344380, "uuid": "be3ba39c-074c-4ed4-9900-696118f7584e", "value": 177468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344380, "uuid": "4cea3efa-5f4d-4af5-82d4-d17879c5acf3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344380, "uuid": "f40491a0-fad5-4e19-a855-8ea45badbf0f", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcc3c59e-de97-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766340481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340481, "uuid": "7be196de-b0ba-4991-ba4a-3b4201312801", "comment": "Malware payload", "value": "a24e52c2aa8c81725b10da1d913373ab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340481, "uuid": "d6c13469-8e29-402d-b106-ec6777c767e5", "comment": "Malware payload", "value": "02ca85af31deea4b339bc8144c602356f06a7d3250ca4b6616a2a38d8edb73d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340481, "uuid": "bb2265ad-6d69-4cf7-9004-e1d659e3d2ba", "comment": "Malware payload", "value": "8ff8383e00c046443664917e14afd1143bf87832", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340481, "uuid": "6b5186e2-1998-4cbd-922b-01158957594e", "comment": "Malware payload", "value": "8bb2d5db6d93776878235e935136eee3ca3c23657051c6dd9f74befc3d62f914f35fbaa2ef2f0ee1fb68fccd14715772", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340481, "uuid": "4f621a7b-4f71-4e5d-86dd-82bc7dcac7a9", "value": "T1A1087B4267EA04C5F9FBAA3489E65213D677BC067F3085CB324C172A1F736E09976722", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340481, "uuid": "d11fc8de-67c0-40be-bf43-810be9148499", "value": "04397e0bcb7648e70cf6570253f46feb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340481, "uuid": "18790afb-3500-4140-81a4-cc172eeb9d21", "value": "393216:J5/8EqLOkrVu7FvRrEiiY8izEHh68I8Tq8rIanQu58EASEhoIaE2lShYo8VSbYER:JCOAP7nQJh8KZbOhELhvxOOxU3Kn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340481, "uuid": "194eabcd-5bf6-4a63-961e-8628968b273a", "value": 77350285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340481, "uuid": "9204d55f-608c-4173-be26-b12d413a6d06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340481, "uuid": "af928f55-09b2-44a9-aae4-300be22ca85d", "value": "Game.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c366587-de33-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297288, "uuid": "dd33e65f-1086-449b-97b1-2ace1748bc29", "comment": "Malware payload (Mirai)", "value": "929f8271895a193b93d5ac9c442591c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297288, "uuid": "0650b342-5489-44bd-b310-a44ac296099c", "comment": "Malware payload (Mirai)", "value": "03102d2c210a07eb67ac99d90a57eed7f87681fa49eea3f69d36812088968ca7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297288, "uuid": "7727e7d6-44f3-475f-a26a-3488239b07e3", "comment": "Malware payload (Mirai)", "value": "5f04cf1932e9030ea042cc44a0815d2578c7018b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297288, "uuid": "305ad12d-5ae1-4c0c-be2b-9455d353eb81", "comment": "Malware payload (Mirai)", "value": "9d2e143c692a8315072d415e16edd2e1a3585dc81343cb76b4d8da484a0315edd97c8cc4b6d9d0f793eb330293118cc9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297288, "uuid": "ee8b04ae-dcee-46ab-acf4-c0bafeb7943d", "value": "T1AC630782B8C14627DBD1127EF67E438C332557A8D2DBB2138D226F113786A2B1D67793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297288, "uuid": "c86da532-d359-4c19-93e0-42c838c97d1a", "value": "1536:XbF4TLPHXCaAV23LmaTz+IS9M5E67LNh7blCRWnX58rO//pluvVuCC0/:Ll07hqRWnXXXwVuCC0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297288, "uuid": "c81a1a87-4cba-4381-81a4-5736f112b946", "value": 71548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297288, "uuid": "156e5249-3240-4447-a9ea-737bfe170b18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297288, "uuid": "11a0091d-fd99-4ddb-b12e-17af0ff877da", "value": "sdxkzX_UXA229x.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6e3ad0b-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340793, "uuid": "d3d552e2-0e2d-467a-a196-4467bdffec4a", "comment": "Malware payload (Mirai)", "value": "e50304c4a6fde3ff94b7d36757c016a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340793, "uuid": "e3c3c877-7375-4374-882c-a64331f2dd12", "comment": "Malware payload (Mirai)", "value": "032bf78847c3937672650017a0f3e8da0401c09a0684275356f60bab326308c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340793, "uuid": "a548c7a8-aa66-40a4-b7c8-f14228b236d5", "comment": "Malware payload (Mirai)", "value": "7498244593562c6b23a2227e0612d1a0184dc2f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340793, "uuid": "b710bf63-7190-4c5c-834d-11d3515431b8", "comment": "Malware payload (Mirai)", "value": "0f4809874545254722e81a6173acd7d5bd244462dccb93cce3c600fe55b7d6bae5884e046c120e8b5864b068077a9a04", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340793, "uuid": "50c86251-ad4d-4fad-88c3-b41972924666", "value": "T195935B21BD7A2E1BC0C4747B51F30B35F2F6274A21ACCA1A7D720E8DBF156102557ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340793, "uuid": "b5cf5a92-753c-4318-a663-03f769bc9872", "value": "1536:I+X9xScBoZQfKekrtSZea2VWc7HRw+fwRC9UH1bNltP08zm7uhq:ZtI4ieNzExfwRkUhm8zm1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340793, "uuid": "a64c11a5-ee32-4954-b133-ea5e655875af", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340793, "uuid": "8801ea68-eb6e-4bef-848f-c43faa21d582", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340793, "uuid": "c45ebc1d-9dee-4564-9707-d9d08dd26ada", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fef065a-de60-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766316515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316515, "uuid": "40bbc9fb-8dbf-4a7e-9453-3c2fd2f882af", "comment": "Malware payload (Mirai)", "value": "8d22e9a582f5c92ea88a19af1f858df0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316515, "uuid": "d3c98c83-5886-496f-b82f-a71384070f18", "comment": "Malware payload (Mirai)", "value": "03418910a6b1b76d9e3162c8552edf52ea6c249bb5947739bf3d0e8f58595d0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316515, "uuid": "b7b05205-c8dd-40b2-8dad-2adcb3fefd8b", "comment": "Malware payload (Mirai)", "value": "a600c443f865a9db1f2c450b379aff4775a98755", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316515, "uuid": "29701ea6-7339-4e32-a58c-dafe7316afe7", "comment": "Malware payload (Mirai)", "value": "5b2b221edbdee3530de0f68e5a781e66af68a9fb600540b36ebac6b3cbc80040388a6707c098736fb53eef4eeea33d14", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316515, "uuid": "2ada6e1f-bcf5-411d-8c5d-77b4715eec87", "value": "T15A131A55FC82857BC2E017BABB6E6B8C337663D5D2DF7323982013A1369621F1D22E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316515, "uuid": "0d80e3d1-60c6-48a4-95ff-16e0603cd186", "value": "768:iEZROTBE/RhII5whz6wG5rx+X8c7ToXsfjPyLzWckJ2edkoh4Q0f/PbBzMBvuwEP:dZkEfII5w5RG5rETrfTyLZkJ2ededf3H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316515, "uuid": "3e5ffcff-32d3-464e-98b2-b2eef5d7b006", "value": 44548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316515, "uuid": "8967ccb9-458b-4c12-8ee2-f17c96dacb19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316515, "uuid": "d865c5f2-a03a-4fe8-932a-73dde2e4d0a0", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9f5d11f-dea4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345925, "uuid": "2213e5aa-0e1e-4aac-9c75-5437bb7e3b3f", "comment": "Malware payload (Mirai)", "value": "9fe5ab90eb31fac21f5d44e6a5267ac3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345925, "uuid": "20561db0-6100-4e8a-a2ac-696addf609d8", "comment": "Malware payload (Mirai)", "value": "0409d17ad9b9cf3872045526dca480ed2b4a5523f2b8e7853389a97ad4e47f30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345925, "uuid": "e811ba5d-633b-4e83-a449-1cd3dde3b2d3", "comment": "Malware payload (Mirai)", "value": "b26a3c45ef488d7596ae141c5dc95bf0511b8cd1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345925, "uuid": "1cda1508-e90c-470d-b4cc-c340891a577f", "comment": "Malware payload (Mirai)", "value": "df28112e6757d8b4b1907c7ba351bb830180624e4d909203d441adc4a2ae77f598c86ff557dbb5a8125f5a3e18f114cc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345925, "uuid": "02919149-3f22-4ade-97dd-5170202ae7fa", "value": "T1F463BF36C8AA9D91C85C99B4B8B1DB745B13B4009A922FF75D89CDB18003D9CF64C7FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345925, "uuid": "d7b29dfd-84ed-449b-823e-05dd0f0660b6", "value": "1536:0KSJ/cwZBHSozK2JaB7Xc1HUiOYgTC+/J7HHbTAbVR:0HcmBFpayGiOYgTd/FH7TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345925, "uuid": "50beab4c-8889-4ab5-b405-231d79aa6b53", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345925, "uuid": "9c6ce70e-0ee9-49cd-8f70-64dbac716a3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345925, "uuid": "6263a0a2-916c-45da-bb13-811e3fa1a8ea", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "665a0259-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345382, "uuid": "0019d1ec-b400-47ca-93c2-6f26ac52667f", "comment": "Malware payload (Mirai)", "value": "850a7f07ffaa8fe9f6b682b39b19a88a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345382, "uuid": "b504daeb-e40c-48fc-936e-ff30d56d938f", "comment": "Malware payload (Mirai)", "value": "051e97db9e4dd0bcfdb81535884b1d2d12960abc7d44da5757ba0472cd5be46b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345382, "uuid": "ae88f201-1bd0-46d5-bfc4-3374da3b6ced", "comment": "Malware payload (Mirai)", "value": "e728bc1d09c10254fb5a30b0de909e74648ecf8d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345382, "uuid": "f6583fd1-baf6-4fba-bb9e-cdaa808a5630", "comment": "Malware payload (Mirai)", "value": "bfde9a7ca3bcdc5479dbcad70e2f9c0edb02b18739fd8b6edda8b0fb7c0baea35ab8a293b66592f186516e8c9491a4b4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345382, "uuid": "2bee82f9-d06a-463d-bd65-77497dbe88ec", "value": "T1D004392F258192F0F6411B746BCFD3976C390BBF51A9909F6B416329B6E0B7BA02C447", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345382, "uuid": "21c6f99e-d4c9-4425-834f-0bd4488bf97b", "value": "3072:7mflblbBDfvNUZem/LVA7bGQU66gOVNLddnNgRdgJi55wjUX9:7IJ5k1DVA2nDXNgEJi5awN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345382, "uuid": "f37bf8a7-aeb3-4b78-822b-43444cf6eac0", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345382, "uuid": "e3027560-14b2-4de3-a2f1-70fba2dea45b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345382, "uuid": "13f0d579-f82e-4a24-93c6-31e779d611f2", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09fc1b07-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329765, "uuid": "f060f80d-de02-429c-b6c1-e814077421e3", "comment": "Malware payload (Mirai)", "value": "60293b86aa845f2a8d4fd77d74f3ce6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329765, "uuid": "4bd63b51-ebdc-4915-83c7-8e570c3bfc3e", "comment": "Malware payload (Mirai)", "value": "052fd5e6d661ad5b1b87783775da7eaf1f1a1b2f6a5f6175e54b6f7aa9925c32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329765, "uuid": "1aee6008-e30c-4ee8-8463-e9b33f9f696d", "comment": "Malware payload (Mirai)", "value": "fd417809107b4f584798e1eb848862d3e06db288", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329765, "uuid": "b4a97b9d-4537-434a-ac87-29604cf5e134", "comment": "Malware payload (Mirai)", "value": "992929e4c6736c58d4601f254fe5c34ae68b94faf3278807e7fb481f0af3af7d2cb42191022e0c8d8eb00350779e7eda", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329765, "uuid": "91363310-637e-477b-939c-b4259b96f2b4", "value": "T1DE530946BC918B15C5E412BEFA2E118D33271378E3DFB212DE116F25778A52B0E7B912", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329765, "uuid": "2ce7d7f9-991d-432a-b496-e16084c48488", "value": "1536:s9nQTxQkBW9Wy+a1iWAJVNMgkrYvxIvZHjYb8MeiyCUqV+oT:hpYAdxIhXCUqV+oT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329765, "uuid": "e505d431-6b03-4c82-86c1-707a15adc25d", "value": 60944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329765, "uuid": "2b1e577a-46b9-4e71-a9f5-8e994a8d7485", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329765, "uuid": "66590106-e785-4132-955b-b7cf178d271b", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed7af807-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766346468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346468, "uuid": "c53697ee-b6e1-4460-aa47-045c76f868e6", "comment": "Malware payload", "value": "73312136da2bc23b32be911b3b621d22", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346468, "uuid": "e8aec3e6-c7ab-4dd3-ae11-4fb45dacb067", "comment": "Malware payload", "value": "05c003f71e2855ddab581100481ef24d21d840964102b09f0d2c5d465448ddb0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346468, "uuid": "634d0278-b08b-4d08-a5ba-5e8a6914c2ff", "comment": "Malware payload", "value": "165c0e31998ee028231bfd15b71ff0eb2789a13b", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346468, "uuid": "c75d2761-41d3-4ae9-b893-eb0efb3982ce", "comment": "Malware payload", "value": "934bf2f5bea7d481609b3ad25672254ae71286bfdb52287d9b9f2a00e0961a38cc91d796bf497eab105a34d6a6140ae2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346468, "uuid": "2c905da8-7691-491a-8d81-c850ce60bb4f", "value": "T17B516DDB020C5B71D61885DFB7F235B471AAE183E6DED605FA40082C0FCAD4C769AE51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346468, "uuid": "1b734721-f7d1-4ddb-bd2f-c4c52bb1a325", "value": "24:7P2knk2JMJtDtbiBFZQZuZ9YESYEnE2EhE8F7iwQwbwcQWyWbDbJUfFRSvnvhM3m:5k2JM/pbiB3IuZGGcvyBxbw4vhM3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346468, "uuid": "96d971a4-c745-4f35-8c6b-2daeb9b8a4fc", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346468, "uuid": "6757d1e8-98f5-4ba7-8e22-463c2175b162", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346468, "uuid": "e3d1fc94-f651-49fa-b0ef-683f64ee3cbc", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0fd299c-de60-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766316704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316704, "uuid": "3cd77a68-f667-4edc-be21-dd09d4fa71cb", "comment": "Malware payload (Mirai)", "value": "1675f8d82362de19d8d535857a885a08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316704, "uuid": "a5ef27d6-f8ea-412c-a811-46331f51bd0f", "comment": "Malware payload (Mirai)", "value": "064d3f5754a1730f796a4ad988cf1c6aba359dd4e08ec15dc56cd4d2da0f2910", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316704, "uuid": "bee8c65b-32f3-47d0-84c6-3f55214b9a60", "comment": "Malware payload (Mirai)", "value": "0843091075350138693e4bf6a53b422c328d8d85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316704, "uuid": "7dde7a5a-e5d0-4d56-8dc8-96e3adf196b1", "comment": "Malware payload (Mirai)", "value": "6e0ad76a087805a2a326f6a9fdc8838c00f82638292ee768cd198fac8c62dbc210c69a6bf41cf7aeb39cf760209b29ef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316704, "uuid": "6b569844-c813-4740-a572-28c6a8d10b74", "value": "T12414981E6E228F7DF268C73047F74E25976923D627E1D684E2ACC1105E6438E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316704, "uuid": "54d99987-7b62-493f-a59c-93f86b7a4ebf", "value": "3072:M3Fprl1OWa7JXqg9DnEMpGFI62mF45bmYVpVsYs:M3FMW8Xqg3s1RQbmEpqYs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316704, "uuid": "1055d1c7-b09c-43ba-b414-6023a1125a72", "value": 198684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316704, "uuid": "3daaa302-01a8-4d19-9b52-1721b94371da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316704, "uuid": "976cced6-554e-468c-ab91-31bccdc69039", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "decfc425-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361046, "uuid": "2da9524d-5996-484a-99b6-026fdeed38a8", "comment": "Malware payload (Mirai)", "value": "0bdfde395586b633d9176831b3eebac8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361046, "uuid": "9fc8b060-6598-4747-8f30-d42c55f73139", "comment": "Malware payload (Mirai)", "value": "06ccfeb6c3b05acc9bd601262ffcb6f265157402ec1e53747eef89a0b662d9cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361046, "uuid": "df09ed6b-4969-418f-b893-95a88842d9cd", "comment": "Malware payload (Mirai)", "value": "cda68c61d74ad631c11786bba9343b74534b7f71", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361046, "uuid": "e4d7d5fa-c98d-41ea-8eb5-2a484c35237b", "comment": "Malware payload (Mirai)", "value": "598a74e94048cde044a55fb59c7d7b8ff760e0de2ce217698946bbf05e46de7cc0eac91f0f32bfc7184e9992533371f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361046, "uuid": "ba485137-4a17-4c2f-a3c4-279fd40d1cf1", "value": "T1AE734AC9D753DCF5E82A053115B7E7735E72F53A1068EA83E394F933BC12211A64A2AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361046, "uuid": "abcb95c2-e34a-4136-81f9-7841009549d2", "value": "1536:ydUJtGZZSLzUyPlvPzVX8GTexQFk1/JoO5PxtUP9XRR:ydwGZ0/DPlvZ/GQFo/qiJm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361046, "uuid": "d652f8cb-7bd0-48bc-bf70-9b0d0d6225cd", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361046, "uuid": "98e9e1ca-0133-4886-96a9-f0dd4934c2b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361046, "uuid": "6084f480-d42d-4dbb-a1c8-2df4d776b285", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3719920-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330023, "uuid": "0eb063eb-9b62-4931-b619-80a592a666a9", "comment": "Malware payload (Mirai)", "value": "22e96f776d40a0c7bced42237a7ce646", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330023, "uuid": "a944508c-db70-462f-8e10-1ade126fe847", "comment": "Malware payload (Mirai)", "value": "07b727dd1ee8c2b9c8cecc8bdc7ed41459934d32b9235a4f2e58839d1eeee1b6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330023, "uuid": "50350fad-fd78-4889-a42f-5b5f12dbf1b2", "comment": "Malware payload (Mirai)", "value": "bdeec21b2856c1a9f3354bf718fd7c26d0ebf706", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330023, "uuid": "fe60a925-9137-4186-a7ad-4e07e07bbac6", "comment": "Malware payload (Mirai)", "value": "48771955904a93324fd1e69b687dee68ab5bfd12e4e14779355ddc79e309fabfe1464a927e238d4ff9865834827d83c7", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330023, "uuid": "49440e4b-435a-42a2-affa-298b43988dba", "value": "T1DFD012DF51105521510FDDA82171AB857043E34936201E17ACC510B7E0C4504771C520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330023, "uuid": "771c94bb-c67a-4e84-9689-23948cf4e950", "value": "6:LMFdCNwAK7PhumVMFdAWJNwAbJ78JhumVMFdmSaqA3LKfaoe:odJAkxKdzTwA2DxKdmSaqA3LKyoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330023, "uuid": "fa2761d3-2453-4156-8b65-8a19a7153868", "value": 244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330023, "uuid": "f5c0cf24-a59c-4f67-beee-796a41428eaa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330023, "uuid": "6a46bbea-a308-4ff8-8d20-813eef53738a", "value": "sksk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e351407b-de6c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766321970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321970, "uuid": "ead557e9-1723-4aa7-8e5e-d74629bc8c3e", "comment": "Malware payload", "value": "ed12c944bb1f14e875d436ca64d590f1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321970, "uuid": "24400e35-f988-4ffd-9a10-b05bdc276997", "comment": "Malware payload", "value": "07e3383f3b5c2ebbea29800e01b4db863d22d4c7b7af584f4104c11913fa8c7e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321970, "uuid": "f0c8c1e7-7b9e-4182-bd71-291927534afd", "comment": "Malware payload", "value": "9a178880239d504f99f5ad841663c9961216bf32", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321970, "uuid": "19071d4b-a414-4e31-9a69-684490c5cf53", "comment": "Malware payload", "value": "468ea15728e07ba8382bf055b7e761e5cb9095cf757ce9f0b33ae4c684603b76a78b7947116c06741879668cab35f9f4", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321970, "uuid": "24f6fe04-558f-4691-bbbc-cbf7a02eed3d", "value": "T14715F10AB3A244FECA12D2B486BF5772E631F41101315AAE1F59DF332E71C604E9E679", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321970, "uuid": "10d405bd-dbc5-4007-b3e3-4547fd4f13f8", "value": "bec9e1eddd3f4e3559a04e1d423642b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321970, "uuid": "4c9fcf22-d510-405d-be8e-8fd9c49e58b9", "value": "12288:NlxxAphhgBD8hKR9JyXyRIAkUA/O6LiVwxSFnqd:Nlxx8hgF8Qpta5G6umoFnqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766321970, "uuid": "fe51d796-50a9-4f61-be69-a2c87c0f6a0b", "value": 927232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766321970, "uuid": "1bbbcbd8-0061-4e02-b932-c13fc7d2354e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321970, "uuid": "da77bcf9-c44f-4aa6-9f24-d1b48b02495b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7310a1f7-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338961, "uuid": "fa8f6cbb-f943-4a4d-ab4f-2c35d17b39ce", "comment": "Malware payload (Mirai)", "value": "a05e7a98e7bd852278a467c5c4e2bc21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338961, "uuid": "f98102bb-6ee2-4cc6-a96f-48bf71139730", "comment": "Malware payload (Mirai)", "value": "081ffc015f5d3c553e11e045f9842691b896aa5ffe3eabdb724e9afb0ac9777a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338961, "uuid": "ea92448b-0e65-4778-a38c-c09fae4db74d", "comment": "Malware payload (Mirai)", "value": "040ce2140c64128dd5be543cedccb7fda819ff19", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338961, "uuid": "d347b4a6-c6f3-40fd-b4cc-036457a248f6", "comment": "Malware payload (Mirai)", "value": "cbad21b19ce8cf6a2497b2dd7e455890e456402880709c51c15a30a34fede1d4565113bc86b1f676edfb3631f3d136e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338961, "uuid": "7231b95e-8688-423d-8e6a-818353b119ae", "value": "T14463A506BF214FF7DCAFDD3749A91B05258C640B21A97B397E34D828F64A24F19E3860", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338961, "uuid": "88048f79-8a6e-4b53-84c3-0b13f6807dbf", "value": "768:QxNCJ0EYlDYhHngwqsFDwLX3U6ngBhN6PNUpGXS5SyeweVKe0n3oNWpkmPqXitMF:QxNCJBYlQFwwjhwPTXSNxIKzn6CpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338961, "uuid": "0b1d7cc5-5571-4f67-9048-ca7e14f80d01", "value": 71528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338961, "uuid": "1ebd49ae-b994-426c-972e-df7b4da27b3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338961, "uuid": "8bc40286-d2be-4201-852d-24a5f58eb465", "value": "Josho.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42e9e439-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309674, "uuid": "33b52170-0843-4e15-85cf-7e2bcab3690f", "comment": "Malware payload (Gafgyt)", "value": "deda047ed51c08a463ca0cb79991d884", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309674, "uuid": "c6282494-6d7f-486f-b68a-64d5a5e6c4e4", "comment": "Malware payload (Gafgyt)", "value": "08d81c8d320891f25d580402de1dd11f1d0c8a7be6617fd1c162767dbcbcb86e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309674, "uuid": "205f0767-07c8-4b59-9469-64fdff599d13", "comment": "Malware payload (Gafgyt)", "value": "65fb1bc69ae0f593415c62132bac05cc029dfe21", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309674, "uuid": "c248615e-0d27-44ee-ba92-92ab419ccc39", "comment": "Malware payload (Gafgyt)", "value": "81a2ed9f9613945b51fc6a0f5476feb587dcbbda9088318c046b79d6fca1523db4ffb061c149ade21ee8704da6fd9e81", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309674, "uuid": "1650dadb-43fa-49ad-a768-a3bc7c5499e4", "value": "T174D3B76A3E11AFFEE268863007F75F70939525932AA19781F26CDB085F7128D1C5F7A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309674, "uuid": "3051c872-2d7a-406d-9871-aa225c850a12", "value": "3072:TfhXPBGwUc/TxhWoQBrBierK4AF/WCJ2gq+DqgFGLK3ZVm5h28xxxx8/kz4SF3xY:F7QKfm5h28xxxx8JSF3xemqY1fuBmvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309674, "uuid": "540c5e53-9837-492e-844a-45bded9a3f75", "value": 137917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309674, "uuid": "ff3cf2ef-41ba-49b0-bdb6-bcf6089b3f7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309674, "uuid": "5264e20d-c9c2-48dd-a151-3ee9036ee31f", "value": "yakuza.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ee8bdc5-deac-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766349289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349289, "uuid": "eff1877b-b479-4e2b-bb6e-0b5e3624fbd6", "comment": "Malware payload", "value": "388b71dbb9c4bd25a1e757d21900cc61", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "minecraftrat", "colour": "#36C9CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349289, "uuid": "8709d1bc-2ee0-4d75-a22f-76185c112d83", "comment": "Malware payload", "value": "09959d473a1b842bb3d953a71ed0e7230ae32f16036805b09806dd626fbef580", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "minecraftrat", "colour": "#36C9CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349289, "uuid": "47f1dd5b-afaa-42a5-8397-7f43cc7f24d4", "comment": "Malware payload", "value": "219dd0a82cf8e7e07c5e583ad0c1836b8e2b61e9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "minecraftrat", "colour": "#36C9CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349289, "uuid": "305ede10-bd7a-48c6-bc9d-842073bc4d11", "comment": "Malware payload", "value": "c6c400ee002af85925ebfb109dbff6c22f56dd3ed8f3915867ee6d728d2b1d28410203a6a38d2c9710ed4d37b605e727", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "minecraftrat", "colour": "#36C9CA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349289, "uuid": "1441ddee-b8a5-4519-b7f7-3fedc8377c14", "value": "T183E67C6AA6BC01C9E0BBC1BDC6865327D7B2B41503B057CF05A186BA1F27ED95E7E700", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349289, "uuid": "32f01095-354d-440f-9b02-90433de57cd8", "value": "c8314b3a7fbe720e53de66273e715165", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349289, "uuid": "68f81656-103d-4d11-b572-23eb6f585aae", "value": "98304:5IEeu8eLVyH2lDuJgyHMnU9drNRGXldjSSCUoTW9LR+DDb:5IEeu8eQ21u6yHMnU9drr+gTGLR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349289, "uuid": "925b7a4a-d0a8-4177-bcd7-86d82e621063", "value": 14432256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349289, "uuid": "40aa7298-4c74-432b-b71a-d5cef2d1bff3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349289, "uuid": "492aeb89-bcff-490d-bba7-e777b0d2c39c", "value": "09959d473a1b842bb3d953a71ed0e7230ae32f16036805b09806dd626fbef580", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfda3ae6-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309508, "uuid": "a7da91fc-78d1-44d7-8b1d-ce3be3aef6c0", "comment": "Malware payload (Gafgyt)", "value": "6b6b121003534c84fbdcc4c5b0543351", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309508, "uuid": "66faed95-f8f5-4af6-8918-338f52bc3aa6", "comment": "Malware payload (Gafgyt)", "value": "0999cb793be2dfa0b229dc632f37d696d928dd8aa084df467544fbbc1659cb06", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309508, "uuid": "5badb90b-3c55-4cfb-852f-26c9f9ba1d5d", "comment": "Malware payload (Gafgyt)", "value": "8102410c8e8b81f03fb9d5567d61d17118414304", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309508, "uuid": "dacf0c1c-4bbe-4055-98e2-e971a0637f67", "comment": "Malware payload (Gafgyt)", "value": "f916438046b358664ceb521e6a0343fc7d75fae22b0f599cf8273d438aa9f891a582e2663d3e861361ebce5d522ad1c1", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309508, "uuid": "7708be0f-3c51-47a4-8cb7-28f9993b73ee", "value": "T119311AEBF5528E7D7F54A91B32E9480030E0E4AA48DE5F3BA8DC34E5119CE4C24C5AE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309508, "uuid": "52502e0c-f5cb-43fd-b563-3fed72e07048", "value": "48:vm8LCxefHKhdJKE3Cs5E3fsysRswssfI32d:vmSCxefHKhrKaCs5af1ofBfI32d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309508, "uuid": "d5b38acc-94bd-4282-9be7-8137892a743c", "value": 1792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309508, "uuid": "0f4da074-03fc-4440-b171-24c1ef2648f1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309508, "uuid": "9cc50f14-28bb-4458-99a8-a1d5d40fd1fe", "value": "bins.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd856ee-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330037, "uuid": "49db655c-0afa-4baf-bfaa-f9c75e372080", "comment": "Malware payload (Mirai)", "value": "84c9785284e68d7428262553e0e26e84", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330037, "uuid": "11ef5c3f-08d6-4e5f-a80e-3a839be90014", "comment": "Malware payload (Mirai)", "value": "09bbbfa3fcced09bb00acefdc3f3e804222d1656647910c3b6e53d3aef4bb954", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330037, "uuid": "adaa42e4-e571-4e7d-89fa-6d625978ab5d", "comment": "Malware payload (Mirai)", "value": "89d430fb59bbc3b117485c90d3fe568a7939ad16", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330037, "uuid": "feca8107-7210-462b-af97-987af6ced3aa", "comment": "Malware payload (Mirai)", "value": "b29c5e252738824fb4a96aeb5e9d8994d73b1c23b8c274c012f60837720f24ff47d3334180d40d47cb56b8e178d0087d", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330037, "uuid": "fc5f1521-2618-431e-abe4-eb55a8efdb18", "value": "T11BB0127F4016CF56908C0458B170103270F6534016610118CFDF405E80C07133718E31", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330037, "uuid": "c53466a7-2736-4285-917f-be7d5703bf10", "value": "3:TKH4FBCAjdVZVMISoeNOaDSoFSsJOPIqw:h+8dVcninsJOPK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330037, "uuid": "b065ce2d-60e8-401a-b9c5-369e39f7acda", "value": 92, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330037, "uuid": "b3977b5c-c6d2-4aae-911a-c6cedf1a42ad", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330037, "uuid": "91c5d414-57ba-416f-abd9-d77e36416403", "value": "st", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c50d14cf-de79-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766327502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327502, "uuid": "80cbf7ec-c4b0-440c-95a9-5c0a57521bd6", "comment": "Malware payload (Mirai)", "value": "97111b6c5cdaa0b7d463cec0dff9c92e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327502, "uuid": "63d54282-dbbc-406f-a488-826eef8c6154", "comment": "Malware payload (Mirai)", "value": "0a0d22aee7633fa8fea28497490d91a34a3cf527872401cceff36adbc2fecde4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327502, "uuid": "0d970cbb-c509-42e6-86f7-58ead57f444d", "comment": "Malware payload (Mirai)", "value": "e9d0e4d4a234f1ae5b9aa3b2a8e677708e5cf501", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327502, "uuid": "8771f3dd-8f7b-47f1-a3de-df1b118ba06e", "comment": "Malware payload (Mirai)", "value": "9a53afcefb2bc3a0ee03c554fb6f0072a8db0d114e5580f7deb194ec90fcccb78cd82e48aa9b4e0c11de2f6a94be0bf6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327502, "uuid": "6bebb576-8ae4-49ac-9bb4-2f5b4377e1de", "value": "T1D4F328D7F800DEBAF80AE33B4853090AB130B79115925B377257797BEC3A1D91867E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327502, "uuid": "5e9e6762-e165-41ba-b75f-7f15ff37f5a9", "value": "3072:XFUvHZxVIfpoC1RcISBXhpLBH7JBA+DVcjbi/Lo5S+NB4yugWo7:25PQ2BRpVfA+PLo5SFyulo7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766327502, "uuid": "ead3748b-b81e-4d26-abd8-24ed76dd073c", "value": 170624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766327502, "uuid": "df868b88-598c-4453-9e31-bc0330948c97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327502, "uuid": "f4e93e9d-956b-4fa2-b84c-f0d8ec0d226e", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be65fe7c-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330068, "uuid": "5c8c30bd-47f5-4127-8af9-0d9bc64cfe4a", "comment": "Malware payload (Mirai)", "value": "da1b32b0ec138d243d6a6c547e52b2f3", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330068, "uuid": "ea2b20de-a567-40bc-b324-3e26c041286a", "comment": "Malware payload (Mirai)", "value": "0a108b0c0d6050f7cec6c9ab3faa005f9b063fdc92097907fd2b6299f625a1e2", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330068, "uuid": "766cd937-33d0-40ef-9fd5-fae9b31bd34d", "comment": "Malware payload (Mirai)", "value": "329178a116099a8ae433ea1384eb1046ae1314e0", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330068, "uuid": "0064c8d2-a6a2-46d7-b19d-f15ad916280f", "comment": "Malware payload (Mirai)", "value": "0ca6ac0f7479292fef7b7ad9b8de12bfe191f1cd1e3704a7c96bb349d1718db2e5161b1a777d3ce506293b8d1a963e93", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330068, "uuid": "835563c3-2c92-4215-b9ab-8cd643700de4", "value": "T1DDC0129F10265681C048AE2021D2341DB1418B8626610B1D9AD91033B8CDA00B748D50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330068, "uuid": "95a89604-a748-47af-bec3-2b596e59e7b1", "value": "3:LxAjdVZVb8NBzSa+ANja0lvJRDxAjdVZVCONBzSa5Ap9C3oITI0n:L6VbkPjnJRD6Vxy03Vdn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330068, "uuid": "83b7b3d9-6149-4cc0-8682-bc4c565e9dc7", "value": 167, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330068, "uuid": "3a4d94c4-7d0d-4e09-bfdf-4d93e4fc929d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330068, "uuid": "94932a34-4c69-46b0-9afd-5104acf594cb", "value": "kws.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df1a2ae1-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309507, "uuid": "5ee62d1f-7e1e-47c3-892b-75b8b36bdcee", "comment": "Malware payload (Mirai)", "value": "bd23d5120e116dd2e37ce3a7b030a39c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309507, "uuid": "0dc99da1-5103-42e2-8e47-402cb03187a5", "comment": "Malware payload (Mirai)", "value": "0a13ebd3bc063a395bf816f3f1a959dcdab14bffe1a126fe02abb8c77505ec80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309507, "uuid": "20804b37-9e85-43b8-bf1a-62e968a37eda", "comment": "Malware payload (Mirai)", "value": "af642d9d23e6deec752c79981ba7f0f1bdf74228", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309507, "uuid": "9590acd2-c038-45bc-82a0-ecaff062c1cb", "comment": "Malware payload (Mirai)", "value": "5e1521edf5432e256f24555d4bc9e72babe200032f678c0f0e22b5470b1a24c4089202549e8662b7cb66713adc8b7385", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309507, "uuid": "a278f8e0-9905-4b3f-84cb-8bf39871ff8a", "value": "T1E5D3E81E6E258F7CF79D833547B78E25969833C636E1C681E16CDA011EA034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309507, "uuid": "14a0ffb5-5f69-4ac0-a2fa-a7ef3b443c02", "value": "3072:PgTxCiUiPOHLCe3976QmJETuVR4qlHuLAY:PgTx7NPOOi77muiE8PY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309507, "uuid": "b8db42c0-bf4a-438b-ba6c-2e36fa6a208e", "value": 138140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309507, "uuid": "7c0a662c-06fc-4b28-a3a3-c472b679fd4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309507, "uuid": "a98e0167-cf58-4597-94a0-a00ea8ef6b02", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbbb49bb-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766342626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342626, "uuid": "6eb4c53c-e26e-4b89-92ca-83c06c80dd85", "comment": "Malware payload", "value": "135ef320839ffa58cd6edea046831254", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "s", "colour": "#C623EA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "soft", "colour": "#7A0DF1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342626, "uuid": "5250ee82-5599-4dc0-aa70-263b6ab2d278", "comment": "Malware payload", "value": "0b6b64714e872910c2bb5c496afd991ca38fdaed7775396c600cb143ffd59837", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "s", "colour": "#C623EA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "soft", "colour": "#7A0DF1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342626, "uuid": "71cb1e64-7692-4cb6-bf71-6375c84dec6b", "comment": "Malware payload", "value": "fcc1844a975981425d0ea670dff5ecfd2f29b2ed", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "s", "colour": "#C623EA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "soft", "colour": "#7A0DF1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342626, "uuid": "04ce18a2-5590-49b3-b79d-376fa9991ad8", "comment": "Malware payload", "value": "89c0ebfebc654de0add23096929461b12cf9946660366e4364668474046ac46d83aed3065648f4f60de3ed06462f5d34", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "s", "colour": "#C623EA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "soft", "colour": "#7A0DF1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342626, "uuid": "9603fba5-1491-478d-bdcb-25d7cedf8132", "value": "T12EE5338237529C71C2464B7A5DD83331D1B5DB640B08CAC7AB804B57BEA12E65B393EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342626, "uuid": "229bb6f8-f808-48c2-98a9-8dea81daf953", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342626, "uuid": "c3040b8e-9fdc-4adc-9892-df2d7adc57ce", "value": "49152:YV5yDyqn+siUy9iFdR2ZajcDouPsREt+E/YgRtAEL3EYBL5Mg42d5m/FwLEDdZq:YV5+nyUy96vgJERcnYgRZzEYBLCg42dr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342626, "uuid": "dd036f9e-568c-4706-8a1d-520988b62931", "value": 3044560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342626, "uuid": "75171783-72cb-4ee3-9c49-c41581399faf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342626, "uuid": "6c9fc574-90fb-43ba-b561-ff19441cb6d8", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1266857f-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329779, "uuid": "c9ad0723-a8dd-4d69-a5ee-25a640aa51bb", "comment": "Malware payload (Mirai)", "value": "207c0822ec6241e0b7ea55e7513824bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329779, "uuid": "276164aa-983a-4690-a9b5-1b376007b58f", "comment": "Malware payload (Mirai)", "value": "0b8b4be3fec08aaec58830ce72504f9b393eab3a8190dcd14a7886aef07e28a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329779, "uuid": "42401359-cb5e-4cae-bd21-2ec3962296d0", "comment": "Malware payload (Mirai)", "value": "8da8d2a9ef445874de1b206d3af1b7d5fa162891", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329779, "uuid": "384e013a-88c8-4079-bddc-9d4e040ce83e", "comment": "Malware payload (Mirai)", "value": "20980d0f46517f49dade4d1dd9e08c51a0e39977e3107a4fcae350d413a76aa9c27272ece59810dc9fed54f5872bb01c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329779, "uuid": "26948065-db72-4485-88f5-cb1137d5e455", "value": "T110831A85BC819A26C6D462BBFA5E41DC332213B8D2EF7207DD15AF25778682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329779, "uuid": "7a771356-5eae-4f3e-ba53-74b036d23dea", "value": "1536:BbdCawX2d/utZJCS08SwiNqt0AVko2KgeABP0I4MmTlbVR:BbUfbqNqqAVko2Ze0P0IVmTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329779, "uuid": "279dc2a5-34b4-4734-8340-06611195a53d", "value": 81100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329779, "uuid": "7dd316d0-8fdb-4247-a1e4-c50f8642aa14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329779, "uuid": "2227f532-b9a2-4a7d-a53d-6f8793e0052d", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4b95a3-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295730, "uuid": "98dfadb4-cf85-41d2-92cb-c1024d3ea68c", "comment": "Malware payload (Mirai)", "value": "4832b59632cdd02ad9f1b0792ca365a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295730, "uuid": "16b4ae24-01fe-4d26-b3fb-5a8f9286b9e4", "comment": "Malware payload (Mirai)", "value": "0bda56b1e8ba4b4bde31b64134d01a7de49fd5b6dd4f62feb3c3e54a5f478e81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295730, "uuid": "00496298-f359-4616-b357-6b894b69f928", "comment": "Malware payload (Mirai)", "value": "5e368289226c1977defc95baf6ce81dbc2ded4fe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295730, "uuid": "afbb81e7-78e9-489b-bcfa-d5d77602c024", "comment": "Malware payload (Mirai)", "value": "b29baed0ad1c4367ebe5178032c9ca5782aa9be201ea0ae264d592f133c54468661a880da941d5574a3458598cd915e7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295730, "uuid": "77396b70-9ea0-44aa-b78b-31ce1dd35aae", "value": "T136336C36E029DED0C6560134A4E88F751F03F1C883536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295730, "uuid": "4bbc706e-e17c-4f65-8979-5a9acd73e5a2", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295730, "uuid": "12fda64e-f9ec-4ba3-9ebb-4d94dcf64afb", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295730, "uuid": "7fcf39e0-8b79-4d1f-ad2f-4a54f1d31b54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295730, "uuid": "266b6361-172b-4047-be58-abc99321d6cc", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7a234c-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766346465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346465, "uuid": "6f5ce4b0-4a3d-40b8-8094-bdbaaae72d3b", "comment": "Malware payload", "value": "b882968ed630fccdc9fe9ea577bf4be0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346465, "uuid": "b9b7bb68-6834-4b39-8d42-a7542727203a", "comment": "Malware payload", "value": "0be24e123b128d405ac9b7f2ce2927639043ebe3cb987a373b5aa75da8c94c86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346465, "uuid": "20ded3cf-5816-4bee-9e30-7ce8866a4b2c", "comment": "Malware payload", "value": "0bb1d267d1cb72e197f2ee365bc4219838595881", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346465, "uuid": "a1042b95-7b15-483b-a51e-d14006ae9c11", "comment": "Malware payload", "value": "652ab426242ef511590645ff7f5c0364c50702858d86845e50a7913483d479efec857dd491ef703a616ae70dcef51560", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346465, "uuid": "f993ae02-3add-4826-a011-ca8b3b98ae4c", "value": "T171731985B8819626C6D5727BFA2E42DC332613B8D2EF72079D15AF147B8682F0D3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346465, "uuid": "b56b28b5-cf79-4120-91c6-9bf0cbdda5f7", "value": "1536:tOi64e95YGIAAzKH6vQKzr7JeAV89D1AYf+TAbVR:tOdflKz3YAV81Aa+TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346465, "uuid": "05f711ac-f19f-4493-9448-bd56d02311e8", "value": 75044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346465, "uuid": "2a5c2335-abfa-4400-94b3-dc46152b27a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346465, "uuid": "4aa08ed8-796b-404b-aee7-a60a07de3ea5", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f7198dc-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329774, "uuid": "b537bfe6-caba-4e2a-aeb6-0a6d7fd370e6", "comment": "Malware payload (Mirai)", "value": "0eee73bc30e0448397c158582dbc8c33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329774, "uuid": "ab7896aa-708e-4555-b618-877a126e9b08", "comment": "Malware payload (Mirai)", "value": "0c7034c3da6ec9c6b44decab07f8a01ce53b4d830550ab4887b37abba5c54500", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329774, "uuid": "7f283fbb-4021-49f7-8cdc-e1a905c21bf4", "comment": "Malware payload (Mirai)", "value": "d2cadcb2559c6fcfb64a033c6c26fde0c083531c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329774, "uuid": "81d47720-0a58-4abc-9992-48748dce2fd2", "comment": "Malware payload (Mirai)", "value": "f5c5a40ae651b8e44509113b5b65f9e94354a76bbd08c2e3133ddcaf6178a11fd1fc1b5edc5e1a790b419415a0100e19", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329774, "uuid": "feafd7fb-9934-4f7b-89c0-21ce5741a1fe", "value": "T17C334B21B97A2E17C4D5B9BE21F34724B2F6570A26ACCA1D7C720E9EFF1594021036B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329774, "uuid": "36df1ecc-ec5c-4921-b35e-fe9db79d3ba1", "value": "768:atogq92rxMtRJ/iH7DjDhY82VWCgpSO+Bj06VMzKt:atVS2NMtRJ/w7DjDhY82VWCgSBXuzO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329774, "uuid": "d8ad2fb5-5f0b-4e37-b18b-bbed076b5a1d", "value": 54172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329774, "uuid": "4efdc0a9-809f-4a60-9cd2-08ba37d5aad1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329774, "uuid": "09db759b-501d-4bf2-b8cd-0ba1a5c6318d", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f381456c-de67-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766319849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766319849, "uuid": "2f5db5b6-afb9-4512-a7a8-1385b86a4855", "comment": "Malware payload (Mirai)", "value": "1ac0e50c7e2d8c1cfc21b0ec4d6ce68c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766319849, "uuid": "06f23b99-2bf6-4156-b03e-1cd4d69b4abe", "comment": "Malware payload (Mirai)", "value": "0ca7b95826de30ef9feec115dcc90c1305ded0920edeeec3b5f4e556ebce1d87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766319849, "uuid": "a0cb356b-277f-4824-b16c-00c05f6d4287", "comment": "Malware payload (Mirai)", "value": "5f1247b43c9bd435312a1d74e6923b21be31ee17", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766319849, "uuid": "9cda3971-574c-40a4-9e03-805b4f48374b", "comment": "Malware payload (Mirai)", "value": "cfc5a3a3bf35b16085114af48b17336bd316ec1d82c2fe64718bc8f406a741e6d3200267a074a623a772e8ed892b1200", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766319849, "uuid": "d83b32fc-f377-4ac7-80ce-fa670c0402e0", "value": "T164D35A72DC29BF68C565D4B8B0308F792B53A69581472FBE25B6C2B48083CCDF545BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766319849, "uuid": "d09ef05b-0481-4a95-a703-b7e65e04c994", "value": "1536:Aay0s/AcqJjoHaixC/Knx7c7pXfYUa+vZJGMdWOL52qmhdYWJ9:AQuqBo6ixLnShbaGMkWG525cWJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766319849, "uuid": "23be2dbc-a46c-459e-ba6b-08a16d26e3ed", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766319849, "uuid": "4e93c485-1b29-4126-812d-23647b101f49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766319849, "uuid": "945d93c4-810c-4adb-99c3-07aa4d8aa2e6", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caa18b56-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "a467b44b-602c-4d84-93fc-52a5b89115eb", "comment": "Malware payload (Mirai)", "value": "a11dcc40379c1cb1736086399d7dd7b7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "b24374b6-817a-4a7d-a26c-fe91a7711a32", "comment": "Malware payload (Mirai)", "value": "0cd679ab365b6515a15a9e2dbcfd7c76daef86d5ced95b6b4739ec1a448a8de4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "15c2a694-91c0-4553-b071-3172f1371f48", "comment": "Malware payload (Mirai)", "value": "34da4f8134510f7ba8ba78063356cc650a77c0bf", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "5818b5e7-dac5-4eac-9381-bffdd99ff9e8", "comment": "Malware payload (Mirai)", "value": "941d64d1eaddbf83061e49bcb5e212b3a68e9cff6d0310e1be438af5a341f0de54df9e448dacf0afbccef369d47289d5", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "6f648c02-60b9-4559-8fa1-3a8b2d109fcc", "value": "T10AE032AF0063DF13819C9D2030A33833B030DAD222A08E1EAFD5803780C8A20332CE65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "5ce628c8-5aa6-4456-9d33-7fb6f0d7adbe", "value": "12:e2cJVzdMjzOzdMaLaNgIzdVNIE6szdGLK63n:e2kVpMjzOpMaLaNgIpVNILspKK63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330089, "uuid": "41fb2b99-68cf-4142-b38d-ec6bbb8602de", "value": 385, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330089, "uuid": "413877d4-1e1c-4d67-b5d1-0fd09cecef63", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "a55844fb-e9a3-4ef5-ac79-efbc192fab9e", "value": "sony.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c0f5255-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329769, "uuid": "7338a3fc-6488-4a2f-97bc-81a5c4148a73", "comment": "Malware payload (Mirai)", "value": "d6defe290877fb224f47c7f6d6072d8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329769, "uuid": "561aea53-ec00-4cb3-b124-68b0133b6a94", "comment": "Malware payload (Mirai)", "value": "0cd888c4ae90abe9f45527590043089f983e1b6cd63b180fa07f32e8733b7724", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329769, "uuid": "7845b625-6bc0-4ffa-9a36-f0ad0cf9c7b4", "comment": "Malware payload (Mirai)", "value": "5b2208dbd9bb7f93ececd969452e2eb028d6f63f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329769, "uuid": "512c480f-8e66-4e4f-a2e1-f25d97215267", "comment": "Malware payload (Mirai)", "value": "b1a2a531d1fe27e222c1910b84d805ba83a62bac22cf5ff7d6c933119cc1a5c4cbe8da7ea04eb2ff4a5df80dc129fc92", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329769, "uuid": "ff6260f2-04fe-4990-a1af-14499359e189", "value": "T1CC731A86B8859626C5D562BBFA2E41CD332613B8D2EF33079D15AF24778682F0D3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329769, "uuid": "833ea082-0a69-4cd7-b5c6-73e2e7710252", "value": "1536:/le6TeCDL1rsWwESUV5jzxrdGu4iVAVnyL1bOBn/WAT3bVR:/lx6cLRrdGu4oAVnyp6BnuAT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329769, "uuid": "5d0fee88-5b2c-452c-8951-b337bd01a338", "value": 74944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329769, "uuid": "7911348b-728b-4684-9802-9a2036a51606", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329769, "uuid": "17de9769-6c32-46ec-9a57-7c8569b5b12f", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2bfde0d-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "ffcb53d2-06b1-42fd-8dd0-235c23b19eb1", "comment": "Malware payload", "value": "285f5bbc1d45271c89d13fb0c5eeb807", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "5a1ac79d-3a11-485d-8a8d-10b30a6762b8", "comment": "Malware payload", "value": "0cfe6508ff25fc7b73c15750cda72f94e1b7b0ae412670ae7524ec3d79432a85", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "af34981e-d0ac-4737-b5a1-f4f7dea68ef2", "comment": "Malware payload", "value": "69ae0109e366f2bdf03646f74b3575ec7ac8bafb", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "1a088fc0-05a6-46a3-9274-065a706bf647", "comment": "Malware payload", "value": "02c93a2351fc2a5753f06fa2e2047851ecf723f9e6be4d2cfc170b044894f5b69a75b063eb91cf406f2f5874f03aaf77", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "a8cd18d4-2fd3-4c97-b47e-63613059333f", "value": "T15C01214E030A3D2F515EA4797A7213E5B252FB093B163569FC47C076D1C95A09F20179", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "84e142ea-c9ac-4062-a57b-f6d4e94e9eff", "value": "12:fC1lAW1c2HCxAW4CBAVUhC9ARU0fCnZA2JtVlC1LAMB/6CJAeTfC:61aW1HiGWT2WIiRU06n+2Hu10MBROWfC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330048, "uuid": "aa76961c-4765-4226-beb4-d927264fa60d", "value": 690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330048, "uuid": "b9900822-add4-4189-aefe-8f0e9fb7e5bf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "2e19de73-2489-47a2-b07a-49a71b5e8a37", "value": "sl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c374696-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766329125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329125, "uuid": "dfce4a7c-bb54-4f49-b81a-dd59b84916e1", "comment": "Malware payload", "value": "4a11505c8cc141eeb8203f78c0f0f02c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329125, "uuid": "3b1470c3-59e8-4fe1-9391-1d4a9ef533d7", "comment": "Malware payload", "value": "0d6b0f832410cb040615c0dabe1393d51ae268905cd6c2bd58b54bb40fb4dbe6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329125, "uuid": "751bfbd5-bf26-4349-ab34-5939278bedcb", "comment": "Malware payload", "value": "dbf5fcdaffc5319707a91c1547a90bfa5659b9ff", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329125, "uuid": "62c168aa-ff6f-4234-acf2-99a73bf50f09", "comment": "Malware payload", "value": "f8d75caa2dae7dfdf08878ce32f98b2d33145cd68da330b1f78073e435a1e6f616d474ee2c2cfdae51b967133f9619ca", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329125, "uuid": "5b5e04a7-d680-420a-a66d-74e8bc1f8b0d", "value": "T18F5184FE1626032A5D079E0BE37D588C70338AE3A4F9CEE5DE947825A38DD757160E08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329125, "uuid": "01e2686e-32c9-4ee0-aab6-9511991bea32", "value": "48:SU0sT0H6PS5oHa0C0mi0/Ey3WKZw0ok0SPzwEMn6oD:SU0sYH6EoHa0C0mi0Eymow0ok0SLwEMF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329125, "uuid": "292da4de-296a-435e-b5af-e6039b6d9aa1", "value": 2537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329125, "uuid": "169369cf-9a5f-4c3b-a6de-be9599f5af83", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329125, "uuid": "a9360c55-16c6-46b0-a811-dcff2e584f9c", "value": "dvr.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e9718d5-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309238, "uuid": "7deacc80-ab6e-46e7-9aba-d8daee2859b3", "comment": "Malware payload (Mirai)", "value": "ab0d2fd4ba673ff0213b8ed4134b092b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309238, "uuid": "e3132141-6308-4a63-9f84-713da61ba744", "comment": "Malware payload (Mirai)", "value": "0eab61646a031d7df32a8d7b5716a89b279c41df9d75c704680409e74ecee685", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309238, "uuid": "4e1e1f84-a6b0-4c0b-8b99-c9cb1dda953a", "comment": "Malware payload (Mirai)", "value": "d46ceaef5573cce344e443939536252002200502", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309238, "uuid": "83060187-0e35-4b7c-9129-407c29fc0045", "comment": "Malware payload (Mirai)", "value": "173c900b30859cb0a50805d86a0a29e911bca4c600ef23387e172678bd1dac1d3e1de42ba50d317a83e55dacd71d50d1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309238, "uuid": "a9e457e1-2b1d-4833-9506-16e74b3d3414", "value": "T1F3935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309238, "uuid": "abe1c951-8964-4b97-8e24-e1ef8be371ac", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3+yPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKuifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309238, "uuid": "a4e2deba-26c5-4613-bed6-d365774ab70f", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309238, "uuid": "f187dabd-20d5-4973-ab23-06aa1881c5a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309238, "uuid": "8d83db5d-7fc7-4444-a8b1-0a27ed985b61", "value": "x-8.6-.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43cd29d-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330024, "uuid": "7c553f9e-2ce7-41c2-af21-83fd6b7ecfc1", "comment": "Malware payload (Mirai)", "value": "ef83e2efd6a32a1745caf63f67452eb1", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330024, "uuid": "0499cf41-1f64-4c90-aa4a-96033c6f17f9", "comment": "Malware payload (Mirai)", "value": "0eb664483a2b64fa610d55b701174864c504079beb2958b0857ecbb73ea2cde3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330024, "uuid": "5a296ff6-d4a9-4e47-b8de-3f602e40fa4a", "comment": "Malware payload (Mirai)", "value": "bb6e51d658839b83e0732b2ef6d5035b2ccc338d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330024, "uuid": "13743874-600c-4d20-bbdb-7f21c57e8810", "comment": "Malware payload (Mirai)", "value": "9b4cb436fa0b1b034ee90eaca39808653fa4d13010f816d5a917610c1bedfefb62fa1cb363f3634b02c35d77f9516831", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330024, "uuid": "4cae8618-0f37-4546-85da-89c25a39216a", "value": "T1063172DA14912B3ECC88C6213792682D50686DC12E3B1EE89EDF58E67291FD2B718D5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330024, "uuid": "566db2bd-791c-4ebd-bcfd-9b94dba46562", "value": "48:1ovtZsB7vbGcv33MbLvfrC00T46InjZJczmi6olwE:1ovtZsB7vbGcv33gLvfrC00T5IndJgOm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330024, "uuid": "224b0c37-1d42-442b-90a8-70408cfb7162", "value": 1630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330024, "uuid": "94aebd6c-7eee-4756-8c95-8eded2a1ae4c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330024, "uuid": "9edf2f10-dcb2-4cb2-b829-b6b203e16d87", "value": "wgets.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "106c3c9a-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344379, "uuid": "db139e57-743f-4e98-b415-664d8d1f5164", "comment": "Malware payload (Mirai)", "value": "6165e0256e2e50fa43077da1121146c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344379, "uuid": "eb52e8ec-9c90-468b-bb79-2c79203f072d", "comment": "Malware payload (Mirai)", "value": "0f7f2baf1901a07cbed715f1fb093fa467380c94aeb421b5ac2127811f45c554", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344379, "uuid": "d60acc12-f48c-4e08-8ae7-6a339dc044e7", "comment": "Malware payload (Mirai)", "value": "1da65036d770f818fc0e60fefd77c466549b68c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344379, "uuid": "6beff7f2-a2c1-473c-b303-04558e86ec8b", "comment": "Malware payload (Mirai)", "value": "5afcf5e2970008a78e457fd53dd6fd666ecb31aea5c40a57a6053f215485749fcb98879433df2c9299265b124a4159ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344379, "uuid": "01bdf7de-e964-442e-abc4-26d8818334ff", "value": "T1BE03D691F8824A2BC5E0137AB6BE5A8D372167E8E2CFB317E8214B147AD551F0C63F51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344379, "uuid": "0709e157-3e9e-497a-8a88-e6bafa3b8c9a", "value": "768:sUuJ8BZU30L7IG5VFNyoOy3woqQi7lm94/wTrpUX1qQDahaFVdojrTwb:sUWgZU3bG5VCoOUfW44GShDahAVxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344379, "uuid": "c16e85fc-0d69-42d9-a0e0-cf55b96e70ba", "value": 38500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344379, "uuid": "927761fe-8cd2-4d60-bac7-ed0759750cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344379, "uuid": "9b498601-c119-43f0-a541-d54bcb975eff", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b5b9ac3-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329768, "uuid": "294e117d-6fd6-415c-bbf5-64b66b8b0459", "comment": "Malware payload (Mirai)", "value": "aafc7d8e85ca8b139b4d88b16ea01eaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329768, "uuid": "a4a1c4c4-d097-46ea-a3fd-02f3cdc9fd76", "comment": "Malware payload (Mirai)", "value": "0fc47e51b950d0c9feef18299d94898980682002b327e5604c86c6ea9ba51ebc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329768, "uuid": "82e66258-d6c1-4bbd-b514-c4998acbf5a9", "comment": "Malware payload (Mirai)", "value": "4f1eafd823e3a663d0a95154e2b07041ac8e6095", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329768, "uuid": "635bd1e7-d335-4cf3-95a7-e8f1a9b747ed", "comment": "Malware payload (Mirai)", "value": "e889673e8578b867fd4c0f1526444c9415d81cc75903aada8d00e8374585cf23f86ed23c01ca36e7b34813cd98b69621", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329768, "uuid": "b690dee8-7c63-4dd6-a21e-89f144df6dbd", "value": "T17963E81E2E258FACF36DC73547B78A35975833863BE0C685D15CD6002EB024E645FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329768, "uuid": "d54c098d-346f-4276-8548-f3baa4fad40d", "value": "1536:113xwE3ISFndPrZ3vNw9TIZapHWpFwWppjwpu/luqkTH:bqEYQndN3vNw98upu/YqkTH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329768, "uuid": "2a47f451-fc21-4928-a961-44aa2c3c619c", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329768, "uuid": "5021b808-b978-456e-92a1-9985757c35fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329768, "uuid": "4432e8a0-6534-44d9-90e2-91f8870d3b94", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10d06ab7-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329777, "uuid": "ccbfc5c8-1a61-4de6-ab7f-72cc32ea722a", "comment": "Malware payload (Mirai)", "value": "9b0c1eaf34be8181f68b0ed3e9402322", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329777, "uuid": "c92fd72c-ce20-4c70-88e2-8953bccffbe4", "comment": "Malware payload (Mirai)", "value": "115aa3a80116b9c68a0b502922daa0291f265921ddf85c3854a8b45bca330f47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329777, "uuid": "3e8a3dc2-27c8-49a0-8f0a-4b22d176132f", "comment": "Malware payload (Mirai)", "value": "629005575894b84fdb41b56e8d9914efef2f767f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329777, "uuid": "0539fe11-8eec-4d3c-b0d0-ed65886502ca", "comment": "Malware payload (Mirai)", "value": "1bd3768ab20fbe4b3531c05fc128333cf54743ddf832c72c5e423a46a67307aac69b5f1fb78218aadb3b7f062dd30634", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329777, "uuid": "fca997c4-fbc5-46bf-a5fd-ebdab7c771a6", "value": "T14A43F886F991DA12CAD5A1BBFF4F82DC771603A8D1EF73039D186B64764682B0E3B540", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329777, "uuid": "91f00c9c-9037-4a79-bc40-abf3610fce71", "value": "768:5oGUv5765ugcxCr3dMRrMAl9l44z/TNK/DoEcDKZ8ypkfiAOZPpQNFVTlbVR/:OGUi3c3MAlnz4/Ely8b4pcVTlbVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329777, "uuid": "f480f22d-b153-458f-8797-96f3392e1f7d", "value": 58712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329777, "uuid": "9716220a-2335-4664-a4b6-de358f9d58a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329777, "uuid": "04e4da30-0a0e-437f-8c01-d2ee8c3e3fe9", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "953216aa-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342454, "uuid": "36000481-f37d-4f32-8e07-411b6fd4050c", "comment": "Malware payload (Mirai)", "value": "52e796b1b3ecc89cbe7cc1c14bb5e2fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342454, "uuid": "edba02c4-0e69-4ba1-a8fb-9456dae226d1", "comment": "Malware payload (Mirai)", "value": "118dc46d7edf486f2b98203c651163532eb5303431ab9bf7f6bb02e7af6c9e7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342454, "uuid": "44968f7c-4df0-4fe0-bc59-03a2048ab774", "comment": "Malware payload (Mirai)", "value": "a3e035bbccdd29767acfac934742d492655495a8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342454, "uuid": "a54991ce-dfa2-49f3-baa9-43d197a010f9", "comment": "Malware payload (Mirai)", "value": "dfa23c48a21092159eaf7a732aa3b2348d7e36c22ada27ce95d6f3ad24da30481f2c4485671ae25cf7f5cff87ce03c74", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342454, "uuid": "873a0286-f021-4de9-87b8-a8c49447a958", "value": "T1C4043A07B5C180FDC5DAC1745B9AB53BAD33B4AD1128F52B3BD4AB221E5AE304F1EA41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342454, "uuid": "1cfe7b12-ec52-44a3-819b-cccf67fda784", "value": "3072:MgjZh0EVBtHAMc5OWWwh1H37VsB7ixiXnsnJMnhyGxQ50+U9JY8:PjZh0EVAD5OWWwh1H37yXga9G8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342454, "uuid": "f9099ef3-7310-46c1-8349-c0c024e46b68", "value": 190080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342454, "uuid": "b8a63b3f-62bf-4d30-878d-447cfd397b3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342454, "uuid": "cd83b97c-624f-4f04-8050-fec58769f026", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04c8d7fc-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329757, "uuid": "c4f1932b-08f3-4f96-a13b-a7745a36281a", "comment": "Malware payload (Mirai)", "value": "27dd9357da21b48dbb254a7235df2577", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329757, "uuid": "98a75490-d66c-466e-a34d-deae6fe19751", "comment": "Malware payload (Mirai)", "value": "11b7e1b8cfc88e4653ac3ee04efdba299adbde394bf0ea466090352c61ca2c67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329757, "uuid": "72598930-cbf2-47b0-bc9a-83a0afe03098", "comment": "Malware payload (Mirai)", "value": "68f345ab8e32f264a2725a927b2035c1cb292cba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329757, "uuid": "9f038bd2-0c11-4099-8bda-552e124709f1", "comment": "Malware payload (Mirai)", "value": "e25515e6e5498f30e6c3302414adbface407ccac72f2d08a1510060870b5a80709f26808b5d0347ee7ee81d2b6013bb8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329757, "uuid": "2d617c99-30b5-4571-9805-d741959471e2", "value": "T1CB735C43B2180947E4A729B4293F1BE183BFA99021E4B78A790FAF494576E334447FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329757, "uuid": "bac20396-735f-4a79-b323-9924d6471f6e", "value": "1536:0Kfmbakx9AtBT01PiHxWgISJ8bIewTBimT3bVRp:xuo21PiHuSJQGBT3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329757, "uuid": "8ff8eab1-4e27-4c73-aeb9-b9c13763060f", "value": 73468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329757, "uuid": "33cd8387-7cca-4c83-b7c3-a33234537814", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329757, "uuid": "5ea33fb9-f0f6-4b4d-9a6a-91f37858919d", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a195bc3c-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330020, "uuid": "96f4d915-4b85-4d43-96a1-23661e783a1b", "comment": "Malware payload (Mirai)", "value": "a6e001fef8ac4457cc4df1cf5c81a37c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330020, "uuid": "6ca863cc-f8df-4086-8897-f5643da04f26", "comment": "Malware payload (Mirai)", "value": "1256ba9b09ec8daa8c80e59a3fc52939ae0cd8222ea21951c38e41ae73d59a75", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330020, "uuid": "5815822b-f07b-4f2d-9535-8d51feeb4201", "comment": "Malware payload (Mirai)", "value": "9716f86a456dd33559e3577883d343986f5b3507", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330020, "uuid": "7aa586fe-c0a0-4245-b28a-722cafd40837", "comment": "Malware payload (Mirai)", "value": "2b394103c4f53af2a35548bd782e7ce4a980ea37cc0de07f086c9c874df6943fb28eee2296a14d2e4c92b0d6ca923fef", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330020, "uuid": "afe24447-ee03-4fbe-9111-722c17110537", "value": "T184314ECE10DC9F32C8C887163E53B03D307809E63E6616E82EED44DA7A59792B218D11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330020, "uuid": "d651ed27-f67a-4244-95d5-fe3c6af79911", "value": "24:5fBKqdM5f+FBcB3FSOqqB0urBP87p3BEQ+cBYD/pwqBog7B0Xd7BUhTBCXHubnB6:f4Z+7cBVSMr0xWwYtw6tosQqo9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330020, "uuid": "de8ae7d3-fb7a-402c-9256-bead75eadf97", "value": 1498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330020, "uuid": "962ca89f-c477-4439-9eff-4d4015d37de6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330020, "uuid": "4be70e81-1cb9-4a18-88bb-a16ed7d4177e", "value": "mass.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b109cc69-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330046, "uuid": "4ef6e25d-483c-41d0-b334-420fe8d9828a", "comment": "Malware payload (Mirai)", "value": "1f5ef29dca0a297da9f8895e10c53a99", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330046, "uuid": "49e774d4-f064-4032-b0d3-4ca0320fd083", "comment": "Malware payload (Mirai)", "value": "1279da77ff9bad634ad427cbdbd387d116942ac47513af1b97ded05a9128326b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330046, "uuid": "616c8bf5-3ee9-4375-ac3c-f0303293b246", "comment": "Malware payload (Mirai)", "value": "b6e64eddfe28aa4dee6a1ddcae69ee35c1861d47", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330046, "uuid": "47b386af-89e5-4bd4-836d-479babe15038", "comment": "Malware payload (Mirai)", "value": "62a833f6dab65d427d99fd7fd69f5f91fc44d37c79a2adcbe4b7f3aeb9e5e706ccae0a86819fddd3adf91c41b394f1cb", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330046, "uuid": "766eaca9-a9e5-4b2a-a8d1-db31ba88a179", "value": "T1B6D02BCF701983B3050C4E10E0A11C40B0C992C208B05B2C689FF43F8CFA780331CEA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330046, "uuid": "71bce2f5-9059-46d7-9cd2-752fc97e8f01", "value": "3:GRFdVZKaaDSIQ1CRmPSXdVZKL5KzSIOaANPSXdVZKhNIOSIHK+uF6APSXdVZKtFH:SdDPSdqLJPSdYNIl56APSdQFa0LKiJPn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330046, "uuid": "b7c8eb92-1a41-4f49-95e7-45f8fa07c555", "value": 253, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330046, "uuid": "86b15cbf-58a6-497d-b592-fe08a804274a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330046, "uuid": "f813db14-76f0-429c-ad2a-d188468807d0", "value": "pog.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eefaa13-dea2-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766344833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344833, "uuid": "9bda301f-7233-4407-abba-db75a17baef3", "comment": "Malware payload", "value": "4da07f3bddeb168874bd98853365d9d3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344833, "uuid": "48a4bd88-e05e-42c7-90b3-aa5860e6d5fe", "comment": "Malware payload", "value": "12968f8293e88ecd3ad337fe752c279ea0495ddff80fbc05e8d9204cee3d12d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344833, "uuid": "1e948557-37bf-4bac-b09d-6a67bf9c169f", "comment": "Malware payload", "value": "2829c26d4f8e7e6b6e37ed7d453c122d2bf64c3d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344833, "uuid": "777fefda-5f54-472c-9780-99c431dfc496", "comment": "Malware payload", "value": "33d2cd7837d4f725cbbaa00977a1350888f1365ee05934dda3e5bd57e4aaf13acc892fd78e29bbba7e940bf2aa575c95", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344833, "uuid": "e667fa2a-9540-4492-b0d4-73d2a8bdaf77", "value": "T19F087B4267EA04C5F9FBAA3489E65213D677BC067F3085CB324C172A1F736E09976722", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344833, "uuid": "b58c6329-1814-41e7-af21-022435b385fc", "value": "04397e0bcb7648e70cf6570253f46feb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344833, "uuid": "90765642-36c2-46ea-9827-39ca20047734", "value": "393216:p5/8EqLOkrVu7FvRrEiiY8izEHh68I8Tq8rIanQu58EASEhoIaE2lShYo8VSbYEw:pCOAP7nQJh8KZbOhELhvxOOxU3Ka", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344833, "uuid": "ee70fdf1-a991-4f0d-9c33-3e5621fbd3b1", "value": 77357158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344833, "uuid": "56db3178-54e5-4f87-a478-e041906e8587", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344833, "uuid": "1ddb5462-22a6-4186-92ea-d580e23b8982", "value": "Game.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c48be9d8-de3f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766302591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302591, "uuid": "f7d84c3d-40bd-4125-a44d-64b6ddba0da1", "comment": "Malware payload (Mirai)", "value": "dddbbe4f81a55c515468f9b842ba66f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302591, "uuid": "311616f9-4384-4bb0-b3b5-e96115c65625", "comment": "Malware payload (Mirai)", "value": "12b8e57f6e57b9b57fb108fb2a905104bace4cf21e27419e7b475fe2596ebf44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302591, "uuid": "857cd57b-9b40-41c6-8f00-44269ba6e1fc", "comment": "Malware payload (Mirai)", "value": "8a8966b840a3a82e7ba7a8cd575d3746e3d8a5ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302591, "uuid": "dfdbd170-0fa8-4798-8a0a-433839826fc9", "comment": "Malware payload (Mirai)", "value": "efc9cf8c0d3062907e327f6e64c502397b6e24c2a47953ceba23da3419b19136f8f9326d251960106fe49d04d9245450", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302591, "uuid": "d5d9ab87-7fc6-4510-974c-472769704009", "value": "T1F0C36C87B70C4E47E3A619F0263B33DA93EDD5D131F0A6482A4DBA4852B1D762085FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302591, "uuid": "653d82c2-5e2a-4374-980a-60a5a7c6acdb", "value": "1536:KOGw4q1GEDkQTZAYr/KI9qxmKYouPOGlSVhq8H0qmCycLe9r5SPznX5aZFZA:xGtNwf1+npCzlicpCVea75CA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766302591, "uuid": "47464106-e3ee-47d9-b661-1a53661bac76", "value": 122140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766302591, "uuid": "a7f38c38-6b3e-462a-afb2-000cfd979a3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302591, "uuid": "d2be6aa7-0c57-4f93-8b69-3710cef67f3b", "value": "rondo.powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5081d1ff-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309697, "uuid": "d367319c-881c-4ffc-a5fe-c967d90b2eaf", "comment": "Malware payload (Gafgyt)", "value": "8c1217f7c30594ead91ec67a50d3c3c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309697, "uuid": "5b942f22-c38f-4432-844d-e1b714a196f8", "comment": "Malware payload (Gafgyt)", "value": "138e2685f04b1b81d5fa6d705c580642055f40e78c2320425b31553895c0fefb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309697, "uuid": "5d0730cd-c192-40b1-8daf-24291d0eba7b", "comment": "Malware payload (Gafgyt)", "value": "7b393d17a0d9cc10541f7b5cca2f676077f8e31b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309697, "uuid": "1d50c832-a7b8-497e-82b7-cc784d1d2dd4", "comment": "Malware payload (Gafgyt)", "value": "d00849342850630fcfd0cfb6118e63dd18e5058d14918a0367a9f110c16175f44fcf67b0e576cb7fbae62a852ae0cbdf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309697, "uuid": "0e2d2255-db75-4b30-8e07-888b8d97f7f3", "value": "T156E3866E3E21ABBEE16886310BF76F70C39529D636A19342E16CF7185EB124C1C5F760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309697, "uuid": "603331b2-9d7a-4d44-8c09-76650c99db2c", "value": "1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hx:vY01ZkXAQT4Ns9//ImlWs4zWfOodW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309697, "uuid": "b57bbfbf-a6d2-4aa1-a3b3-345b0232b964", "value": 152121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309697, "uuid": "77c9669c-816f-4838-87bd-9fad4ea132c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309697, "uuid": "37f1acc8-03f2-4605-9961-8bf4b979c6fc", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27a903aa-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347854, "uuid": "99620546-0b89-4735-8768-83e3f176fd93", "comment": "Malware payload (Mirai)", "value": "192ea0acc3fdf59ab45b54c33930964f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347854, "uuid": "87b2205a-85d1-46f5-b809-432febc864eb", "comment": "Malware payload (Mirai)", "value": "13c37831226613b87d1733746657c3aae902fc9d9d9d5fa780540227c88d951e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347854, "uuid": "7b0e51f6-7851-499f-ba3a-fa4eca6f4e2e", "comment": "Malware payload (Mirai)", "value": "858802a08608647d2e7c0a8f09674b0d65ae186a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347854, "uuid": "bf3c3457-c239-4f18-a610-dc854846d7c0", "comment": "Malware payload (Mirai)", "value": "97390c2ae2d18bd3bd720ae128795889ea32889444167e6b88ccafc5ca2b28e1c9fa4a4f3102c392e6ff43ce19679087", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347854, "uuid": "16aae26c-09fc-4e82-a248-f0d9be7ce38d", "value": "T16D53F7C1BC40AE25C6C50777EE2F218E3301A7D9E0DA7752CD184BA4BA8ED1E0D5B796", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347854, "uuid": "48eb8f9b-81b7-4385-857c-de9d78422443", "value": "1536:UChM6NqYTQQ2MBVy9FwGBItktu2fx37otVdOU31M/8hvOPanyN:1TQN9FzBYM1f+DdO21M/G2iny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347854, "uuid": "201e400c-2c17-4edb-a4ba-e88eaa9d74e7", "value": 65068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347854, "uuid": "2adbea7e-090d-4078-9e32-200058d230c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347854, "uuid": "cdc6610f-4b68-4525-8ee2-9d57205f3dcd", "value": "Fantazy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b2cd5e0-dec4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359537, "uuid": "5d52f876-e753-4b50-ad2c-7f0ff22443c3", "comment": "Malware payload (Mirai)", "value": "3c11486cc5d5e3c979f9c4cdbf7bad33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359537, "uuid": "74d3d9cd-72d8-429e-861f-19f3069000d4", "comment": "Malware payload (Mirai)", "value": "13d4ca153f026c57860c660382e667fe59f2c8c45abd7a79751d87532d1d6bd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359537, "uuid": "f542c82f-296f-4f5a-9465-1ec7999d6e8e", "comment": "Malware payload (Mirai)", "value": "cd2a63122e2e3cf25af5ab0cabf3c4d37681b5c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359537, "uuid": "fe7299d9-57d2-458c-943d-5aa136d5a747", "comment": "Malware payload (Mirai)", "value": "22b5e8990243c0fd57c0b777cb2a2908ba43fa4885193a197d5cb8d466732978892731ab82637d79d6e215523705a340", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359537, "uuid": "2e41bab0-4093-43d3-9a3b-63567f784d8f", "value": "T12B830996B9818A25C6D452BEFE1E51CD331317B8D3EF73139D106B247B8A82B0E7B505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359537, "uuid": "5aad2eac-5106-41b7-a0fa-5bda0ceadb15", "value": "1536:esnWaWZv399iczqTp7eg0hsA8XqRB0dDdDAxl/3JoMabKMli52gM7KxvH7XAYYTk:Omtpk0dDdAxl/3h2gM7KxvHbAzTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359537, "uuid": "dc78d6bf-75b9-43af-bdcd-e2a21c082742", "value": 84892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359537, "uuid": "3d7ff987-d039-4609-ad6b-c91475ab4ca8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359537, "uuid": "5c15c917-f0af-44dd-b22b-13810c3f25ac", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8ae74e-dec4-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766359511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359511, "uuid": "69afe908-667d-4ed9-8f56-f65cb67de81e", "comment": "Malware payload (ValleyRAT)", "value": "18e276dc3fe40a0c05a4192898d68baa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359511, "uuid": "46df27b9-2038-4b60-bafd-4f7749d8b4d3", "comment": "Malware payload (ValleyRAT)", "value": "13ea3af735de37816fee8d491afab87ff3646f3465571bc0e74a140feeaaeeeb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359511, "uuid": "f5255a24-d4f5-43bd-81e3-e4efc8b2e4c6", "comment": "Malware payload (ValleyRAT)", "value": "7512197300fdb2966881d1343890f085826f3e23", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359511, "uuid": "49ac0337-221f-4cb3-a67f-bfe7f3705059", "comment": "Malware payload (ValleyRAT)", "value": "46a89d46f6b14a86dfc198affb25e57f14a263fd319bdd944c9cb0e0ce920ef918444150937cadbb48d459f7f0e49509", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359511, "uuid": "e4965e58-c526-4959-bca6-5484d1c17f4a", "value": "T1C4662353F68541ACE06BC0388A564B63E7B27C960B205AEF42D4FB742F279F61B39354", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359511, "uuid": "77a9147f-9181-4d03-b4a0-0a45b7e22d01", "value": "7d405506964d94064f3524a26fbbb8f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359511, "uuid": "4d6549ea-ab91-4c52-bcdc-dbff6427863b", "value": "196608:P+k30S7S9wDL4HSTe/6qzIF3jbM9g4UKo0si:P+k3x7S4ky26oIF3jgu0si", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359511, "uuid": "93c833a6-1ec0-4f22-b1f3-072620dad7c7", "value": 6622344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359511, "uuid": "8566936b-c1d0-4d11-96e5-1555df1aa49e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359511, "uuid": "491cbdf9-7533-4caf-841a-a6e794d70f46", "value": "18e276dc3fe40a0c05a4192898d68baa.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15378fd4-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329784, "uuid": "0161acac-24fa-4550-b523-db04cb5ab3ca", "comment": "Malware payload (Mirai)", "value": "662dc3000f00828e3b4cbcc9213de79e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329784, "uuid": "2c218b73-a1e3-43cf-835c-125051fd0812", "comment": "Malware payload (Mirai)", "value": "13f61233c15e5b506231b6ff9478ff3e355466bd82fa5527f2c7f2b4e33f153a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329784, "uuid": "43bbd286-2bb0-45c4-a701-ad64b99e51b0", "comment": "Malware payload (Mirai)", "value": "d3b183664d99990eb28ab9ec43fcb170103c5e97", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329784, "uuid": "42d55365-5229-4a11-a11c-df9319b7971e", "comment": "Malware payload (Mirai)", "value": "a192a596f9757eb571b3b7e5e3ef5d049d62119ced0a17613afa8a57c46538487fbfb80702bc6ed5c12c05e93469f275", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329784, "uuid": "447e0500-fabb-4952-bf13-fa203f440256", "value": "T16C63AE3BC86A6E50C85C82B4B4B19B751B13B40092922FF74E99D9B68003DACF58D7F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329784, "uuid": "d532f5b9-2201-40bd-bafc-aaab4cda3ac8", "value": "1536:suSJzYMJBOgH6SJW1rxIguXU6OYsTCcJLrPcKT3bVRX:sXYanZWjr6OYsTNFrEKT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329784, "uuid": "ff48a9fa-13e9-4e3b-8109-f9b51e960c87", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329784, "uuid": "d3bba37d-8c2d-4bf3-b9f4-bbe537b4e4cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329784, "uuid": "eaf0c40c-2519-4d83-85ef-385bffd51790", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab91cb0b-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345498, "uuid": "a51e983f-1bcf-46fa-8144-52f8156328b4", "comment": "Malware payload (Mirai)", "value": "f7e65f1141f4c53a600387cf74841bb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345498, "uuid": "fa1d4ed3-a834-4536-aa21-9d41013f96ce", "comment": "Malware payload (Mirai)", "value": "142514a2f9f0155375996847b5e9421f9cf6e5fe4c3bbfe558db5568c835d015", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345498, "uuid": "be4e8217-f76c-47b9-bf64-dfd3e5f88733", "comment": "Malware payload (Mirai)", "value": "ddcbe96866f506e4506b58ca1cc6e195c6d27153", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345498, "uuid": "9857acda-01d5-4af2-90c3-f288d5ca8090", "comment": "Malware payload (Mirai)", "value": "2bbdaf0ee9d573be8216d7a77f0ec46d297329779d14ee57be5612e20f0e81701a9fef4b234a0430fe40c5994fc9215b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345498, "uuid": "9f0199a3-1762-46b9-baa0-75d71227fb0b", "value": "T182144911FB0C0463CA931CF48E3F0BFAA3621A9115F99115250D7F5A1A32DB7A68BFD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345498, "uuid": "ecf9b388-92d2-49cb-9570-43f56a225649", "value": "3072:ty5+GoCEggi4NerYqltSwJpH6+cYstksUat:o5H5BT48rYq1wjY2aY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345498, "uuid": "e0e24503-f0c3-409a-8f79-29a41074b49f", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345498, "uuid": "00b4b87a-eae3-4644-8ae5-726b581091ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345498, "uuid": "531756af-c9bf-4c6f-a43e-5139de5bebf8", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e5b6f1b-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (Ladvix)", "timestamp": 1766320565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320565, "uuid": "c34824a4-e0cc-48d9-a9de-7ae43328d304", "comment": "Malware payload (Ladvix)", "value": "a0deed2fa506f90569548b379c4c0cc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320565, "uuid": "e4e97ac5-9787-4b8f-b154-969c17d9e71c", "comment": "Malware payload (Ladvix)", "value": "16ba394d6c62a6e16ca7b57de0537bfc152aa92f8a87817095d273dc438656a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320565, "uuid": "5ea72bd9-9300-4a57-a752-5028c818b3be", "comment": "Malware payload (Ladvix)", "value": "69a44a0d2ec6c4d6aed0ce9a9dbca70a64747132", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320565, "uuid": "a21796e8-64fb-4914-8832-dceb2bb3f7e8", "comment": "Malware payload (Ladvix)", "value": "9d11edbf455e1b2c204fbbdf0af8155ed647ef54b95334515f2b6701a4e95e54410126e2943c446ca268da37d8e2e3e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320565, "uuid": "48bed2a0-c49f-4a32-a5d6-1a0c0034692c", "value": "T16C868D03FC9555E8C0EA92318A7292527A71BC485B7127D33F60F7382E76BD4AEB9740", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320565, "uuid": "227570f3-35af-4247-b4c5-f3d06e57454d", "value": "98304:ZiFygGQ7wc4zho0GEGXwvPd/OXBGohvi40mGIhdVWYxnpTy:w7wc4jG4d2X0mviLmGIIYxno", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320565, "uuid": "49d9c984-bf3c-4c5b-badf-50d57bf92e0b", "value": 8080075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320565, "uuid": "40ea4df1-9628-4e4f-83c3-74ddaa877191", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320565, "uuid": "12536e88-b9a4-4bf2-af00-37829dd4fa23", "value": "brute", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73c31335-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338962, "uuid": "142f4a95-b078-4197-a774-1ee742a1e37d", "comment": "Malware payload (Mirai)", "value": "56ba89816478bcfbcf4d497a1fbe44d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338962, "uuid": "f17c10ef-091a-423c-9059-a53a2263e8dc", "comment": "Malware payload (Mirai)", "value": "174861e31307b06b719fe6fc35a1e7b0b48eb4e945225c2c8fe2c1bb01af6901", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338962, "uuid": "d88bf2dd-4be0-4e6a-bc54-f25370ad4b82", "comment": "Malware payload (Mirai)", "value": "3929069634b0721dfb656bca71c8283c2e02eaa7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338962, "uuid": "daa8e152-e303-45c1-8ac3-fdd127162d86", "comment": "Malware payload (Mirai)", "value": "5495990198070da46575166007d52672dd5a0c727af5c79ea00efc5a9921b88747c7829fd32152ac3463ce748044857a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338962, "uuid": "79cf192d-f282-472f-b3a9-199bfdb3058d", "value": "T1E263961A3E219FBEFBAC863847B74A219658339622F1C5C4E15CEE015E7034E745FB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338962, "uuid": "cc8468db-fd20-4eab-80b7-0813f1e090da", "value": "1536:AHNFnXDuPq/SyZBp9tuI0v6bqfg/Kkz73o2x8DW:gNFXDKGrEI0SWYz73o2OS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338962, "uuid": "00b19f63-b1f4-4f98-b8b2-c2d201eec616", "value": 69080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338962, "uuid": "e4fe5eb4-6419-409f-a1e9-0f48a3b0d7e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338962, "uuid": "fdcd93d2-2144-446c-9349-e91f7878c8a8", "value": "Josho.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "036a6e8e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329754, "uuid": "e5e54144-f9c3-4558-a8b9-4b9534373150", "comment": "Malware payload (Mirai)", "value": "bfa2817e95a71187c0eadf3188d3dd61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329754, "uuid": "f57f2b93-706b-4851-8516-648dc533b58a", "comment": "Malware payload (Mirai)", "value": "174a973b574cd9bc3312301611ffe099b2d83595bffa2bfe1cffc6b6564c5702", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329754, "uuid": "570da5a9-0779-4570-bca8-8e44fa9225e8", "comment": "Malware payload (Mirai)", "value": "1f03095d23f6fce09a40872d1fdd802a54bb4aa6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329754, "uuid": "7c8e409b-4750-49ba-9522-7412d3d15682", "comment": "Malware payload (Mirai)", "value": "02cbb0253c8015bb873e6c175a38fdf955ed9ee1f5715332d39a4acf5cb2f691bbbd95342edfa2127b8540c1e163733d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329754, "uuid": "8ee78ea7-8b5d-484f-b2c5-59c3c82dd505", "value": "T15A93E80ABB644FF7DC5FCD3745B95B01258D560622A83B7A3A34D828F64B15F0EE38A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329754, "uuid": "cd5ab5b2-d922-4995-bec5-26d76ba0f555", "value": "1536:4EKA7e10NlaVFkXZn5NS/DRZZ/ZmuP33eVagAx9gQhBT3bVR:4uJNoVuX7NYEzQrT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329754, "uuid": "16d9ab5c-4133-4861-920f-ee32208c008d", "value": 97080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329754, "uuid": "0b28eacf-2e90-453e-9d5e-c7f10c41fa9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329754, "uuid": "fff4fa46-bbbe-4ccd-825a-c7626dacbe1b", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9f01e70-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330087, "uuid": "006aebce-6718-48cd-a859-73bf7cb506c1", "comment": "Malware payload (Mirai)", "value": "ef76698fb23d53d65bbfff319e0c2e2b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330087, "uuid": "b7ed8612-9ccf-4c0f-8c72-f30508313ff4", "comment": "Malware payload (Mirai)", "value": "177cb2ac0827bc9146f923913bc41da2b53f1675290771144179a109ce1a01d9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330087, "uuid": "c6729ac1-0423-40b5-9623-839d53562617", "comment": "Malware payload (Mirai)", "value": "1b69123cc12251d53ba25a93c17ea606802232a0", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330087, "uuid": "c7a1dffa-22f9-4017-b7ee-9a1516099007", "comment": "Malware payload (Mirai)", "value": "959287db0d9f30ba3d9a8ee8504b97a0c7c0041a7c0eb3c59c2c543fca9ccd1080141edeaf73ab7b224842474d193bf5", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330087, "uuid": "1930ee76-fbb0-4312-a7dd-29858f8b43a8", "value": "T106C0809F10272641C044BE603151305DB142C5C225700B0D9BD82033F8CD500B75CD10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330087, "uuid": "236e070a-2a3d-468b-bcec-a5bd7b441c02", "value": "3:LxAjdVZVb8NBzSa+ANjaziDxAjdVZVCONBzSa5Ap9Mn:L6VbkPjmiD6Vxyyn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330087, "uuid": "892a1a4f-e63e-4c99-823c-6b1b45b98c1d", "value": 152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330087, "uuid": "67dead35-31eb-46bf-907b-1d0b66635faf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330087, "uuid": "40e83b15-db08-4324-90fe-e5fc6f16c018", "value": "4g", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "300510ee-de90-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766337131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337131, "uuid": "41325d14-30ef-469a-a651-8dfc115b489a", "comment": "Malware payload", "value": "9ef795e259617cb3249863ddcf555c31", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337131, "uuid": "84cada9e-54b0-4084-9920-1f5341f488c9", "comment": "Malware payload", "value": "179653b6975dc731ea84c917ec5d7506c425662c0c70c5ff38d871e3af00472c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337131, "uuid": "9ce7ef15-580c-42b6-9fa2-be0b896a8d38", "comment": "Malware payload", "value": "959b3a6f4b12f426f931a2f37e20414bbf3aa547", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337131, "uuid": "cd62f47a-412e-4d9f-80a5-adbeb1818b02", "comment": "Malware payload", "value": "68ab98ba94344ca03adf8eb81612ae3e5502c6966aa83ecc35d25d39632f3f4bf98d4cd1fabd27a7bc97c9a2bd416669", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337131, "uuid": "0701b823-6ddb-462a-b593-7a58fc1dae18", "value": "T1C7F2825A5AE2DF2CF668D7341BF71A68E768A1C613E6C544C2ACD2102E503CE5C2FF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337131, "uuid": "decc9c25-4a12-481b-b4f5-62c1d6d128cd", "value": "768:kOL3MOjPolQvpbH5gP2XfVzIQKqklFegWBERuONnpf+uSIILi:kkDFvpbRtYqklFRuOJpfFStu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766337131, "uuid": "a024e481-1c4f-42fc-8b9d-6fd313a4fdd5", "value": 36935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766337131, "uuid": "9b3cde98-fc9e-49ec-9f86-a0ada62e6376", "value": "application/x-tar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337131, "uuid": "12d6897c-7908-437b-a697-f3ee4c123872", "value": "kworker.tar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9987fe8d-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329147, "uuid": "3277ff5e-0990-4881-bb60-3b495f899dcb", "comment": "Malware payload (Mirai)", "value": "66c6f2beb6b90dfd57a9f6f6af316a6c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329147, "uuid": "2f353da7-9f7d-4e58-a78a-dda2baf9cc96", "comment": "Malware payload (Mirai)", "value": "17e99bc47b76b24dba8244350969d5fe9e68c109a0e55f930578b1ca621ea05e", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329147, "uuid": "a0f9185f-02c0-4264-a5eb-205bac870fe2", "comment": "Malware payload (Mirai)", "value": "e24b4d848178e07e2e6ca9237264b1208afd8131", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329147, "uuid": "cb1e036f-b0c5-4ff7-abdc-03ad5cad862a", "comment": "Malware payload (Mirai)", "value": "ffb3868fa5e5b93cccb203ebf59b022420ed83000875489af430314b7cb88c3dc90edbdef0d5c49b05619a95dfcfbccb", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329147, "uuid": "dcb1ba4c-3d3d-4b6c-bdcd-0ca3f4b5e005", "value": "T19AE06DBF18A4DF23D14C9E9025A5343394B097D25B710A18BFD985675CDAB00376CE66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329147, "uuid": "eb19aae7-1a30-49b3-80fb-c6c2d639c2d0", "value": "6:SdVcfiD/FdVcFGNIvLKaFdVeaLU+yAFdVQHGLqFdVbk2fbFdVxj0:6GuVNIT9MaLBvopDDA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329147, "uuid": "6f0d30c8-27c4-4967-a02b-af1b57f42443", "value": 415, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329147, "uuid": "c4e3f7ba-2ecb-403e-8591-69e5b51068ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329147, "uuid": "1e7a4701-b895-47de-a1e4-65cfc0df2324", "value": "c.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8632cce3-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (RustyStealer)", "timestamp": 1766338993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338993, "uuid": "9a426e24-d875-4af3-9e93-ebdcee51c0f9", "comment": "Malware payload (RustyStealer)", "value": "c5ae7aca5d014d500783505f3d0dba49", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338993, "uuid": "9b145691-0821-412e-a8d5-d0f805124e2e", "comment": "Malware payload (RustyStealer)", "value": "1822e2d6227f9b22573e82c973286fd920827cf15597d558af71790b56cda693", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338993, "uuid": "f88ee4a9-6e6b-4e25-b014-3121466dee01", "comment": "Malware payload (RustyStealer)", "value": "0f479f70abade90588d4db0097e8817e17e13ac6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338993, "uuid": "8c57da1a-9257-46fc-9146-92d76a779500", "comment": "Malware payload (RustyStealer)", "value": "5d7e085bf35f55ba38c3133657e7666a9cffd76325fce6cc9216127100a3870cc0ee1ae695a1a606c8e8c198ac252fdd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338993, "uuid": "acb820ee-6b87-488a-9e64-f61fdf768f32", "value": "T180A5BF3BF60FE596D1D4E038A1928562156BBC8D2F0D71BB3194A524E978EA43F27F03", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338993, "uuid": "ad47d662-31bf-4576-881a-e12212d42cd0", "value": "fcdb1bba7d17aed086e88f3726510100", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338993, "uuid": "78161bc6-ea7c-4abb-a004-670ea699acf0", "value": "49152:y8ObXalSVCpG663hpFr5N0v3fsXvAxO3:3NlKpFriJO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338993, "uuid": "99fff6dd-3d2d-4c03-901f-00d16a034e0e", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338993, "uuid": "039a73f6-efc9-454c-b620-75b67a19f7d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338993, "uuid": "d18550cf-2491-4eea-b20f-29c6b929ddcc", "value": "fv47j.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f738af-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330057, "uuid": "81db2591-55cc-47e9-b4ff-07c90582e7c6", "comment": "Malware payload (Mirai)", "value": "a6183e78fefa0de1895755904a216cf7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330057, "uuid": "4a83be25-264a-47c4-a065-2c3fb0e89703", "comment": "Malware payload (Mirai)", "value": "18849487f938b1c9d15ff3223167f7828a9dd8ad2e2cab629e4bd43ec54e6e2c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330057, "uuid": "9026d540-e4e9-4edc-96a6-666e4d060b09", "comment": "Malware payload (Mirai)", "value": "3711d03f1bf7bdbbf3a22dffe9bd605bf09a1e71", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330057, "uuid": "178c83ee-7a93-45a6-851c-c4602f9746d5", "comment": "Malware payload (Mirai)", "value": "420507cfbe40b5f14cf310138771e574a3a11ea0aed9f3cadee7663962b4da89bdebedb45722727e02e051b50c1046a1", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330057, "uuid": "a7e48dd4-bfbf-4f8e-af7b-a7a0e57f05be", "value": "T167D0124A300909C15D88BAE43F57307135809706D4A61A2F9DB381F3C993905F30CD28", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330057, "uuid": "bcfd76a2-1a56-4e6d-8b6f-c9539a758fd4", "value": "3:LxAjdVZPWwVxAjdVZUaSdXJa3B0dEJvKsjFTNjEF4FT2JFE7AwFqDjKaJo4jKLJv:L6PWi6Uaka3BZhKYzEOELE7AwRkoLhn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330057, "uuid": "8a62fabd-922a-4e26-bf53-00a071663012", "value": 202, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330057, "uuid": "d0418e68-52b4-40cd-88ec-d8f0ad33e662", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330057, "uuid": "a6a525fd-247b-4c56-99a6-abcef6a61107", "value": "zb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e63878bc-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335289, "uuid": "06ed0030-f49d-49c9-9a75-563250b1b6e4", "comment": "Malware payload (Mirai)", "value": "e458fe0723f7a2bef16155c574a75e68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335289, "uuid": "9e2ccab0-add2-4d33-80f1-c2f3fda09b2c", "comment": "Malware payload (Mirai)", "value": "18e9018f77a1b1331f33a3f91ae426c69c3b7bc06eecf40ce49d80f0fcf4bca5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335289, "uuid": "ca93af12-65c0-445a-b4e5-d3f263e18888", "comment": "Malware payload (Mirai)", "value": "e0aa1bf4546dc225b7c19c6d7687372ecf082c4d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335289, "uuid": "69e3f8a7-bbae-4b11-9b60-636779a71428", "comment": "Malware payload (Mirai)", "value": "e32ceb6ea4e5a7f6679617455ae4f04d9e230d32e9e3bab1a261fab6ba3b9c3629807d55dc8ba14e860136545671eb25", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335289, "uuid": "2044e9e3-d5e1-4c1f-bb5c-3bb690fd299e", "value": "T18D233AC4B583F8F9EC15457C307B97729EB7F43A603AEDABC39994239815601AA072DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335289, "uuid": "c2513a6f-01a2-4d4d-a62d-c73b00513884", "value": "1536:4LInPCqAAXJLE7cxtdb8NCqBNM7vk9YXPSP0Hoa:FCqxpE7cxtdb0Cqvsvk9sSMHz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335289, "uuid": "c76f3313-445a-4a84-82cd-4d41dd73018f", "value": 49752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335289, "uuid": "6ab9af1b-a07e-4f82-8c96-dc9c63604fb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335289, "uuid": "24c404d7-6f54-46b2-9b80-60148a841e89", "value": "Josho.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40cb1097-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309241, "uuid": "e03366ff-625b-4e10-8901-a5889d33a4d5", "comment": "Malware payload (Mirai)", "value": "e454c7f5a64f43f521bbd45ce2179d85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309241, "uuid": "304b34af-c31b-4f97-85ca-a83099c731f4", "comment": "Malware payload (Mirai)", "value": "1995f9c0a61598e27fa0a3b2102cb085e66a7cb5b6d6956861f1e93b7b0b04b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309241, "uuid": "cd9b5621-3cb8-4405-8f97-9b55144ba954", "comment": "Malware payload (Mirai)", "value": "d72f14bcbd49c8bce10ac9097a6e200af7ed64bc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309241, "uuid": "cb6dcc19-e043-451d-983a-3c2e31224ba7", "comment": "Malware payload (Mirai)", "value": "7963160e84852b8760bf5b8406070b650c74fdb96dec4987cb8d71b0ddeb922b2bb3b191d7ebc1418c8663119c732ce6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309241, "uuid": "a51ac9de-a702-40e9-8403-ed6b8740c273", "value": "T16EB32891BC819A17C6D013BBFA6E418D332623A8D2EE3217DD256F2437CA91F0E77651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309241, "uuid": "640ceec1-e77e-47df-9f27-dc15ab305a22", "value": "3072:lBu7bgtAINf7/Upm1nsGPpCAixnWo3EXaS:lBunk79nHo0qS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309241, "uuid": "08f3b0d8-0852-4423-a628-1afec93124b3", "value": 112976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309241, "uuid": "a9f134d7-aeca-49d6-8da6-cade0fc77d22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309241, "uuid": "af0b84da-18a1-406a-9954-7b87024251f1", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8f73e44-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335293, "uuid": "f949d634-6ba9-4e0a-b7ea-55f480278fa9", "comment": "Malware payload (Mirai)", "value": "507fd4fb528213a03b1ad21ebff23fa1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335293, "uuid": "bb97848a-f11f-4d7f-ad4f-d6f7d6ffd879", "comment": "Malware payload (Mirai)", "value": "1aa3f37f7fdbd4bc6b330b34e912702022a2c340e3325d39e7d40ec8e27fddc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335293, "uuid": "2350d52f-71a9-4cb8-a431-d56b0dcece2c", "comment": "Malware payload (Mirai)", "value": "011923bbe9e7a2d023d013e1440f28588945920e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335293, "uuid": "47337df7-ea19-4d5f-aeb9-c8a4fec0a5b3", "comment": "Malware payload (Mirai)", "value": "c7daa1b947e8edbb84c6a1a6ebfdd2e1c96d8bcd325c2a93839c9e7bf3626fbd27d9811d1fd259952e5cd32d531cce9d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335293, "uuid": "e9ad93e6-7af5-4d59-825b-bf05929db22f", "value": "T14943F8C17881A626C7D45777FA6F018D33199798E0EA33578C292FA07B8AC1F0D6774A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335293, "uuid": "f3a849a1-d294-4ae6-8768-11cf1ee118d1", "value": "768:tRgEigNvAKiD1AvoUTQJkSOf9Kc0m8kiJeU67F1HHQ36gawmvTLwCVy/rCxHghWT:tTiVrD1IIm8IHQKga1ShWkB5tDCFoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335293, "uuid": "b7b4cfb7-8fb8-4db3-9cd7-e4d8f4b2a07b", "value": 56600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335293, "uuid": "e691b2df-2878-4828-b27c-ce6ee2e8fe9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335293, "uuid": "03a24581-27f9-4890-b282-ab9e04009578", "value": "Josho.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "128a9307-de30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295849, "uuid": "1f331b0b-7e72-429c-b6e2-872224fca600", "comment": "Malware payload (Mirai)", "value": "6f308dc9849474539d050fcc73a53a96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295849, "uuid": "5aada158-12c1-4365-8418-6bbab9085fcc", "comment": "Malware payload (Mirai)", "value": "1adfd4b9fe173f135175fe5f95961d70b4b275d56674524e9b97f5c955016184", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295849, "uuid": "5e5653eb-9bc6-4b42-962b-c18c9dde2770", "comment": "Malware payload (Mirai)", "value": "6c8aef3069f227b2fca189e6f4e812b8d0a8a40e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295849, "uuid": "c64d1881-8a8e-4630-b1b3-a82297f1a6fb", "comment": "Malware payload (Mirai)", "value": "56689b77c579d42c8fbc521aea367fc2b551cf18f67b5364d42a0d2458e13da30ee6fa8129b99f8452ede78353df3d29", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295849, "uuid": "8597f75b-737e-4a37-bd20-073e01898b98", "value": "T121432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295849, "uuid": "b3856e86-c939-4b4f-956a-c4706f374337", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwN:RqtmZPuutfbltZFBSJsBcfDSTFI+BEN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295849, "uuid": "ea2919ff-5076-4fe1-9fe9-05eccc12aa96", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295849, "uuid": "20356300-0e76-4187-a042-b1fc21d9bdce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295849, "uuid": "07fad37c-966a-4b33-b3b2-77fdf3c23f21", "value": "boatnet.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8885c5d8-de3a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766300342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300342, "uuid": "30fcc005-7360-4b65-b0fe-14914de55d9e", "comment": "Malware payload (Mirai)", "value": "9dea9c65d1022db79fba1b24dc5b966a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300342, "uuid": "82d1a5c8-4ae4-4e84-8554-74ff31ad4b15", "comment": "Malware payload (Mirai)", "value": "1b1df35f15ce9734c51a5ee94460400efafd1523b4b3baea89ddb0cf86c970dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300342, "uuid": "bac57247-fc59-45c6-8157-3647a5e1edc6", "comment": "Malware payload (Mirai)", "value": "daf7e22ccb26b676ab1171904a5f63a337772823", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300342, "uuid": "452d4120-ae87-445b-8e8b-ff15b5f917c3", "comment": "Malware payload (Mirai)", "value": "545e9250a07cc3211c2305a432838b404fc63ffe644e2ac8335929d6b0cc728f1888b02704739d7b378e27aad4b1b5f7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300342, "uuid": "3cc89e7e-0307-41a7-bb56-82c95b2e92f0", "value": "T166533A12771D0E17D5A32D703A3F63D083FAE99120E4BA88695F8B568A34E3516C2FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300342, "uuid": "7713042d-70ed-4c7d-820a-6f9030eda6a8", "value": "1536:ue+cVrXyCbKeFstrZ99PmI6G4bH6cAAw3:0cFzXQ1mIZ4OX3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766300342, "uuid": "a2fbf657-29ac-40eb-9c4a-781ad42034d6", "value": 65312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766300342, "uuid": "c7993a83-5a93-4040-981b-b1260f8bc4df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300342, "uuid": "3bc7f739-4402-4ab1-8c5b-390e8713468c", "value": "sdxkzX_UXA229x.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33ecffd8-de7b-11f0-a129-42010a9c0007", "comment": "Malware payload (SilentStealer)", "timestamp": 1766328118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328118, "uuid": "9f635b4f-7549-4097-a7ca-46211d15179c", "comment": "Malware payload (SilentStealer)", "value": "642277a0fc9d44728de8261baabf6af8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328118, "uuid": "dd820e68-4d62-4ce7-9968-60c6ce67fd10", "comment": "Malware payload (SilentStealer)", "value": "1bd24ae27b199517929707a17870cb4569666da7feeeac2fd51d3873ce74c272", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328118, "uuid": "cd17d1c3-fb75-4ed9-952c-c0e9c25f2102", "comment": "Malware payload (SilentStealer)", "value": "68772eb25d8d3cd196cace98d9ee78ff0e372b97", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328118, "uuid": "fa69fe56-5e67-4d0c-8222-39931d571f21", "comment": "Malware payload (SilentStealer)", "value": "407c5d30e2b02c3b9fb062198ee414f28ab99c76f0c51ba6671d0f17bb3185065ae6d8439a79473839d261b846855120", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328118, "uuid": "35d3eb6f-ca83-4279-9d9f-b65f53a2b25a", "value": "T1021833DE8764F715D96B6A7E9FA1ACBB91545A0F67A094F60B032CF2ECB03245F12013", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328118, "uuid": "e66ef44e-2744-4afa-bcaf-95eda3b06403", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328118, "uuid": "c055c379-f9d9-4f80-8dee-3595efd5fb19", "value": "1572864:5GYxcnyegj67c/pFKT4fmVx0Pc7jxkOHiYCTGk4lSgRyBda3msHmUlskiZ6Y:55UyegWg/vKkF07jxDCY3k4lSQ+a3mwY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766328118, "uuid": "13388549-3808-485e-b185-88e4badb0e15", "value": 90569347, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766328118, "uuid": "16b6ba66-840d-4c9e-b1fb-2c664f8bea8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328118, "uuid": "eb6ec0f1-0de2-4a94-9014-85418c9b11f9", "value": "Keyser-1.2.5-setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5897e8a8-de62-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766317442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317442, "uuid": "329720f0-a25d-4a3f-acbd-c9981d1f6a22", "comment": "Malware payload", "value": "f915b0a867e19b211438025795695d16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317442, "uuid": "02edf58f-bdec-4d0f-b835-9b09e1037cfc", "comment": "Malware payload", "value": "1be02e7f4e32a3fe1872f238fcb49c6435c31c49e9b57781aa7bd9dea8f205f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317442, "uuid": "d2bdb82a-7c5a-422f-a686-7e778d295396", "comment": "Malware payload", "value": "55400e4f44417ee23ea05ee32618f871918cd740", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317442, "uuid": "8b7ae845-8faf-4c8a-81b5-64a7aa9b7794", "comment": "Malware payload", "value": "5eea64cf0ae245d6762fba9c1cb1b597eec92cd3e739cce0c098a456ce436e0d985709613386199a9bdc7197dab06a02", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317442, "uuid": "91843f67-8dee-42b2-8f21-40d8c34dbd1e", "value": "T139B3FA1A3A61DBFDF5AA823487B38B70A6C4229127D1D389E29CD5182E343CD5C1F7E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317442, "uuid": "6a452b2f-6791-4a8a-86d2-2ced020dc0c6", "value": "1536:5oBbjSB3oAdr9ZTOu/HKU1fRc1W9UUDORUysp+29GsPgpo4dFYg:5oBnSBzd3NCU0W9UUDyB4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766317442, "uuid": "16d69a43-6a79-4d98-a9d1-75fa8283095c", "value": 111920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766317442, "uuid": "2405c4a9-686a-4124-9c87-2ebd2b460598", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317442, "uuid": "3a44a02f-1b1c-4524-80f5-47365371f32e", "value": "b2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dae4e13d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309500, "uuid": "061b9221-3e59-460e-8cb0-4f5b014a1556", "comment": "Malware payload", "value": "40ba0a5dc6bd0dffeb85578e59ed9d9f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309500, "uuid": "cd302876-38cb-4438-80f5-933f99061899", "comment": "Malware payload", "value": "1c3c0da2e0869b26122b8a3dd57b61e46e567645bdb5b43d7b8a6b11541f5659", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309500, "uuid": "255b2ff2-110f-4773-82c3-194411912bf5", "comment": "Malware payload", "value": "22c83137c0dc2a6f64abd28f3c6346ac0f134292", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309500, "uuid": "d4ee3302-e808-4177-a425-56c3db1d40ac", "comment": "Malware payload", "value": "ae195c32c331159d3766e393ec7ec8f5e855c9fe0e33788fa99f0e27538eb77be8cac7db694b390474f844e8997cb3c6", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309500, "uuid": "17118853-8bf0-46e9-a8b4-8264608698a8", "value": "T1BF111A8F0018795F0109CF11326B55D877F1D3E8A0B6AE47684479B3AA88683B5B9E9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309500, "uuid": "419a4c1f-321b-48b6-b89e-dfe4ca10081f", "value": "24:DE5GEcvNIZEtzmEVKTAEHQEOnMETt03E3e/EKOEzvE12Ek9v:OgXFQdAnpt0Eed3SoN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309500, "uuid": "9984e1fa-d0df-4403-bda5-3b355736a5e7", "value": 1102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309500, "uuid": "14b343b6-3d13-4157-af79-1eed21ee634e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309500, "uuid": "2efc7b09-8241-41bb-bb8b-b29c1f8aa600", "value": "wget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "411ee2ee-de92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338018, "uuid": "d5bd100e-62ab-4b9e-8ba5-78a4269378ae", "comment": "Malware payload (Mirai)", "value": "649a7ac5b51e37287c225890157b2a57", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338018, "uuid": "738def69-70b2-4b8c-92d7-ede609ca9906", "comment": "Malware payload (Mirai)", "value": "1cb9e0e4aa5764036ed999aec9a5e01ea36af3858895f8de7aa0f4ba53e80951", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338018, "uuid": "9b4ec750-8c79-45b2-af74-585eab811aea", "comment": "Malware payload (Mirai)", "value": "dfdd22573052034cfe7447590b2aa58a526c181f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338018, "uuid": "c4d2b5e3-f3e5-4ac2-ab09-f93d4f0d36ec", "comment": "Malware payload (Mirai)", "value": "6b78977ec6750cf6475423de59c5569bc0a30c711d377bd0ef48e6f2a76a0644d945e21e144965a9e8d44c6fab3d1aa9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338018, "uuid": "cbf372a4-7c6b-4724-86fe-cbd9c0b56732", "value": "T127F34C07F8C184FDC496C1744BAEB53ADC36B09E4238B26B67D4AE222E4DE315B1DE54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338018, "uuid": "26e6d953-e490-49d3-b4f3-98ad1e53d8d0", "value": "3072:m7MXnx3jLyOuGnAGcKxIyqflJjEQMkHMMav3dSrIRpbx2QLLLLLLLLLLLLLLLnL+:m7MXnx3jLyOuUKTEChgb9gQLLLLLLLLe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338018, "uuid": "ceab5803-fe16-4499-8f4b-3b9427bda0ca", "value": 162424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338018, "uuid": "2e4dd380-4f69-45f5-a579-c5415d715f8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338018, "uuid": "abd4f59e-af52-46b3-8640-616a568617e6", "value": "yamaha.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa85ba37-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329739, "uuid": "391dd988-daa1-4796-8cdb-57c1036f7d2f", "comment": "Malware payload (Mirai)", "value": "e89c8ecf6d425947f5b674c4703913ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329739, "uuid": "a5d24b64-992e-4b3c-bf30-95a0f46dda6b", "comment": "Malware payload (Mirai)", "value": "1d0036aeb027b235b9d67d76a501b6b53babfc44f6af182f49c8f53d2864a5a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329739, "uuid": "4d506484-0ddb-4808-9da8-f3422b87c498", "comment": "Malware payload (Mirai)", "value": "304792af1cad9d1145adcba2de729b0526c5f83e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329739, "uuid": "3b3e12f6-8e32-4e51-8de1-5c71cedabcb2", "comment": "Malware payload (Mirai)", "value": "46f2464e21f340d8f9a3abf64448c6e79ac0cc36b80f7ffcf373bef190e05b751174952115d4eb0fc732ce97bcb673e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329739, "uuid": "6d6fb49d-4776-47c9-b942-4aecf5684f63", "value": "T11283B51A7E719FAEF76CC23143B78A30A75463D632E0C685D26CE9145E7034D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329739, "uuid": "2b5f0496-458f-4087-9296-0e3147ba591c", "value": "1536:VwUKXvOjBnigcmm4dghipaB3iBVriBBuULwBME6jhYB8TlbVRkGS0:ikQmm4dghiYFEPB8Tl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329739, "uuid": "8f02e16e-13b8-48b4-81e0-f690276aea7a", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329739, "uuid": "2a64691c-ba05-43db-a8b1-3fde78cf4eaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329739, "uuid": "6a4cec4a-4273-414d-a494-8748f95ac8b1", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bff56ee7-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330071, "uuid": "256166f4-92ea-4f41-9116-86ba3081bc89", "comment": "Malware payload (Mirai)", "value": "227bbb7d915af1e6d2889b8c5b208721", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330071, "uuid": "01b4d1c1-700f-4105-9713-de1285310d2f", "comment": "Malware payload (Mirai)", "value": "1d7df772d3366ce0f25f28a8a40449ea44e26eefb1361e1773536fbf93eeeb7b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330071, "uuid": "4e6c40ae-f75f-4ae5-9ab2-c19c2f6d711d", "comment": "Malware payload (Mirai)", "value": "c8c914d0ff25bea06c3448a9f90de13bccd1bcf4", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330071, "uuid": "fb6933d3-af17-4148-b050-0def6d75629c", "comment": "Malware payload (Mirai)", "value": "edc0ca600445ecfef93e7aafcaf2f3843183c5388bbf49b76cac3dd91d3b2b7ae9945d6d83632666ba99d198366127ef", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330071, "uuid": "03af96be-b36b-41e0-a942-eb4b94059d0f", "value": "T152E0E56F405AEF03D24D0E5A7656603FA53053D8061B4E46FFD1807F458D68033BCEA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330071, "uuid": "61ec5d2c-82be-45bc-b653-c9a3df49e236", "value": "6:fptVQHicQjXtxJBptVeaLU+7QtkJBptVcFGNIvLK8QRYFIhJBptVcfiD7QvI41:PRptMaLBuutVNITd4tGl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330071, "uuid": "13dfebcc-663d-45a8-bfa7-b6ae2328420c", "value": 426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330071, "uuid": "fe47f68d-f98a-487f-bfd1-125f96de2d80", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330071, "uuid": "1e69d3f3-a79f-4f60-86f9-1ecced10b1af", "value": "li", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c89696a-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309691, "uuid": "3ab53514-ee6f-4611-b3c6-49008a1eefd4", "comment": "Malware payload (Gafgyt)", "value": "908760289e1d9a17b5cc6d267750930e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309691, "uuid": "d9110a07-2a4b-4f77-a71a-5f7c2c53933f", "comment": "Malware payload (Gafgyt)", "value": "1d9dc50f53b8d274d8de449f3aa0127bb9cf8f3fd44a10fd1708c0c3f3616ce6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309691, "uuid": "167bf3a9-fe6e-4275-8158-90acbc92a192", "comment": "Malware payload (Gafgyt)", "value": "904047fc6fcbfa1b1cffe8b97ef0b4f960550bef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309691, "uuid": "1edd3060-be0a-402c-b0b3-cc545b7ec817", "comment": "Malware payload (Gafgyt)", "value": "035e61154c44b848e51e4fedda7683a5e299f7ad0f9623a2362e0afb85d25b5d0364964b05ac85bb4b520451ae4681e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309691, "uuid": "7d5c3060-2af7-4367-8f95-fa54567839b9", "value": "T13CC3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309691, "uuid": "5520d90c-7485-4697-956f-752093189bf7", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBedEdWfRZrmW+IFj:Ted0W0MZQHZd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309691, "uuid": "8209fda2-a86e-41ef-adcc-ed571d7fd85d", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309691, "uuid": "b2da4b5f-d845-4ce1-825e-85546b9c0be5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309691, "uuid": "fb5cf0cd-e64c-4267-9f7d-3847a0e77034", "value": "m-i.p-s.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b68dd01f-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330055, "uuid": "88e4e20a-66be-4c61-96eb-11c45fb06b6c", "comment": "Malware payload (Mirai)", "value": "93c8ea8b2ac567d493e5744ed989d9bc", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330055, "uuid": "4bd2dd37-2093-4fe0-a229-80f759e81d8b", "comment": "Malware payload (Mirai)", "value": "1dcd27dc2a86c263c4e6dc1aec4863c17609be2cdd3b018cf6eec587003ec16d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330055, "uuid": "e93dcf32-654d-4a0e-9a65-83e3e2e4159d", "comment": "Malware payload (Mirai)", "value": "f228ac1460a5889d68879e813631449239cf7b60", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330055, "uuid": "5778be67-309f-4f58-86a4-a731e908971a", "comment": "Malware payload (Mirai)", "value": "88468e4349080cad7230b5acd95ae0aae380c1102a19c6eb65e33f3c50f0da0a5d98c7a8e58b9776c79748ef9e36f7c2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330055, "uuid": "ff99b04f-2f03-46b3-94be-f9426dacc769", "value": "T11611849F013CDF32A14D6A6A7E61703660F407B9387B17BD6FE5489A188D4602718E63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330055, "uuid": "11d684e8-f513-4110-a32c-59daa2677b56", "value": "24:6VM5f6BSyGh2iGpjnh+GNKtpJZEhSihxAhbq:xZ6BSO7jn0GNeYrP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330055, "uuid": "b302e147-f906-4430-90f3-9e7dae80ebcf", "value": 1033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330055, "uuid": "b31c383a-2c34-45d3-9e1a-9a6769dad6af", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330055, "uuid": "64d873ae-d5c8-4b41-944d-f66caefa540d", "value": "wg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03783e58-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320735, "uuid": "778eb012-3796-4723-9b9b-b1de6fe90f8a", "comment": "Malware payload (Mirai)", "value": "5a3f9087ee22397bda7c007595aa450e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320735, "uuid": "1774778b-1603-44f1-ba1d-ad6617db2ccd", "comment": "Malware payload (Mirai)", "value": "1dec3eedf163de9a2b0d33ecb53e46d83ab43ebc3190a5fc79d126809e7ce406", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320735, "uuid": "6ea43a0a-872b-470e-9ba3-c19056a689ee", "comment": "Malware payload (Mirai)", "value": "f033222caabf88e15a532cff44a4edfa353d19e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320735, "uuid": "5e526d26-2bd1-4ada-b96b-1cd01321bd07", "comment": "Malware payload (Mirai)", "value": "2136fb3d0db15b1b5c8cc25d3a64022e99b5ced180448d6f04309e80463e7a93269606cb95d9a5b49ae7e88920644128", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320735, "uuid": "ed3c7b31-75b9-4c09-9851-02494176d89f", "value": "T1EB63B652B8829107C9D896F7F31E019E331513B8D3EB3207AC256F623689D5F0EA7E59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320735, "uuid": "708aae6f-1f7c-49a8-86bf-2362376d4284", "value": "768:y/fJgdcpquY7ldy9ugOrmQhmDX9qKhEeJ+svWZakjq+B1C/5/YNNoddN3tYYklPm:8fGdFjldyy6Q0/BosvWBjh1Id57kx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320735, "uuid": "dc7b1937-e6ad-473c-920f-29c88b672254", "value": 71228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320735, "uuid": "e9b925b4-271b-4917-a3c8-5116ac809966", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320735, "uuid": "0641f822-e6b4-4171-a406-a359358b4cf9", "value": "shadow.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93c15d3c-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342452, "uuid": "4e9992d5-3648-4dc8-9c56-1e15f9da57c2", "comment": "Malware payload (Mirai)", "value": "663296ad4574c34ed869b1a0f367b0e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342452, "uuid": "c3eb1b4c-70dd-4273-82d4-2d51d28f16c7", "comment": "Malware payload (Mirai)", "value": "1df03b40956db41a9e54f6280c7051a5494f30be2047f90e7bf89a588ffd4456", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342452, "uuid": "8a21ef83-5021-4d2b-9f0b-6b02f3b2e21f", "comment": "Malware payload (Mirai)", "value": "c565c5bce4d0e09d68c3d84f4ecfccf82c3f0733", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342452, "uuid": "9857d8f8-a9ae-41e4-95a1-24d0dad427f3", "comment": "Malware payload (Mirai)", "value": "d8ba6242123f263bd8c4bc3488688e4a24da4adc09e6dccd8ea40b659d15db1878d2560de3ce461798b48c2b2caf40dd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342452, "uuid": "a45dc108-8ebf-462a-a2ba-e193023da169", "value": "T13F043B45EA404B13C4D627B9FADF02453333A79497EB73069528AFB43F8679E4F12A06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342452, "uuid": "96455e9c-8ea1-4cdc-949c-c679f151bcdc", "value": "3072:ba/HXYE+pIPsCsowGI723MaSfZWHfB5ZiG6RbIBqIR3owM/RtImEZXcrNGO:ba/HxsswG+eMaSfZWHfHuRbIBqq4wM/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342452, "uuid": "934bc76f-2cd8-4d48-935e-3afd42a23cb2", "value": 184848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342452, "uuid": "eb6bc61b-36f6-4853-b73c-047bcabf4865", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342452, "uuid": "02a30b9f-cf26-4e39-b8f7-9e2ed719c640", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0852d262-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329333, "uuid": "090eafa2-5ef5-4a27-bd05-248497ca0e7b", "comment": "Malware payload (Mirai)", "value": "139fcfd7da5ebd6e7f8ea1668f7a1f2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329333, "uuid": "bec5b688-6cc3-465e-91d1-7acc9bfc0a08", "comment": "Malware payload (Mirai)", "value": "1df127cac97ecff975ccdc39b1412068397b948821490910a9c0e3e11114e5f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329333, "uuid": "735d3a69-c199-4def-b652-566e3c350280", "comment": "Malware payload (Mirai)", "value": "a6af2a579c6931c7cec02226b98dbb2b1967ce1e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329333, "uuid": "e0124ad8-b8d4-403a-b723-fecb0dcf9509", "comment": "Malware payload (Mirai)", "value": "460fbce44c85449190bc3d11bc45bf9d7ed4b19d4c7941884fd49ad63f98ac34b0888bba0a57423b27dbee92583b2ad6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329333, "uuid": "35a98032-1f01-43fa-afa5-005cf8b5193b", "value": "T1B2832A85B881DA26C6D962BBFA5E41CC372613B8D2EF3207DD256F25378682F0D3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329333, "uuid": "e8b4cf2d-4ebf-4f78-b637-9ef6543125c5", "value": "1536:7b8KVoTB4X0/g6jaRr4nLEQKMSKE9u4kFk/eA7uldvJTlbVRI:7brCiQLEQKMSKE9uzFh/lJTlA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329333, "uuid": "0a5b500b-5709-4f1b-9662-954882c224ab", "value": 84176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329333, "uuid": "78537b65-d5dd-4cdc-82d9-868a75bbd603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329333, "uuid": "2412cb81-48b8-40e9-a749-f6737e839617", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2c6fe59-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330022, "uuid": "0274ad9b-cee9-4571-a6bf-e7cb09abd849", "comment": "Malware payload (Mirai)", "value": "c99a93d0bf89dff1756317ed4334c08d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330022, "uuid": "f1ec6f64-178c-48e2-9bfc-2a096f105dc6", "comment": "Malware payload (Mirai)", "value": "1f9b2b3d258a3f573e29fd040166b8a7edc05772c912021e0438c5d655bd548a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330022, "uuid": "ac3fd4a9-912d-43c9-a09b-6f229177fcfd", "comment": "Malware payload (Mirai)", "value": "28261e2a3a0727ab69b48b5406ded15d6b1f87d4", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330022, "uuid": "d5cab8c7-c700-4604-b65f-1e1f00c8b9c0", "comment": "Malware payload (Mirai)", "value": "46beac2a5956ddbe5338defbcfbacdfa674819d158e969e4395ce0244e781ecd2bc3b8ab68082f34ce4d67048ef429c0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330022, "uuid": "0e5fef91-6cd8-4c85-95bf-774ccf6e2a5d", "value": "T1A8F0BB8FF0553E53614D9D9BB7A2080E909583CC0A170FBEFDE5507A48DD64033ACB94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330022, "uuid": "36f729a8-46f8-436e-867e-bd57bae5e587", "value": "6:SdLbTZ6WY+x8duKZjXI+x8dFzPEixx8dqNELx8dYNIF+KZEBFIhx8dQFa6rE21:6XTcuJbFeqBYNIbMbBG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330022, "uuid": "36c084ed-cc57-4a09-9c07-c507887d648c", "value": 492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330022, "uuid": "7500bf22-ed04-43c7-8509-765520c068c1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330022, "uuid": "d0725451-2105-490f-afdc-6c3b7a3642a2", "value": "li.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2857b39e-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347855, "uuid": "662da63d-0303-4fbc-8cc0-f9f2af33aae3", "comment": "Malware payload (Mirai)", "value": "5065dea87a3144261765379bcc3c4362", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347855, "uuid": "c2c38a91-969d-40cb-b2eb-58557d9f30b2", "comment": "Malware payload (Mirai)", "value": "20210115523791997854ae81fc86f8f82833fc6ac37d2f70bb6a352bd59a02b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347855, "uuid": "f313cb5c-a2cd-4bd1-8011-7c7bcf64a3ed", "comment": "Malware payload (Mirai)", "value": "2cbffbc74487e4c915c78658f1004a37bf3d4924", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347855, "uuid": "fda263bc-6c03-472b-8294-17d64bcf70ea", "comment": "Malware payload (Mirai)", "value": "513bd52beb148dc0c278485dab07aa408d42589e3330512d2f4d6f22248f12045c2d496b228e9ba8c24e86e5f9dd9690", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347855, "uuid": "cc553a29-953d-4576-aaa2-9fe69b73e38b", "value": "T127631985F9CB41F2C50B893495ABF23FCA31E4B981309B6DFF4EAF66D627701510225A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347855, "uuid": "380ac281-128f-4878-8225-e6ef6a5bb6f3", "value": "1536:WSONprqcIYVxuQqv/EWx/RpVtqhGLnltO+pjZNj2zQ8:WSIrqnYVxuQqvlpRpKhGXHjZNj8Q8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347855, "uuid": "15ef127a-349e-41f5-bf75-321e12da6a28", "value": 68640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347855, "uuid": "65eff9c6-75b3-427f-9a9c-6e1b74c7e90d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347855, "uuid": "f1653ef6-99b5-4a6f-a0ff-f89e7456fc91", "value": "Fantazy.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f63530-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320904, "uuid": "db7d8834-362d-4299-b9cd-6f0b2aeecf5e", "comment": "Malware payload (Mirai)", "value": "19a003e436c80d7dcb50db4146c717a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320904, "uuid": "55ea6dc4-7ce7-410c-a77d-50a03702bae9", "comment": "Malware payload (Mirai)", "value": "20404a23005bea405f88602dd8052f71ff2fc58fcb9b46694599de2a1503e7ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320904, "uuid": "042e4947-c646-4138-a807-bf8dbfcc2896", "comment": "Malware payload (Mirai)", "value": "07c2ad011fad2037554722ab8d52c85279ce3f44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320904, "uuid": "2e25e70f-8c36-4a27-bd16-9db4d7cad46e", "comment": "Malware payload (Mirai)", "value": "295dde662ac6e8d4ce01ab0c8e5c45cb4971c9c0e8f9c3486c1644f2db2af6808b5c1178aea6647310d53e0f13e4e076", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320904, "uuid": "050a04d8-bb2b-4a11-8df7-4d224f8416b8", "value": "T1B6F30A56F8819B11D5C111BAFE1E128E37131BBCE2DE72029D246F747B8A97B0E3B905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320904, "uuid": "b2d8584f-6b92-43cb-8544-a3ff8aa6c706", "value": "3072:8iZH539ozoUb6M3i2X+Mfjr/eaEWsm87duofGCa79NH1b:3ZH5fIs2XDfXGauFduZj79NV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320904, "uuid": "a3969ba5-3c10-4fca-95e1-176782eda9c2", "value": 160828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320904, "uuid": "de3bbeae-f984-4a9a-9699-d365a50e3337", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320904, "uuid": "76e8720a-a078-492f-983e-c624243f6dce", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa0511c6-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330034, "uuid": "371292fe-264d-4a17-a134-7b3183a06d30", "comment": "Malware payload (Mirai)", "value": "2bce6b909e160b5a7bd97ff719c45c8c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330034, "uuid": "f9e9bce1-f573-46f1-8c33-ced8247f173f", "comment": "Malware payload (Mirai)", "value": "206182c1a774d08c201d4d46eeb9b54888a61f8611c722ef16ebd19e14d737aa", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330034, "uuid": "d3dfb463-567b-4229-8651-9ab85b4c7458", "comment": "Malware payload (Mirai)", "value": "1db7bf0dae2fa6643e840d7d71b7acfbc87ca830", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330034, "uuid": "de77f15a-0286-46eb-8a82-6afd49c57a4c", "comment": "Malware payload (Mirai)", "value": "eae70751e0ca6492920db55acabdb3be062a90270d9c39641eb1a68cd0ba9c18144e1356cd4a495580494158f7c6921a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330034, "uuid": "d91ea646-a363-47ea-811d-ca6a067bb951", "value": "T13601ACCF10446D342DC845B93AD3541D58404AE236E4461DADDF857358C56187BBCE6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330034, "uuid": "8949242d-c0c9-4a77-b536-9cff138496d5", "value": "24:/iCZOi9k933v6gOTgO9k933v671k933v6gdgnk933v6XOSk933v67T79k933vXw:ZZTk92k9Wk9Ak9ok9Kk9Pw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330034, "uuid": "58b73036-b8f2-4107-96fb-2bb0bb13666f", "value": 831, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330034, "uuid": "331d983d-72ee-4af1-9a3b-37881546b04d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330034, "uuid": "9c63e97c-d1f6-45be-9e51-b5f1a0adce0d", "value": "f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "017afff4-de31-11f0-a129-42010a9c0007", "comment": "Malware payload (SilentCryptoMiner)", "timestamp": 1766296250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296250, "uuid": "b5a99f77-0690-4e18-973f-775d8ae23ebd", "comment": "Malware payload (SilentCryptoMiner)", "value": "662258a71a247cc5f3d0ea31009ce9a1", "object_relation": "md5", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#F3BFFC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296250, "uuid": "5fd590da-2811-438c-8cab-ec441e3a99ca", "comment": "Malware payload (SilentCryptoMiner)", "value": "21ef3d9d49fb149f8dde2ffe48f33d0772e6d7e3cc8f4cf7a26ad9c5a1847090", "object_relation": "sha256", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#F3BFFC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296250, "uuid": "d4ebd2d6-164b-411f-809e-e8031ed4aa15", "comment": "Malware payload (SilentCryptoMiner)", "value": "332f71963b41ecfb2ef18ab184bb8593a8d74d72", "object_relation": "sha1", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#F3BFFC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296250, "uuid": "41b39810-fc32-459a-9f74-358d68feaa91", "comment": "Malware payload (SilentCryptoMiner)", "value": "b5bc8622b6f788fbec93b061cae8aacc29039c6463b338bfe38011f8e3bc96449b3d0abf454a484f94074be399ced980", "object_relation": "sha3-384", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#F3BFFC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296250, "uuid": "08dd4d45-d63e-4cbc-8274-f33f3c2d50c2", "value": "T1F036F019E3D806A9D53BDB38CA629333D6B079524731D58F0A99D7052F33A909F3B722", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296250, "uuid": "35b8b6c1-03a0-493c-960d-0a6399790414", "value": "95de1cd7eecd16b9d38ba1ad174caf95", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296250, "uuid": "115288b8-bd4c-4b32-935d-ec9f1fc2d761", "value": "98304:hl/AAjXGcxEYP/1nfEtl2dEK6+LEyCoYYYLF:hloIGcxEYP/11dH6+gyZYrL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766296250, "uuid": "75a3264f-d7de-4da6-a975-e3252ed1d124", "value": 5090304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766296250, "uuid": "9c019d37-776b-42db-9ec7-beaaf8e5ed44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296250, "uuid": "c9f0d600-c476-4268-8fde-b9192dfb7d22", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c7d41d-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766346462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346462, "uuid": "03a52249-4987-4116-b9ba-f30957493a0e", "comment": "Malware payload (Mirai)", "value": "969989a98fec8161ab08f1be6516b513", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346462, "uuid": "27d26c4f-2135-439b-b773-aec259e73045", "comment": "Malware payload (Mirai)", "value": "2456bf7a98548815bafbef9d222db657346554aa828678cd5fbc1bea85133a14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346462, "uuid": "c5535b7d-4dc1-488a-9ff7-bcf25a0b227e", "comment": "Malware payload (Mirai)", "value": "b9f7e780b043b972a6e845676704ad2075264311", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346462, "uuid": "7f28e059-2413-4854-b793-bc18feee3aa2", "comment": "Malware payload (Mirai)", "value": "4a7f501b8b80249b38256a6563e072efc136cb4e08b9b05539b44f78070065a2e8dcd5bff11719880c1cc28e82e6cc0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346462, "uuid": "d8d5490f-a9e9-44f1-ada1-01d92fe6e351", "value": "T1AD535A41B3184943E5571CB1793F2BD1D3DE9EA022A4A386794EFA8D4272F32850BDDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346462, "uuid": "b6fc293f-f065-41eb-8682-60700fcad326", "value": "1536:6QxNI5ZFUg9GcnX3ouvLS9Uqecr32X6T2bVR7d:wFUg9/nX3E9RV3T2zd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346462, "uuid": "8b3be523-d74c-4c28-af3b-6bd36b2b51e5", "value": 61388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346462, "uuid": "18305c20-a718-4e4b-84b8-c85e88065e6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346462, "uuid": "b7973756-1b84-4d37-be5e-8a39aa2a0e62", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "302cf13d-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347868, "uuid": "1f1ba2b5-59fb-4c98-9f4e-8a39933989b9", "comment": "Malware payload (Mirai)", "value": "42ae9e7eb20ddc78d94fe8dd25f93c5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347868, "uuid": "ca0f8861-1e4a-461d-ab86-223ef783dc47", "comment": "Malware payload (Mirai)", "value": "24fa840c0db6518933652a90c063da8e90d3a902cb8beabc3b369efc7d97bdd8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347868, "uuid": "2424f793-b1e2-4c57-b114-bc82b86b6676", "comment": "Malware payload (Mirai)", "value": "90d4ba9922d356cd3dbdcd9fcbdb512d2f623902", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347868, "uuid": "4c2d5fe5-2d17-4bf4-9819-f4c3c7e1de8b", "comment": "Malware payload (Mirai)", "value": "8ea4ddda9edf49676533101c9379a9213ec84edf6007113f5dd51374f8c383a7c344696b1bcde46a3c58dbcdc580ca80", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347868, "uuid": "c845e32a-4c31-4167-b7b8-d2306a668f7c", "value": "T1DED3C021E4005DD1EC2129F538BA96BC0350EE700BDE5586EFFDE95E747BD9438AE2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347868, "uuid": "2eb71091-1e21-4b8e-93cb-cc7865ac7832", "value": "3072:vniYYJiJAgidCSB1VtE6g6Ujq+srM7ALZtN/xI:viBFCSB1DcmjrM78Zru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347868, "uuid": "6fad0c0c-033f-46ca-a5bd-1f1f7d91d848", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347868, "uuid": "77de5604-cf6b-4532-8be4-147cbb3d8f84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347868, "uuid": "603425fe-93e6-45ed-a13e-11e979b496b6", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586b2593-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345359, "uuid": "8887ee67-4b35-49d2-bac1-676422f722c8", "comment": "Malware payload (Mirai)", "value": "dd410b5654b4045142a7d39de27e2107", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345359, "uuid": "8cf4fb48-a9b3-46bb-bb23-c764ceebbbc0", "comment": "Malware payload (Mirai)", "value": "25909af8dab6595f8982de4491ce46ce66961a89d7457d0cce97d60155a616d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345359, "uuid": "8c7379c7-783b-4f38-a40d-e97848d086d8", "comment": "Malware payload (Mirai)", "value": "17903ffb46fbec35fe30a80061786d5bbd4e8522", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345359, "uuid": "8b375d71-53d8-4421-b426-c9465afc664b", "comment": "Malware payload (Mirai)", "value": "5b19d98d29f92b7dc23b23ca7d1c9b5f375b49c64afca95ed640335d1bea5b520a71b0f254f76cfd6f903339e2e0268c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345359, "uuid": "5abe860c-d07e-4880-95fb-a012b655b2c9", "value": "T1DD73022B419F0AB3C1E99D3370077B30AFB8E057E8F12B05F8116045AA1DDB76294A7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345359, "uuid": "8371e60d-529c-4099-a102-dca016c9750c", "value": "1536:LOlDJ9nqHLw+ZQeuFvQfPbYGiNw7VI/rW0wvnEJ3gzE94e/ohd05TorH:Spn40+ZsvaTYbeO/VwP/zE99/ohq5TSH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345359, "uuid": "ccc62091-aac4-487c-af64-9d5c985a1f9b", "value": 74740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345359, "uuid": "cb7802b0-d8bd-4168-8d44-376e31b496ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345359, "uuid": "bee695d0-d889-4125-a66b-8ff9dc494184", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bbde8b1-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329151, "uuid": "9e890d14-8de6-40c9-bbd1-d0ff0142965d", "comment": "Malware payload (Mirai)", "value": "9904d563744d640e23ae80fed2ce971a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329151, "uuid": "4bb797b6-1003-4d44-83fb-663ae0be5796", "comment": "Malware payload (Mirai)", "value": "25a2c814906be024c199462ba2b97e6f7b718621ff363ebce50343c435ef7e36", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329151, "uuid": "7ac35467-1cfa-4901-9b6b-8d8917979c85", "comment": "Malware payload (Mirai)", "value": "b56e6f5ee1b3468ad6439ce92e57dd481a9e3746", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329151, "uuid": "08e8e31c-295a-4f09-abca-ba3a0d3fec11", "comment": "Malware payload (Mirai)", "value": "59f5ed8394db77cf87471768531a9564b40075431740a1f5a6e9ca1766db1e58a583af6fc02e17ae3e9f14d11fd90300", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329151, "uuid": "30c12b32-e5e5-478a-8478-ab928d28f461", "value": "T1153172C618C11B3E8DC895263792603D60682DC52F3A1EE8ACDB58D6B684BD2B318D5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329151, "uuid": "358bae26-e1f8-45bc-82a8-d9e31363a0a2", "value": "24:5QEBvw01dgeBFBv60hO74TtqBvTm30Tb91BvG0y1Blcci7EByTvNAUs8bgOrQtqq:Oovw03B7v60hTcvu01LvG00lcs0KUsuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329151, "uuid": "5523626f-98ee-4353-95c7-8d6ed22ad11e", "value": 1454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329151, "uuid": "97a3d5ab-5f4a-40af-b05d-d7a83803f0d3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329151, "uuid": "fadffd3b-4fa5-4530-b542-73c823194376", "value": "wget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5fb72f5-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295721, "uuid": "4f78d22c-bf15-4620-beb4-4a3d487a7a13", "comment": "Malware payload (Mirai)", "value": "b43ed3527a707c81d92d75165aa7dc10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295721, "uuid": "484583c6-7a1a-452f-b82d-887481144e33", "comment": "Malware payload (Mirai)", "value": "25d009b54cc805f0e3f69e011da81239bfb6422877c1574d62e0fbc988eab49a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295721, "uuid": "113da47c-8e9f-4cdf-8338-f7a35c475faa", "comment": "Malware payload (Mirai)", "value": "8c597b92b6d6abc934989152351ee2dc81f1bdd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295721, "uuid": "6815b5b2-3541-4867-92ee-e6fba801c87d", "comment": "Malware payload (Mirai)", "value": "33893530929f93b09ffff22a3be39573e8840a63837623b5493de5f0fb96548c4870e7fdc6379639a771bba05a3ef3ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295721, "uuid": "e82f27b0-fc02-402c-9bce-7eaac0df7647", "value": "T121D3065AB8819F25C5D626BEFA4F519E332317F8E3EE7203DD141B2036C691B0E7A512", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295721, "uuid": "d598d1b6-0490-47ba-9a6c-e6264eaa179c", "value": "3072:PdMCXqtcd7z2oaUhtPZCLOkk0mKXIIL2dn3kvabEZbZO+gezC/S7gkPxn53B:PiCXqtcd32oaUXPZCLOVnKTy3kvabEZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295721, "uuid": "009963d2-faf2-4822-99eb-082e644d139b", "value": 140788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295721, "uuid": "b3036f1b-daac-4eb4-ac6e-39d9491ca687", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295721, "uuid": "41eff095-7700-462a-8b06-7e443c12b638", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d9fb870-de33-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766297291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297291, "uuid": "358b090b-4d56-43a1-94dd-a392387b465a", "comment": "Malware payload", "value": "bd3c83f9c6e1cd8078372e8ebbb29b59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297291, "uuid": "0e59b2b7-271b-4315-9bc3-39de1f2bc23a", "comment": "Malware payload", "value": "25f528c64b08f744661e0a347d6f8152fa9b76e2f62f42c2351539186cc1dcde", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297291, "uuid": "ab2144ea-437d-40b9-86e0-be5a49a8d61f", "comment": "Malware payload", "value": "cf6fc095c9e14c8c4a7149cff8a55a9fafba7421", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297291, "uuid": "f4c843dc-50bb-47c1-b6bf-39bf8be7b5b8", "comment": "Malware payload", "value": "2066ceda28353fcdeb4b9214ec28f5dd9885ce86968447ff777aee4c271958dd3c7d4d17845f9200078ca59c211d6570", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297291, "uuid": "9bf291d0-1ecf-45df-979b-a1e688bd7d4b", "value": "T19D34839AAFA03EFFD85ECC334195DB0A119C994912847FB62A74E114B79B10E9DC3C9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297291, "uuid": "15849152-9cb1-432b-b11d-34085ba960bc", "value": "6144:40liRq6w66AAnuRtttOt9yT/I8HtuZBhK65HhoVeL1k50BC+knW5FXKK:4uxO0g7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297291, "uuid": "fa40e9c2-f29a-40ce-9bb4-8980ae29ed80", "value": 239932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297291, "uuid": "c7940966-5681-4c59-9db0-b5f29f4819b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297291, "uuid": "0151e502-d9dc-4fb4-b135-c85223a00324", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6265a9e0-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345376, "uuid": "9864299a-e7ba-44af-bd22-17b1cd97899c", "comment": "Malware payload (Mirai)", "value": "13721c8237df20dc28d8f95dde3ada66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345376, "uuid": "0acb68b6-3316-418c-931f-06ab217498aa", "comment": "Malware payload (Mirai)", "value": "2685f3d9afbcb738bf037f896b7dde927551b526951005edfe98bd001c6204b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345376, "uuid": "3df313a4-ca74-41ad-a628-4efb559ae94c", "comment": "Malware payload (Mirai)", "value": "4f95326b2cf97ac216594c0d5f7cc8ffeb9b60dd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345376, "uuid": "cae765fd-3df7-4efb-9de3-fc310347f0b1", "comment": "Malware payload (Mirai)", "value": "e7676ab10bbba54a9a651f1f2e491bd721efe7ddd6be6c7433b615903238313fefe26476b9a6272a2a530093e024c797", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345376, "uuid": "ba72c748-ae7c-4635-b66b-a89faad51064", "value": "T1C0146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345376, "uuid": "a411abd1-ce7a-41ba-b214-2dc0126f6572", "value": "6144:zNROm5155gL6mTX7zRR1Lwt8Al7IKTtf:XgLnLzt0ll7I6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345376, "uuid": "de169c61-adf9-4199-91b9-8dc6da0eb957", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345376, "uuid": "bb1e94fe-fffb-43f6-8bc6-29986211237b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345376, "uuid": "b6755146-6d38-48f4-ae1c-61926864feee", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e82898d3-de6c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766321978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321978, "uuid": "c156e053-7532-4242-b569-fcc4b40c4526", "comment": "Malware payload (Mirai)", "value": "379af5504b592e41bf3175895ddf6618", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321978, "uuid": "32246b84-91c9-4912-bfce-7fc91ea0c00f", "comment": "Malware payload (Mirai)", "value": "26870dec4c8376002f13ff54b4573c5e3d8fa5643e375b2614229528b18c7a89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321978, "uuid": "2d348068-fba1-4c3d-8802-59f0f52eb11f", "comment": "Malware payload (Mirai)", "value": "93eddbacca8bdbc47415371b40340a57307892c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321978, "uuid": "cddb4953-afe5-4dbf-b540-097eda9cd9a8", "comment": "Malware payload (Mirai)", "value": "2a2b0cd3c8f2adccc6cce3a3d8216c029ade05c7372081a9a1d433fe7ccb28759595d138c86881670d46b1dd592ac592", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321978, "uuid": "28fb027e-d678-485c-9b80-1dca42ac919e", "value": "T156E32A02B30C0A47D2632DF43A3F2BE193EFAAC121E4F645255FAB8A9171D325546ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321978, "uuid": "f1f9f57c-e0ea-4a4a-a4a9-b45fc82a8a2a", "value": "1536:Ww/TNGE4FaMnkWoxpuvA0ZtCUkUq9mx63gpS0cKYAqvAIYjGk9D2g13tFf+4Hw:dxikWoxc4YAy6sS7+Ikf+cw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766321978, "uuid": "85981b73-ee09-45ce-9033-4d6086446a61", "value": 150392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766321978, "uuid": "5fee3524-1fb7-4778-bbb1-feecc8760ccc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321978, "uuid": "4c2af509-7063-449f-aa4d-9d083f9dfe14", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a21bccce-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330021, "uuid": "7b5fd51c-6719-41bc-9454-828f79b09203", "comment": "Malware payload (Mirai)", "value": "e22522d68ebf00a7a8f0ed94a34f6f43", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330021, "uuid": "59902b1e-7842-460a-a758-2ffbeb0cb02d", "comment": "Malware payload (Mirai)", "value": "26dc4d420b8a47238edb0ed9e79369c69d346046dd92dff94041a89ea0463697", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330021, "uuid": "92227382-5108-44ba-b381-dd055544bf15", "comment": "Malware payload (Mirai)", "value": "b088fac79bb6748e74d280cb0aa3f53334e84e48", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330021, "uuid": "49375522-64ee-4d57-bc27-76a908ba1e6b", "comment": "Malware payload (Mirai)", "value": "0f22fe4a33b431621c80b41a08b3a67c575a7b94b6319036632994201dce79ea74e94e3d88310f9306b500229f2df585", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330021, "uuid": "b0236dad-9cc8-4437-85fc-5196f4b8696a", "value": "T10C11219F0D01AD91888CD4B93791900CF4C54FD91ABB4AA49E96027E94F46CE733CE29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330021, "uuid": "3a01d6f7-691d-463f-8f73-a12a240bfd1b", "value": "24:HO7XgHa7M51gHa7bgHa7wgHa7VHgHa7ggHa7JgHa78gHa7IgHa7ZgHa7bngHr:uDqawjqaHqasqaVqaUqaVqagqakqa9q/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330021, "uuid": "db1c5c73-82cc-4a51-a266-5f393c6338a2", "value": 1049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330021, "uuid": "d26a3884-43d1-4692-9427-ffcb9f6fce75", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330021, "uuid": "ce44ec1a-f3f9-4875-bc6c-553bd13e637b", "value": "cnr", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40956bb6-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309671, "uuid": "5e1a9154-300a-4497-8bdd-2645a7363fa2", "comment": "Malware payload (Gafgyt)", "value": "98271e63c36b93470aec0c43e2a27b28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309671, "uuid": "b2ab548e-08cf-4f3a-b3a4-c3138813ac1a", "comment": "Malware payload (Gafgyt)", "value": "277fb17e3281b112a2cc50d7bc4f7ccc4f898b5289532bd894fab254d7d055c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309671, "uuid": "2761b249-d01a-4aa4-ab0e-114f1063d964", "comment": "Malware payload (Gafgyt)", "value": "ba85640a740ddc70f29e90d24eef92b528a79895", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309671, "uuid": "52d402de-e60b-4f6e-8d2f-89a1a548b562", "comment": "Malware payload (Gafgyt)", "value": "0287d7be5ca85a61565ce7e3724e4a6bbac42341d08f14ca26d06b664b8e7ff9b8465c84aa5c5a02255344b4ab0175f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309671, "uuid": "532f2176-206a-4406-a8d1-8c3c3bb4dc29", "value": "T14AD3C8176B508FB3D81FDD3706AA460120CDE55A16E87B6BB6B4C91CE78B84F09E3D84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309671, "uuid": "8bd74122-05c2-4813-a69a-5ca8f9f336a9", "value": "1536:fY04jeT933INp17Osky8ZWqIX0Fbsbmo8iuHat5h2ji7gUUxOCfF3xuhmqY1fqj5:QS3wkVICJOt5h2mmfF3xemqY1fuBmvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309671, "uuid": "d7432b20-8f3b-4544-b23b-2bc784def0d6", "value": 137917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309671, "uuid": "d1a92e2a-c055-4483-9748-f63905c11553", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309671, "uuid": "4b646888-431c-4682-8453-632a540c3f61", "value": "yakuza.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57579b4f-de29-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766292958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766292958, "uuid": "d19b7e7b-1335-43d9-b1d7-d16e91c41157", "comment": "Malware payload (Mirai)", "value": "827b47d3f4f3eb00680de499aadaf71b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766292958, "uuid": "7ac8dff3-62fc-45b7-9a19-7796231a55d3", "comment": "Malware payload (Mirai)", "value": "2794c486f5b0e4d425491b85f24311210c3d821f797ae8c74b1f65ae8ac2cf2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766292958, "uuid": "ee69b7d6-8f72-4648-baa6-5a38feb41cd0", "comment": "Malware payload (Mirai)", "value": "4d1ebde6aa917d18d4c424375149729f6d593687", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766292958, "uuid": "f70165bf-da43-4d9b-b628-bbf43ba868cf", "comment": "Malware payload (Mirai)", "value": "8d6f0fd416855966d88ea237ebb49d7bf4cde0663bcbc616b23e5406f0fb330aa01023a97af09179392c9c4385b643a7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766292958, "uuid": "cc2b7dbe-b427-4b3e-a26a-c339c3254349", "value": "T1E0042945EA404B13C0D627B9F6DF42453333AB9497EB73069528ABB43F8679E4F22A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766292958, "uuid": "9d6fb3bd-816c-4043-9114-247cb2f2e8f9", "value": "3072:OLe6vh1ZQIvuCeeuaMuTuRez43IVILdZQy38YhTfYo+M/RgDlplLn:ee6vhEIv1ruaMuTuReErLd738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766292958, "uuid": "186de817-3f52-4890-8e20-c9ef7de57716", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766292958, "uuid": "f9c2a1e2-6b68-4e1b-8c79-bf5d722be03f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766292958, "uuid": "4edf220d-ba12-42e0-a2d5-e28e879e5196", "value": "main_arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4795a65d-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341036, "uuid": "8ce63fd9-b309-4713-8d7e-66ea7bfd0c4d", "comment": "Malware payload (Mirai)", "value": "cd0834582614b03f7efc504229ea16a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341036, "uuid": "4b0d78fd-239d-45f7-9e19-25b1807e5290", "comment": "Malware payload (Mirai)", "value": "27ab3c095b97a2206d5d0af1db0a53a623c906623df762432944cb08d15b19b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341036, "uuid": "c3b3d631-bf01-4ca1-9c86-9a5d853edd24", "comment": "Malware payload (Mirai)", "value": "f59b9e661b21705ff3cadacd109ded39f77c35f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341036, "uuid": "6e65cb45-6f38-4750-87df-c6dea61560af", "comment": "Malware payload (Mirai)", "value": "9882eb23128ae85ecbb4357ef97d5c6f28fba085faade9bb2d2a7fe4d04d03eb415c26aff0205efd406a37899596be8a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341036, "uuid": "c5be2fdd-98ef-4c16-9b08-0fb9d181456a", "value": "T11183E749BBA14EFBD86FCD3705BD4B45359C924722A83B7A3670D418F24A14F4AD38B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341036, "uuid": "8ae53748-72d4-4346-a1f4-470d7f54e8ed", "value": "1536:0QPuXrnBGpUYlvgN8cp2oRhJtDJEat4zX+7h/T2bVR:0tXFGST2+7lT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341036, "uuid": "5af2a6e1-eb29-46d2-b716-2e328d847bd4", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341036, "uuid": "858eb2c4-8912-42db-917b-b7162f9044cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341036, "uuid": "f83c66ee-d765-497e-9bbd-bc647a49bd79", "value": "nabmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812227e4-dec2-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766358742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358742, "uuid": "3de25594-fbce-4ffa-8787-56772f683773", "comment": "Malware payload", "value": "0e1cec3acf23ef12c38abc43a74b5083", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358742, "uuid": "b2d5722a-a8b6-40e0-ac77-c874173c3171", "comment": "Malware payload", "value": "27d1bf648ae648d9320e6850f7773b32dbfed15fbc78b4a16d4ea23fd2a6d31c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358742, "uuid": "1768048f-785d-422b-96b3-d33a421f43e9", "comment": "Malware payload", "value": "2d57a192cfeaa86e9c0fc05b677fdb43ede84273", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358742, "uuid": "55722f81-8e7a-4c3e-ba08-04743f440f1f", "comment": "Malware payload", "value": "411b7f7794d3a01af568a1b026e26afbb98377626b9b7876d2b9791c030ee1053d6ff8e683bc70d565cfdc59b32d7c15", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358742, "uuid": "fea6d665-57dc-4f3f-8f9c-9ad88ce1e2df", "value": "T151255B76212C1C95D19A61F7C98BB6F43BB235B16A4672CCF01477B90F6223AAF77801", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358742, "uuid": "ce636c89-563e-4d3e-b262-8ca126aa8ace", "value": "4b122f70b43bf30c0b2124bb0a03de04", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358742, "uuid": "948f8a86-e3fc-4d36-bce5-70ee4b8830e1", "value": "24576:hdQwLbKxyzd3oAKQsYzjRbuk8SSdPWeLOg/JdSEfqEVUwFrGy:jy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766358742, "uuid": "e2c03d3f-0cec-400c-8246-d3e63c22c837", "value": 990208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766358742, "uuid": "b61fa10a-8b68-42d4-a169-3fbf2a504145", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358742, "uuid": "b223e598-9a77-47f2-845b-9d346170e4eb", "value": "msys-crypto-3.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "945e6ba1-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329138, "uuid": "09ee2119-7fd7-4ff9-bad6-36401cc880ea", "comment": "Malware payload (Mirai)", "value": "ebb994e35d57c0498c60dc00afc8b7b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329138, "uuid": "2648548e-917a-4167-8e7b-2f52a52dc8bb", "comment": "Malware payload (Mirai)", "value": "285507dbd998e7e3a3f87da1b1b7a458563c2675ac279ebc3a70694dc9a61654", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329138, "uuid": "0c91d788-a18c-4af5-a696-ff881ef4a558", "comment": "Malware payload (Mirai)", "value": "337a5a2c01c60b448772fca8a10d021125535043", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329138, "uuid": "bacd2a77-5d50-417f-961f-59481d142331", "comment": "Malware payload (Mirai)", "value": "b5cc252ddce764483cd0b8aa6692871446e4d018bad4016f4c897f42626c3fa5026c89863933035ec769901f75924236", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329138, "uuid": "a71aaca4-af95-4ea1-a001-584a73805fe4", "value": "T141334ACAEE43D5F7E9180C70146B9B775672E53604B4EFC2EB58A831B813312B60A39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329138, "uuid": "748c65e7-bb55-4ada-9e56-9565b0dacc8b", "value": "1536:CnT8zzl5rb+6cMzsx0dXn6szxmrFysRR+:CnT8ProMzs6d3T1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329138, "uuid": "5fdb4a21-2cbe-4981-8851-efe1ecb8ff29", "value": 54768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329138, "uuid": "3df7f5f2-ec3f-4447-922f-3fe6385085ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329138, "uuid": "ddb75089-c98c-4692-b0d8-070a9868260d", "value": "nabx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "174e7656-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329788, "uuid": "e1847279-99fa-4c46-8068-9eb2344dabab", "comment": "Malware payload (Mirai)", "value": "84dd56e920d221a25a41f0e25fbd213d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329788, "uuid": "a238df74-d191-4817-b932-4164c440f4ea", "comment": "Malware payload (Mirai)", "value": "2928a4694f399990791e7d0c00cb21c7fe852654df493d541097b7ce85815ec5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329788, "uuid": "0b272775-9a90-4da8-8471-daf400ae1024", "comment": "Malware payload (Mirai)", "value": "09f584c00b8be3e949439e611eae44b154547c77", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329788, "uuid": "8f41a903-7cf8-44a5-bb75-8da85dd9e881", "comment": "Malware payload (Mirai)", "value": "df1694569cf4c2254dffe228dffe66c14ead848b12096850fd8ce497b18203364651de132afd77365bfb04bfc7b50a97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329788, "uuid": "08c930ad-00fa-47dd-acb4-6da56d453075", "value": "T18DA3D61A6E119F7DF76CC23587B78E31A75833D63AE0C685D16CE9005E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329788, "uuid": "60d08345-df67-4882-940a-6c39c9ab5b8f", "value": "1536:bZ7oil+L4kSkTGi4uOJw2W1XmX09UiK8yKm0yKKv9DQsA0sdKKhfEpNTlbVR9gc:Zog+zp4uOJx9X0I4xdz6pNTlP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329788, "uuid": "be61cbc7-d826-4576-879d-85baa6119952", "value": 105324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329788, "uuid": "87490ec9-8fb3-4371-b82d-d6df003aa70d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329788, "uuid": "83410d89-3bb5-4f32-a736-b11f68f6e8da", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93b44ee1-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766329137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329137, "uuid": "aee93cea-5ed7-47ef-a5f4-28d09d6e02e2", "comment": "Malware payload", "value": "aa7e32e7bf91766be0a5eada79046d71", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329137, "uuid": "dfa0a6dd-3ac7-4ac4-8bca-e84160989fd8", "comment": "Malware payload", "value": "29621280d8047da18117e4fcb6656c04138ef785b7a2be8dea1029fa12f16faf", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329137, "uuid": "731e18b5-0142-48aa-945f-63decd541ac8", "comment": "Malware payload", "value": "698db95d8158c43b6a8bc8c182c7af2ce609971c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329137, "uuid": "b9d57801-af1f-418c-a41f-de7f81e6c3c7", "comment": "Malware payload", "value": "1e785ac955fb48c4d9bef5ad0437b78e4a344d9051a6e6f5515010b717d25f6a63aeb6a55a2162a0b9128cc68cd25c91", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329137, "uuid": "76b0c7ed-e46d-499a-8024-7cead5cbcc4f", "value": "T173E0E51EC10C8FBFA416898E7FA839EC651E91581A8F1F14ADBC1D1A7485D685280022", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329137, "uuid": "626a66b8-30d4-4288-98de-410a69929b4d", "value": "12:/5949dJ3+77Uy4gZesFrFBEGgbu+yfuT+JF8EpASLye:ha9X+7OWrTBEGjTuyLpvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329137, "uuid": "eaa58fea-54ac-4f4e-80e8-8f3c779729fa", "value": 418, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329137, "uuid": "d11d5d6a-62b9-4913-8076-f6840d3ee261", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329137, "uuid": "960d7230-f900-4d4b-aa98-e01eb2cff455", "value": "sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d891726-de5f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766316162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316162, "uuid": "66ab9573-d770-4d32-920b-269d9b4d61c1", "comment": "Malware payload (Mirai)", "value": "ccd722def83b5a4800163a44fda07c13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316162, "uuid": "cbdf4660-dee8-46cb-8127-0c115e8bc901", "comment": "Malware payload (Mirai)", "value": "296b377852120be33fdaad750dbf4085311c3851c88f132e48f9d7e58d1c6a6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316162, "uuid": "32683c52-0eb4-4b6f-9fca-1048c5edc48a", "comment": "Malware payload (Mirai)", "value": "ac0d9396e738938cf3351fc45b6764319799c418", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316162, "uuid": "90bbf3c5-3af7-4950-87e1-c0b1050b9548", "comment": "Malware payload (Mirai)", "value": "8a2b92326569aaf772ca7e2454de72aad25b756daccae4724fa340f8932a6f171558da981374af12da444746c2231d7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316162, "uuid": "db9f4757-cf59-4bf9-9d66-791d8d5f0bd8", "value": "T177D36C22F57E492BC5C490B752F74736E1F2234920BC4A0E3D631E8DBF6565022A77AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316162, "uuid": "a3c08511-de47-4b4a-b6a0-860585d0e84b", "value": "3072:QeUJ99ngIo1EK3vSvOGQdhiP41H1DEZBnTeh3xNt8njgA:HP/38n8A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316162, "uuid": "67879d3b-8d80-438e-9ffc-047295d07f68", "value": 130024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316162, "uuid": "41206f06-6ebc-4c3e-b4f0-692025a1308a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316162, "uuid": "0f82f111-649c-4be1-af6b-6db24607a196", "value": "rondo.sparc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c47119-de9f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766343662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343662, "uuid": "493b1163-7738-4ea9-a4c0-c34cf7898541", "comment": "Malware payload (Mirai)", "value": "ba5b2ee431eb39b99acfe6b02cdf8f3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343662, "uuid": "edcf889a-d8aa-43a6-b301-120ee918d6cc", "comment": "Malware payload (Mirai)", "value": "29c628726f5974504ad1b4bd5d88a6d34382e2e579ae362cee25d6ee76aa6fc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343662, "uuid": "19fd3ac2-da7d-491e-a368-5c7ee930870c", "comment": "Malware payload (Mirai)", "value": "ee2035f2866dc514e8bd21db7b5bf53e699a21d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343662, "uuid": "8661358b-3a4f-454e-b984-02b6ce3bc11d", "comment": "Malware payload (Mirai)", "value": "b5db41ab09e4bd95fd863ba7da79c3c2796de6b2e50c0c4c8228ffc61fbd46e5bbd5f4c7aac82de95c0e87699f7d2287", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343662, "uuid": "46522dc4-8364-4198-a782-e55ab3120ae4", "value": "T1AE531802395C4A5FDEA26B70182F07F087BEE6B045F0B9C6251F2A964371E76144BF9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343662, "uuid": "eea847d6-7094-4afd-ac64-3c24d0ed980d", "value": "1536:jQWr7JpUYu4EN7BXpkG3OWMyDCSyex/qJEd:jQ4oYuhXpkGUyuSy2/q2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343662, "uuid": "b28f7b89-1032-4546-a49a-8c4103cd8eec", "value": 66476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343662, "uuid": "c4602ec0-3f97-45f8-8be2-db108597a396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343662, "uuid": "b923deea-0f20-41e5-8fb5-23311cbf089c", "value": "shadow.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d375c3-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330080, "uuid": "a96f558b-4e21-47c5-bdcd-9333c200cc64", "comment": "Malware payload (Mirai)", "value": "1e22af2cfd226674c24cff450d5d9acd", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330080, "uuid": "ef1c009c-6dcc-451d-9a6a-2bd7557c86bd", "comment": "Malware payload (Mirai)", "value": "29d23ce570c0a01a779615a73d3c2f1887816cd7ad54f80815abec15e56b55d4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330080, "uuid": "4a82af9b-ed21-471b-abb1-750eccb7e645", "comment": "Malware payload (Mirai)", "value": "b31f3c5c4ffaf17b42fa2c8cbe8b74fa75882752", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330080, "uuid": "f92ab880-7db3-4353-a30a-3b6b2c556656", "comment": "Malware payload (Mirai)", "value": "46607e05e8b6ec04ccef550f60af3b02269e4237489b0d87cc37bc0e8068d7a0fb5b0058ec3074222d8fbfe0381d6859", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330080, "uuid": "dbf89a86-6376-4800-bc9c-c91e4602465e", "value": "T1251151DE0201ED90888CD43977D1800DB4C18FDA59BB0BB82E9601BE14F06CE7338E2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330080, "uuid": "3c7c3246-5a07-405b-8345-12e95ff5f649", "value": "24:k7zJOa7M5tJOa7nJOa7EJOa7VDJOa7UJOa7BJOa7wJOa7sJOa7xJOa7bjJOf:kEawkagaTa6a7a6avaLaiaof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330080, "uuid": "51282ed4-b1a1-435e-9201-031efab7f35e", "value": 1028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330080, "uuid": "d3f6c2c3-5b96-4d2a-b9cc-70f0f72e21e0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330080, "uuid": "0d4f24c5-6aa4-4704-b107-082535a6dea9", "value": "weed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44621587-deae-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766350050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350050, "uuid": "8125c73f-641a-4a10-b0f3-7f6170c4a68f", "comment": "Malware payload", "value": "6c4b197bf70bc977c222618d7f00ca7f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350050, "uuid": "fe14b0a3-7b7b-43ed-91af-5020717e951c", "comment": "Malware payload", "value": "2af5b20be78d166ff38cd23466548334f767fa22a58620dd049975ac1288caf6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350050, "uuid": "6c770cd1-13cf-4442-bcd6-8c22dc7c58d0", "comment": "Malware payload", "value": "a07a72176d8333a4d505d63dc50e162cdc12c530", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350050, "uuid": "f39f7438-c8f9-42b2-addb-b89735a9b01f", "comment": "Malware payload", "value": "e9faf19d9b608c0c95d565cd6cca7f50ee4dbe37c0cb7490047a9afadb3082cabd460c9ab579cf7df686475d306bc0b0", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350050, "uuid": "ed391388-e287-4f1c-84bf-97f845ea723b", "value": "T168544B4977A440F4D8A79139CDA39A46E7B2B859077193CF03A443B95F2B7D09E3E322", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350050, "uuid": "43c6b4de-28ab-49bf-82ea-71d808eea248", "value": "b31da0971f03ad8d978723cd8ca7b5a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350050, "uuid": "9c2c504d-c9d6-4935-ae94-c5530b8fd7dc", "value": "6144:xRpTgCXrYSpHJ+4htNtbhFF1eTTi42xaLplTiM+jwJO:xjXFN9hFApcM+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766350050, "uuid": "6f6ad8f2-b17a-48d1-bf79-489e00f72d8d", "value": 296448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766350050, "uuid": "12cb1de7-e321-4e5c-8dcf-3d8c05f1542b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350050, "uuid": "fee8913b-b7a7-4410-9005-2cefad142b15", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a30fe0b-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329148, "uuid": "4ae974d7-65bf-485e-bb4a-1a37c55b087f", "comment": "Malware payload (Mirai)", "value": "0bdf3f96a62345167944b9a2a661ea64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329148, "uuid": "8956dbc8-bdfe-4c32-a4b5-ce9e8d615ce0", "comment": "Malware payload (Mirai)", "value": "2b25aae8bf6c9c97e0734d1907823521add6a11e6a54a2c6a525f745a48548f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329148, "uuid": "092a3884-0fed-438a-9d6a-13b1903e34b4", "comment": "Malware payload (Mirai)", "value": "8ba54544c560711f6a3810585fa30fa91683fe83", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329148, "uuid": "fd4f061a-25af-43a4-9fef-ea8c094b6b42", "comment": "Malware payload (Mirai)", "value": "916db049335edfb416857206209727e9e8708e2eeaecb894f31da075e20604af6ec3af9be17a524aaa3d152835c15121", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329148, "uuid": "09cba218-57f1-4ed6-847e-ee4e0ab2b634", "value": "T17E434AC4F143E9F5E85301741026EF37AF72F2EA115CDD93D3A9EA226C92A12E446D8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329148, "uuid": "c986ca42-856b-44a0-b695-18d12150473f", "value": "768:FmnthEsW5qnF15RY1dhPe7oXTmcZDj5gk9vWnTI4eBH+4sToQLDLFv:Yn/EsW5qhSh6amqlWnU4GH+dNLt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329148, "uuid": "82d8f51d-9b47-4682-a5d1-2a5a08f674e9", "value": 55348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329148, "uuid": "4c486e0a-0eeb-4e43-b6bb-6a353dc32a94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329148, "uuid": "333b1076-6156-4423-9265-6fbdf429de9d", "value": "uYtea.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd6e22d-de3d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766301690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301690, "uuid": "9a065039-9796-452c-bafe-a53d828ab85f", "comment": "Malware payload (Mirai)", "value": "87da0bdbd41d68038df3049919bd2cc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301690, "uuid": "5e3a245f-d65f-4bb3-a727-9df53f8c96c5", "comment": "Malware payload (Mirai)", "value": "2b84ee15e57c62eb1290ce93a70baa65f7bc397a5688db0eab69b93967c6de71", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301690, "uuid": "aa3a2545-bb23-4ffb-aa33-bcb353d262dc", "comment": "Malware payload (Mirai)", "value": "7c19819653d099fdefafc95c379fc8687e14b36e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301690, "uuid": "63f4a60a-fb1e-4d83-bec5-f9bb0f9eb940", "comment": "Malware payload (Mirai)", "value": "ce7260f1fba23883ffe7d83347a674d1f0050ad7a1975cfbfe2d46cb11b2b45a62c5b7408f042d21844a925937b56c77", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301690, "uuid": "88c48340-a353-4a08-b91c-5afe9f1663c0", "value": "T10E631AC5FC01DA7DF88ED77B44530909B631A39156930F3ADA5AB9B3BC711A80A62F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301690, "uuid": "0f41c3f4-615f-4883-aeb7-6ce3509edd37", "value": "1536:CbQsY/yumkotN/1dRe8wMxviiG2bAnsJLvPBlYdUqrEE3hZ:dsY/RoT/1dRAINb4sJ4TrEE3hZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766301690, "uuid": "f4cd9afb-63ef-4ec3-9e9d-d06d95308eca", "value": 71620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766301690, "uuid": "9d309137-455c-4afe-a7cb-62415e6e4143", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301690, "uuid": "09614c90-a1a2-4483-8676-7f7714482e1c", "value": "sdxkzX_UXA229x.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d2a850c-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329126, "uuid": "e77aef15-fe69-4b7a-9835-1be25445a13c", "comment": "Malware payload (Mirai)", "value": "8cad0290807929225945ade2d842ebd3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329126, "uuid": "d0bda558-0de4-451e-a80f-340a1a7b3949", "comment": "Malware payload (Mirai)", "value": "2bfd2b77e688b4b2c2f5493c1efc14a7974f23a0210a6c59c29e549c711a88d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329126, "uuid": "03d9dd2f-85ac-4f41-a4b4-861a52738781", "comment": "Malware payload (Mirai)", "value": "bba19ddb652154e9e6bae8444243dbfc34fae82d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329126, "uuid": "7b59ca1a-0538-433d-a4df-4e2e0daa1a96", "comment": "Malware payload (Mirai)", "value": "03040514ab981eee669b2d226342be64db65e2f4e32fd07db54a182bef93058e590e641911f1bc74cf317b9d1c1b681b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329126, "uuid": "2c392ffd-318d-4aaa-b067-4914428858e6", "value": "T1D0636BC5E943F9F5EC6D193020B7E77E9A31F5350038FA87E751AD26B812A41F60A29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329126, "uuid": "07ec7b29-71e0-4d66-888c-d97cd425d42c", "value": "1536:Ko7uVqemGcpUIdpQjYfFXzRsI06sLfzPyQ2JlxoD8QaRR:Ko7aqemRpFdiEfYImLfjhOPw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329126, "uuid": "5c649320-8f0e-4889-bf58-e089df0f51c5", "value": 67184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329126, "uuid": "8bf86b22-8f9c-4e7f-9e84-65f178cba18e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329126, "uuid": "4f56e041-5166-46dd-b94b-0f3e0752c7df", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad8d3d2-dea0-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766344101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344101, "uuid": "87a4cd9e-2027-413e-afed-154fb0d442cf", "comment": "Malware payload", "value": "d5868b01468a5031bf39eac9a6aafd0e", "object_relation": "md5", "Tag": [ { "name": "DiscordRAT", "colour": "#9126ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344101, "uuid": "eb82a0e3-f1ca-4c37-8f76-7519f06435f8", "comment": "Malware payload", "value": "2c105c535af48b11d568fb1e718ab172c0346937fd96b3b8039aaaf617edcf8d", "object_relation": "sha256", "Tag": [ { "name": "DiscordRAT", "colour": "#9126ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344101, "uuid": "17ff5be8-a78e-4b35-a613-2c0c23c9a654", "comment": "Malware payload", "value": "4e2eb4d05ec24ef8c845211e5314195b9ffae9ae", "object_relation": "sha1", "Tag": [ { "name": "DiscordRAT", "colour": "#9126ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344101, "uuid": "fb3c4811-68d7-4d16-8fa2-852d3ae3b83c", "comment": "Malware payload", "value": "ffd81a8c1d71d6aac31f0548ce6849fe2087917e1a362a92858684b32b0e68dafb20054ec65b0552991a2140025c94f4", "object_relation": "sha3-384", "Tag": [ { "name": "DiscordRAT", "colour": "#9126ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344101, "uuid": "75220f7e-da7e-4664-95fe-c48f94e0143b", "value": "T1E9765B26A3B901E8E0B7C13CC6975717FEB234494374ABDB4691865A2F23BE45E3E350", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344101, "uuid": "56cf384e-471f-46d3-bbf6-806a7cf9d6d4", "value": "b6975074671a523df01ea50de51ba204", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344101, "uuid": "77d0f3aa-323b-4b37-bd44-00b58aeac220", "value": "98304:dt635ALm5O/Awvmz1jMJgG70CT7hAj/KTXs:a35q/vvmz1jMJgG70qhpXs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344101, "uuid": "ecec03eb-bc8e-4d04-a34b-9a9935aa982d", "value": 7258112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344101, "uuid": "f4db5bbf-f961-4e39-b739-eef6f713b833", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344101, "uuid": "e3e9a223-b326-46f3-9643-727221bab9a0", "value": "2c105c535af48b11d568fb1e718ab172c0346937fd96b3b8039aaaf617edcf8d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95435de1-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329140, "uuid": "9552bb45-e525-4663-9311-96714dcc8ec5", "comment": "Malware payload (Mirai)", "value": "304d8d61bf11a07d021a671bd15809bd", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329140, "uuid": "c377019a-4aee-4c84-abb5-1a7199364ce2", "comment": "Malware payload (Mirai)", "value": "2c8f2975a25eea099feb8866cbc6aeec7eae102030efb1d7e05b5529179b6306", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329140, "uuid": "70f586c8-6324-4280-b44d-9f45980c34a6", "comment": "Malware payload (Mirai)", "value": "8f0ecd9c0924b2b1ba130d3f8190ba427b4643a1", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329140, "uuid": "abfbd194-ad96-4803-b5cf-d519539971cb", "comment": "Malware payload (Mirai)", "value": "8dd990b202875e9365c87a55f509d9a06ae9d3f793a5e989c6a6d1fa677b131465df50a19d05633647bee95122bc2d2c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329140, "uuid": "289d609b-1810-4e19-80ce-baf8522e8943", "value": "T1923184C51C811B3FDEC8992777A2607D206828C63F3A2DD4E8DB5CD6B6947C2B71892D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329140, "uuid": "e6ae7dfd-c807-43b2-be5d-0d4d67a13aa5", "value": "24:ewEBvw01CDBFBv60hN7YTtqBvTm30TAd1BvG0xVBlczibEByTvNAUs8AgOMtqBVV:dovw0+B7v60hGcvu0ULvG0Rlcp0KUsGO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329140, "uuid": "7eb7a8dc-7f7e-4ebe-bf51-4b6306c0a10c", "value": 1455, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329140, "uuid": "a78a5b6b-5d93-4e7d-afa3-335e63544fd0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329140, "uuid": "43e8fdbf-22ff-44d0-98af-fd185c7e13ee", "value": "curl.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bb3759d-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309689, "uuid": "b3edb032-da44-4776-80b9-fc12568824fb", "comment": "Malware payload (Gafgyt)", "value": "f8ffcd43fd6da2e519e77efeca1b4c44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309689, "uuid": "d5fb5374-1587-40cb-a509-25f4d8c0c97f", "comment": "Malware payload (Gafgyt)", "value": "2e76ed1f52a4d497b611b1c88aa19130394de534c9b59fd34c61a29211ffb58e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309689, "uuid": "accc81e2-317d-4eae-a144-a08049238905", "comment": "Malware payload (Gafgyt)", "value": "4743aa2ca9f78b54f5b3818d59da93ab2324352f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309689, "uuid": "e97c1ee8-7a0f-4d6d-ba6e-ddfb613c0d1b", "comment": "Malware payload (Gafgyt)", "value": "aeab8d175c70870cefce80c8d060647e0cc72e1344167eff34697766bfdf847e6a14b9e31595d0186ff01e71b02939cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309689, "uuid": "65efc37a-e29d-470c-96c8-cfad85ffa4db", "value": "T1C9B30905F9404B23C6D26BBBF79B43CD77366658A7D7330196297EB02BC17982E3A160", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309689, "uuid": "8ca41446-7766-4cd4-b1fe-0b97a0fe015a", "value": "3072:tqDUOulvQ+nozmLC9povt8XWd5h8ObyRdfroeBBp7YHQQ/hVOmAD3m:wpoEWd5h8ObyJ7YHQQ/hVOmAD3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309689, "uuid": "98e7b0f5-be26-4cfd-9883-2b52c14bdd60", "value": 116040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309689, "uuid": "16903676-c355-4aa5-aa1d-e7a6fee7cfef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309689, "uuid": "cf6c9e0e-7b54-4370-9a2f-90530c6ecd18", "value": "yakuza.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90fe656c-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342447, "uuid": "b9faa47c-0511-48f5-a87e-a651e1313235", "comment": "Malware payload (Mirai)", "value": "0461ba045e96aaa70708c83d86a18999", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342447, "uuid": "adc8b7a7-b4ff-4bb4-9d05-67e3b1e667c6", "comment": "Malware payload (Mirai)", "value": "2f5a2f3a9853061e89102a0d41e6027c3e9cc94d7a2d4ee91663e17768cee255", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342447, "uuid": "06cda8de-cc09-4e39-9f1b-198782fec084", "comment": "Malware payload (Mirai)", "value": "fd11bfc8a0d54a1b10895de0ae7f7ba7fb6cbe9a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342447, "uuid": "1753cae7-47ea-4766-9214-92e128e7e250", "comment": "Malware payload (Mirai)", "value": "d3ebb066e0f9ea4beb5fbed8322b9b0644d97aa7f174af6394b1ced4d7605bf2df87bc393114d979ca2aeda887bf444c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342447, "uuid": "0a97899d-97df-416a-a4ab-0fb28a04bc54", "value": "T1E563E91E2E258FACF369C73547B78A31979833863BE0C685D15CE6012EB024D645FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342447, "uuid": "ea9b9056-da98-4bb8-85a5-d0aa4c1390a6", "value": "1536:V13xwE3ISFndmXi4iScVQqRapHWpFwWppskyzv9wuKATo7:7qEYQndm9iScVQqNyD9zKATc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342447, "uuid": "393edb85-a160-42d4-83c3-ea3b26105074", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342447, "uuid": "27391a2a-c28f-47db-a42c-319ed3b9c255", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342447, "uuid": "9af8dfb1-91a6-41ab-ba9a-146a20de527b", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ccdf31-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330077, "uuid": "db6c9363-48c5-4852-a3f2-17728e6df8cd", "comment": "Malware payload (Mirai)", "value": "029f8d6404c1b8bb8552534466682a43", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330077, "uuid": "8e3daac7-a96e-42c9-bbe5-f2a57bd8f746", "comment": "Malware payload (Mirai)", "value": "2f7909e29f5f7710d7946d852ef417e5f6175c8f51b58fdcfb640076fa60b58c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330077, "uuid": "96692349-d48e-42b1-93b7-67eb1a1baf0f", "comment": "Malware payload (Mirai)", "value": "49c1986ebe80694317414e9deb6c7cc5df8e5398", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330077, "uuid": "49e4fe90-6164-4f7a-a85f-9bd89dbcf133", "comment": "Malware payload (Mirai)", "value": "9b90434cb2c8569d69384223318bd692abe0d282811ab876926c7b71b726b0a5a31955c3c8497090dcbf66216137baa8", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330077, "uuid": "ed9bdcb6-87ce-42f6-a56b-420cb06172da", "value": "T11EC0C9AE00197981C088AF647565305EE684465A26360744EAC930A2FC8E611A728E60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330077, "uuid": "fb74fb54-141c-4e2d-a782-bd37de3c4927", "value": "3:L08NDhVZVb8ZBBFSa+TSJarjKPJVtOVR3VZVCOdFSa5T69/KO:LdDhVb+2f+PJVtkVxMKO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330077, "uuid": "00b6b523-4a91-4c9c-a069-d7da58929f5d", "value": 184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330077, "uuid": "f5c16f9c-9975-463f-916f-0c0e961db45b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330077, "uuid": "2369028e-2a6b-4459-9ea3-2fd8d3edbdb6", "value": "skidb.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1690d563-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329786, "uuid": "801b24c9-e870-4afe-b7f4-9eb80a5db10c", "comment": "Malware payload (Mirai)", "value": "a96b489ac8543b38a1944289842c5e80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329786, "uuid": "b4f3cf73-8c92-4667-8724-b1c0cb872ebc", "comment": "Malware payload (Mirai)", "value": "304d7276739586d1e96043b3072de244acb2e0b28859423bce39be936fed0bdc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329786, "uuid": "003d0028-f732-4616-b271-85fe2f81ef69", "comment": "Malware payload (Mirai)", "value": "19224c3278d6349630f9eaf6752ca6b4fb1fcf36", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329786, "uuid": "b33b5a8e-a36e-4b19-a6e9-e0bc5002b421", "comment": "Malware payload (Mirai)", "value": "5a0e99d0277368cb809df0ecd720481dbcaa68e53a73f05284bdf1b3f7e4b025b094eec083b31718218bf7ee6ae45828", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329786, "uuid": "f6a34f15-9d35-4051-98f4-ea9e6d1680d1", "value": "T153530986F891DA12C6D5A17BFF5F82DC371603A8D2EF73039914AB24364B86B0E3B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329786, "uuid": "d10c221b-8b4a-474b-a54d-b6ecbfce1dc9", "value": "768:6nLyv07eyiAM39MMuniEKMCDwonc1YqBTNKH7QEUDkzuZp1cCJP+lkgMtMrvETlP:6LyqBjhKMCM1YfH0tuq1OfZrvETlbVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329786, "uuid": "4f5213eb-c7f2-462a-96d7-962cf4e134c5", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329786, "uuid": "6353ce8d-0026-43a8-bb09-006a59a5fda8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329786, "uuid": "fa92e6da-c99a-469a-b004-145d6a4539d5", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e308df23-deab-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766349027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349027, "uuid": "8b432dbe-9e8f-49fe-85e7-e2ca874e3103", "comment": "Malware payload (Mirai)", "value": "ae2ab0d4a9fd58196878fb8ac435c411", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349027, "uuid": "5c61093c-f977-4c10-8e37-0b8cf8f8cc08", "comment": "Malware payload (Mirai)", "value": "306c63a8c029968e12ab027615c3ed5529e4452a806f98587a92a58b453cec01", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349027, "uuid": "fdab3f6b-f8b0-4b76-ba18-bd8417267659", "comment": "Malware payload (Mirai)", "value": "0ccee7bcd1a916006af06100900d3c227ba32571", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349027, "uuid": "f7d3a151-b65c-4ebd-9295-5d9304b414b1", "comment": "Malware payload (Mirai)", "value": "b61bdce6815a9bc8f9dc7fc559c9c72d9d6d7a083c1f18843068b686f4c0404d94be41aee3605fb5300229371d81ec38", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349027, "uuid": "e1632001-1c3b-42ca-ba2c-7bb4ddbcc9b9", "value": "T168530797E500ED7DF84DD333844B1E01B524AB650E524B67B266FEE7E9350CC482BE8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349027, "uuid": "76a75a7e-2fea-4870-a9cd-a98cfbe38289", "value": "1536:k6EaA8QADHU0QakNBD838QrgAtA8RSX0La9a4Xk+ETPG:k6EKtr9ANNT8RZLa9aMzz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349027, "uuid": "621979f3-0e51-4dc0-bd05-6b90d0cc8ac3", "value": 64956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349027, "uuid": "d52bb7fb-7366-444f-b737-631ff5ba5346", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349027, "uuid": "4e6f095f-1676-4c29-ad25-ec4e8b3fa25b", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c8dc112-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345366, "uuid": "1506165d-7d03-42da-93c7-00fd183a255f", "comment": "Malware payload (Mirai)", "value": "9b4086dcabee94148b33721a02dc903c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345366, "uuid": "cd302223-66d6-4552-9456-9c1b9a2f40da", "comment": "Malware payload (Mirai)", "value": "30cb10fdbcd36738c1ba0f6bd78c3436ac05c47fa8cadd4acda9d71d6202670b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345366, "uuid": "237fdba0-45e9-4dff-a419-a9193e8d8899", "comment": "Malware payload (Mirai)", "value": "b1be232d6980b6943269b06f10d1004000506bd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345366, "uuid": "2d4fe4d0-f21c-4b40-ad14-cdee311f6bbd", "comment": "Malware payload (Mirai)", "value": "cf2680e8fc14767c66bba31f9b7f39ca53748e0de6316ea78cb5b77197a06de332c64509b3f49c9917c0e0d4143d4096", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345366, "uuid": "d3e2914b-3a12-45a0-a3af-6fe0a27d9ff5", "value": "T104C3E185BB6369D1C0A342BDA4C00AC387916E318BA317080699F774387DDFB1F69DE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345366, "uuid": "b85a7d39-1427-4495-89bc-79befe8159d3", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnr:0OCDjXG9qTWywxlxTnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345366, "uuid": "5f390e49-2d0f-44d5-b5fe-f250c88c7219", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345366, "uuid": "705d16c3-5e5c-40d6-a6f7-24ce3a8bddb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345366, "uuid": "ea6e35a3-ec55-405c-a35e-c15ab760fe92", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76b6bc5f-de0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766280985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280985, "uuid": "4f5d8618-8ff0-4855-84ee-e802f8b00983", "comment": "Malware payload (Stealc)", "value": "ddbad547dff32d47167ad070c3581752", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280985, "uuid": "c133277b-8831-49bb-ba40-b482b4542aa0", "comment": "Malware payload (Stealc)", "value": "311d6c2eb62e8cc02df535559b319eaa62f38e6061039bf2ba68aa205fafe6f6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280985, "uuid": "c510e3df-d79a-41dd-afb5-0eef96ff0bcd", "comment": "Malware payload (Stealc)", "value": "f2a54f7f464d3980ffa374a04f19a0fb8d2a3ee6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280985, "uuid": "f22bab13-b948-4ca3-8259-5f4f226f300c", "comment": "Malware payload (Stealc)", "value": "095e9196223b05ae95588981b965be60b87151f5942caa8a1e3a0de0610df2bcb6008932b4a554e4b8d60cd1419330cf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280985, "uuid": "b6d0c54e-32f3-499e-b8ef-62ffc0385027", "value": "T185357D1FB7A501F8D4B78278C9625946E776B4560770A7CF03E006A63F2B6A09F3E721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280985, "uuid": "3cb31277-f4a5-402e-a496-ec1dcf49188d", "value": "6e5b678b6d8244f4b2920ca2801b6b89", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280985, "uuid": "778c4c78-280a-470e-a469-f2f9f6fb7596", "value": "24576:60BnZCT+b2eMBThN9eiyVqlPjzU06z3j:DK+ziFPyVSzU7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766280985, "uuid": "720e93fc-6409-47fa-b505-8d538b2add9e", "value": 1157120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766280985, "uuid": "caeedd8a-9a33-47c2-a83f-0e831e869d32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280985, "uuid": "b553e341-0698-4be0-8995-dff080cf8ed8", "value": "SecuriteInfo.com.Trojan.Clipper.835.18587.26551", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "389aa318-de90-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766337145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337145, "uuid": "9874115c-9689-4abb-a29f-de75ad487f1c", "comment": "Malware payload", "value": "d4b0d2e5af951c8623db1a98a3c04b68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337145, "uuid": "49b49edf-2b50-4ef7-8d13-f02d9f7a57a9", "comment": "Malware payload", "value": "3139fbfb56398cef79dab94823b0ce9cc8a13d6f0a59cd60a2487e7c9a408e4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337145, "uuid": "99962707-f427-4fef-b358-1fce84fbe918", "comment": "Malware payload", "value": "ad281108a3f571a9e903200965d995e000f5fbcb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337145, "uuid": "f35c8afc-a300-45cb-9320-b91ad92ec9ca", "comment": "Malware payload", "value": "01d6b2425a57271655eaf52750446377566bdbbf394d3acb88589a9c26f9d56051717135eb5224ad17e3c1c5bae5d5c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337145, "uuid": "e975ed7e-590f-4f84-8f29-3211319f135f", "value": "T1FAF2825A5AE2DF2CF668D7341BF71A68E768A1C613E6C544C2ACD2102E503CE5C2FF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337145, "uuid": "825c951a-29f6-45fa-98f8-f65dddcd10ef", "value": "768:YOL3MOjPolQvpbH5gP2XfVzIQKqklFegWBERuONnpf+uSIILi:YkDFvpbRtYqklFRuOJpfFStu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766337145, "uuid": "aa6011ce-7d82-4197-a685-c53a6658acbc", "value": 36423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766337145, "uuid": "2e5f3b9a-4249-4280-9d48-d50e1f77da76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337145, "uuid": "eb094d29-e4ea-4252-a876-bae97a222d47", "value": ".kworker.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3099f1d7-de60-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766316516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316516, "uuid": "5dc62815-2145-4dfb-9606-c430951b86ad", "comment": "Malware payload", "value": "47ed52b9552aa9fbb1362ce3132fc2a3", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316516, "uuid": "2fb3513e-c6c4-44d7-b291-8d325e9c0c6b", "comment": "Malware payload", "value": "3230f1e944294c3acc4d3594ab5e6db269b76cc600478a1055e132976fba766f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316516, "uuid": "4b88e315-55d6-4724-8021-39cdb0253b0f", "comment": "Malware payload", "value": "9a5b24722f59e64f81aec8b3bd264a198970496a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316516, "uuid": "4828836b-9200-42a5-825d-b500757924ff", "comment": "Malware payload", "value": "8fc6c8323270419038626c68e5b5cc4b0ec2cdb8dc51ad3b60fe6bbf56dd416b43196cdb6682043fc3fea1690e2e6259", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316516, "uuid": "f0a942e5-8084-450d-840a-2442d600b498", "value": "T15321EDCE00115FF29B6F9F1CE3B7E8B4E017D1D2F6430A969A4B0825CC49B11BA05EC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316516, "uuid": "3d2f080e-b550-4a1e-a7f4-fe4e7c80dc88", "value": "12:oQVYmVCBgQVVmVvY5gQVjNimVjNNI1hHgQVLmVa6YgQV/rmVhy5gQVemVsbgQVaN:o2CCcNHNNIfAHyzCEdsq+NBNpdOx9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316516, "uuid": "09764694-a0c2-46bd-a915-5a2ecd8383dc", "value": 1241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316516, "uuid": "d299ecb6-beee-4753-b3ea-4b94b869c4d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316516, "uuid": "d42d9f2c-a2b8-4e2f-a090-23d4b8baee80", "value": "a.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "611e86ff-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345373, "uuid": "1eed93dd-3329-41a4-85f1-f099910e521e", "comment": "Malware payload (Mirai)", "value": "525db7ac81500e2e45cf3833c3c99c7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345373, "uuid": "e94f94cf-095e-48db-9cc1-347259157413", "comment": "Malware payload (Mirai)", "value": "3271064201ceabe146365ffec1befe6f3a23839635afc0e860cf6549622a557f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345373, "uuid": "06da36c3-e6e1-4206-bdd1-548280d8cfd7", "comment": "Malware payload (Mirai)", "value": "20d92fd6a9da75594b6a0ad587fe85e80e88d20f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345373, "uuid": "e016114a-2e45-4255-a518-f5665aa6f8f3", "comment": "Malware payload (Mirai)", "value": "12b3f9f09f72288a7cd02b0440d691eea9fc293cadc226a3d7f6723ccaf4a78e72c9435dc17cccca705cfa5122fadedf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345373, "uuid": "d5cd805f-e58e-4b86-a106-109575d68e24", "value": "T13B730271227ACEA2D272803363873D5D7D33886A037456BDBC79A72FF486A515C0C59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345373, "uuid": "2ed5e218-4831-44ea-9753-f04db7cd6e14", "value": "1536:a8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmD3UM53gora:hzRnwP0bMQ2RijvDZZ1rYGhG13tNgSa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345373, "uuid": "4d1c3c97-982e-4491-97ae-ad3992fea537", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345373, "uuid": "87eb00ad-7419-4669-9f6b-f62eaa08ccb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345373, "uuid": "5460471d-4565-4e70-ba72-2a539cabce78", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bc181d4-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347915, "uuid": "70115c6c-e1ad-42db-8a54-bc405ddd1844", "comment": "Malware payload (Mirai)", "value": "967485428cecb7cd3e2f02ac17cc6548", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347915, "uuid": "006f473d-8220-4bd6-98ac-9d20a9c4c164", "comment": "Malware payload (Mirai)", "value": "33963286c0ac4b729a4a3a647a746c649dd77bc9a31ab5399ddca72a732039fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347915, "uuid": "f8d3ec3e-11ad-4df9-a9c5-4ca5935d1e54", "comment": "Malware payload (Mirai)", "value": "fbd071186d5a3af719f1046d16e9c33a253c16c9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347915, "uuid": "c1729ed8-7e20-4b88-ba2e-96182d50f473", "comment": "Malware payload (Mirai)", "value": "9a2d84fe870345b031750054e5c6c5426085cb469c26e173fd51e62dbddef1a03de06804d92424799af0b8c802aaf9ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347915, "uuid": "949bb90b-933b-4b42-9154-8564f41a942e", "value": "T126145A15FB0C0463CA931CF48E3F0BFAA362199115F99111240D7F5A1A32DB7A68BFE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347915, "uuid": "4cb6142c-082f-4f3b-9ac8-ef1631597666", "value": "3072:iiJBG5yEgQyoCerYqF9Sx9KHRuc48qkQUa0:lJcEBToBrYqqmz45CZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347915, "uuid": "b896489c-d597-47fc-bb3c-1d9d9d5356db", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347915, "uuid": "79597e67-f038-45f0-bd80-10399a9031df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347915, "uuid": "37da0bcb-d407-4bea-92ce-3f8b040b035b", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a15f369d-de00-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766275473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275473, "uuid": "abf3b83f-10d2-4df6-8d5c-84bc26069d51", "comment": "Malware payload (Mirai)", "value": "20ab9d8ac64c25da264363cd69b86dba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275473, "uuid": "8a106ffe-282a-4f8e-9714-9b96774dbb2b", "comment": "Malware payload (Mirai)", "value": "34f7eab7f1e6e666f3f12e0d4e93ef611c655c4a16a5ed5ae842929bd3260de5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275473, "uuid": "0d37530a-0d15-4833-a244-6c36b6e18636", "comment": "Malware payload (Mirai)", "value": "3db319dca316123549a1f79c4b56ebf9a08576e6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275473, "uuid": "7700f39a-5df5-4175-9156-78a2d3b09e11", "comment": "Malware payload (Mirai)", "value": "3866f27f35b42deeeac129576e7daf5824d990f9d24a26254d51853e26915d96be6cfd9ce848662eb07aee78e66ffc54", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275473, "uuid": "f83a82ba-69d1-4ecc-9dbf-46a81496449d", "value": "T1DCF2D131D1909EC7FB2E9D103654A2C5A7BE2F0E13EF8516E26ADF416E5B2257C01CD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275473, "uuid": "31a08e66-544c-4a70-8654-40af23db9e00", "value": "768:YEf6GoE6fWAnotBehgV/sjaoo0gHbV/IvkhSGoC4uVcqgw09K:YEhoBPovehgV/PtHbVQv+xoC4u+qgw0I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766275473, "uuid": "bd840f2b-3fc1-43ee-9ced-6bd6e9d646de", "value": 35572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766275473, "uuid": "d543c2c0-8f09-4fb7-9e7f-c155dced0bae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275473, "uuid": "022acbd1-ca0c-49ee-8b76-0014acc89c47", "value": "sdxkzX_UXA229x.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ba88014-dead-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766349632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349632, "uuid": "25239955-d2c3-4738-ae66-e34e38af1255", "comment": "Malware payload", "value": "c1a542dd790db2abe2c1a7532afd110e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349632, "uuid": "0a1b3c15-95f7-4b01-bb5f-c2ea1c506584", "comment": "Malware payload", "value": "350d6352936431c8f28764b00cdafe67be57fdc2789230338e63bcc0d50d395a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349632, "uuid": "63b9f0f2-1148-4c6a-a588-fbd5ef03479e", "comment": "Malware payload", "value": "e7323e68e20424c53d2f7879051b1c7c23777e59", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349632, "uuid": "28430945-b9bb-482a-80c4-c102be27f188", "comment": "Malware payload", "value": "00249760d66179cc4616d8eb59a20259ef818319257546e2efe2f51ebbf4b62b229000b01f10798e2219cc4abfb62236", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349632, "uuid": "c173da14-ab40-4337-b5d1-223562773616", "value": "T106732A85B8819622C6D5627BFA2F42CD332613B8D2EF7207DD15AF24778682F0D3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349632, "uuid": "22fd904a-0462-44da-a0e1-d3959366df09", "value": "1536:ceLhS4Cts+eetmPZoWFfy6hJdKMSE7xbv5IV5vSTAbVR:ceLgT046hjKMSEdvyJSTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349632, "uuid": "0e3b1cc6-7d74-429c-96de-4efe0a0c8979", "value": 79040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349632, "uuid": "094ebf06-daf7-41b0-b8b7-c1caad5660d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349632, "uuid": "8ea49a37-4813-4a54-9953-e1f6574384ff", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7e8fee-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330038, "uuid": "66fa9ddc-0729-41db-8348-1d3871f697ff", "comment": "Malware payload (Mirai)", "value": "0d05bbad0f4cf1699419505764a2438c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330038, "uuid": "9e660eab-b7db-4154-b78b-d282a487d451", "comment": "Malware payload (Mirai)", "value": "36410af75071ed0d2d90a37243b317c8e0ab142a97dab3806e565013899e6485", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330038, "uuid": "c40ed907-9d5f-474a-9145-11cd4282df5b", "comment": "Malware payload (Mirai)", "value": "569d88a53da650cc92e857ec645c8026ae8c827a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330038, "uuid": "ad4e0e32-99d7-45bf-a2f5-c254f79a9d8c", "comment": "Malware payload (Mirai)", "value": "5d37ecd4f54ef9e69c710bac922bfaea4e010af8771071411a3ade844ce612934877bcb0e2a10ff0253f16cb3690575d", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330038, "uuid": "c7313ed3-7178-486f-bc17-ee264d879896", "value": "T15CC012EF20245585D0096E202075B4189542C58227700F0A9EC92067A48DA107708E21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330038, "uuid": "bd7483c2-4bc4-4ae4-a80f-eb651f788f56", "value": "3:LMFdVZVb8NBzSa+ANjaxE6cCgMFdVZVCONBzSabAp9CE:LMFdVbkPjkEZCgMFdVxJApwE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330038, "uuid": "88f49255-58bd-4c5f-a66c-86c6effc63b7", "value": 160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330038, "uuid": "30770dad-b4cb-4187-9425-5c55869d1fb6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330038, "uuid": "32dc55c2-d739-4e21-8629-f54e7ee07f78", "value": "nlte.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4066b5fc-de92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338017, "uuid": "f4c0377b-77fd-44c6-ac8f-8090ee9b0901", "comment": "Malware payload (Mirai)", "value": "bbc77f2e16e18d03aeedf6626f84c848", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338017, "uuid": "9e4acf86-141c-469e-8c87-586ec9bcc187", "comment": "Malware payload (Mirai)", "value": "377545f4a931fc0230a836f30589d203cafde72aa534da07e21fb9f8adef5a6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338017, "uuid": "253de314-5e5f-418c-8d86-a281f569774b", "comment": "Malware payload (Mirai)", "value": "359b68bda17d21befe9bd3f0f4fe1e0fc6306ffe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338017, "uuid": "580cd3ce-e88e-44b0-b6b8-335049a0a0a0", "comment": "Malware payload (Mirai)", "value": "abb4dce67aba41cbdb1345143d96884585088e1871bbed683ba40c163b4d5bf0839632cb709716e02c6b8001263f89b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338017, "uuid": "10b26c81-e8ed-47f1-a456-0fd52d894516", "value": "T1ED533AC46A02DAF5DC161170E07AFB7E46B6F63E0119EEAFD7D58466C4A3D12A70238C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338017, "uuid": "e16c8ff9-d048-4abf-addf-7b69f5be442e", "value": "1536:Mafu/uBXq0fdrsPv0a7UUevkegHav8/ZRy+Leth:MD/uBXq0fVsPvj77eMeMhRte", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338017, "uuid": "a883bff5-6bd9-4e1d-818f-67fa3c8dee4e", "value": 62044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338017, "uuid": "7366b8dc-9471-4ccc-b3b7-5aed4dade2e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338017, "uuid": "dbebfc20-eb09-456b-9991-98c6a88c2cf1", "value": "shadow.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd9be9e-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766360748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360748, "uuid": "73709383-130b-44e4-8b9c-38ad09838e7f", "comment": "Malware payload (Mirai)", "value": "46cf6d0890ef538150b497bc907181e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360748, "uuid": "9dcd7a82-2bdf-49ee-8781-e638a2b98bc6", "comment": "Malware payload (Mirai)", "value": "3813cfff18dfec74fc578e582ab44c6146019ba4ba7b3a5d7a711ae99963d362", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360748, "uuid": "277ef216-22e0-483f-9243-00b1cb31fa71", "comment": "Malware payload (Mirai)", "value": "6257ca66b9076c44b4ab9f77a56dc0f9bfe8e06d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360748, "uuid": "57605368-d10b-43b2-a18b-fff21f58e5c9", "comment": "Malware payload (Mirai)", "value": "93acefceb41ad9018e0a9894e471d65b6127aad09c6f27260b9404ac6aa8579f404a4e157638c75ca4bb6a84fb43715f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360748, "uuid": "298f1e68-f1e4-4766-ae7e-f695e3382ea4", "value": "T1F4535A41B3188943E5571DB1393F2BD5D3DE9AA022B4A387694EFA8D4272E32850BDDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360748, "uuid": "52be51d8-5523-41b1-ae54-139c24e50d57", "value": "768:rSkU4tdlScpjbTW5MuPcI5nIXhVTvkt9SDRmcjY/SjWnz7woT2bVRCv:r1kcpSGuPDmXjK9URmcjnWnNT2bVRCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766360748, "uuid": "31463e71-6eaa-46c5-b520-7c6dd5909f34", "value": 61380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766360748, "uuid": "d115325a-a155-41df-b63b-7db250816d72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360748, "uuid": "4928261f-c8c5-4c70-9ecc-7f8778ab57ba", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5601cc-de8d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766336002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336002, "uuid": "b1906065-b45b-41f4-b3eb-7022070e1417", "comment": "Malware payload (Mirai)", "value": "c3d0f5e3744989feb2d31af8daace62e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336002, "uuid": "9c1081dd-32f4-4026-83d7-ac9ad31e8b22", "comment": "Malware payload (Mirai)", "value": "386ad8b945683f00bc949a489fa69bc9e4c539a8b58197f43bc6554a4b89e8c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336002, "uuid": "66858ad7-d7f0-4dc7-8b12-74a3b4cc1b0f", "comment": "Malware payload (Mirai)", "value": "7f3fd1f42da624b383c960e421e415c0992db69d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336002, "uuid": "b2c0a705-6e15-48bc-85ca-296c6d92666c", "comment": "Malware payload (Mirai)", "value": "eff50006ac3863f605234bdef650f2f73589de4b2dbf82f06e8064a8fbd4a7c7d3084783d867920d7a27223aa48bb717", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336002, "uuid": "f78fb44c-50e2-4625-972a-346ea723df5e", "value": "T12F734A55BCD19A12C5C251BBFB1F828D771653E8D2DB3203F9256B6D378B92A0E3B140", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336002, "uuid": "0c8e8791-a4c9-4b89-8290-d4233fc15b6b", "value": "1536:a+q3jxfb0biNX6SaSGr57ACOh37bOq99e+u3KAsfk0fSSn0:iJqc6SlGrd0eq99e9KzlfX0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766336002, "uuid": "758d4954-b53e-4288-a6ba-6211c883bd9b", "value": 79344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766336002, "uuid": "80ac6a91-b188-468f-adf4-54b94126bac5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336002, "uuid": "92a1d8d0-462c-4afa-8338-9326c4ebaae2", "value": "99cm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d32d44f9-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295743, "uuid": "7918dd86-f4c7-42eb-a101-f7aeb08f72eb", "comment": "Malware payload (Mirai)", "value": "d86b29f19650501783b1f2a9da2821f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295743, "uuid": "6880e9cc-fe2f-4813-83b6-a9af12c18de6", "comment": "Malware payload (Mirai)", "value": "386d5e520fc254fcc9934149d17328e87b4cdb1051f95404c6d83154d7b9a961", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295743, "uuid": "921d4aae-1de5-428b-b491-4f6a4d04a4f3", "comment": "Malware payload (Mirai)", "value": "fe87e79655164636bb89235792d77ce22a1801b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295743, "uuid": "6bce9fb9-668f-44db-86fa-54405061b014", "comment": "Malware payload (Mirai)", "value": "4604eea5fd4bd3fb2ebe74936b9ceb3d696240b9c54a9bbb679e017f7747bd3b4dbed6fb79987ea0282f3dede3217c8e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295743, "uuid": "15ee6ee3-20e4-4517-afd4-36e8958e80ab", "value": "T126230791BC829A2BC2D41379F5BE998D3360B3E8D2CB3227CD614B107AC551F1C66FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295743, "uuid": "cf5bcf9b-f218-4ab0-9d90-bb6f0ded6b08", "value": "768:5PwCxmKFReSIn9ygAGxc02k8c6ZQ48PHAmWun/RWFQ/MmUB1mA2EDEy0eYjW9THc:5DmKF7Gxyk8cqoHAmWurAufsG5b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295743, "uuid": "a5976e92-50f8-4bfa-a6db-2fe10b79408c", "value": 47096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295743, "uuid": "6cd2208c-e0ae-4929-8bde-ad8dd1c9ced9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295743, "uuid": "e7a6fc87-5a35-480b-92cb-b17a8501b942", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbe750a4-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330064, "uuid": "1796f096-6529-4361-8255-1b855bea547d", "comment": "Malware payload (Mirai)", "value": "b1625829a15c525935f7a47960eb8f81", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330064, "uuid": "801a1145-9962-4bc5-8eb9-6c680442f6e4", "comment": "Malware payload (Mirai)", "value": "38864964f9e352fcaa8663495fcaca4dba59ab8e8fa2e24b933e769e6b24fb3d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330064, "uuid": "fdef6514-4625-4e50-90ce-249884c02894", "comment": "Malware payload (Mirai)", "value": "aac7f7f0fded5d08a2f6e15acd2da6d426116527", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330064, "uuid": "b0fe8342-4ee6-4c2c-a254-fe986272de9d", "comment": "Malware payload (Mirai)", "value": "6f016e989f8e788c18a9915f0c2d51d5f0f7a16647cd129941a9a8f7a5ddb79f1d3202a88c31b867685dce4331c79c33", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330064, "uuid": "55e404e6-dda2-471c-a04f-f45609e0ac73", "value": "T1DE11829F2820BE00807C59747267C41EB85287D429B51B68BED6813F94C46107B2DFB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330064, "uuid": "fdd9d986-74d0-422d-87b8-ed3a4f497115", "value": "12:eOrkvAkM/k36jkMOBQkm1k/2dkjDCkM/k3DRcg:eUk4k4kUkMYQkkk8kSkkkqg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330064, "uuid": "8363780d-2df0-42f4-9cc3-4625f756edba", "value": 860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330064, "uuid": "304d5c93-70a8-45dc-a8f5-5dfb9c2b4f5f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330064, "uuid": "c9d83621-e984-4284-b9de-f83241a2826e", "value": "sdt", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0146cf73-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320731, "uuid": "7992c4b7-4995-42ea-94dc-76b59888c4b8", "comment": "Malware payload (Mirai)", "value": "ea43641d0748b324c76711400585f67c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320731, "uuid": "0681818d-f561-44e7-842f-7b08fa29ee40", "comment": "Malware payload (Mirai)", "value": "39ae1d6ead0aa89ba346a499a189eb4f584780e2a11cc54a54a0d74771822620", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320731, "uuid": "d777e1a8-82a6-4168-a86d-b81eef905e84", "comment": "Malware payload (Mirai)", "value": "c95dfb51eab41606d2ff786d5e8837f3245ac057", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320731, "uuid": "390861a5-c329-4218-a44b-01f749d37367", "comment": "Malware payload (Mirai)", "value": "fb78d54929ffd11738b9ed08a9f06aabea0cb80c3e317503ecebe51664c5f5c0259d68f971f4d0f962cc7285dbeb1bbf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320731, "uuid": "586640fc-e469-4533-adfb-ab3e1fb75522", "value": "T1F373D65AA9828503C4D506BBBA1E11AD331627A8F3DE3312CD305F24778AF6B0F77A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320731, "uuid": "1733fe6c-ac22-4262-ad7b-7e5eb709d8d4", "value": "1536:NJnhfyRCcBimkqDw/JprAQLk17BwFZxsuCbvAGJExL0IHip8gvViyv:pWCxZWQLk17BwFiMGEgvViy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320731, "uuid": "97b91e13-ed2b-4a81-b110-a44d08bc6f36", "value": 79856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320731, "uuid": "7446720a-ddb5-467d-8a05-cd90e06e63be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320731, "uuid": "18709c22-0e94-4646-8d9e-9147f0545335", "value": "shadow.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b36cc5d6-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "bc02bd74-ed0e-4650-bf9c-b5f31085c283", "comment": "Malware payload", "value": "9fd324787a0ed10010fa03e9353f1ccc", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "d5ea8b88-3c45-4ae8-8dec-36085d198056", "comment": "Malware payload", "value": "3a8317be0c4dab2827ee76a917a3f096d53bb458c09dc7401e9f0ca5f7e5f321", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "8cfb691e-5fdf-4e5b-b8cc-339187fb1eba", "comment": "Malware payload", "value": "e6c219eb0607e5068c60a9993ac2e369c7d483e5", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "602800fc-26e9-4af0-ba10-621244f41e47", "comment": "Malware payload", "value": "54c2fd6e717cd0acf579f96f7760258ed0442d7631ccb7db24d996c01dd2d672c690a49668f4256cba71920b3c7dcf6f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "cdbd5d2d-ab14-43d5-89f5-37fca56300f6", "value": "T1E2015ECA4A207A198079AD1C22F3D4783411C0DB17A76F9CEF8D543D84CD9AC7D29B69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "927c9a88-8fbd-4e04-a8b3-ea8ab9ce0b05", "value": "24:KXUE/6nErKHsEcyjYE27EDVQGkE0hx/E6LEfV:KUEinErAsEpjYE27EDVQGkE0hx/E6LEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330050, "uuid": "97516873-d0ca-42fb-aba1-c67f6de82306", "value": 792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330050, "uuid": "3b4a6ab3-1109-419e-8b09-e61ad081f338", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "f76ae7fd-6594-434d-97bd-ede9543abee6", "value": "seagate.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3eba795-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309515, "uuid": "4c051073-8b52-4ae6-9452-bc997788c70c", "comment": "Malware payload (Mirai)", "value": "acc43355b35ad7be679d9354fcdff7ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309515, "uuid": "dfbae156-c77a-4919-93d1-2798823d81c8", "comment": "Malware payload (Mirai)", "value": "3aa49139e20a3c086c832c1de2af96e5b4a55173e95b526d5dd64b0f79f9ca62", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309515, "uuid": "23022bf7-62fd-40e4-afed-a9d04593f09c", "comment": "Malware payload (Mirai)", "value": "0a8d74cb61108a1ec98f2f18e4f69183576a8183", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309515, "uuid": "b95cb803-3d40-4a3a-ab14-714e8975baf5", "comment": "Malware payload (Mirai)", "value": "f8497cbf97adc368922b1a52db7ed7946033c87dcc2282a165101b8548ef40ad2096ef8ec0a1c2d7fccbceec7642bdea", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309515, "uuid": "eb14cca3-9963-4de1-b480-2239c0f6a96e", "value": "T106511CDC29951F336482FF8DF9F16A99700BD8C414D2D97CAD9E05FAC27C58A7C20526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309515, "uuid": "3a2ae129-ab2f-48df-a2f4-9a175107570f", "value": "24:z5EMy0MB8EZE1OqKXRCfX3LUo/eUgHsgHAvcEcqKXeNTh3iqX4OlbJ1/KXea4jKx:z56P6jihHbHA7CK7Jj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309515, "uuid": "d4652e11-0519-4629-9f3b-7e62b382e7da", "value": 2503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309515, "uuid": "1be6f7ab-ed1f-4938-ae38-d7de4ddf3b5d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309515, "uuid": "950e921e-02cf-45a2-92a7-a353d479fd0e", "value": "massload", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4f05610-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341273, "uuid": "96bf913f-8efe-46ad-ae6a-f99f99660cb8", "comment": "Malware payload (Mirai)", "value": "090120f69d7a3ff360af2bb87df4bd5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341273, "uuid": "75f3ff90-2062-45ad-881b-95fb25bac7d8", "comment": "Malware payload (Mirai)", "value": "3ab893ae65329ee7ff8661fefe951fba70f05ee92f86abdd5e1aa65acd83f0a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341273, "uuid": "5ddc17d4-7511-4a2e-94a4-a805a3231c6f", "comment": "Malware payload (Mirai)", "value": "bc2dc7c10c338a4c5eb52540ba60847c267c7e2a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341273, "uuid": "f3603f61-65ba-4733-9575-f895a236af72", "comment": "Malware payload (Mirai)", "value": "a384bf6c65c0bd652814922b591e3f0ba9421f91b1de4756581308ec1bed3decdc03ba7179d7bb49b8c2298ac22a1568", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341273, "uuid": "88e83563-6c5f-4111-a8c3-033a14d0056e", "value": "T18C734AC59753DCF5E826053115B3E7739E72F13A1068EEC3E795B933BC52211A60A2AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341273, "uuid": "d6929ca2-6025-41f4-9f06-78077109c209", "value": "1536:yDdS05V8pCL1UicDkCzVX4JGn6ihCw3LFkl/gIO5PxtU/9XRR:yDdSw8UBzcDki4Jc5LF4/riJ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341273, "uuid": "322fb40c-a8d0-4890-8a7b-2a2fdc21823a", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341273, "uuid": "e4cdebc7-1114-4de3-b8ea-131b73a0fbb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341273, "uuid": "5868abc3-1b7b-4422-ac8c-b16549037acf", "value": "jklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46063c82-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347905, "uuid": "ef68d67c-49e6-4a14-a865-2967582418d3", "comment": "Malware payload (Mirai)", "value": "00ba3961aaffa6ed4383eba067e05e56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347905, "uuid": "c0e61658-f02f-40fc-b87b-bc01fbaa709e", "comment": "Malware payload (Mirai)", "value": "3bff12a909416b7ecdc2049f4fbcc359e8eb7647db5f5561247ac0eb4a5d7836", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347905, "uuid": "489b2dca-1437-4b1d-a48d-596f06bed6cd", "comment": "Malware payload (Mirai)", "value": "3a321815a69b5748db82e620dbbb4e826b665f34", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347905, "uuid": "ad04520e-00d4-4b49-abbc-2d19e1ae0be8", "comment": "Malware payload (Mirai)", "value": "414bf56e207c0875dbcd2d92a65aa16a9559cf5704e0144f271ec012b7f3e93f67636bf7df822912c6422f1e22e75fc5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347905, "uuid": "d58aa7d4-f443-4806-825e-eec42ce9d498", "value": "T146C35B82E6A2D0F1E28701B00557F3E68935EA305416CED6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347905, "uuid": "9a74593d-8d27-4c74-84ba-152d7c828f61", "value": "3072:46tYsnDNjmN1VGQAjZMrRgSryQVroWgioF6:TnDNjmN1VGyVrUioU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347905, "uuid": "663f8e39-b634-4185-8e25-cd3cec8960b9", "value": 119376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347905, "uuid": "3106972a-b4d7-4a8b-844c-a96382c32545", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347905, "uuid": "c159205d-2430-43d6-9d19-1a89036a279a", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02a0b715-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329753, "uuid": "cc7943fb-c298-4afc-ad6e-138e6f1050cf", "comment": "Malware payload (Mirai)", "value": "e973fff23095f90ded38e34b260eb2fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329753, "uuid": "08b435de-600a-488e-9b3b-c12d5a137236", "comment": "Malware payload (Mirai)", "value": "3cd8a62933ca2ee92f4a556c9d59ae1679070eec6343b38d6ef6f75cf5190ced", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329753, "uuid": "a59cc17d-c9fb-43dc-a7f7-2d25fbc0b706", "comment": "Malware payload (Mirai)", "value": "416c08d519a986b3614f74afe97a01e279eac51e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329753, "uuid": "13e0d224-6d32-46f7-8ffa-641abf4efeb8", "comment": "Malware payload (Mirai)", "value": "4f8a207d782135e25f0802ff54311b5265c29b56652742ffb5a77514271fdfbd047f363ce0bef9cace870b0792e10a00", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329753, "uuid": "db990b4f-8edc-4a20-81b5-b8c968e2fb86", "value": "T17DA3D60A7B651FFBDC5FCD370AB95B45258D960621E82B393A74D818F24B24F0AE3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329753, "uuid": "056fb43e-4a3e-4539-a46b-e012ae60b90f", "value": "1536:Ihhwoc9Rh4KGSltrA74n1v4zn2MFAajzxnK3Ym8v1HzhKYYTlbVR:I4DhLGSvy8v4jjfKHTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329753, "uuid": "df763427-5da1-4447-8b63-a0b0fe5ec528", "value": 106204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329753, "uuid": "8b985da1-0a9e-4cb5-9753-10a709edec64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329753, "uuid": "12151eed-0a48-4a8a-a309-a20cdcab4cc3", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99169b5e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330005, "uuid": "b0e7f37c-3019-4848-ba2f-08974344cf54", "comment": "Malware payload (Mirai)", "value": "82ecb362a979f374fddf8771136a3992", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330005, "uuid": "e23cf8b1-9d78-42e7-b673-5148818371bd", "comment": "Malware payload (Mirai)", "value": "3d8e03513e2690598b5b7c67840f828a431c4957c479bc6f77b3578e5e5326d4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330005, "uuid": "b3233ec2-e013-4bde-ad99-faefaa55b821", "comment": "Malware payload (Mirai)", "value": "116fcab2b7b7285e1e37447ea5ed4a29ee79549f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330005, "uuid": "9dcbb529-617b-4589-b631-192c1761d8a7", "comment": "Malware payload (Mirai)", "value": "32007fc4b7e20e1d9611daed83c681b595ce9d3abfc7791d450cbca952a4c533c1bf9e80a2f23dd49b20f8d56e35cd6a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330005, "uuid": "449e4a96-3c68-452e-b4d7-5d0ea91f4577", "value": "T1A8E08CAF2033CF03811C8E7066BA30733430CAE00A18096CBFD2807B84C8A10B3BCE66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330005, "uuid": "e613b008-416f-448c-ae28-0ec99fbd1c12", "value": "6:L6VQauNFg6VcjLKAFg6VeaLU+rFg6VcfiD1g:e3yFd0tFdMaLBrFdGOg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330005, "uuid": "6889e5b5-7d85-4366-b533-1b6f99321a64", "value": 303, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330005, "uuid": "216fe97b-892a-4b28-9fed-2cd602803b3d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330005, "uuid": "7bde7933-ec19-4416-b7ba-349522c407ba", "value": "brick.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15df8e7e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329785, "uuid": "09963f53-8ba3-46f1-9c58-f92262326545", "comment": "Malware payload (Mirai)", "value": "e4bec685bbf29a53cd2616ee787ba181", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329785, "uuid": "f4600e52-15dc-4b16-bd59-4131a366e6cf", "comment": "Malware payload (Mirai)", "value": "3dd45858083a326da734a9697b80642764b3fd8d5327ed4a9bd473f4acb756b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329785, "uuid": "892d0d9c-d6cb-4a5b-9636-f860ae1f7221", "comment": "Malware payload (Mirai)", "value": "8d0677979e99dfbd50b5c4a49322f015561d7fb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329785, "uuid": "d23cf1ad-104b-471c-b6ac-23f040bd0fff", "comment": "Malware payload (Mirai)", "value": "77e156125a71dcd67a514ac3633717b3a138a6fe33ef40d313551261fb6a65767522e5238c04633f3074dc12a03f8b3c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329785, "uuid": "9ef470d6-dfc2-4820-90ae-5258922f93a3", "value": "T184833C87E000CDBDFD4AE6B684570F00B528B3515FD20F27F66AFE9769710988D29E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329785, "uuid": "778be5f2-cdc8-426a-9e1d-1a536ade8068", "value": "1536:cluMPcHKhsNEdPkSV3Ue1jntdh4hxFb8Q1OqMRkXnH2V/IrzIOB/tTP4:cluMHCNES+rhntH4RlOoXnWV/IrltW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329785, "uuid": "9cf06bce-b50b-4f26-aede-2f1f01d149ea", "value": 83040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329785, "uuid": "9931917f-7671-495c-b6f6-7df7545d9651", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329785, "uuid": "b3f88289-acbd-49d2-bbe5-6aca9fc04236", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d43450b-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341501, "uuid": "81111692-8192-4ef1-9544-3b80279b1319", "comment": "Malware payload (Mirai)", "value": "6e21d163d504842faac942dcfd70b326", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341501, "uuid": "12255b0c-4dd3-420a-9d30-4058716b48d7", "comment": "Malware payload (Mirai)", "value": "3e085e67f63cb2f3f9bf4782f1e3ec0d299aeb97f1e5b273896869cc7921925d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341501, "uuid": "093ca4d8-b7e4-428c-b31a-db0a4a74bc11", "comment": "Malware payload (Mirai)", "value": "1d4ee4b8f4a72b471a5d699fb5835a792061c4fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341501, "uuid": "96619f39-c8fd-41b6-b6ec-de4caf9badf8", "comment": "Malware payload (Mirai)", "value": "427746b6b315bfffa874b4a451c265c7bf32a54a3011db6d5ac50fda24aa23b8a640554042c31850d5534fe5c11a58fb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341501, "uuid": "4746e6e5-19af-4ffa-8f17-51a0efd29a75", "value": "T1EE635B21BEB62C2BC2C4653B50E34635F6B7574A607CCA2B7D721E9CBF149503207AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341501, "uuid": "cc19766f-766a-4aa7-8e3a-69829e4c38bb", "value": "1536:xvaZeN8XVW/hHbuiKhJDym70N/o9VQz8zm7uhUw:9ao0SKhJD9Q9z8zmw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341501, "uuid": "89ac0a61-a4ac-4683-ae6c-832eeb6f1d0d", "value": 67236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341501, "uuid": "97ae7d71-c736-4e9b-a34a-fec85aa5f99a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341501, "uuid": "8cd888a4-72e6-404a-8495-bbf27030d7a6", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6872023-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330028, "uuid": "7617bc56-6a4b-4749-a851-73676f7372f1", "comment": "Malware payload (Mirai)", "value": "015368298052a770f25e7fa7844122a4", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330028, "uuid": "d416b343-a4b4-46f1-a38c-bb059567673e", "comment": "Malware payload (Mirai)", "value": "3e7e10afdced2c6c037b664a312679a2b35eb82d0646d847e0d7365e82f68577", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330028, "uuid": "78d32252-80a5-4a31-9439-1149b08b2f34", "comment": "Malware payload (Mirai)", "value": "beb4bf5c9c53609a34729bf2d467bb1b9f66f785", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330028, "uuid": "f93dbca8-6f7a-4737-9a92-cacf6aeb81f5", "comment": "Malware payload (Mirai)", "value": "af3844f66bf654e812c68db52894d7b1c9362906ad1773e132685d8acd58d9942ab9d0fcedd99a3fdcafcafa3e48663c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330028, "uuid": "bf74af58-064e-4f34-8260-411258007aa4", "value": "T11E11829FC022BF10846C09747267A015A060C6D469F68B5CFED5413B98C4602BBBCFFB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330028, "uuid": "c6d78e6b-0b3b-472c-bb80-770aab3165fb", "value": "12:eOF1TB9vK1TB9MB1TB936d1TB9MOBa1TB9m71TB9/2D1TB9jDo1TB9MB1TB93DRN:ew9s9s9w9MYE9A949+9A9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330028, "uuid": "97f8a2d3-3d48-4d9d-be3c-63c4f33d6341", "value": 882, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330028, "uuid": "2ff078ee-c45f-4b30-897b-ab37df27a616", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330028, "uuid": "40919de9-4b7b-4cab-b389-c3cfb9fd2aee", "value": "aaa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67c1ac35-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345385, "uuid": "28cdcc20-a41e-4705-83bc-c6b84426263c", "comment": "Malware payload (Mirai)", "value": "c0a412f9e5d24735079c23836d2f4a83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345385, "uuid": "c5d10eb0-697b-4026-bf50-14a9174816ff", "comment": "Malware payload (Mirai)", "value": "3eda71feefea8eddb0628ea62ceffa13dcf450b2724dace78bb3fe36e1666e44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345385, "uuid": "7093a628-757f-43b5-b2eb-177b7930c0cf", "comment": "Malware payload (Mirai)", "value": "af14859d30b3c482e682891e0ead03b626ccf1f6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345385, "uuid": "bc5bad5a-f162-4566-97cf-88ddce99aa5c", "comment": "Malware payload (Mirai)", "value": "143a55347e21edb017b88ebee52408c703f8dff3ed945d3f9732f795ade31f2a2289bf04496213d977cad9307efb8a4f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345385, "uuid": "c592fe17-e3b5-4946-8d73-99b730424369", "value": "T1A9B3D085B210AE55C02272FCB1870A90D3B16E7B4B9A150B44B3F5B46DBCCD47E1BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345385, "uuid": "9e0914d3-a54d-4885-be28-614906a11661", "value": "3072:X5Apzl9NOvXoVLAE375lhYy5SkOXNwu6:aevXCLr59hmNwJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345385, "uuid": "296973c4-1f0f-4166-9485-e7969aab90c0", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345385, "uuid": "368256bc-dcd6-4ea3-828f-6775f8dcf57f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345385, "uuid": "5e3e56ec-041e-4e87-9b95-f7d50f93ee51", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a558523c-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330026, "uuid": "effe5d38-429b-4ce4-bd9f-d793710fac34", "comment": "Malware payload (Mirai)", "value": "f6e79ad4dc7b3bdb5fcfda5ac4084ff9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330026, "uuid": "9e44ad8b-b859-418b-9930-88b9c5e489b3", "comment": "Malware payload (Mirai)", "value": "3eff1d05dff0329d5244057b1bf9451cb2d9421b3868a8a98303a4a6cbad8bdf", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330026, "uuid": "e3e72d3d-d39e-41eb-a4ae-f48e1dd9b9a5", "comment": "Malware payload (Mirai)", "value": "1aa0b48d2625fa56b7768d251abfeed97a29b713", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330026, "uuid": "7118e33f-0ce5-4bdc-9841-a56201228925", "comment": "Malware payload (Mirai)", "value": "ef5f9a370ed8e069b2a75bf915d9ffd609121e6a76bfa894ab337f228236b00fe4edeb9a15a085b8da76735fe0244de8", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330026, "uuid": "fb91c938-9e95-4e0c-870d-1cdc5deb75b1", "value": "T17921629E0A01ED91C08CD4B937A1841CB4854BEA1AFB0A956E9600BF90E49CEB33CE16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330026, "uuid": "24773c33-7cf1-44e9-82d5-7ddad8740c75", "value": "24:k7Xgaa7M51gaa7bgaa7wgaa7VHgaa7ggaa7Jgaa78gaa7Igaa7Zgaa7bngaK:kDzawjzaHzaszaVzaUzaVzagzakza9zN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330026, "uuid": "dde216f2-da2e-4c98-8a9c-bbac033782b9", "value": 1118, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330026, "uuid": "ffb77039-59c7-4442-ad78-533609ac66c8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330026, "uuid": "0f3d1901-700f-42d9-a78a-41eded55eb31", "value": "thc.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "904c6e32-de9e-11f0-a129-42010a9c0007", "comment": "Malware payload (RemoteManipulator)", "timestamp": 1766343305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343305, "uuid": "f7d2c49e-ab8a-4ccb-bba5-dfd0f8da4061", "comment": "Malware payload (RemoteManipulator)", "value": "0042514fac93d3badc77cbe486f7e50d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343305, "uuid": "ffe04052-23b1-4b66-8b40-8d694720b35d", "comment": "Malware payload (RemoteManipulator)", "value": "3f3cff1e0db15b2e530dc9dc36553fe765f57f1a527089c96856b058bf1aabb0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343305, "uuid": "65b68e52-3d81-435b-9952-598834bc5b4a", "comment": "Malware payload (RemoteManipulator)", "value": "7b730202a98fe4e0b4ab6174941522b9906e8baf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343305, "uuid": "eb71bd43-d3ab-4f70-b05e-8bb14235af90", "comment": "Malware payload (RemoteManipulator)", "value": "fc1f9538dcf52317414136de6125c88df635e810fcc3f762c994d3722577f4a3f465e776384db4291fdf30c96fb48f68", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343305, "uuid": "54a1ecc5-72e8-4435-ba46-aeda467611bc", "value": "T143270127F285793EC4AF1A3645779614893BBB6339128E5F6BF4180C8F356803E3A647", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343305, "uuid": "e4ef9f79-b503-417a-8aba-4cb3868f5a7e", "value": "c1da5e020a55ba61f627c26e326fd353", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343305, "uuid": "4c7ce4f9-c6e9-4637-9102-0f41caef1597", "value": "393216:iKFupMZ5xB0QhpxwBoiSLtedjWnK6w9MRkybBKDx/V:3FF0SiS8djWKSRXbBKDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343305, "uuid": "f5d57737-d47b-4749-ba89-8fa6a3e81519", "value": 22032384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343305, "uuid": "deb98cdf-7fa0-4a60-83d1-53483da4875f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343305, "uuid": "769e6d4e-7386-43d0-ae4b-bca855090bfc", "value": "0042514fac93d3badc77cbe486f7e50d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d4e81fc-de3b-11f0-a129-42010a9c0007", "comment": "Malware payload (LummaStealer)", "timestamp": 1766300780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300780, "uuid": "0cfdd62d-c066-41d1-8090-d544b119579c", "comment": "Malware payload (LummaStealer)", "value": "83630032f8f5049c5ddf116972fef64b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQ.file", "colour": "#191708", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300780, "uuid": "a927e50b-31f8-4ec2-b5b3-8b09db2e2bf9", "comment": "Malware payload (LummaStealer)", "value": "3f4e7724b9a7a9b223fea61514cbb18eefc6156276202575c6798a110dd84bf8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQ.file", "colour": "#191708", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300780, "uuid": "6a18ef94-9801-414c-a229-331471534d94", "comment": "Malware payload (LummaStealer)", "value": "95095d45c32bbc8ccad4477ca530c01e92997574", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQ.file", "colour": "#191708", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300780, "uuid": "3653812d-1898-4d7c-9755-0b36ed16a2c8", "comment": "Malware payload (LummaStealer)", "value": "04f28db5682e88f800c19a9b8e16311b8ecce1b86dda19926c16f0b2b94c1c36a2006f56db5cd9313c1a5672386b8899", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQ.file", "colour": "#191708", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300780, "uuid": "ea77b1b8-3850-45cf-aa9b-67e844a2d965", "value": "T182956B0A6CA40DFAD5DE9336BCA251A2BB74B8190B3133DB1E4166392FFA6D05C7C744", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300780, "uuid": "ec54cf99-b7c9-44c1-9b3d-0366b91fdd5f", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300780, "uuid": "78222de7-4c5d-4e0c-a58f-23798f871a4e", "value": "24576:9JKi4Sm4cfpKNp/U8cq1167pmWTB3/M7hO0eIKHh3f/DeleNKj4HS7q:9M3SNc8NZU8cq1Wp1TB3nEKgUy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766300780, "uuid": "ef85b76c-6215-40a3-bafa-5d518c36cc83", "value": 1976320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766300780, "uuid": "f875909c-47fb-4592-b0f7-8324a0a4ddac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300780, "uuid": "297e5b92-0eaa-43bb-b63f-fffc51fa2b54", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0779ae5-deb6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766353774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766353774, "uuid": "f4cc8705-247a-4de9-9895-2836e4cefb0d", "comment": "Malware payload", "value": "b157cc8493fe006bccefaca83a353311", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766353774, "uuid": "1a4100f3-64e0-4d9d-ba9f-f37eb0699074", "comment": "Malware payload", "value": "3f650e17436767520c57a268135de7a4912f340b895650ed505325047cf08268", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766353774, "uuid": "b9c8bc47-6111-459e-94bb-77f81241fe79", "comment": "Malware payload", "value": "aad3a95d8c73a6107226b859d829bbaf95983f79", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766353774, "uuid": "018817a6-c004-4956-8790-cd80ecadbcfd", "comment": "Malware payload", "value": "6527cec46fbc3f2dcb31e5d7797ea1a30556b7b4116c9d5a2dc7424d657919b39f501d48fe7ab31ebe29fbfb13f82c8f", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766353774, "uuid": "63edad2c-982c-4137-9f10-339dcdebbaba", "value": "T1EB0733D29B8DFFB7E1BE8435A5FAC6911545ED202320C88BB7683E5428322F3B359715", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766353774, "uuid": "f6c53475-fdb3-41fd-82c5-9e7e0db45725", "value": "393216:GHX2K5qWIVORi1se3sJhHGAk0n0COLpuyThNDy9:GHPkSi1se8DGX00COLpRND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766353774, "uuid": "813fca1d-58db-4f07-8fad-9eb2aaa77106", "value": 17162240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766353774, "uuid": "deaa9779-a566-46ba-9df9-45911a0e6bb1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766353774, "uuid": "1bf3dbff-0165-409a-9709-785563238a45", "value": "rvtools_latest.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b49f320-de0f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766281744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281744, "uuid": "2712a22c-d8d5-4dd9-88d0-cf0677db559a", "comment": "Malware payload (Mirai)", "value": "efc2367f2adf8ab0fb4920c0f0a5d909", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281744, "uuid": "d98803a8-29f2-444d-add7-07daefd6a0cc", "comment": "Malware payload (Mirai)", "value": "41a6981cdffee9e2c60d442bc92304457a2c3bbad5c17137596bdcdba074fbfb", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281744, "uuid": "5e96008e-e4c0-4ad0-bdbe-5cbed38b2130", "comment": "Malware payload (Mirai)", "value": "6f179beed47541169083b66af671852f099be58e", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281744, "uuid": "21a04771-6b5a-43e4-9221-3334bc008c60", "comment": "Malware payload (Mirai)", "value": "d04bd3624ee61ef704165bfe4be4e34474d85d8c46271eb1b21aaa8c48f8e8c229ad8f2460a2fbf924ba2a3430093dcf", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281744, "uuid": "67c68a15-b794-4d8f-8905-dc01ae255212", "value": "T1D6115BCD2354D257DE0CDF4C7F9DA22CE654A7D4E5B08B20E8E5893C9A9C2093067F26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281744, "uuid": "12c98cd3-b9e7-410b-ac16-7c4834f62200", "value": "24:3J3GObkjIXlxNI5nI1rKDPUpCd+nfspCBCqCtuk2cx6yvYPTMuHR:4ekolAIxyPkCMnfMCIqCQk2u66goux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766281744, "uuid": "e1b59849-4275-44e0-a2cb-9442237247c8", "value": 1042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766281744, "uuid": "3811f75d-2391-46ec-8d3e-77a6c139fd9e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281744, "uuid": "e6c50c94-3e58-481d-b328-e8cca928ec96", "value": "c.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bef37898-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330069, "uuid": "89f3505d-b20b-4e91-ab24-784d392d1fb4", "comment": "Malware payload (Mirai)", "value": "68780681b329253d649e9fbc0e034c06", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330069, "uuid": "ff9f39fc-d546-4be0-9295-eeebb74e8abf", "comment": "Malware payload (Mirai)", "value": "41a98b6c804e2390450ac5e3fe88df7d1eef0fdfd77359a051c875ee9e64f5c7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330069, "uuid": "9d4e6935-00be-45f1-833b-03a03685bff2", "comment": "Malware payload (Mirai)", "value": "d3812fb6016df33a9e16fdf4fbeb5ccf84999cc6", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330069, "uuid": "db833004-dff6-4e28-9056-becb7681922a", "comment": "Malware payload (Mirai)", "value": "209227d0f19e6f768dc9e985e39cf36b44b97cdc464272b8d2dee63ec745a1a5695bcedde77bd7b2dc202532be7d6aab", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330069, "uuid": "c63c4a9d-fe7d-49e8-86d9-be2a8d7ac25d", "value": "T14EC0809F10271541C108FE2011F5301DB181C9C235B00B0D97D92433F8CD500B71CD11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330069, "uuid": "e16d41c2-8718-466b-89d3-c0d122c07317", "value": "3:LxAjdVZVb8NBzSa+ANja8PeFKRDxAjdVZVCONBzSa5Ap9MVv:L6VbkPjNaKD6Vxy+Vv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330069, "uuid": "b3c86d40-3120-4448-a556-34f07d6fafd1", "value": 156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330069, "uuid": "43162cd8-bf61-4437-bf8d-ac97ac38d7c6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330069, "uuid": "d009de3d-31a3-4634-aab0-28de459d8606", "value": "chomp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d703b1b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329771, "uuid": "cef52f4c-6429-40bf-b2d0-5df0761add64", "comment": "Malware payload (Mirai)", "value": "368901aeabceb8221783620edf51d79c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329771, "uuid": "eef190c0-17f8-4680-8960-66a0a17e73d4", "comment": "Malware payload (Mirai)", "value": "4336f2ee02e9db6bcd78cac01c923518a50447a9e9a00f58d0442a4df82f9685", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329771, "uuid": "0f7e31fb-d1c6-4521-be7d-31f4516a47c5", "comment": "Malware payload (Mirai)", "value": "4fa07d7bbaf2441cfcf62ed12e1695e9ed9b7733", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329771, "uuid": "2fc57aa4-d5b2-4a42-a329-21d0b2815e77", "comment": "Malware payload (Mirai)", "value": "3bcceed74edb5fa9df911478a581b139507812e9e748b7303d6221558f431d6e7d65dcd796e6acc1418f2c6c654b0484", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329771, "uuid": "2a78817e-93fd-4313-8ded-ed3afaa2fe39", "value": "T127335A43321C0A17D4A61AB0293F17E0D3FFADA131E4B289650F6B5A45B5E371186FEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329771, "uuid": "f1392500-725e-4661-bb9e-baab83019d17", "value": "768:Hgl1CJEdIjS0RW587TayKGI448fWnu7W4SvP26rxTu:ZJrXyyKTV2Wt4SvOeTu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329771, "uuid": "4b820641-ba9e-4c6e-91e7-238e9a72bd4c", "value": 50460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329771, "uuid": "4493aa83-123c-4dc9-9e13-baf9bf132376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329771, "uuid": "e1c7170e-3882-4c4d-a497-3cdf690ae2a6", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f9ef295-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338955, "uuid": "39e5ae7a-ac2a-436d-8427-b500230d76a1", "comment": "Malware payload (Mirai)", "value": "cfe12c5b3478acbddf640a4fa083d399", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338955, "uuid": "b0fb38b5-046e-4f8d-81e1-8160514179a3", "comment": "Malware payload (Mirai)", "value": "43978e013d056d56ce25d4f889132efbde4a6fb791238542871dea1af8ffb8ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338955, "uuid": "043131de-480b-4a64-9d07-404c2cd610a0", "comment": "Malware payload (Mirai)", "value": "ae8c8e1e853c3ded5190c3df7cfcaed995d46be6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338955, "uuid": "2aaa5f98-f708-46ce-868c-f9321ada8a12", "comment": "Malware payload (Mirai)", "value": "7565ca9fa2e4f669bb32167c24c038bf684ec6a14d63fd9328aeb4226511e1bd303d414955438ec38eef64ccdcfa3ff0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338955, "uuid": "f28338f5-1685-4e8b-b6ad-e9066e220b85", "value": "T193F339CBF800D9BDF80BE77708170909B530B7E250825A37725779ABBD3A1990927EC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338955, "uuid": "37731f22-c758-44af-8411-e4f545bf8ae1", "value": "3072:NwfTwgyae4653G1R3gktiw/rVrjbiTLQ8xtykpC4Dx8:WfTXi53G1tg7w/CLTyktDx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338955, "uuid": "7a1c290d-1e0d-4612-9ee5-a43e5618c89e", "value": 171840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338955, "uuid": "3b5ad4de-8e43-4180-9595-74a37f2468cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338955, "uuid": "e30e49c6-f654-47b8-acd6-caccbfb5b239", "value": "yamaha.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d3ec0ea-de98-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766340508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340508, "uuid": "dbaa605f-8078-42b0-955d-014fce5563cd", "comment": "Malware payload", "value": "ed470c410c27e02fc6dcc69455fdd3bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340508, "uuid": "0216b293-68cc-49c8-a31a-6f997c4feebe", "comment": "Malware payload", "value": "43b1aa38b408fa120ea8020d63c3ca9ad47b7dfa68c3499deff58b4ad498b8f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340508, "uuid": "6bbc5193-2ece-46b6-9ecf-b67bf245fba6", "comment": "Malware payload", "value": "e6ddaec3eaceacb52c1cf9aada8ee29b91f630b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340508, "uuid": "8c243625-2bea-40e9-b6bf-a1708d7f1b3a", "comment": "Malware payload", "value": "7dff2f37da8f2d6ed73d036ff5dbae101f119e1fe13fe70c20d439b666108f5496f8f34f22e2d1999c9c1bcac8f9ab85", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340508, "uuid": "778bdba3-95d2-4115-8fb6-96a7af32b091", "value": "T17863C752B8819117C9D892F7B31E019E331513B8D2EB3307AC356F613689D9F0EA7E5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340508, "uuid": "57aadb74-0c3f-404b-9017-3e385fde15d9", "value": "768:KQFqnEZ2WgGq40jhcjy9m6RSVCYAqt81kVEjt4RCn5rsEzEYMYm39ErNo3dgl3Xa:TFhZieycjyXaCvKOjkA5rsCEZ3NdsPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340508, "uuid": "a494618a-354e-4760-8f37-d7363c8fa47f", "value": 73072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340508, "uuid": "fe3959f4-68d0-4441-b21c-89d555be1faf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340508, "uuid": "ab4f0829-4900-448e-a1a0-6d2d2cc5353f", "value": "shadow.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93114eb9-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342451, "uuid": "0fd27124-336f-4e97-9e5e-e32d19b29435", "comment": "Malware payload (Mirai)", "value": "1f415ee5a660a174db3d6e7d7dc1964e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342451, "uuid": "382629b3-f358-46f1-b1a8-176e938b278f", "comment": "Malware payload (Mirai)", "value": "447542cf00a1acffd7ca30e66dc242a069d09e3a213086d48cd39da935915efe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342451, "uuid": "d59b82a1-7575-42b8-9787-c159f79cc5d0", "comment": "Malware payload (Mirai)", "value": "753a48e9f5981ef172cc7ebfa67e34bbff74ce06", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342451, "uuid": "764f8c9a-dc0c-4a93-a0f1-3c002f63eff5", "comment": "Malware payload (Mirai)", "value": "a4c1c6b50307891c1069d3be833443bed02306af57b48c087c8eb06cb79014cb4c980fb001cb0f02614266e69c064890", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342451, "uuid": "cdeec6d2-d863-4ed1-a185-ce2d9c40c5cf", "value": "T1FCD33A06B30C0A07D1632EB03A3F67E093EFDAD121E4F640655FAB8A9671D365586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342451, "uuid": "2a319b34-a686-4d7e-873c-38f98f22fd06", "value": "1536:dDa0/xMx0MNtGFDvfNbb37xvkgQSgVH4VRHvYSqvA4jffN9hS7qjY7fIPNmbzzY:AVu3lb37xIpYVtYo47oI8bzc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342451, "uuid": "9f8bc4c1-719c-4240-982f-24b0e69cc3ee", "value": 133816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342451, "uuid": "f0721597-b2bb-4c47-8a66-c19a091c489d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342451, "uuid": "d9e550f6-eea0-4ea4-a399-3ecbc769a537", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a897a759-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330031, "uuid": "b06c2353-c77c-4a6e-8728-4124b5267a95", "comment": "Malware payload (Mirai)", "value": "ef2b599295909e61d56ef437112cbd17", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330031, "uuid": "f3a91467-f62a-44c0-b576-397c4bb6e86b", "comment": "Malware payload (Mirai)", "value": "44b0fa41f3facfacd46bb3ef5871c900156ca8f21c13e3235a1be26b03b2be87", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330031, "uuid": "0141f636-7290-4fe8-b73b-a729bf4e442f", "comment": "Malware payload (Mirai)", "value": "a3b8d92bf41170cc6a82ebb9d9b6fa0cc0ef2a7d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330031, "uuid": "d604c0ea-d2bf-4563-99b7-c52151d5cb87", "comment": "Malware payload (Mirai)", "value": "edd64a5bc37f669626aa1a02d19e07d51932d07d287f600219b39e0b4bce3fe54c46074ead772be47775ab16df0484eb", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330031, "uuid": "66c51852-e845-4364-bd39-69a1dbc60deb", "value": "T16611826F102BFF12818C6E2476A3B43660A087E532B71F599ED944F794CDA52733CE61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330031, "uuid": "41f6a274-cda5-4190-b065-ac664c205ede", "value": "24:PsFDyw2tQwMaLaNgUVNILSE3KK61h+YQNNbShqd:0IwaLaSraHmNz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330031, "uuid": "073c0b89-e72d-4ef0-8d4f-c4188af1924f", "value": 903, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330031, "uuid": "1fd25bc0-37c4-4dae-a196-e32f30e833eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330031, "uuid": "b69716a2-d850-4b5d-8953-5f864e8d1785", "value": "zm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65754a66-de2e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295130, "uuid": "cc5181e3-d341-491d-b75d-58c17bb0e171", "comment": "Malware payload (Mirai)", "value": "a3fb133cd7ae3af23706f7c015da39b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295130, "uuid": "e0a7e9c8-41c8-48a7-b5ee-5d16c4e2a13a", "comment": "Malware payload (Mirai)", "value": "45168bc663329c3b1d883b83a59fe84f08b6e01895c37144ddfa9156bea3eaee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295130, "uuid": "e9bc6dda-bdd5-44f0-aecd-04f450aa3564", "comment": "Malware payload (Mirai)", "value": "a0a306957144a541de27fe5ad75c13f9bac7cd0a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295130, "uuid": "c005a180-dee4-400a-b8ca-253d57929d81", "comment": "Malware payload (Mirai)", "value": "9efada47ba8aeceaaa3d0e4c91420cc4c36f0c5fb35790ad93771b386d87d150a2765674d2bab26a54496208401ac9d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295130, "uuid": "420a9193-6f4c-4f14-947c-95f3e9d2b49b", "value": "T1B4C32999B8929A62C6C356BFFE0F428D773653E8E3DB7203DD145B3136C251A0A7B142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295130, "uuid": "2d2d7a0b-a9f9-4874-bdeb-250b076931a1", "value": "3072:YTDjkbduJK4xRS7XivZ2c4px1vUX3vwCQl75Fv4a+RFNYdJxriBMJxPn53E:Y3jkbduJK4xRS7gZ2cATvkwCQnFvxQEc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295130, "uuid": "acd2b5f5-cbce-4121-a588-5748851e7c14", "value": 124084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295130, "uuid": "8fffd08f-56dd-446a-acf9-12d49357c10d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295130, "uuid": "df411c8d-f7ba-4117-8e31-b3f318e1fc71", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "089acd18-dea4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345654, "uuid": "74dac9e8-ab51-4f3d-b61a-67ec50cab2f0", "comment": "Malware payload (Mirai)", "value": "fb4814bd71e94f734b755aa0e0253e78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345654, "uuid": "573e675c-d7fd-4ddc-9ced-79441328c8b8", "comment": "Malware payload (Mirai)", "value": "452928c40b23f9cd2580e0b9dfbf447a8766057c727d29817ee02a964a7cbee3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345654, "uuid": "c6490e7b-e443-40fa-8513-3922caccdcac", "comment": "Malware payload (Mirai)", "value": "61b5b7df699cc0f211564f47e6811be6168f8ef8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345654, "uuid": "9c120569-c4b7-4543-8cc7-3f4fd29ec703", "comment": "Malware payload (Mirai)", "value": "bdc395af5c43431f870cd3eb951ca833ab036705cc5b7f730c329c0df6a534e5ad31649a3b1ee78c2836198745502447", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345654, "uuid": "0ab9303e-caff-4113-9560-15ef63ca33c7", "value": "T141735A42B3184947E4671970693F2BE193FF99A021E4B78A754FAF8E4672E330446ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345654, "uuid": "aadfd66e-9f19-436a-b2c9-495c1d14793e", "value": "1536:G3pG+dQSzhiDCF2nN5W6vSJQIn5SSX8dYTAbVRi8:virFMNrSJ3HhTAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345654, "uuid": "1a1405d3-380a-4b29-832b-a29855444e9b", "value": 75044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345654, "uuid": "50db8b8b-9a33-4646-b7e6-99f09ee63cd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345654, "uuid": "72d610fd-42a2-466e-9a65-29cdebd10325", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b53074a0-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330053, "uuid": "5fc854a8-f0ae-48cc-8a71-d90b74a1034d", "comment": "Malware payload (Mirai)", "value": "273f31b25912cdc46ae3e03cefd7c67d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330053, "uuid": "17d29b91-9d15-4450-a486-8ac5c9c13bf6", "comment": "Malware payload (Mirai)", "value": "4583da08e48045d247ba2065ab227ef91428cf0c200c06f8a070107b937548d8", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330053, "uuid": "ad6cf9de-c55a-4b7c-af47-c0e69c6f088e", "comment": "Malware payload (Mirai)", "value": "94ff2249f28dbe39621301096193248ed82bdce9", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330053, "uuid": "8d9e5e73-e116-46c1-aec5-8ca2451c03c3", "comment": "Malware payload (Mirai)", "value": "5040c9e63af85ac41dff4bdb4c71cdabe4c09abdcd358a90a706b17584718b9f99774e05c3416f1ff04011efd953d10f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330053, "uuid": "c7d838d5-ae70-475f-96d3-82d4c380ae09", "value": "T194E0129F4126CF07819CDC743666307B3070CA944A661D4CBFD5407E88D4A14F3ACE6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330053, "uuid": "3fad0d05-b39d-4eea-b155-83f45dc71e4c", "value": "6:L6VQaumRBV6VecUSRBV6VcjLKzRBV6VcefRwzS+zSevoSvSScvv:e3PRWMcfRW0SRWvRwhwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330053, "uuid": "4445b611-4b6c-4c06-89b5-ed4c48f74c02", "value": 382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330053, "uuid": "4bd4f22c-d080-42e2-8266-d98e3462a375", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330053, "uuid": "e6132afd-1430-4b04-8653-dcbdc7b1e5eb", "value": "cam.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0428a4af-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320736, "uuid": "dadbd689-b62c-4807-8434-406d11e242ab", "comment": "Malware payload (Mirai)", "value": "1abdada7a440f234f688934a9ed1f947", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320736, "uuid": "50849a83-db50-4bc6-928d-76764ee44b1f", "comment": "Malware payload (Mirai)", "value": "459a39b7055da25a809282b708c928f8df91b0c646db8ac1209cdb584ea5144e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320736, "uuid": "c483181b-fb37-4a96-941b-4c1ea1cebf47", "comment": "Malware payload (Mirai)", "value": "5a16f5e56498f237fb1863e93685297cfa50acd9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320736, "uuid": "2ba0c626-83e6-46c0-a7e6-eb957d2aa738", "comment": "Malware payload (Mirai)", "value": "fcbdb65b681e63ac19c0c5407f255715449a41d15e071e8e0b7e9b256c3b8d7b55c24b1d9d8e053d14e75632ef9f6bc9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320736, "uuid": "3dde82b1-53df-4e18-b611-cdc194a1636e", "value": "T1686319326A359EB2D5C2B47932B7632979F152DE86E4C82CFC321E4DFF228549247172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320736, "uuid": "8b82285c-ed35-43a2-8b1f-bcd4017aafe1", "value": "768:3My3wMXF9hW3EyE4Lp9Ds6P4uoTgrme6IO+oJW1XPG:cy3Zvw3FECp9Ds6PGTgrmFCaou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320736, "uuid": "b01f933c-f97c-4ea5-a15d-768eedb92d83", "value": 70636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320736, "uuid": "61d1cec8-16ab-4333-8bc6-9f4ca1c8aa16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320736, "uuid": "a68cd3e8-0dc2-4871-a516-d5f5e8106605", "value": "shadow.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "484cb66a-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341037, "uuid": "6f69d626-bd82-4c0f-affe-ce8603b13a21", "comment": "Malware payload (Mirai)", "value": "9bf7a15ad8c9f267955453900912332e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341037, "uuid": "b70538cc-8874-40c9-8c1e-dccbf2865725", "comment": "Malware payload (Mirai)", "value": "45aea10db623fdcd7122375d517f2c54ab3540411345e70952a091ec8557ee74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341037, "uuid": "09799cf5-e95f-4c58-ba13-d88108148add", "comment": "Malware payload (Mirai)", "value": "bc09e553921f7fc7ab4a83bcdcb27f43375352b2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341037, "uuid": "d9283dd2-4636-45e9-a57a-6c99b18e28d5", "comment": "Malware payload (Mirai)", "value": "f27f70358c836af437598376e937a9351150219025fb3823e0d195b5a2e2200589b34b6fbf3fa8a5553d1f27c5262df7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341037, "uuid": "d0086e8e-3269-40a2-8d9d-11afd0f65282", "value": "T12663B415BB650FBBDC5BCC3B06B8170539DCA60A22B47B397934D818B54B21F1AE38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341037, "uuid": "051dde8c-3de5-41bb-8ecb-b5a7dfa83f3f", "value": "768:U+LQuK85Lyc0G2jNwXf1seqeF5nwec736oPmVeJ5uZVepkRe7gY1hb42XilDDV3m:DLQul5LycEj6Hqe16eskRagSEJV3uHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341037, "uuid": "33058502-6e34-40eb-b372-11917061f445", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341037, "uuid": "a061359d-fa63-417f-a24f-8061c4b42d51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341037, "uuid": "dff99f38-8572-44ec-b5cf-4fbffd24a5f1", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d76e001a-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309494, "uuid": "d33a663b-7d8c-46ce-9396-404dabd135f2", "comment": "Malware payload (Mirai)", "value": "9b0de0f7f1acce2c6fe1ca0645445d3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309494, "uuid": "650ee9e2-b4ac-44ce-a10e-58f5606a98b3", "comment": "Malware payload (Mirai)", "value": "45e982e1da915a8c36c92d9abe19d427528dd6f24f11088aa6d578687869087e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309494, "uuid": "774b7dd0-8160-43c8-b80d-d2ac7055f461", "comment": "Malware payload (Mirai)", "value": "b20bfd31075235a8441c170b5eb9a6f12b57e47f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309494, "uuid": "be54033d-4c19-47ca-9e6c-af7314727d2d", "comment": "Malware payload (Mirai)", "value": "8d9cffa42d2d735942a76d1d02a00edd5c3c44837cf0327ed2fda169ac5d8add502215fbab7a4d429de5d1015b6f58d0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309494, "uuid": "4ed1ce96-1bcc-4b91-b42d-1d607425866f", "value": "T1C273F752B8829A1BC6E053BAFABE519D332167E8C2DF3127CC116B1477C551F0EA7B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309494, "uuid": "99ae75bb-90a7-4462-a9bb-9a6c02d5c724", "value": "1536:rrs9vZmaIm8a+Bh/2wJv7LkH/VhlSSh3HZGDNHJ26TXgt9RRax:rrs+JmHYST6NgAw1R+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309494, "uuid": "cb0d4033-e830-435b-a8c4-69cd20a008c8", "value": 75020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309494, "uuid": "7ce0e915-f84e-4f9d-b8cc-d5fb9607f895", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309494, "uuid": "ad034cda-8fa6-4677-89c8-aec01aac9b79", "value": "main_arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eec02dd-de89-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766334149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334149, "uuid": "a14ead8d-7918-404a-8ae9-c3a69733415b", "comment": "Malware payload (AsyncRAT)", "value": "d9e42c48a9eba81581ffda97c82e4608", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334149, "uuid": "a9f653dd-e011-43a1-8461-63e61208aabc", "comment": "Malware payload (AsyncRAT)", "value": "4667ed50b048c63ac3052a58aee327457d3fb665d53229bd008e1d66b010bc51", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334149, "uuid": "4f275857-5edd-4fe5-bc19-93fa4d864129", "comment": "Malware payload (AsyncRAT)", "value": "1da71c9a7136bdc88d8226e632ba80392939d5bf", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334149, "uuid": "2628f578-8c43-4f57-b9be-5c2fb2a9e84b", "comment": "Malware payload (AsyncRAT)", "value": "e9c9d10d4c8e21527538b1bd86b2f0ac7c6e85e4f48b3ef59eb4fa2311d8a1d8fbeb34832602d7b7a51008f5b9b5c722", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334149, "uuid": "dd27a1b2-928d-4bcb-bdee-012b9322d2ed", "value": "T149232B003BE9C12BF2BE4F78ACF26145467BF5672A03D54D1CC401DB5623BC69A52AFA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334149, "uuid": "1c818646-7598-42b9-b43d-50ff8bf8abba", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334149, "uuid": "3619e429-1535-4442-ac2e-13f655f1cfa8", "value": "768:Su0+ZTsIr5DWUDue1mo2qzCEsSmrZa1PI43jb0gX3iURs12nWjHjYfNBDZ+8C:Su0+ZTsw12usp4S4TbbXSQSvgDd+8C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766334149, "uuid": "fed4e3c8-04e2-41a2-a978-b7e06018218b", "value": 47104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766334149, "uuid": "4113c62c-f7d0-41e5-892c-b60f61c6b4ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334149, "uuid": "eb68eca8-520a-4d3e-8f7d-46717eb2819b", "value": "cfservice.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13d95ba3-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329782, "uuid": "c396d78b-c1f7-4280-90b4-b35298256d12", "comment": "Malware payload (Mirai)", "value": "525eaa68bf74ed253779020d8b9dc72b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329782, "uuid": "8d26930d-6323-4b88-825e-cdd0d895be6b", "comment": "Malware payload (Mirai)", "value": "46787996f02073972177e5dc1ec2acea7f0138a0556993cd51c0e33375ebf946", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329782, "uuid": "ebc4b8cb-558c-4258-b817-dcc87701c5f1", "comment": "Malware payload (Mirai)", "value": "2ff85ad154e7267c5e917451e052e6f2b0dc0e75", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329782, "uuid": "b5747445-0224-411f-bf10-c77d83d1198f", "comment": "Malware payload (Mirai)", "value": "87f74f8af2f37c81c5e9d4dbaebde2139043def2dc0acdb2852029bd6905f6dc52ab85846cb1e106450e10c630ca46e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329782, "uuid": "9d7108e7-22d0-470b-a8b4-d4ec469b7bfa", "value": "T18F63AD36D86AADA8C85C52B0B4B08F755B53700082972FFB5E99CA754003D9CF68DBF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329782, "uuid": "e3a2d8a2-cf2e-4c7d-8cc5-a0527e819234", "value": "1536:/DSJA0zbVwgyjJJme2rCAdxUIlPYCP60kcT3bVR:/V0vHkmbuIlPYCxXT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329782, "uuid": "e745e6ae-6f60-417c-a84e-dc49bc7a8f56", "value": 66844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329782, "uuid": "2e8695bf-9eec-4413-90fe-485f06b419cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329782, "uuid": "90341efd-9d7b-44f2-8601-0ee4087103b5", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2a03d5e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330075, "uuid": "30576833-3e85-40f8-8eb4-8dfdf525ed22", "comment": "Malware payload (Mirai)", "value": "af1670ee09de8713396515f53cd28083", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330075, "uuid": "a82b118d-f6be-46a1-af1a-03d6b507ff58", "comment": "Malware payload (Mirai)", "value": "480538fe48c6a19376d0b2a2e8896ab863fd7b12144c74927ba06e903c6a5488", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330075, "uuid": "c3844d66-b3b0-41b2-9572-89c755047da6", "comment": "Malware payload (Mirai)", "value": "950caa582945f18fcff7b079257c7b117df05b1c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330075, "uuid": "200cbdd7-0204-4aef-a9df-c060539349c1", "comment": "Malware payload (Mirai)", "value": "58d5ef1c80893bd2deeac276301c37118135673e6583ad0a367dd629c79979e7e17daa54839c8dc81eb799e8a8596e59", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330075, "uuid": "e0bffca1-f76b-4504-abca-dd854cb38516", "value": "T19FF03CAF0028FF13D54CAF5E3B50703FA06097D90A270755AEC680AFA48B2417378D12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330075, "uuid": "01b1d5a5-9ead-468a-8d3b-ef3a1cc8f973", "value": "12:6pV1YD41eupPXo1mwMaLBh1SPVNIT/1DpG9o1U:6p4DApTwMaLB2PVNI1pMv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330075, "uuid": "702f365c-ed13-44e3-8fff-9aeb3106a2f6", "value": 582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330075, "uuid": "803ed126-b8e6-46c8-98ac-2ccbcd2980ba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330075, "uuid": "ed4cc150-ee7d-465a-8c48-11312d1a79e4", "value": "t.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a6c058e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330008, "uuid": "173a5459-b302-493b-9a97-aa1bc87b2cb3", "comment": "Malware payload", "value": "b9c798f62b515eb796b0c5957a1be4ee", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330008, "uuid": "b234c1a7-692a-4a6a-96f5-85dcd021c715", "comment": "Malware payload", "value": "483549a5736320eefb7790170c604f0cea21dd51270c9cf07d7fabf32eb75e13", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330008, "uuid": "0f978261-2af5-4174-921e-b5577208d808", "comment": "Malware payload", "value": "3592a449875e7ffc67a1c9cd0d1259f42139529e", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330008, "uuid": "406e36af-ad69-4895-bbe1-91d77dc01249", "comment": "Malware payload", "value": "5e717a8dfcd553c5514c605a9480af3be1213fef8e5a9277b11d7f658af203cb51b384c29e9b3fb34cdde9780afdb060", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330008, "uuid": "fa38b1c2-1f04-4ad5-a9a6-72d12749833b", "value": "T1C8E065CFB0310AAB050D8E1DF662D88CB052D7D903979BA86EDBC02E48A6A047329D74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330008, "uuid": "b982bd44-32dc-4445-ae71-87835f0929d4", "value": "6:zFVmVMFdVlpyLMFdVUeUaYElMFdVQNIl5DFzCMFdV4a0LKijcjLX6:PdrdmeUa+dGNIl5D7dL0LK3vK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330008, "uuid": "9e77fe2c-489c-4769-8494-3b861781b37b", "value": 402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330008, "uuid": "bde13aad-e17f-4516-913b-bcdbd67be4bb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330008, "uuid": "3f1c6c24-90d9-4ec9-8feb-211d49dc084d", "value": "ipc.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "645777a8-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345379, "uuid": "7751de2c-7315-4f7e-ac4d-870ba04fda24", "comment": "Malware payload (Mirai)", "value": "c6e94f824ed2bedbd72754d9d8451cb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345379, "uuid": "aaf8cb96-aa27-4e3d-a985-32cc3cbe603d", "comment": "Malware payload (Mirai)", "value": "48ac3c8f290549dd0cf4db30a26d6423d8e37c70e6df2aabefc4a4fa0ff9632d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345379, "uuid": "11a48a01-30dd-4e57-9429-bc78e8aff483", "comment": "Malware payload (Mirai)", "value": "6c0ada5f7fa3d004cfb892d35ff05ea0ab4d0001", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345379, "uuid": "7ae5278a-ad4e-4420-8d45-78fe1b3c6ff5", "comment": "Malware payload (Mirai)", "value": "74c01f346d399f6fc4b4fa5281fc686d5b379f03d063420e1e644712f456c2ae8474bd063c58ac715155d1bfa061776f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345379, "uuid": "1eddd382-39c7-4338-93a2-6b12c27576ba", "value": "T1D7D3B021E4006DD1EC2129F578BA96B80350EE740BDE1582EFFDF95E747BD9438AD2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345379, "uuid": "e7cbef93-f703-4b6e-bf3c-1dd077d5ff62", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/x5:PiySSGp+PMmT7zMplT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345379, "uuid": "2773586b-3e0a-4fb6-97e6-6a33f870a89d", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345379, "uuid": "c527f80d-b6d6-48f3-b1f4-d1f874755b21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345379, "uuid": "3e64cd54-859e-49c6-9241-00d425e4b7a1", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06d59d5f-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320741, "uuid": "4978b10f-90a6-42e6-871c-22beef5f8061", "comment": "Malware payload (Mirai)", "value": "67b762e1bde4d97587d0e52553364b0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320741, "uuid": "9bb028cd-dc3f-4b4e-b719-7991031b78ff", "comment": "Malware payload (Mirai)", "value": "49124fe65a694d3bbb407fcde21a93a226975ac742b5c313d7dbe5c8ac404597", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320741, "uuid": "f09348c3-1056-4376-b810-86186be62c96", "comment": "Malware payload (Mirai)", "value": "070e64e92d3c67e032be7e2275ae29a470f142f4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320741, "uuid": "293282cf-e895-47cd-8453-4a8bbac7de70", "comment": "Malware payload (Mirai)", "value": "e6a7894ec6f1083453c6f271e7d444e0f777ad30b96e8544ab7afe4d257a0763a4cfb3bcae1593aed741dc469232306b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320741, "uuid": "3c0d9f77-6af2-4454-b2c7-3c9d2e30e37f", "value": "T1DEE32B5ADA418A03C4D517B67B9F42593322AB54F3DB330689385FB43F86B9E0F63606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320741, "uuid": "8af15b44-2261-4c8f-bf78-c67e5c78f607", "value": "3072:Nyed0OBLw17BazJxZ+mhHNkpZqnMsu9XxM/9LiiYGo:4ed7w17Bazl+mhHNkPqlu9BM/9LiXGo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320741, "uuid": "4f60d3ad-8f32-4a8c-8a88-6067013ede9c", "value": 143810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320741, "uuid": "e3ebbf41-6c52-41a9-ad4d-a38f9208b864", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320741, "uuid": "dc06a5db-5340-4f17-8e0a-5194520ef363", "value": "shadow.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d14fc02-dec4-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766359513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359513, "uuid": "7c8ea005-6b65-4776-bce7-ccbeafc16ef4", "comment": "Malware payload (ValleyRAT)", "value": "18ca734c3bf5946ed478504bc038fab9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359513, "uuid": "58225828-6413-4047-b930-72221983b788", "comment": "Malware payload (ValleyRAT)", "value": "49a9bbc49ccd3aec08bd2f8702db35bacb539ebc8879d9fc00aa0cb4b5e6787c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359513, "uuid": "d062cf3e-f364-4630-9ad3-1712aa981f54", "comment": "Malware payload (ValleyRAT)", "value": "5341b674a7f71e34814296cb8836ff78d6b31a12", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359513, "uuid": "0d159bbc-cd6f-4cbc-ad8b-ddc8bf8b4c8c", "comment": "Malware payload (ValleyRAT)", "value": "4ab201528e041430acb941037b69b1bbcb25f74f02c2e0e7ec82a3589258405a6cbc23ed9b14a33c86bcf5427430cc67", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359513, "uuid": "f60dbf20-476d-44ff-9334-f816c46c4702", "value": "T105D37D4733A450F9D4A78279C9A24A06E7B374660735A7CF17A086BA2F137D1BD3A331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359513, "uuid": "38a421e9-3017-4f57-86e4-b1b9fde3a4c2", "value": "fb51ede541a9ad63bf23d302e319d2a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359513, "uuid": "25c54c60-dad9-437b-bab1-775542bab8fe", "value": "3072:lO55k/y5dAj+BMTYlgEQnB+Y+pek7+3OrFZeUqe6oS:lO5n5d56TYZQnB+Dpekyyqm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359513, "uuid": "17dc5532-2665-4973-895c-287b6a631aa1", "value": 133632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359513, "uuid": "8e5664c9-66a8-440c-9ab4-df6ff35148f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359513, "uuid": "003a038e-447e-4e41-870d-46b5e0d9fffc", "value": "18ca734c3bf5946ed478504bc038fab9.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e07aa8b4-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309509, "uuid": "5075e15a-bd94-404e-b09d-d93867653a28", "comment": "Malware payload", "value": "5edb734febf6d3e843b97c94fa060b7d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309509, "uuid": "7a248a38-4294-4925-a8fd-96666d6b7a96", "comment": "Malware payload", "value": "4a317f3324d12a58bb0546c81d132afd2dae24b1f56478396fd02bd0580cea85", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309509, "uuid": "58a1c948-0547-4fa8-8310-2d939e60a4e4", "comment": "Malware payload", "value": "98ce6c50f8a2a1694dd86c0119ac542eabef038c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309509, "uuid": "ec8c88ee-4ead-4936-ae3d-56c55f8e0662", "comment": "Malware payload", "value": "828da47dd013c4d176b8013de5458b4036c7fd51a03d2ecccd9478679eaf02bff5e8fd85969b1e7244192bd73826a5aa", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309509, "uuid": "1c98e61f-01b6-40ee-b72f-be08b5d7e317", "value": "T12CF062CF02990B612080F99EFEE31C64A009E6D924D6DB5CFD4D0C76139D99DBC15F66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309509, "uuid": "71005f6e-1844-41c8-a166-d4a902899499", "value": "12:t9TZDcHWrFHWfzvwzMHWNIjDUIMHWBaD2rHWq:t9TZiWZWfzYzGWN5hWBaCTWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309509, "uuid": "85bb28a2-0044-4c6b-b860-7e0075ed6aa1", "value": 647, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309509, "uuid": "ca7f6fa9-5f6a-427c-8c1b-4f87b85256ee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309509, "uuid": "bc826968-a82f-46b8-b622-61ee92cba429", "value": "dvr.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5390f33-deab-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766349031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349031, "uuid": "bffad13c-51e3-4d89-a298-bd37d8678bed", "comment": "Malware payload (Mirai)", "value": "aecec3b6d6b0aab4d79fcf8fa21f3ce0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349031, "uuid": "3fa92b02-66ff-479e-a6b6-7dd153925197", "comment": "Malware payload (Mirai)", "value": "4a52d3fe38702fe6b29cd96e7d75ff528c956a673138b0d8b619935fd447a301", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349031, "uuid": "73cc05df-a960-453a-bb9b-c109d8ba2356", "comment": "Malware payload (Mirai)", "value": "c237b03e50f71e20bd35f7cb06d02f85b4d33256", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349031, "uuid": "c1a2146d-1dd6-41ea-a428-83c450767937", "comment": "Malware payload (Mirai)", "value": "e1ba44690899935cba45139d854f670f6cd668840fac2d77a5a0082fb0bfbbc0861d5ff29782275f8762e8ed58ef4a69", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349031, "uuid": "2fc84fcc-4673-4ba3-840d-4faa345cd068", "value": "T1D693A6197FB25FE7E86ECC3705D81B4924CC170621697B3ABD38D464FA4A65B0AD38B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349031, "uuid": "7cda9184-0620-4e2c-b6b3-e864db4c5a0c", "value": "1536:kvJg1OSZrutk0zJ4kGenqgTzWYPZ2EVzS:kvJg9hf0F4KZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349031, "uuid": "ee6aa5e5-3ccb-4bee-8964-1d50c8a92626", "value": 96200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349031, "uuid": "6f297a0c-ba32-43d7-9808-5e5c08ae073e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349031, "uuid": "188f575f-b9ff-46c0-aaae-99d2f0077689", "value": "shadow.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0aa8430b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329766, "uuid": "d5ad8b07-a840-4ebb-afc9-6f12e060a1e4", "comment": "Malware payload (Mirai)", "value": "ceed6e6fe79e8d9ba80dae5f45507993", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329766, "uuid": "cd1be892-737e-4cc4-83f8-1331799a0367", "comment": "Malware payload (Mirai)", "value": "4a60b417b0a3a559a666787305d91514c5e88d00158943ed988867db3a53cc27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329766, "uuid": "9a776863-8da9-481e-bfaa-4bd3e1106c18", "comment": "Malware payload (Mirai)", "value": "e087672e34f530a90741a2eb6ddf42b77fd9c965", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329766, "uuid": "396b9abe-01d8-4a60-ae6e-925af2912052", "comment": "Malware payload (Mirai)", "value": "c74717001970b2db41a05964885be5eb66f7239bd5830eb97a5ee5fd2427ce672e1931d440a19cf2fe918fcf0ccee492", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329766, "uuid": "977da2b2-d255-42df-9f94-51f94e5912ec", "value": "T173836C21797A2D1BC1C4687B11F70371F2F6234A65A8CA6EBD320E5EFF15A503107AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329766, "uuid": "697189be-e814-47da-b7f4-3c18d21f1d41", "value": "1536:DM4QSDSmJoNWZXLsoHZekpVWtCHA9Absjn9/KTWzIeL9H8zF7uhcT:DFF8IZz5vTbsZ/eMbH8zFh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329766, "uuid": "61190913-9527-41ba-bc97-4158ece82855", "value": 85740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329766, "uuid": "5484ed54-a446-44b4-92d9-06dbd4072608", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329766, "uuid": "84f31128-9ec5-4e37-acf9-0e5c7ed6ffde", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d58e111-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309692, "uuid": "4670a574-e88e-4c24-8bfb-15dc44db25d0", "comment": "Malware payload (Gafgyt)", "value": "1e7a87517b597ded63fae60efad926aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309692, "uuid": "d15635f3-fff8-4f05-8d98-9ec710b3a129", "comment": "Malware payload (Gafgyt)", "value": "4af9aeeecb1845b700f27059b58b70b92f2e726396526e83ccd9b893594fb04a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309692, "uuid": "e88822ef-1b6a-4e20-8c8d-e203cd049209", "comment": "Malware payload (Gafgyt)", "value": "05a502fca50a10d55a7f0d6ed9a3eb7199d7bc5d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309692, "uuid": "b9c26e9a-bbbb-4f47-9af6-ec6094696f67", "comment": "Malware payload (Gafgyt)", "value": "615f62a389220b809f2ccf110bdcb43e15b8b3ea6428ae857f483195c4b3e572513e0cf9ce209856a0e6dc42d468f863", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309692, "uuid": "3eb3fa00-c316-45d0-9a93-5c849433cb39", "value": "T190932B86E642CAF3C4430AF502AFAA590732FE2A4E3B8EA6F71C7DF49B115C43115791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309692, "uuid": "9d3b171b-1bc6-4284-b512-3863dd7c2c38", "value": "1536:2bcSA3zJO93RceGQwqWQC1yIZ2DN1d3OoN5hBayrJs6Wshe0QzUzJYQ2Wk:kAI93RceGT91yIZ2DN1Q+5hBaqWUe0Ql", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309692, "uuid": "f1dffc76-9637-44a0-9efe-1f2fafdacd02", "value": 91540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309692, "uuid": "e3089a92-37f5-42c2-aa8a-dc6a71d7795b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309692, "uuid": "389ced14-f977-4d6a-b29e-016e400397f8", "value": "yakuza.x32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd1d6993-de33-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297531, "uuid": "03a9d481-e0c4-4966-9d2d-59ed0130232c", "comment": "Malware payload (Mirai)", "value": "7d555e803491ec7283b255f7b9adeb21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297531, "uuid": "f1d354e9-f079-4c9a-bb5f-22a598450184", "comment": "Malware payload (Mirai)", "value": "4b00c9ff1eb55bd1ab7e067a274dc00a16fd07870f915cbc871e887f16d0277d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297531, "uuid": "2e520085-f122-4a92-ae3d-d117e862ef04", "comment": "Malware payload (Mirai)", "value": "d095f2487ab0990f5486acdba71f21ebfa7f6ede", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297531, "uuid": "109e4b06-e3d6-429e-9c3b-258e9b52fe19", "comment": "Malware payload (Mirai)", "value": "e9977845460ee493a3a1349abc1e3cd9351735cf619c15dbc1b1ca8b0e8af3296ce68d714b5e7f23e0f527564ac4d0f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297531, "uuid": "e1d4c29b-0c33-4311-9cfa-5c992b65e8ac", "value": "T133E34C52F7808B13C4D617BAB6EF028533239B6493DB730659287BB43F8679E4E23605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297531, "uuid": "25d75bd3-4184-4251-86d1-bd3e6db6f894", "value": "3072:hfiaqEeyweZ6Y07aUXmKdoFzmtB8afYAmkLqM/927IU5vz:hfiaqEeyweZo7aUXmKuFHcYAmkeM/92V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297531, "uuid": "0f95a8d6-60a5-48e3-b9ef-703be39cfce9", "value": 148542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297531, "uuid": "babdf2eb-585c-420b-b1b7-2aa23128edf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297531, "uuid": "1e06aa0a-c42f-4f5c-b0b8-0708587f9fcf", "value": "sdxkzX_UXA229x.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae277688-de49-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766306848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306848, "uuid": "397c6bef-9553-4cec-94e2-c297a9d071b0", "comment": "Malware payload", "value": "8a289fa8de4d2f54173daec115291bd8", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306848, "uuid": "3dccbfa8-3fad-480e-b42e-9a0f5292d1c6", "comment": "Malware payload", "value": "4b0ade22bb0b305a5dff80a38411a138f3ecdd2f14d1526705dbfc5d262cc147", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306848, "uuid": "ed983ddd-696d-4a47-98a2-bfc76e3fcfbe", "comment": "Malware payload", "value": "a6de5f30776604ed7ed65c7d057bf9217d1d3fdd", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306848, "uuid": "38185d49-5d5b-4bbc-a73f-22ffd8a88190", "comment": "Malware payload", "value": "ec0ca447341cd8c69dd59022e9181ede48485a7467b0772c97aa6e42d94e00eec248af35a5f9b09cf3485e85a920be47", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306848, "uuid": "f231284a-c1db-4115-9faa-f5a73451615e", "value": "T14A41CFFDB1260A712E6E9EAAF7B904287CD195F79CFF9E05DCDC74E9814CE082001A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306848, "uuid": "6c71da5b-43a4-4fe2-ac88-31a564a5a41b", "value": "48:i3x33V8Vht3VoWVoHo3puA3kdL3TJJ3WN3I2c33fz3VnVOg38bEn:i3x33m93Zf3p/3kdL3Tv3WN3I2S3fz3j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766306848, "uuid": "65e735ea-13be-470e-8b9a-1d47af2dbd6c", "value": 2180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766306848, "uuid": "4cd48e80-dcec-40bb-b831-cff2d897aae0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306848, "uuid": "5903b451-d166-42d6-b669-e355c9699f51", "value": "nova.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0a70142-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330072, "uuid": "b814ae05-e380-4847-84f3-4481b82ea140", "comment": "Malware payload (Mirai)", "value": "ce090f1a79541ad6d07d367fd218a8c0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330072, "uuid": "c954b1b1-c30f-445a-bae7-a7e816dd5ffb", "comment": "Malware payload (Mirai)", "value": "4cea977ef534cdc86be5bc7df44f6424bc99da2c93bea2725f7c57a6834b0ff4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330072, "uuid": "91407984-3732-4e74-8b09-b0796e341cad", "comment": "Malware payload (Mirai)", "value": "6aeb088677d51df573724f051a3096b4a77cdb29", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330072, "uuid": "2414dca0-0d4f-4d9d-b32f-a8a1e8494b6e", "comment": "Malware payload (Mirai)", "value": "99b902c0e96ed4559d01595554d30695f476e0cfcfbfcf1a44be2dbdaa90e6f46bd17e5151f71be7bea48d6232b40000", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330072, "uuid": "0f1c6a55-d75d-4559-b2fa-7cbb0685b250", "value": "T1F8E0126F1027AF02C45C9E246A71386AA560868529710B5EFEE92037948AA10771CD68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330072, "uuid": "09ec010c-d258-4899-9192-424fb0864357", "value": "6:L6VbkPjkxVoc6Vxy1Voc6VQHz2coc6VcfiAK6iTLVp:eskspDy1qp22bpGLK68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330072, "uuid": "4e82e2de-d254-46a8-88af-af6f3e7fca6e", "value": 349, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330072, "uuid": "3b2d925e-35fe-4a93-8df6-6f722b84a1bb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330072, "uuid": "edb7d732-fc11-4fcb-b511-dd2242b7d97e", "value": "gp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "188aa55f-de0e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766281257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281257, "uuid": "a3ffbede-a8f1-470b-9228-e3e9e3dd0499", "comment": "Malware payload (Mirai)", "value": "fad9ae5898ab08c4639d80b35ca1e751", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281257, "uuid": "122a626a-d462-4306-9fd3-221f9b90afbf", "comment": "Malware payload (Mirai)", "value": "4dd5fec43f7842b483fb2fcae47039da913dc16dcfb09c8db2f330d4c531dcac", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281257, "uuid": "a9a2868b-7ae8-41af-b89c-df7faf227357", "comment": "Malware payload (Mirai)", "value": "e1b2caa060e227e49c7e9e8868dbc720218eef40", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281257, "uuid": "c2526bc8-0646-40cb-83d1-75b814c782ae", "comment": "Malware payload (Mirai)", "value": "b188a6c663b0e0859871ea9f46e62d429717cf8dd308987f12c0ad6efd8f7dbd129bd787b333f99f16e8bed232c421a2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281257, "uuid": "cae3a034-a964-4ecd-b04a-478bf49a311e", "value": "T1B6F0F9DF0274049551C1F96DB9A34CB9B00A66D93AC90B8CE8AD0C3911CD93CF431F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281257, "uuid": "18d2236b-6e0a-44ad-af22-f417a0f7bb15", "value": "12:t9ouZDSHHWNZSqHWN0yzvS0yzMHWNfIjDSfIMHWNKDS7HWq:t9ouZ2nWNU8WN0yza0yzGWNfZfhWNK2d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766281257, "uuid": "73d700e0-e5c2-48d6-b6cf-3b08edcf9c32", "value": 577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766281257, "uuid": "f0124116-4ced-470c-8ff5-42f50f90c532", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281257, "uuid": "01249f9a-bc3e-400a-b320-e1f679cb1ce4", "value": "dvr.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bae4877-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340506, "uuid": "98710ee7-624e-4a29-983f-c8b0c24fa4a0", "comment": "Malware payload (Mirai)", "value": "305ef4ff6e016ce2966b3a138b5d2c41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340506, "uuid": "047ce9cf-4c9d-4e44-ba38-6043b5cd5aa2", "comment": "Malware payload (Mirai)", "value": "4de2d001d84e1286832e94dd8f08f5417034bff52e133e6d5f77960bb3c1489b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340506, "uuid": "d0762732-039b-4b2f-8df9-64f791837ac8", "comment": "Malware payload (Mirai)", "value": "97165c8fc4185087576b2b037ad27efbb126ae48", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340506, "uuid": "97c28496-b9f8-46dd-8dc0-70b58828497e", "comment": "Malware payload (Mirai)", "value": "e53925f9c1ade9de66a4f2f6e1e58aede9079ed24d0b19cf74ab397d995448175739d2f5cda01810616d02c791555322", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340506, "uuid": "b2df4bc3-a3ad-4338-bf48-45d6298fa48d", "value": "T177B3D74A7B650FF7D85FCD374AB91B05259C960622E83B3A7A74D818F24B24F09E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340506, "uuid": "aef492cb-58ca-4a5a-9106-19a4932aba67", "value": "1536:Bt+wzhpYhVKRB9NMc9tn1bU76D4AFQ4LEaMIYFtl9PRhkUVRFRT2bVR:BlYhARBYsLbUOcAUVDRDT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340506, "uuid": "b2edbef6-7612-4170-8d86-459be21a305c", "value": 109420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340506, "uuid": "758cd086-a5f5-40b8-aadc-bced77665577", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340506, "uuid": "4c593609-b02c-4573-8dd6-ff04b27797b2", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07d805d9-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342217, "uuid": "57c4e9e7-129d-41a6-9331-ef0ab56bbd3e", "comment": "Malware payload (Mirai)", "value": "4cc06c2f874dfbc5ec67d5a5e3be6ac1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342217, "uuid": "ee270dc5-cb46-42c2-9085-40beeb3f085f", "comment": "Malware payload (Mirai)", "value": "4e35f9129331437c0b687a7ea5b7b1c800f0a8034e846aaf1f881ef5fe443d8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342217, "uuid": "d1ec5b98-562e-49bb-b925-488d3b47e8d6", "comment": "Malware payload (Mirai)", "value": "3357d8f4c74ee3804e0b6dd2a39a9da001e6fc00", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342217, "uuid": "5aef16e8-0006-4349-a654-424131fc5e22", "comment": "Malware payload (Mirai)", "value": "733d8ab01b3065deea875cb857abb9da2f4dc64e9fce46f0a14beafbf0b5edfb6a05d71b496490515db80b4e2d71f0ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342217, "uuid": "299e61ed-fb70-4e92-a17c-c56da67cc59f", "value": "T1AB631795F402DC3CFA4FDA79C5950506BA2CA31495530F6F92BBFDA3AC321686E27C81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342217, "uuid": "4a9642ff-5ca4-4261-9e83-a4ec60c4e6b8", "value": "768:bd9UhMV1mB2l5u4NJi3tqHZaUgDTgSa05n6imCC1w/ARyQM9MPkqBWB8i8xdt23b:R9l3NjyUUDTgsQ/f1wYyQM9bqBc/8btQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342217, "uuid": "5baf0d22-ba75-475c-84aa-1df60d0b5aa0", "value": 67892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342217, "uuid": "92b2223b-8657-4fd4-ac89-b4c20d8b5b6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342217, "uuid": "6623dc41-8689-4af9-835c-19e5cc303fd9", "value": "shadow.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "925ec974-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342450, "uuid": "6b32b030-fed5-4832-9559-b5d8e657c2e1", "comment": "Malware payload (Mirai)", "value": "0f89e3ab29253fd2eefc7e2d3fb78b60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342450, "uuid": "c28b2596-be2d-4083-9912-f95ca8814fcb", "comment": "Malware payload (Mirai)", "value": "4e6459a1b7c0a03bf541ae66d00c2ac0e4dca2c6b4680149bb8dc441b153c40c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342450, "uuid": "22229e58-05a4-423f-8315-ea05ea9f28d8", "comment": "Malware payload (Mirai)", "value": "585a633b382a83474c22308884996bb29596b830", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342450, "uuid": "af968d79-4d7f-44e2-8135-fc07103c0691", "comment": "Malware payload (Mirai)", "value": "351836310a8e472e3968658c662f87a0d836da9a1c2a96e3c8edc55dd391f75418156fd7d4a0c03a14c905d61fbd6d56", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342450, "uuid": "b3024a2e-54df-4dad-8d70-21581f1a6e92", "value": "T1E8C34873D8266F68C595C1B0F0A1CF792F63A99482471FBA58B7C2B44043C9DF906BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342450, "uuid": "7533f10c-02bc-495c-a5e2-d9a26520cf72", "value": "1536:Egud/PvjkV+cpn3VPo6FYCeXKg7BziUgT5wQUjWzaHfU0ulbs:Egud3vjkccBFnFYyglgT5CjW2Hf8lbs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342450, "uuid": "859e8f7b-69d9-4e61-b80b-fc62fe3f7576", "value": 121440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342450, "uuid": "1bf94e08-cefd-4688-ae78-e15bcb2f484a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342450, "uuid": "70a8b1c6-830b-462b-80ef-8a5d90eb445c", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0b38dce-de00-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766275472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275472, "uuid": "ca16f484-1bf3-4067-a8e0-044762dedb86", "comment": "Malware payload (Mirai)", "value": "8ed7a140879904d4655631389dc37556", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275472, "uuid": "b5fd1151-ccbd-468d-9bd1-2716c5ece908", "comment": "Malware payload (Mirai)", "value": "4e8563eeb599390f9e73c69999c58cf7a39ee75b6a394fdc7422694aa730b37e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275472, "uuid": "49ad4e54-7146-4b83-941c-f2b248b886f1", "comment": "Malware payload (Mirai)", "value": "556d6240bff473de99827773f5f22479d823c929", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275472, "uuid": "232008b3-bc49-4db3-8b08-3e320f38ff55", "comment": "Malware payload (Mirai)", "value": "3562b664602cfbce3ab5d5c6f2db70fb13aca14492ff614e5a52849facaa4f04641fea40947dfe90929d66bab4a20b61", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275472, "uuid": "584cf6e0-a39c-4cd4-9a4d-0f5f45a70169", "value": "T1C8933BC6FC05DD7DF88AD7BB44630909B630E36116830B3A775BB993AD721A93912F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275472, "uuid": "e0c1c649-46e2-4401-8f57-8c250a9e7784", "value": "1536:tZ3n30JLCDrXwKn7ACFOyK//w8My7hxYZt3+OqCC/cnFmSQIyWeDCbGxJKKKIzEY:Xn3zXXOl//uy7hxKjqPcFReDCyxJKKKi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766275472, "uuid": "b3955b62-0351-4b55-8c6c-43decf9c3681", "value": 95004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766275472, "uuid": "42076807-22e5-45f9-9bfa-48a2fadeb19e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275472, "uuid": "8828317a-83af-4a1b-aebb-31c13153f7c1", "value": "sdxkzX_UXA229x.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95ee552b-de8d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766336013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336013, "uuid": "4153779f-bf67-40a6-ae6b-e386f758a5f8", "comment": "Malware payload", "value": "449f5add36b23a8ebd8bb7e4e44aa0de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336013, "uuid": "f499584a-df8c-4562-8ae6-a3ce4bb9d147", "comment": "Malware payload", "value": "4e96c10fdec8ebe140ae2f75819fd250bc1f2a86d30b59f0e96e8a679d0f7e69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336013, "uuid": "b8438ce8-a585-42b3-be7e-35a48f8720e7", "comment": "Malware payload", "value": "0c462a1d627eb56055106a87b129409a62c0ce37", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336013, "uuid": "7c172c74-b90e-43c9-8a28-2a20efdb6452", "comment": "Malware payload", "value": "6393c9141278853020206da99a11a61906a22fd8435124af872c0ca6214b07ba0803b667446cd0d7280614a862e1eb6a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336013, "uuid": "59a8173e-b230-4c5e-ada7-fbc4e95d7bf6", "value": "T178A3295AFC80AB11E9D525BAFE5E118D335307ACE3EA7102ED105B2D278B96B0F3B511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336013, "uuid": "569ff317-0f50-43a1-85f0-97b39d168a9f", "value": "1536:v+nHNzkuFRXWmFUhaYOAEJ55XbrzPjDoeOl1viEAFa/SG9Y75fk0/SSq0:WFRbFKS55XbrzPMJAFa/SG9afl/XP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766336013, "uuid": "8ec064bf-ac6d-44fe-a8a4-f536958de71e", "value": 105308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766336013, "uuid": "a3073059-3b80-427f-b55f-754bdc63d6c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336013, "uuid": "dae93bd2-43f7-43d9-8173-c39694a5e44b", "value": "99cm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c2f19a-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345361, "uuid": "9bef4938-4bd3-4651-8f19-8076d87d3af9", "comment": "Malware payload (Mirai)", "value": "c074f15519532b0505af6a20dda9d45f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345361, "uuid": "f69faf5f-017f-43c5-93a0-0f67d67342d7", "comment": "Malware payload (Mirai)", "value": "4fdb9f7d3361690c4558b67ccb6a7374e9e5b7f3ff10060b3a123d33d9b77de7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345361, "uuid": "202d5d01-93c3-4b99-a274-2a4fdd03addc", "comment": "Malware payload (Mirai)", "value": "285c641b115004588f3e5b9b4a74b4508058a9fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345361, "uuid": "1208b70e-4cbd-4c28-83d8-4c82010438bb", "comment": "Malware payload (Mirai)", "value": "f07ab510af6a0719ac19cc42076e3f318ea5f020241659276b8c9e40538014e1de901642e49f88083fb5ba181331bffe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345361, "uuid": "55bd26f7-d27c-4f0a-87bd-206281095218", "value": "T1B1C3F185BB636991D0A342FDA4C00AC387912E318BE217480699F674387DDFB1F69DE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345361, "uuid": "e74e6be6-5f58-40b8-aab0-7b5df904d75c", "value": "3072:SBdQK+TG2nIjnRdZaUXUSgkLCCVwHWiEiBtbMMTna:eMQRtXU9kLCP8ifbxTna", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345361, "uuid": "c6d2adfc-8d3a-40cf-9823-387cce83eee6", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345361, "uuid": "666a1436-91be-4ac4-aa1c-b124050f8103", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345361, "uuid": "09726845-3afe-4e06-9ef6-7318b28669c3", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "323ebcd0-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347872, "uuid": "bad1f9ad-86a9-4df1-8b85-42f4fda31f36", "comment": "Malware payload (Mirai)", "value": "69ea877d9814cadd08bdd1a7dd8521a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347872, "uuid": "864a15e9-a15f-48ad-91d5-d078ab203e51", "comment": "Malware payload (Mirai)", "value": "5045f5765a7a317f2109e3669bd19159e7eb9d869c787cfbf1100dba5c3356be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347872, "uuid": "d79512cb-5133-4bac-950a-78f2d41ae4a1", "comment": "Malware payload (Mirai)", "value": "48d1f181571767bc214cd6726dd31bc1ab64bf71", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347872, "uuid": "33799a45-b480-4285-a0ea-3a13d7e50b7a", "comment": "Malware payload (Mirai)", "value": "b4d9fdffebc4d5e7b828ef668ccb60b02dfac43be626357467d2e33a3c79b964b6aeb3d7ce11d9c24103b808889e5c7e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347872, "uuid": "9d29f298-4d91-4545-80a4-58a8036b89df", "value": "T18C6302E80954FC05C2D13ABE6F693304D3304929C75727D88B625AAC36DA9F63DA4E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347872, "uuid": "480d53f6-c742-4777-a781-c7c6698989c0", "value": "1536:slk4lI9Ny5CatE3yXccF+MT8SK9pmLJJLnWMH1ft73qZy9Q6ZR704rP2:Ik4lj3OCXcfMT+upf2aVZRbrP2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347872, "uuid": "3f689b78-d5ea-4e43-9c3a-55bc4187a408", "value": 70828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347872, "uuid": "8d8f49ef-1fc3-4833-8927-0d8abf83df74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347872, "uuid": "a47bbf8a-2449-4a9b-a533-a05be50d4a93", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c325e75a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330076, "uuid": "f9eca120-54a5-460c-8fdc-ac6f9e722053", "comment": "Malware payload (Mirai)", "value": "2ed1d874e22b7aefb021dc6d72197062", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330076, "uuid": "ff6bfd53-17c1-4f1c-9afb-731855193cae", "comment": "Malware payload (Mirai)", "value": "506fad5bed04057f97b4b9afb4148168a8129cc8038c1c279845a4567c7acf47", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330076, "uuid": "5150f344-b28f-49ad-b728-15e7bc4035cf", "comment": "Malware payload (Mirai)", "value": "bccf5a3a05c6f468b4c1346b697ecf6fd7082a46", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330076, "uuid": "e2f4f76a-ce41-4a76-a426-065c17089e7e", "comment": "Malware payload (Mirai)", "value": "e1847665c216daca53bf56ace389037c01af55e571654d8dbec3f962b6e70805590646588c4e1a9782ec75e6875a724c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330076, "uuid": "b59c75a6-81ad-405e-9d84-9af9b371eb41", "value": "T1B611215E96156DA0818DD47A3781880E71818BDA193F87A81F9D017E14E42DD6738E59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330076, "uuid": "7548ee0a-7f04-4af7-9dad-90e72e8a9d5d", "value": "24:f7Rr7M5vr7dr7qr7Vhr76r77r7+r7Sr7rr7bB2:fVrw1rhrOrPrmrPr6rWrnr52", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330076, "uuid": "578faa2e-41e5-48de-bef6-ceec04df2805", "value": 1005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330076, "uuid": "65266da4-127b-496c-895e-c23a897b91d3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330076, "uuid": "fa238839-27f1-46ee-80ad-a1b6a6a232ae", "value": "af", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0f644c-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309686, "uuid": "c75f323e-9a94-49d8-9ad6-022d8955afd5", "comment": "Malware payload (Gafgyt)", "value": "adf22bb48c825bc3f7ab88434104bd29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309686, "uuid": "161e8da1-47e8-4fb6-ae02-8734c0695720", "comment": "Malware payload (Gafgyt)", "value": "50d3d4834454f777b5e084105b5953cb468beb534e00a30ba41cd080a9f42ec9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309686, "uuid": "62cad496-35af-4840-ab56-60c1b5a9b73e", "comment": "Malware payload (Gafgyt)", "value": "0e20a3cae4da2e69aa8ce4e74516053f48b3ae9e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309686, "uuid": "b41ab9ca-4cdc-4b8a-b741-5420e42b85e0", "comment": "Malware payload (Gafgyt)", "value": "ae0d523727afe73184dff18c61234a3253f1f22448b48311f253ee0bf6f461efe45ae1d45379e46417c85370222f26bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309686, "uuid": "cfa6974a-188d-4385-9ab3-bb49e173ba9d", "value": "T17ED31905F460875BC2D217BAB68A425D37231F7893CB33256A34BEB42FE1B981E79531", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309686, "uuid": "5ea740cc-0f62-4123-93d4-ca5c2c5a1b52", "value": "3072:Sdf+fvEqa9FazYA7IboRhQe391CErktmCQA9FX9aH:ifWEqa9FaNhQe3DrktmCQA9Z9aH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309686, "uuid": "1d33dff0-41b5-4d3e-b215-e5cc09e52ae3", "value": 139585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309686, "uuid": "8d84eca4-8cc5-4e26-a7bc-47d07bd162d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309686, "uuid": "a39bfef1-a7af-4782-8cb3-fc50dd24e5f9", "value": "arm61", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2832e0ed-de9d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342701, "uuid": "ddd8cf7c-5a8a-4cf7-ad77-5fb4134bb742", "comment": "Malware payload (Mirai)", "value": "56eb6ac8c59142edac515f6081cf2558", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342701, "uuid": "8cb5ca88-d0b8-4550-807b-2af45323e25e", "comment": "Malware payload (Mirai)", "value": "5142f74ea28905556509f9a398408d3344934d2c673367dac758d62322d1975a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342701, "uuid": "418b8d4e-03ac-4915-a92b-515640a41500", "comment": "Malware payload (Mirai)", "value": "dcf6a72e1974ce0bcc7ea8e22c2cfe61806c6779", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342701, "uuid": "d36c5afa-fc49-4c0c-b1b0-1907685ca525", "comment": "Malware payload (Mirai)", "value": "d50a794da308075528a40b466334d823ef10e143a8ca1ae3648ed38e99dee705a16028dc013d49be4c6f4977f375a59f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342701, "uuid": "1b67b614-2edd-4243-9efb-74b468892922", "value": "T1D9830996B9818A26C6D452BEFE1E51CD331317B8D3EF73139D106B247B8A42B0E7B905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342701, "uuid": "b480ffbe-4d1d-40c7-a7fc-97f0d3cdf3ee", "value": "1536:esnWaWZv399iczqTp7eg0hsA8XqRB04jdTAxl/3JoMabKMli52gM7KxvH7XAYYTk:Omtpk04j9Axl/3h2gM7KxvHbAzTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342701, "uuid": "592292b6-8960-447e-bb19-d9f4c2bdb7d0", "value": 84892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342701, "uuid": "043d3913-1f19-4f23-a0a7-dc7186f4d26c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342701, "uuid": "b87618cf-dcab-455f-8428-a97166636aa8", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f70776c-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347867, "uuid": "6cdcfd2b-39b8-466c-b377-edf78d626d20", "comment": "Malware payload (Mirai)", "value": "c8a9a97355b04a1a41afb2e41f9ec6a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347867, "uuid": "96ca2f56-60ef-472e-abb6-b96507b69e00", "comment": "Malware payload (Mirai)", "value": "51dfc1e69dd5c8c8f3ce6b640a04425ead1630e4b5c411415c752010c5edeb5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347867, "uuid": "4f05d0d5-eed9-43e1-a396-a1b5570e4c78", "comment": "Malware payload (Mirai)", "value": "3e1a99db7be285280aceff3a23ca9d6105620497", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347867, "uuid": "1a25986a-f763-4f7c-93d6-df74d2684e6a", "comment": "Malware payload (Mirai)", "value": "b4d0e637994e383689b65accccbb22115f4b50e67c0b58dd1dba251d2f918aafd2c3b6dfac840140f3d03a8908e24b54", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347867, "uuid": "9a2a53d2-c5b5-4f07-934e-8189503a1569", "value": "T173531847AD4456F9C084E47C4ABB623AC154B1BD7339BADB77C4BF2A3801F901A0D999", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347867, "uuid": "f7a0b90e-5198-4bef-905d-f4bf50d95b73", "value": "1536:UKy+AzkraHhLqhlyh54ErHAR6Qk2UO+sFWjAw:UKjAuaBuhl654ErKmdO+OWjAw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347867, "uuid": "73f8257a-2edb-4a95-aa06-7fcdc63c0721", "value": 64040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347867, "uuid": "ccf0784b-ecf3-497e-9f34-1dcb9ee29686", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347867, "uuid": "eeee3056-3c24-4430-95df-548a2dc07173", "value": "Fantazy.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bcb0246-de7b-11f0-a129-42010a9c0007", "comment": "Malware payload (PythonStealer)", "timestamp": 1766328104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328104, "uuid": "d0720137-fdc3-4359-bbe0-85e24d0facdb", "comment": "Malware payload (PythonStealer)", "value": "8e49de2bb4f505126d18d882dbe27421", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328104, "uuid": "7efaa9b6-2de7-4dba-91f5-b66a2a497cfe", "comment": "Malware payload (PythonStealer)", "value": "52a0237cd71a51783d7e0fee6fbc737c5549df7a23ce08a9a619890583329d40", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328104, "uuid": "931e283f-ab66-4441-93e1-ff1e07bd1431", "comment": "Malware payload (PythonStealer)", "value": "1a0d927bc7668be234aaeb27a977e3e56f938b1d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328104, "uuid": "a82bead3-e5e9-4c82-b4aa-430a47ed69ea", "comment": "Malware payload (PythonStealer)", "value": "8b07b80e4655e8052e6b69f543661acd802687312971df9c2b2f6d767a6339a44eae40553227d40fcd0a28d442cdaecf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328104, "uuid": "7d2bb6da-0325-4f27-95a4-95b02d62e652", "value": "T1FA27332889F3011CD61F8EF9EBC511F27659BC9A8751E4B73338B979CBA3C41C65098A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328104, "uuid": "a229cbab-f10d-477d-b51d-b9c5fba4e5a6", "value": "0cad4d75817cf5181c89bf958567a0e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328104, "uuid": "2bcc7e67-5e1d-4c7f-b42b-25a40613b159", "value": "393216:DhRhj6hX4ePMHJMYzGIn3bpeeXbCwq8wQ0hJa:V6hX4NpM2GY9xCwpwQ0H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766328104, "uuid": "0684d8d5-6b5a-4075-b7aa-bc3659a5d8cd", "value": 21002240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766328104, "uuid": "c7b07934-a4c2-4253-8e95-3e7b9baa8f59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328104, "uuid": "fcba18ce-aa8a-42e0-87ed-f1b2c4bfd884", "value": "Nuker#4999 v2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5be77da7-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345365, "uuid": "daa1e7ab-7d14-47f6-8577-05686d4c84ff", "comment": "Malware payload (Mirai)", "value": "b5233857a0426cd6040847c4c737865e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345365, "uuid": "08424578-adcc-438a-81de-c91e28743fda", "comment": "Malware payload (Mirai)", "value": "52c5cb45ebf189c06f1f48f7adb244342354a0bdef18f4b66b8650c49fb6f5dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345365, "uuid": "9d956031-733b-4fde-b005-3243db389882", "comment": "Malware payload (Mirai)", "value": "025518e3bb3dcf26c9f9857892cb396d31376c77", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345365, "uuid": "b2b93bec-fadc-4457-90f7-8b0d6d147215", "comment": "Malware payload (Mirai)", "value": "ee4416dd3bedf5a5c13e9d5736632c28fb3f64986532dfc251b264e9c69fb38157aa4b705083c2c6020b46114aebf52c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345365, "uuid": "fa960ce4-8904-4c0c-8d84-90e7956ffef2", "value": "T191D3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEEB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345365, "uuid": "417352bc-03b7-4fc6-83ac-74449dbaaad9", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0ZV6:xOFgpOEoVv3MXL5NhGOV6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345365, "uuid": "66b6bdf9-0381-45f1-b79d-0a05a6658c01", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345365, "uuid": "329069ca-7c30-4d79-b5d6-6364208e8027", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345365, "uuid": "520b059a-13dd-4b4e-bd75-f0873ed8c19d", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a808e857-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "db058e79-b5a5-49d8-8423-680f3d6c8958", "comment": "Malware payload (Mirai)", "value": "372b5eda599e5dc9964575d90e79576e", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "8652b37e-cc07-47bb-a4de-9f24680fd71a", "comment": "Malware payload (Mirai)", "value": "53171bbb629eee5595e5b1e17a718545974df736f50a224d2272aba81b004ce1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "4bc962f9-143c-44e9-8e87-9419d6b75fa1", "comment": "Malware payload (Mirai)", "value": "587926b6f2d3f22b756de2576200af2b38eaf428", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "d681bfd5-be9f-46cc-b9db-5da7e0b68e32", "comment": "Malware payload (Mirai)", "value": "ee2a40245b9c3d3736eade2479774b13923b5a0551bbff00a52f424294e85d9e50ca67106f83ef413d6e79c8445c72af", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "5b6a7fe4-71be-4f0e-a3da-a4729814efed", "value": "T1B211AE5F1200796040CDE46536D1CA0874888BCDEA760E246FF152B944F86CD377CF2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "ff48ff38-8de9-4cd7-b142-501ebf3e6d22", "value": "12:0im4Y/mnI/mn/mm/GERC/z/z8L/bL/j/3IL/niL:zNY/AI/K/L/vRC/z/gL/bL/j/3Y/niL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330030, "uuid": "35c28cca-811f-4f35-b6bb-70075c557329", "value": 893, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330030, "uuid": "d3036097-c33b-4789-a29f-b8cc519e4210", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "91e6de45-9204-4e80-a56d-a67a303c7798", "value": "w", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2104edeb-de90-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766337105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337105, "uuid": "4d346c2a-88e3-4935-ad75-acf8ea42919e", "comment": "Malware payload", "value": "f987406071eb51f38acea5b169492ac8", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#AB22ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337105, "uuid": "f8a0f4f2-2021-4f75-a5a2-3d9b3f686d7a", "comment": "Malware payload", "value": "536d67991e31ecde9fd3cb55bde1a55bb111938ec792f529a3215a303beea52e", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#AB22ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337105, "uuid": "f7319cc8-9e69-4005-9010-66d1ecb36431", "comment": "Malware payload", "value": "4e35bfa2e2ac0624e52e9a18aaade011d1f0e90a", "object_relation": "sha1", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#AB22ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766337105, "uuid": "210d3635-ea3d-426c-a9c9-05af5014accf", "comment": "Malware payload", "value": "f9eebd46b1d5337b273bd7b88bea1200fc9ca6ed5c2dc2b055d02cc10103711c0d635c7a1aa431bf9b360837360123ae", "object_relation": "sha3-384", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "tar", "colour": "#0BC0E3", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#AB22ED", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337105, "uuid": "fdda15e5-ddf5-4034-9650-a4397a43ced1", "value": "T13D72CF003281F2AC947BEB46D4A20933348DE8A3EF496D03738AF5F9B6E14077E23554", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337105, "uuid": "5c21520c-f4a8-4f47-a5ea-e767b1b1eda3", "value": "384:7jlDbwiV1dgg29PEpsJ/IvgQRsnCsJkhhQ0aVYb:FDbt1db2hEpsqggeJbxa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766337105, "uuid": "24a461b6-2685-42c2-a6e0-165170d2d12f", "value": 17131, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766337105, "uuid": "08de6fc3-fe40-472e-a11e-58834423f15b", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766337105, "uuid": "9eb1776d-051e-4d52-8bda-9e2c88db1175", "value": "kworker.tar.gz", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec22cd87-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766346466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346466, "uuid": "9cc365cc-ec6a-48fd-aa60-506c06be4ddc", "comment": "Malware payload", "value": "262592064ecf716f95edf6284d30a1cd", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346466, "uuid": "26ad1510-3120-4052-9c5a-542eafde2cfa", "comment": "Malware payload", "value": "538637349b68660afe5b7169ee6195be8c1163e8502b27bebd3fa3fb6791f3df", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346466, "uuid": "56a7179b-c25e-4c4f-9253-6c04ad583594", "comment": "Malware payload", "value": "e69a4e325353f9c1764bc7e26d317155de535dd8", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346466, "uuid": "0032be19-2ac3-4602-b966-0d90c78dbe1b", "comment": "Malware payload", "value": "f849f2378cebeeed07208b24af1eb6ab88f56a266f6d36f7b78a8a2c62aeadeb6d808953ecff8ebdfe8d9c529f7e17b1", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346466, "uuid": "39300042-645e-4668-8784-4f8620f53615", "value": "T18D51819F11008F31A64E898EB7F03134764AA4D35BEB8A54EE90085E0EC6E5C37C9E50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346466, "uuid": "448348a9-49e2-49c3-877f-25c7e9f54ece", "value": "24:6wUwHwCOwC2JMYwbCwbbiBcwnLwnuZUwuEdwuEnE2EhEvwuwRtw6Lw6bwPwlwnwn:xI2JM/1biBv8uZuucvyptbworhM3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346466, "uuid": "4bca8203-6b4c-465c-be52-77f528d7b660", "value": 2855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346466, "uuid": "2611dbc9-7fcb-4fa6-bd1b-9efb9423e949", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346466, "uuid": "0626cf9e-aade-4eee-9ea3-f3f24e8813ab", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1a07083-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330047, "uuid": "200b1c06-18fb-45f5-9823-5c47a2fe21a5", "comment": "Malware payload (Mirai)", "value": "1f0a117ca08c000325741e88cc3e0f9c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330047, "uuid": "0acb0e85-40bd-4461-962c-694c0485cbda", "comment": "Malware payload (Mirai)", "value": "5494a2d092bc5694e3bc2f9c1520b2db68265a6f088fb7ec07eedcdfd4ec9ab3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330047, "uuid": "4e49006d-f3f7-404e-bc4e-2a7b6b7a3b2f", "comment": "Malware payload (Mirai)", "value": "ca05f6cb5000ded4c004e73879a2679d33c88d11", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330047, "uuid": "48e347fc-54ca-4701-94b9-cecbc098fa91", "comment": "Malware payload (Mirai)", "value": "1fc60d6bbcd5130e8563302a27ae259c1a61a355b3f89a2cd1626a138604bc0668d93a28d8855522031e217c5683538b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330047, "uuid": "dfb5f105-97fb-4b5e-8d03-8907645cf6ef", "value": "T157C0C9DA33013B40808CB87525B6384A28E0C9071B75077F8D90C072C485934F73CA5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330047, "uuid": "bcf0e419-e182-48b7-b6c7-7c63185b1eb9", "value": "3:LxAjdVZfImWBFSHEom+bMUDbGBFgxAjdVZfI8QGFSHEo8QLKwoVWLDbXxjKpXDjL:L6gm9E1+bpiBFg6g8Q9ErQLKwoVWsUQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330047, "uuid": "f9a2155f-a4ae-4155-84d3-8f6415c7b90c", "value": 190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330047, "uuid": "ca93f507-b5b4-46ac-b95f-66979ee5b512", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330047, "uuid": "6a896ac4-f019-4209-b6b0-4869b92a6a1a", "value": "brr", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf79bf49-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330070, "uuid": "0e5f6679-c657-41cc-8286-ddde48aa3113", "comment": "Malware payload (Mirai)", "value": "5ccef8f938724fc16f2192fd0049c02b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330070, "uuid": "b8964fd9-f36b-4c03-8331-b0208021ae66", "comment": "Malware payload (Mirai)", "value": "54f17039d5076d09e26b85e4f16ee9b05aad57b26e27425481294fc1105fc12f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330070, "uuid": "77aede6f-c20b-469a-8ef4-36c21da17b78", "comment": "Malware payload (Mirai)", "value": "815b127d25833b32e1a407085002e1abcf206000", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330070, "uuid": "1bd81681-e5d1-4a08-b5f5-e360c0a9379d", "comment": "Malware payload (Mirai)", "value": "7f1646e8356845b3c08a2ba0abe240fbbd9b94a7375e81f1f1c7d22321c2740bdee9b839eb3fac9151af0dd09c9ca806", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330070, "uuid": "5fa3ad28-e32d-4ba4-a55f-aeadece9d344", "value": "T17011519E15107DB1445CD6A57B928108B5809BC918F70E685FE9063A4DFA28C3328E29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330070, "uuid": "0e031ad9-5cc5-4ebf-b94c-821531553cb4", "value": "24:E43Z43M5343l43643Vp43K43T43O43y43D43bJh:Ey3tMvufCR14ah", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330070, "uuid": "a46d67dc-49ba-44c5-8fd6-853dfd46771c", "value": 985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330070, "uuid": "41bdb4e2-ee62-49e7-961c-39266027a566", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330070, "uuid": "0547b576-0cc6-4de9-8062-0402cb47081a", "value": "tot", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bb8ceff-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330010, "uuid": "041b0173-1333-4b39-b913-b85254e1356b", "comment": "Malware payload (Mirai)", "value": "37c44eb7d8d45bdadc53dc86f54c4212", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330010, "uuid": "5078b735-a289-4be2-99ee-302f1b8096ba", "comment": "Malware payload (Mirai)", "value": "5578656997fc208feafba683c5276d7e7183c124e7ed6c019eb625273573c0c6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330010, "uuid": "a92f4611-15e0-446a-a3bc-f91d79da3abb", "comment": "Malware payload (Mirai)", "value": "5f2ef04ec9cf9d46bc0575b2d15869774d1f5a5d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330010, "uuid": "d2c30a22-2b86-464b-a36a-c3edd77eb388", "comment": "Malware payload (Mirai)", "value": "8a8a6a39e904399c0acd8431229ccf3c12a6a8903172f34b0f9c4e34c364f0b3e6c7e1762fc3582bcb1b160f9a6c8417", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330010, "uuid": "fdda48a9-1e7a-4247-8af4-a7581e4d261c", "value": "T18EE046AF0023CF1381189D742AA238737070CAE022B40A1EEFD6803B84C9A00732CEA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330010, "uuid": "88afd154-4661-4060-b805-20d5fa427031", "value": "6:L6VQauzImwV6VecaNgNJwV6VcjF+6PwV6VceAK6i4Z:e3yIOMcaNgNhP6nwK6b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330010, "uuid": "ac99cf9a-92c8-4a03-a8a3-dfe7805e3821", "value": 312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330010, "uuid": "f06c11b5-cc9d-4db9-bc5f-4ca8260fe995", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330010, "uuid": "43b0fc5a-76f3-43a2-ace6-a52d4791c877", "value": "geo.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdee428f-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320726, "uuid": "1429447f-1526-4b1a-82da-d264d9cc64d9", "comment": "Malware payload (Mirai)", "value": "bb8d2d09712ddf66ec80d82f7e52003e", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320726, "uuid": "7b4bcfa1-36c9-4460-94de-c935fc7c35d0", "comment": "Malware payload (Mirai)", "value": "56b9d2a2b608d4f11e03dcc90329e5b49677aaa0cd4414e531305f99057a37cd", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320726, "uuid": "8a748848-2446-47e9-9ce2-f9f0292ab74a", "comment": "Malware payload (Mirai)", "value": "b98389ce76183838516b9f1280a0a5881b4010cc", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320726, "uuid": "60c5709d-ee00-4f7d-8e2d-95d482d7b27c", "comment": "Malware payload (Mirai)", "value": "fb0b82b090ceb4e978ca8df48ebcfb52710c8aa760e1fc83dab39c58c4a51fcd8c1d0b630fc889728c959d1f9a16dd7b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320726, "uuid": "4620ce9f-2d8b-48b3-bc94-f505178aea5f", "value": "T12A212F8ED0145E017884DDD0F4AE19F1521F8EF597A81F986B4E3F3FE3AC110B826A19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320726, "uuid": "7fa12bf7-a0e3-4b47-9b79-0ef6d1b264ab", "value": "24:yaKoHasatNIka3KtaearbagaaKKaQKaQataA:ynoHRwCCvIb3JRrK1i9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320726, "uuid": "e78dfd2d-e309-4ca6-bcce-6c9e70c93ccf", "value": 1130, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320726, "uuid": "70ad71f6-9ffb-43a5-8ec8-edf214237d66", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320726, "uuid": "508c38ff-c2aa-413f-b560-c6b2838a9fd4", "value": "c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a5c2260-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341497, "uuid": "67d1dbd6-48f0-44e3-956f-88d23448b03a", "comment": "Malware payload", "value": "b64c977f52c3fb537a95449222961fa7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341497, "uuid": "7b316d00-6ac9-4b3a-bf7d-e2003753afa4", "comment": "Malware payload", "value": "574e1f482cfe2b8b8f6b0ea6e40d8ec93984da2ac55f6e9757b9a279f10eb023", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341497, "uuid": "93efb4d7-0f06-4755-bf1c-cba9412124c2", "comment": "Malware payload", "value": "acd20e9696643c3288e82c1397eeeb2c94444182", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341497, "uuid": "6c721a71-7715-4d0d-bf93-d1ff5e005ad4", "comment": "Malware payload", "value": "fae774209ff4d6630af379a1d9a0362bc7b6f0b9d8e1ae1d71187d26a59f97b73ebd6682dd0c7843a910a10431f6db85", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341497, "uuid": "44810228-eecb-4679-bbae-a113fafc54a8", "value": "T1E8123047A2D0CE3FC8D953384467122472B794BEDF629713064925B63F427E81E6EB8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341497, "uuid": "ffb78f62-2504-40c4-b164-cee78c743189", "value": "96:GqTVJWWGXzS6vH5ML09V1J9G8YmY+hrsrwegVekrf7mxaamBFBp8sBRnsH5vZAC:GqnWWHUZMWT1YmRhrsnurfjTr8sbnsl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341497, "uuid": "c0f80381-dfe0-476e-95dd-af7d71d56f8d", "value": 9800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341497, "uuid": "5643de52-1259-4db9-8e20-37aa4ad9d32a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341497, "uuid": "7ec21c4e-1181-48be-a1ee-0a1373d81d6a", "value": "linux_amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "904c00f8-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342446, "uuid": "3db866c3-673e-44d4-8d1b-4bc7e36ea901", "comment": "Malware payload (Mirai)", "value": "af06a8b2c78f9ac19a724efd2a8e91cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342446, "uuid": "37c5fb19-9625-48ab-8eda-a9d697f1504d", "comment": "Malware payload (Mirai)", "value": "57572cc4b8e35753b5efccd9c7c2da4507ec66186526b127acf2b68d683ffd1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342446, "uuid": "64eebc90-13a7-472d-a655-33d6b7e509e9", "comment": "Malware payload (Mirai)", "value": "9278de3e33fce34cf9f372f0383b927bc22c8f31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342446, "uuid": "7afced3a-e7e0-41e6-9512-e9f266d50d57", "comment": "Malware payload (Mirai)", "value": "58debd512d864205f93b304a1e06669782548034ed38f08c241614fbcd6beae8a13ad383b1ee99a534e35dbac13b72c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342446, "uuid": "d22712ef-dfe5-46b7-98a1-b2ae1e3311af", "value": "T16EB3D70A7B650FFBD85FCD374AB95B05258D960721E82B3A7A74D818F24B24F09E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342446, "uuid": "64a5e1c1-40be-4834-acd2-2ef2b95be21a", "value": "1536:xt+wzhJYhVKRBNNsc9tn17I+rnuQkRFIEKc43leVdfnxEEVRVxT2bVR:xl4hARBosL7I+SQJMjRTT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342446, "uuid": "de4d5a4a-012e-4aff-a090-c637c0ba90db", "value": 109420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342446, "uuid": "1f229648-5b5e-4c9b-9868-2cbe8b6d0f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342446, "uuid": "4c235248-8ea6-4161-a26b-dc378e592241", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7684d871-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338967, "uuid": "7935604a-3762-4cf5-98d9-ed9e54544571", "comment": "Malware payload (Mirai)", "value": "bd41d55b83ebeddf3482b674df591cc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338967, "uuid": "81b55f71-694a-4c3f-92a1-200bfdf5e16f", "comment": "Malware payload (Mirai)", "value": "575852130762a0dac8ffad73a9fd28f0e7c0a31be75cf71ac4c7640b9ec06225", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338967, "uuid": "dcac1b6b-0881-4b5d-8998-241958d9b0e8", "comment": "Malware payload (Mirai)", "value": "436cd62fbc54af4edea03622b744592ee701bee2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338967, "uuid": "6cae2448-e616-435f-a6ee-8cd7c70aa47f", "comment": "Malware payload (Mirai)", "value": "3ebe937686b0e57f3732491256c4bfbdfb504e872629bdafd561c124ed6d8775507278a268277cbe59977640861e11c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338967, "uuid": "61c98465-f1e9-43dc-a0d9-2db7423fceea", "value": "T1033319DAB402AD7CF99FEA7E80160E0AF221235510530B2B67BFFDD37E321549952E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338967, "uuid": "b98f08e7-c988-4730-b1be-6aba3289cca7", "value": "768:7MehvKgc46P1zmWQc7/JgFHdIp8LujWeXzpUGRJTPOMdL88pIgk:QIK34GpmbBF28Sjp1UGRJbOMdw8fk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338967, "uuid": "87e31ee1-6595-427d-b1c9-3f273b36dec2", "value": 52800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338967, "uuid": "e3bac9dd-e182-4cd8-98e8-8649b753b842", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338967, "uuid": "dac743d1-03af-4a65-ae57-29af366b9784", "value": "Josho.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e36213f6-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341726, "uuid": "4ce2ce31-e8d2-4721-931d-40fbcd902056", "comment": "Malware payload", "value": "68d687da1ba704797431637d1e1cdc10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341726, "uuid": "4fe96b54-5c81-4358-b8cb-25c52c46bd21", "comment": "Malware payload", "value": "5839c96f8bb1c720214b75ec597da9e7075542f0538dd7d98ed5ef2ee1d2cfd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341726, "uuid": "c4b64f05-f906-4a4e-9ae0-a9fc251f622b", "comment": "Malware payload", "value": "8f58242b13ca0d4113e25b067e58fabbd14e8910", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341726, "uuid": "af1da1fb-6d48-4c77-b2c6-fb135bff3268", "comment": "Malware payload", "value": "7c2edd1652936198357019f7f5e1fbf27a93ab1208607b13fb9efff9d68e516773b3ee6cbeec4223efc1986604e971b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341726, "uuid": "36b0a4f1-205f-4d87-ab12-ce845a635b0b", "value": "T1FA63D752B8C29117C9D892F7B31E119E330513A8D2EB3307AC356F613289D5F0EA7E5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341726, "uuid": "4c47823e-6ac6-498a-8352-9131029aab84", "value": "1536:xdj0S+dK4yX2DPbxPox/ArHoW8RAosMaNdBd82:xdwS+Y4ymTbxEgIBsvdI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341726, "uuid": "d0cd31ac-5a71-4146-9a46-f803ebe256d4", "value": 73040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341726, "uuid": "caa6647e-032d-4271-aeff-8836c1b696ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341726, "uuid": "a03d372e-3929-4964-80be-55f377a0a4b0", "value": "shadow.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "492d095f-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309685, "uuid": "6310bff6-407d-4f69-85cf-bce2b83a89f2", "comment": "Malware payload (Gafgyt)", "value": "146c76cc640d18305b605e5159efff40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309685, "uuid": "5f0eaae8-8684-4b9a-99e5-931b3e3973ce", "comment": "Malware payload (Gafgyt)", "value": "5878fc3f25d2a35256a42d7f436819ca231a028036470e3a6f62d43a50b8338c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309685, "uuid": "017ef010-bd9d-4bf6-8024-2527745bb533", "comment": "Malware payload (Gafgyt)", "value": "490b5ffe906378fec32f0afccaf2866b5014a0e3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309685, "uuid": "cae929c6-a510-45a6-b5e6-0ed573b32ac3", "comment": "Malware payload (Gafgyt)", "value": "37c3af9a8481e81b182a784b9a23d135109ee3a4b52f878eb8cca04a364f63153f2512c6dcd300531fc8506d20f01d84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309685, "uuid": "6fba0508-4e6e-420d-aa1e-8379b0ae1e8a", "value": "T16CF34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E26915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309685, "uuid": "2a7724ef-5d81-4f4a-9e82-2e466dc97011", "value": "3072:T1g2/eINNlzx2kkQCMOaQcvBoYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/yYnydM/9MmFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309685, "uuid": "ed57277f-52f4-404f-8443-2c21f57298f0", "value": 159888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309685, "uuid": "39bf5a83-a86c-4c4e-b08f-51e9cc2ce952", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309685, "uuid": "f38a7046-605f-46c0-a3d5-bdbf32ded5a6", "value": "m-6.8-k.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c7d5d47-de37-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766298980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298980, "uuid": "9bdbb8db-dafc-473d-b796-1375cf8a424f", "comment": "Malware payload (Mirai)", "value": "342a3e9f18bb03f537552481c21ca630", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298980, "uuid": "2c864dc4-8255-49f9-8fd8-0818aa0864fd", "comment": "Malware payload (Mirai)", "value": "5879891986f59c8b383eceefa97ae332fb55c1ff1a7313f1f3b9d080a094c616", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298980, "uuid": "1bd503c1-f789-4176-94e1-4a8b8562f1f8", "comment": "Malware payload (Mirai)", "value": "6ddce391b2084c719eb5680c0a3c642374c50621", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298980, "uuid": "eda01b5a-de2b-44f1-9c26-b8a3ce718148", "comment": "Malware payload (Mirai)", "value": "af0abf5f39a6b08c3705be037f9d0056e601ad2da0685823e06a6c91fcbbfe0a1df5d35581d147d143c4d63c2e83f977", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298980, "uuid": "7e39bac5-9ec7-4693-9ddd-b8d8188ac26c", "value": "T10313B493B8C14B3AC6E0237DEEAE418D336077A981CBF6578E615B01378551F0DA3B92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298980, "uuid": "7a3de5bf-6a1d-450c-b719-55b4375dcacd", "value": "768:NtStQtZulOMLQBS7uP4ytmnVUC3z6WystQyVKyxfZX+m4VklK7FhPRRx1T/y+nw9:N77EHLQBAuPPtmVUCD6WyUQyV1xfh+mj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766298980, "uuid": "70087383-9af9-46dc-bbf7-827a8ad42d1d", "value": 43096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766298980, "uuid": "0d120d93-23b9-40ae-a67e-0ca9faf2a401", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298980, "uuid": "00a6d4a9-6882-414d-8bf4-853c573ff060", "value": "sdxkzX_UXA229x.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b165cd3-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347887, "uuid": "42a0dcc9-4c7a-489a-b6a6-0da64bd35ba8", "comment": "Malware payload (Mirai)", "value": "e731bfd0f78c2266cd201d03cc86b4ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347887, "uuid": "a6cf07a2-2ead-467c-b108-4aa636589da4", "comment": "Malware payload (Mirai)", "value": "58a6db8579fbb2eaa45bcddf10cba779a69bb633e45694c2295a975f788c8969", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347887, "uuid": "208d933b-e5f1-4e3f-800d-21aec0795420", "comment": "Malware payload (Mirai)", "value": "a95a87b2887b47b95359f844698a21e1f8b058e2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347887, "uuid": "6f99b01d-47ed-4146-80f6-3a61426e6e5f", "comment": "Malware payload (Mirai)", "value": "dbd9413a5933ec185896dd47d8fc880ba42b0fae695275bf5c2a92bde1a0ee556e8be573d0955cd69c034b97e612d23a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347887, "uuid": "88fa9abc-c14c-493f-a8b0-2ca3863abfc5", "value": "T17AE31945F8414E23C6D612BBFB5E428D3B2A17A9D2EE3203DD255F2037CA95B0D3B652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347887, "uuid": "7f7c9530-0c6d-4d64-991a-ef9af2918938", "value": "1536:7bAO1jbxdIvKCWkvFtMPZkNxqfl6qu2C+zSAHf4xdpUwfCfE7ckjzlDwJc0Gzm1L:7byqkNsGl+zSIuHUwqEQkum0oXL4JL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347887, "uuid": "e0fbc60b-7eab-44c7-83c5-46a8853781c9", "value": 155776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347887, "uuid": "4e71cc91-6109-4aa2-8d15-6e9e7b563c8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347887, "uuid": "e3834569-582f-4ddf-8fd3-7f45ae52be14", "value": "yamaha.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49c2e8d3-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341039, "uuid": "2190f2c2-7ffc-4fd9-9551-631308801747", "comment": "Malware payload (Mirai)", "value": "3c1d0caa251addc7317b2162a63cd086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341039, "uuid": "6053dc0c-6442-48a2-9cc1-4bafb893e712", "comment": "Malware payload (Mirai)", "value": "590f80c2a75bb9e5866b1a03caccc3345dfb65975a3dde6f9fb9f9c5a8dc6ee2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341039, "uuid": "c91d808b-c0e8-4980-8f15-04598e05a7ad", "comment": "Malware payload (Mirai)", "value": "f26efc9431821079b22047e9f304bb889e64b3ac", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341039, "uuid": "35350964-8bce-47e2-9a61-16109708b735", "comment": "Malware payload (Mirai)", "value": "dff7d9e2a3d1a2244e830bd33deb4739569d9ebe3c63b0af8f2f4c76056e425d721ac06353ba210299f1599d70bcceda", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341039, "uuid": "1cee0f3a-0472-49fb-bbd6-203dc6e83974", "value": "T16BE32802B31C0A47D2A32EF02A3F17E083AFEAD121F4F640655F9A8A9671D375585EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341039, "uuid": "de683dcd-a323-4856-a3ff-ee066a7953d3", "value": "1536:ux7naTwbQoT6hwOitqSi9QINxwvGmKAs1pFtiX6FFtmvAPnETov77bIHqRZ3EIio:u78WR7sxkd4iX0FJPbLYo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341039, "uuid": "ddab8155-23ae-45bf-9610-e52565ccb0a8", "value": 155768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341039, "uuid": "b385b4da-170b-4f75-9c59-57d5e65c9939", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341039, "uuid": "870c8244-f887-469a-947e-16711b5069a6", "value": "yamaha.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbfe7fb7-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329742, "uuid": "775164d5-27d9-462e-9840-8a26da048fec", "comment": "Malware payload (Mirai)", "value": "95c59369f94b5d72963fb036082873c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329742, "uuid": "672d42b3-9b8e-4a54-9e25-8474da8ed1aa", "comment": "Malware payload (Mirai)", "value": "59994b6ceca4298fe13f6ac8f22b9c944e3150f7e788734202399d558b3cbdca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329742, "uuid": "ef4142cb-61fc-4b60-aed8-410d03c9d960", "comment": "Malware payload (Mirai)", "value": "d502e53d9446e9f00ec12771cbcd6e0a62d968c0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329742, "uuid": "ce3c0eb8-e2e2-466f-b314-561aa016521c", "comment": "Malware payload (Mirai)", "value": "8200cf25bba8a4503446483c70a99f99706fb91000f5397af92b3a203b9b39a7c21e0f9bb3738d276b5bad1da824f3dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329742, "uuid": "6da3b7f5-e6a6-4acd-aa5a-281df764a53c", "value": "T19C639E66C86EAE50C45C46B0B4F1CB7A0B03B40196972FF79955CA7A4003DACF68E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329742, "uuid": "19c5917a-7074-4af5-b482-86a761678243", "value": "1536:bpSJ82vVBOHM9TJ3WtPb5n2+UVH5XwsbC2MTSPTlbVR:bT2NA23AuVZXwsbXkqTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329742, "uuid": "e2f5f6fc-709f-4011-ab44-2fee28586c9e", "value": 73120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329742, "uuid": "44f21426-b6e7-4a1c-8cf8-d4df44248986", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329742, "uuid": "86602aa6-7d82-4218-9a2d-6e74eca66c4b", "value": "jklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b428cfa-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320560, "uuid": "892f446f-962c-4b69-863a-ee98f9ec6367", "comment": "Malware payload (Mirai)", "value": "1dcbbba872a5d7e317c5b49fef581e05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320560, "uuid": "0b4e3242-733d-4ba0-8406-0408b8dd99dc", "comment": "Malware payload (Mirai)", "value": "5acbedbd3431ce49de8e7973389d0365357956bb1c15fbafd9f2663b947b62a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320560, "uuid": "6d34845d-02cd-4f5f-89e7-4218dbcbffce", "comment": "Malware payload (Mirai)", "value": "e279a0a202820a8650bdf15b46103f92ca52f233", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320560, "uuid": "079c7cb9-3d61-4e95-b732-a05a688aa3b4", "comment": "Malware payload (Mirai)", "value": "136ee33fff83eeee2a257dea8b2f02128dee289a2a32031cd775042b6ec650234e917f8c9450f37038d0493757658e36", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320560, "uuid": "d4ddab4f-3ae9-4e7d-81c9-495ab914dd33", "value": "T1B9B46E45F69208BCC566C430466BA6337D76B49C42227A7F39C8E7703E56E241F2FB62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320560, "uuid": "f1302c73-d95c-4fa2-a69f-2491393a0bc4", "value": "6144:6Iv8yqFnERZhOIpM2NnTKoVh0Ugq2f/2hK8YwBc3HznK6WxICnLzqrggYE+:6i8y2EvfTQlfOhXxEDCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320560, "uuid": "9d398c10-b953-42d7-8a29-a8a518f9ba67", "value": 501319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320560, "uuid": "63f453cb-2802-4ef5-89d7-57c036a8c822", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320560, "uuid": "cbf82492-ecdb-4e54-a604-f9052f5e99f4", "value": "masscan", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b173c33-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329150, "uuid": "d6716e7d-cd69-43e7-a5b2-1c29b2982888", "comment": "Malware payload (Mirai)", "value": "10416178fbe8a6dd0260f4099d03c49d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329150, "uuid": "dee2d985-9c09-4947-bab8-480ad7672e80", "comment": "Malware payload (Mirai)", "value": "5aff1e30e258501932d8de45ba0aef41c561326ad622d022c4d1a4500e1a9cae", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329150, "uuid": "5cd4ce12-db86-46d9-b9f9-9e6f9e9fc0be", "comment": "Malware payload (Mirai)", "value": "48a523008d3d95d5a9cad6d64623173d956aa97c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329150, "uuid": "f978ea40-fe2b-41aa-a3fc-d1fbdba2826b", "comment": "Malware payload (Mirai)", "value": "5032d299d1702aec8a018709a3ee7003c4cf0d2a16996f13d0cd8de045c14455bcbdab2159cea5e58d7ff24c4b12dee0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329150, "uuid": "7bde1e3b-124f-41c9-947f-e6c6d516641a", "value": "T127E0C2BF002BCF13812C8C6024B63873B830EAC056604E2DAFD1803780C8B10332CE66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329150, "uuid": "54aa0b11-4ce2-4016-9307-e7d16cd856ef", "value": "6:L6VQHJD6VeaLaNgdh6VcFGNIvLK2L6VcfiAK6ifn:eiWMaLaNg+VNITsGLK6on", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329150, "uuid": "76ed0fe5-6529-4d1b-ad6a-fc270a6a9e57", "value": 302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329150, "uuid": "05d56c3c-dc37-49b3-b196-5cc7d4122e00", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329150, "uuid": "f51d13da-6816-4b1e-bf4a-7fa305394b90", "value": "tplink", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a75427f-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345389, "uuid": "03e2627b-42f4-4fff-bc5c-21c1a11b6f52", "comment": "Malware payload (Mirai)", "value": "6ef3e92c21db24eb7453219a7123a66f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345389, "uuid": "eaee8ff0-7de6-483c-90bb-b06053563c18", "comment": "Malware payload (Mirai)", "value": "5b216911cda6cb2f9001fc175d54a744da82dff0f35b381de0cf34f36adf1ec8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345389, "uuid": "6bdcc617-7c4c-47eb-aeb7-de00e684acf7", "comment": "Malware payload (Mirai)", "value": "f98da58419b9ed5c8e793063219276097e5f4a33", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345389, "uuid": "6b99db6a-3a96-41cf-9c78-b993175be410", "comment": "Malware payload (Mirai)", "value": "e6cdea948e9ea860371a39c1ee87c6660515832835a0db7e84fa7a1616bf5b4d827baef8e4bd776590731ec435432592", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345389, "uuid": "603b0358-7e3c-44e5-8f5b-7877d1edba9b", "value": "T16EB3E085B210AE55C02672FCB187099093B17E7B4B9A150B44B3F5B46DBCCD47E0BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345389, "uuid": "c900da46-51aa-4290-b283-df50097d9e02", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuA:as5zqhr5Nzy7wb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345389, "uuid": "54449c73-2772-4c1c-a8d0-49617d53a49a", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345389, "uuid": "d7d2101d-9d83-46d6-9d9d-41d434bce23e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345389, "uuid": "7804eb77-d138-4e47-8c0b-e21535109f06", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38fa7830-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347883, "uuid": "8b37eb12-d75f-4ea0-bf9a-a0d637196f4b", "comment": "Malware payload (Mirai)", "value": "6951728109124b58c49f54f59e15d925", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347883, "uuid": "5649c6e7-17a1-44ce-a6fd-879653b386d6", "comment": "Malware payload (Mirai)", "value": "5b2841c40a394e42270b40d7fd0ddab95a38d616efcc2a34c825d5b29e170f76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347883, "uuid": "cbfc17fd-dfef-4c9a-b16d-15aafce4213d", "comment": "Malware payload (Mirai)", "value": "97773eb8cc81d90c93dd4afdee9bc3f1a8079c4c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347883, "uuid": "97323751-34f4-46a1-8119-55a68675e5d1", "comment": "Malware payload (Mirai)", "value": "92af9c1bd4f5f39c8a456c1d3fd19ccb8afaec5e64672c139f1bd4f8b24608b6f0ed38a029c00c3009f1b630071efd59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347883, "uuid": "f50bab27-21f4-4fe0-9173-182c379cf396", "value": "T1996319056C7C2E27D0D4923F06B7C752F2E6364D1564826EBE391F4FBA18390B94A3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347883, "uuid": "e5e97653-e50e-4b72-9662-d76be754238e", "value": "1536:b+i6PxfSKdZOZUx82f4Zcc/S+WzldRBw3:bwgvWx8Luc/2Xw3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347883, "uuid": "3bae99f6-41d7-44cb-9ac6-ffb4e785b6fc", "value": 67288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347883, "uuid": "7b2c0dc2-63e2-4502-af3d-80cd4879f4bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347883, "uuid": "102f5f63-5255-4d84-8410-9fe771cf4c76", "value": "Fantazy.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c677566b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330082, "uuid": "17fdd475-8e9c-43a7-a8ef-18d7d152361e", "comment": "Malware payload (Mirai)", "value": "c49f1339d0fbd3d21e902705d5b2f4ed", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330082, "uuid": "6efaf52a-f14f-49a4-9da2-ca0cf34bd090", "comment": "Malware payload (Mirai)", "value": "5c05ed76bf71fb341a4dc683510d9b2a3f6700f931a29b005a6d9a67986db7ee", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330082, "uuid": "9e09133c-e121-494a-b5b1-5b5aabc91a64", "comment": "Malware payload (Mirai)", "value": "d02307a99a7bebd0b1e7ef1411cdb99522c6d0a8", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330082, "uuid": "85f8e4a4-4e0a-4a2a-a2ce-18d13d326eba", "comment": "Malware payload (Mirai)", "value": "1c52b59792af5d4ea97b3fc3648e24bf3f018ad472a884291af77e8f08d60daeb764e20eebfcea5354b2e99ee6363cd1", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330082, "uuid": "a300315d-673a-4178-a9bb-f38769787e75", "value": "T17EE0807F0013CF17915A4D14687270733471D5D011604E1E9FD7403B40D8610737CE15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330082, "uuid": "ba6c087b-f328-426c-a7b5-38cd458f2066", "value": "6:L6VQHzCa8Fg6VeaLaNgX8Fg6VcFGNIvF+6L8Fg6VcfiAK6iyaJ:e2n8FdMaLaNgX8FdVNIE6L8FdGLK6/aJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330082, "uuid": "5c521d33-6bb8-4b0a-b58f-cba4f17704ba", "value": 321, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330082, "uuid": "31d3fd57-dd0e-4998-a572-21f78d31e9d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330082, "uuid": "46b74cf9-b6f2-4c3a-87f0-96a14b168774", "value": "mob.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d23c49d0-de89-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766334396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334396, "uuid": "756396e2-ccf1-47d0-b345-6c3396ae37ee", "comment": "Malware payload", "value": "9536764657ad5a9db36d92a6dfb946c3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334396, "uuid": "481fda07-1d3b-480c-9f1f-62707e15e75c", "comment": "Malware payload", "value": "5c26565307470e8dafa63e7c9eb464f00cf4f4e6700a806f6cf73dd57a3fe853", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334396, "uuid": "a72783d5-c5a3-482c-a9b4-6018f441c93d", "comment": "Malware payload", "value": "45c03d4d241b9a20ce0816ea4db768291b85cae9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766334396, "uuid": "80048c53-c7a2-47a9-8651-4dc5233c5a1d", "comment": "Malware payload", "value": "7d7ff009485aa01f9ea2b71ce7f334b5463338cabe46fab6559fb04656389fd45e92b1bc03ba6d22a9399a52e18c87a3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334396, "uuid": "c739f105-92a4-4a2e-9298-53d08279262c", "value": "T15937333289419076CB1D13795F306788063D2DB21B33EBC392A4BEADEB3A5D5167792C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334396, "uuid": "2de76386-496c-4db1-ab46-4b4f263e17a5", "value": "c58a6fdd5514cc5114ad09dc07384b11", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334396, "uuid": "c21bcd68-c978-4ed7-8493-edeb770762ca", "value": "393216:4CAoccqeXvfNiVwOVlFMOJht1uQJOeCsFoNKEoZbTA1EWnHDWC8:5AoBkVwmlCO91uQoeCsFLEod0eH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766334396, "uuid": "02833630-5243-43e3-938f-1ff4be36b9a0", "value": 23972967, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766334396, "uuid": "e4160cb6-6b25-42d9-95a5-290b5b40d211", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766334396, "uuid": "ae0588e3-6b07-4eae-8c1e-d39d3965f93c", "value": "javaclear.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe5bfef2-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329746, "uuid": "c7235926-373b-48c8-8cd9-dc2c0cf79f59", "comment": "Malware payload (Mirai)", "value": "dbf006d7d47dbe9cd3bad746ec7026f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329746, "uuid": "70b1eee3-6394-4fbf-8ab2-4694e945df54", "comment": "Malware payload (Mirai)", "value": "5c69fc2a8bb9900444b0923d34320ecfcfe0896c34c54b0abb593acca334f7ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329746, "uuid": "65c7d07d-8084-47e6-8580-57cdc58d4ca3", "comment": "Malware payload (Mirai)", "value": "de16125526ad59791e55f0f98354e39b5b64318d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329746, "uuid": "7151296a-ac32-4cec-8ce5-00fc100c5f6f", "comment": "Malware payload (Mirai)", "value": "69033b95aea2e70e0b88fd1d426313831de099f1725f32cefbba27915bd74878086c8613f50a9ca9dfa542d1f38ab9be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329746, "uuid": "3b5d5445-3aed-409c-8b27-d672275224c1", "value": "T128732A86E501DDFDF80AE7B784570A01B234B3555F520F27BA57FEA379320988C16E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329746, "uuid": "94f263ed-3554-4eff-9fa9-dac299639747", "value": "1536:XzM2BP77FWEFsm7v39ugMzSLYdnuz18QZZODKtiWImM/LTC+p3TPF:XzMNEjTmuLYdnwTMjWVM/LTLpZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329746, "uuid": "4086b997-74ed-40da-8b66-6a36b9f0eab9", "value": 77088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329746, "uuid": "8529505c-e641-4618-933d-62153e690df9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329746, "uuid": "5b6fd35b-071a-403e-840a-b17ba16b6487", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ce643ac-de33-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297290, "uuid": "cc2a62a4-979f-40ac-8b2a-736233459143", "comment": "Malware payload (Mirai)", "value": "6fab8b4c82c6104e4ceb144fb33a5c98", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297290, "uuid": "5193d534-240d-48fb-ae8f-31634a9968f4", "comment": "Malware payload (Mirai)", "value": "5e1843ee80b0a0f47fe7c102882aecaf626b2c2c671f80f217b8fb5558cf4456", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297290, "uuid": "5e293927-732f-47a7-b4ff-400a5633c498", "comment": "Malware payload (Mirai)", "value": "a6e584fb424780b5839d900aad8d923b05633dd2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297290, "uuid": "a128225f-a4ba-4ee0-af7f-13d206e65b5b", "comment": "Malware payload (Mirai)", "value": "9335863b65338f8d8af497d244a5216b3f83b5f4a5d3b3af71d9acb0aad0ade477b1a70b22381a9a5e169227190c8814", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297290, "uuid": "eec18693-f4cc-4ac6-acdd-9c662ef91486", "value": "T1F173274AB8804F56C5D507BEFB2E018E332357B8E2CE72229D107B5077C696B4E37A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297290, "uuid": "33f866b2-4a44-4992-9cc1-41d67180d981", "value": "1536:n4knLneO0AbKC9vICIScK03ht+vMosaii80ycP9Qen2V40VaeKSnQTMAiCsabL5h:nSDz6qU2XeV8uVp2VLVaeesabLD0a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297290, "uuid": "0ffd30d6-814c-44a4-825b-33e77672e4c4", "value": 79240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297290, "uuid": "12cd2e5d-dc63-465d-853b-32b645f82eb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297290, "uuid": "e13ea743-824a-4e28-9e6b-2fc0852855c6", "value": "sdxkzX_UXA229x.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7610885-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330083, "uuid": "9234e3f3-1dbe-4dff-b7a8-18fc5735abed", "comment": "Malware payload (Mirai)", "value": "f77c4d26b1af0e0001c7b5aea91ec751", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330083, "uuid": "7d9166a1-796c-4dbe-b14a-ffec0e7465f1", "comment": "Malware payload (Mirai)", "value": "5e3a70d6c594d7c8a67e50744ad1f285a85987a75f37c8b10aabaaf2304e82c0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330083, "uuid": "b150c6b8-e3aa-4669-ab55-9664bc33f4e8", "comment": "Malware payload (Mirai)", "value": "eb086796205a6bd5edc20fd2106b787a7a5959c9", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330083, "uuid": "c3609954-dcbb-4e90-81c0-dfe753f840c4", "comment": "Malware payload (Mirai)", "value": "fb4e4e1991e0dd7cee6315e9c2407ed92cdecdd0477d85ee1037b8df1ef6744ef20fe5e5ada73420b1d07eeb0b004fc7", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330083, "uuid": "e7c00770-9762-4cf5-b988-d6e0ed2c5370", "value": "T1C4E01CAF222BDF22815C8C6020A2303370B0DBC2A2A04E1EDED580B78984A40276CE26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330083, "uuid": "465f45d6-68ab-4448-b8ff-0a2681801537", "value": "6:L6VQHzIXi5oD6V2jz4SoD6VeaLaNgdoD6VcFGNIvF+65oD6VcfiAK6i4S5n:e2IXi1Mjz4yMaLaNgBVNIE61GLK6c5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330083, "uuid": "3798b6a8-6eaa-43da-a9a3-316f0b6de0e9", "value": 420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330083, "uuid": "96d7e2bb-07b0-4091-8c2a-8d6449b0bfcf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330083, "uuid": "f8fd0ce7-c302-4abf-a2ac-0a1800fa11ce", "value": "grandstream.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c93ccc0a-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295726, "uuid": "1dd14e00-1508-4678-af22-7a77469724c3", "comment": "Malware payload (Mirai)", "value": "fe91e386e6ca85f1e1f1ec5f11e0919a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295726, "uuid": "641ada12-1bd1-4184-89d2-c5a61c6a5feb", "comment": "Malware payload (Mirai)", "value": "5eb7c36d8d0ba67da91bbab893f75a5455859124d1c790a4c93c63be9a8c984e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295726, "uuid": "f44ae420-ced5-47f0-a807-7c7ff0dd126c", "comment": "Malware payload (Mirai)", "value": "2e8a4bc9ebadb755c8ea79e36faddc89e09ddcfb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295726, "uuid": "96ddd4ef-54b8-4157-8fe2-bcb31ae06d9f", "comment": "Malware payload (Mirai)", "value": "59b86be93a1711c3489c7c6096a0fda2a1426e94ad49ac617789308b67411956dcd29fa900d4c8cd5a0adc6340a58808", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295726, "uuid": "dd08f543-d9c0-453e-a454-d454bbe7bb5f", "value": "T130330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295726, "uuid": "9fcaa2cf-4d97-4bc8-83ec-636eb0d9c872", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oG5:r/hqaJMDg9eqK806MHdkfQX6HuC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295726, "uuid": "d17dcf9e-4a7d-46f8-a686-bbe738b85a40", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295726, "uuid": "8535cf6c-0ec3-4afe-ab6a-1e51c295c78c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295726, "uuid": "79a76654-dc45-44ef-a3b9-1015127a3b13", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39c96dfd-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309230, "uuid": "fc2b30b2-19d6-4e1f-a080-8da573bf288b", "comment": "Malware payload (Mirai)", "value": "4de1c09cf78d926eca8a24bff5dead6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309230, "uuid": "9f726bea-3566-4ff7-beee-d6f872e98d96", "comment": "Malware payload (Mirai)", "value": "5f0f17bf30693014c18563ced482924fe4a5da13081d172fb367219ef1760ac3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309230, "uuid": "695b34be-2d99-47a7-ab60-71d58aeba1f7", "comment": "Malware payload (Mirai)", "value": "07846ddcbe12e77e9348adb0ec2572dd95d4fe6b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309230, "uuid": "5c0407a2-1182-4b72-95ee-a2c1e5561d4a", "comment": "Malware payload (Mirai)", "value": "16c87889da2a169e21c5fb72b817c3da4f6897982662e197ef42857d837525dcc04b00870877f8f4c3e8affb5886e246", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309230, "uuid": "6f84d764-5667-4890-9eb0-4fe22b6380a9", "value": "T1DAB30996BCC18A16C5D413BBFA2E00CE331267A8E2DE72129D245F2477CA92F0D7B955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309230, "uuid": "cfe7a86e-69d3-4894-b262-e3fa2580aa79", "value": "3072:++uFdLVAj7Q9Ud1pMCJBTDVPPslvaEPUMBpJCA:++cdLVB9+Y4PPovad+eA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309230, "uuid": "ac1b61d0-dc83-4451-8da0-a8e86cf340cf", "value": 116772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309230, "uuid": "7d47d0f1-2380-41be-9c84-6bc9a0e58649", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309230, "uuid": "39042dbd-14b2-4512-9bb6-b28462706dd9", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af606b6d-de70-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766323600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766323600, "uuid": "105aae8c-55c2-4010-8ec0-db024fe9dc3f", "comment": "Malware payload (Mirai)", "value": "512d04136ae4334537722c4ca4a7d5c4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766323600, "uuid": "e60058e1-73ee-405f-a073-beb1dc7e67f5", "comment": "Malware payload (Mirai)", "value": "5f4831d6685b10793fcdf3fcac397864e1e62ede9ca4e11b70c41bb1611dcbb3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766323600, "uuid": "c1f6d94c-d176-4c14-8e09-e8ee2039582f", "comment": "Malware payload (Mirai)", "value": "e686fa27b0ee4136e3d48d68e4e03ece8bc1ec62", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766323600, "uuid": "276f10e4-7f4b-4937-b632-e7d6ff9194ea", "comment": "Malware payload (Mirai)", "value": "4b2389fcdd64ebb22155e5612ea286095403a5d836805a47094ade46f845df484d95300a58c565c144eb6d380edd3846", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766323600, "uuid": "22c0d0b0-0fc3-4a3d-92c8-c0afac50c575", "value": "T1EE1196DE359153A2854CDF88AF79046D9028BAC4A9B0CF349CD6583ECCEE7487439B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766323600, "uuid": "a790352e-e11a-4e94-a6fb-fb19ecaaba7b", "value": "12:ywQwJlPq9YhhzlFy9NIl5mkCa0LK2ZNgOFanJMS9O7tjRaSOZ8pNtf5Ssf2G9Fxo:EwPSMlUNI7MKJIYm5slONtx1O0Hf8jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766323600, "uuid": "c6d91e6d-0e90-4154-85c5-80b5cb6ef743", "value": 1014, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766323600, "uuid": "31c90974-8e84-4f74-bf02-3000c4f57b7e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766323600, "uuid": "c70985f0-76e5-4b98-b48f-b17a62de43ca", "value": "wget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a03e6a55-de4b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766307684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766307684, "uuid": "334753b7-fc3d-4690-bf19-0a5c152a1b85", "comment": "Malware payload", "value": "b92d2a71cd1d7bd3356093c033926603", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766307684, "uuid": "6326c68d-cb3e-443f-b4ad-07da1b09cd7f", "comment": "Malware payload", "value": "613d363367a9ab36b881e94555e38bf2b5466716606a14bddb7c1d9f2fc1d555", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766307684, "uuid": "73013100-2ce3-4bc4-97d6-ead2c9cf2732", "comment": "Malware payload", "value": "3e8ea06211ec0300033c07f463e4c8aa0918849d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766307684, "uuid": "73274d8e-cb01-4957-a456-15cd61aa5430", "comment": "Malware payload", "value": "67ce2f900ce0e66c946bfdd449d138660a5fa7eb5635fa037bbecfee4ed707cd069325f53141cac5eb15afd49866349e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766307684, "uuid": "b9d92af7-571f-4b02-8ec1-4c7ae9277a5f", "value": "T1700733AC96D600BDE58FF27449C75622EE33F82907A0D64F272265A64F5F344CA2E743", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766307684, "uuid": "fa833e19-a288-46a6-9081-f2b523c94301", "value": "7c75a83e117d2bdfb2814c53e840c172", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766307684, "uuid": "cc2e4c24-aff9-4eb1-bcd1-0e349ac04e13", "value": "393216:PTHfCYRNQ1mH0ZY3h9OkYK95oSrcPoYfrips62fK6K8QsGAkT/p6xg/okINGg8SW:LfCYzXUZY3O+oSAPoM2sJK6K91fLs57W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766307684, "uuid": "b5086c70-3420-4ca6-a386-1ebc711aa831", "value": 18455506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766307684, "uuid": "0ef0eb7c-ae3a-4003-a3e2-da3e42f97534", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766307684, "uuid": "7d7d3bee-3862-4463-a24a-660fa99d81d9", "value": "imgpr.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4458e3c9-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309677, "uuid": "74ea0436-f18a-48c5-8e3d-bd98053dfe2a", "comment": "Malware payload (Gafgyt)", "value": "b2e5862917a35f84dd3d1b8486efede0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309677, "uuid": "12cddf10-73fa-470e-b76f-6f08ce76103a", "comment": "Malware payload (Gafgyt)", "value": "619930c2914ec5296e684a245bbed911f430df7e2de29701e75f30af8e35610b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309677, "uuid": "62dee16c-6536-4f0e-ac94-7f1b7cf4cb40", "comment": "Malware payload (Gafgyt)", "value": "9416da337dcc2e4606e2ab6dc5e1d7a0412e909a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309677, "uuid": "77eb4763-b80d-4e37-aed3-bc628916cfe3", "comment": "Malware payload (Gafgyt)", "value": "7f73ab547a51b6c3ba62fa25b9d15976f683166bd5316f0053ac79f01a3f4c9a712fc71c5c948b68b78242bc4225dd0d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309677, "uuid": "09718c57-fa53-4606-bb7a-a600e0e33b0b", "value": "T144E38366BB619EB7D80FCE7309A64501118CDD4642D93FAFB2A0E51CE76B84F08E3E54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309677, "uuid": "5e016cf9-cc45-4c37-8bf2-023d3a95def5", "value": "1536:bVeTpqCVvWRYx0O9vPBysZgvsgxqAz/0ufMytVApLtaoLAImlP+s4zWfOodW:byvWmBx+sK/Pfl+gImlWs4zWfOodW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309677, "uuid": "77d86652-9ad5-43fc-b4ce-c36fcce3cfbf", "value": 152201, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309677, "uuid": "79b63ca0-81d7-4524-bd67-cbbf1db353ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309677, "uuid": "1e9b42cd-e1e2-4ee2-807f-a6cb0eaf7418", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f3c8fe9-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329130, "uuid": "21253387-9103-4284-89c3-0c2fc0e0be24", "comment": "Malware payload (Mirai)", "value": "f28d2c19a14c9a20638980faf650de2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329130, "uuid": "d2a91490-3963-4c02-b633-c2b73f4064bc", "comment": "Malware payload (Mirai)", "value": "61a776ec0d0312cc0f02bc82198fd7abc5633f3e96d9ed4c31acae20e6790239", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329130, "uuid": "449cb399-fdf5-4bca-9f07-13449a6df2d6", "comment": "Malware payload (Mirai)", "value": "ed6aff56be216b7e403c3486e6fe97ee7cd01784", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329130, "uuid": "ad0eaa7e-24f3-40b1-8048-8fd01978bb7f", "comment": "Malware payload (Mirai)", "value": "ca1c9bd1e149d407ec479941600ffba8c60e6fb9db060b254a3c7f815ec4161c2517a059ade429e55705ce8f5d4f17fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329130, "uuid": "47985a6b-cebc-4e34-9763-b97b291844f7", "value": "T162735AC59653ECF6FC15053525BBE7375E71F43A1028EA83E794F932B843221AA4A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329130, "uuid": "87645ba5-9e3e-4911-8d97-d03d6478ccdb", "value": "1536:PPuYcd39acwUxtY3kzPeHgR6exYg/OQa5jx/8ExsRR:XuP3A5UtY3vHcxp/RGl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329130, "uuid": "0173da9d-5227-4397-9ef3-2b01315f962c", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329130, "uuid": "cfad6cd4-2958-4001-8126-cb2206b1ce2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329130, "uuid": "05da394e-604c-47c5-9b6a-c597b8904b78", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98006eb0-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (GoProxy)", "timestamp": 1766339023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339023, "uuid": "7095a4b1-5905-41e0-919a-9cb647395eab", "comment": "Malware payload (GoProxy)", "value": "dc034cab0b68a2646b823a02a4fc44ce", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339023, "uuid": "d45ce799-ae29-49f5-80cd-9dc026c4a736", "comment": "Malware payload (GoProxy)", "value": "61e1e044b392607e2e74b6e3bcab4a8d6e16ebe60bd014fb9f292968e77e05fb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339023, "uuid": "c4f2eae3-10bc-440f-a3f7-be3bb4e20e7f", "comment": "Malware payload (GoProxy)", "value": "806a2049de5dc0076b48533346e28e7c554d7dc8", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339023, "uuid": "4649ed2a-801b-40ce-ad62-f80b5e9a04ae", "comment": "Malware payload (GoProxy)", "value": "3baf814e4b9e376a6bcb41bf5cdc5e56775091a216a91b3722d86f6e488db4b5f59a7d89c643b248f314d8c101e67b11", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339023, "uuid": "4d9030a5-103b-4b0c-ae65-0ecdb8a759de", "value": "T145664A03ECA555E9C0AAE23189779152BBB17C485B3523D72BA0F3386F72BD06E79350", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339023, "uuid": "d0ba17ea-b037-4dc0-993b-d50688bd35c3", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339023, "uuid": "86730d21-2689-4b18-9cc3-a7113d750888", "value": "49152:Mxt73VyXCC1Q14JLzXHF09KNURnhWrq5F5WzFAukNZkLIeJjhy9w5eofK7K9Kvs3:MnQDBV0RncrqzINOKLI7efmsxg3Ep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766339023, "uuid": "7f91bbe1-f9ea-4454-8d29-a93af99e6ded", "value": 6546944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766339023, "uuid": "c8ded33d-f695-4816-ac4c-4a3cce334e73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339023, "uuid": "a7b46dd4-6556-418b-b662-d2a6b7808824", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6eeec1b-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335290, "uuid": "5abadf96-c229-4cfb-92ac-66d76f772f91", "comment": "Malware payload (Mirai)", "value": "67103185ee404868a135b7f25cc1b287", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335290, "uuid": "9d58bc08-a030-4366-a07d-a1558366bd1a", "comment": "Malware payload (Mirai)", "value": "62d33c80e869592c75e91060164215383ce5c7294b12049ef15ca18d291e98d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335290, "uuid": "70478759-0d84-4662-a0d5-ca363032ce4b", "comment": "Malware payload (Mirai)", "value": "699546be3f2aa34896d73584dbd186ef85edc9a1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335290, "uuid": "4572d880-eb12-4002-9f1b-c65dc75b099a", "comment": "Malware payload (Mirai)", "value": "6260a0f63e410575f2ad461b52ab3941f20d18f846ba9dd12a6cebd384263994da2710c6cb2f0f4a05988ffc722303a2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335290, "uuid": "5afe85a3-7f7e-4f85-a156-e8a74f6d11c6", "value": "T16923F8C27942B639C3D0577BEEAF014E3354A7D8D1DA3397C8281B947A8A90F0D67B46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335290, "uuid": "76b60e1f-a50e-45a5-b3f3-a78aa8522c45", "value": "768:U19jSzRmPWF8VPebVsl0u1XZB1v0meGWDoCerCjwNdWd0yChk7wCVy/rCxHghW1T:UnjGmGGPeuymeGawNdA0yUfhW05J+rz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335290, "uuid": "26b14a99-088c-4bf3-b650-fcf2c3775d20", "value": 49144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335290, "uuid": "683567d8-9f84-45d7-8b6b-eed58652d033", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335290, "uuid": "4fbc880f-fe96-44d3-9bbd-c9678a37e349", "value": "Josho.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00987667-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320730, "uuid": "9d69efc9-aee8-4e4e-8da3-01ece0c75137", "comment": "Malware payload (Mirai)", "value": "a43c127c678ad96216428276ef96ef99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320730, "uuid": "907be972-a705-4063-aaf1-9da94ed965ad", "comment": "Malware payload (Mirai)", "value": "63e5f9af4fb528fc30cceaef2e6c7251be1297f516dc10c0a1eaf745d7b46b6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320730, "uuid": "0240b234-3a57-44a9-bba3-385a4e7e9818", "comment": "Malware payload (Mirai)", "value": "8129d838ffdaa80aa7cf00199f060c6aa1f52d31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320730, "uuid": "595b2b5e-3bb0-4fed-850c-87f619a842e7", "comment": "Malware payload (Mirai)", "value": "04628477801750aa32126e7756fbaf126edfbc1380cb7200f62da097658cc3971c6d892e74dfdedbe8330dd7ff412681", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320730, "uuid": "cc61e6a7-b367-4ad1-af97-e61d77061cfa", "value": "T1B093B55E6A234FBDF7AC463647B7DE208249339227D1E285E09DE9019E7034E784F7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320730, "uuid": "c95a892e-f28f-4b0f-87bc-3bd4b3bcbbfd", "value": "1536:xtEluri45qxd0JNvMQBu0VRd2t1ls5FLuRb5CWjVWi22LvuruvZWrujc9YOiHa2N:xtEO55s0JNvLBu0R2vgrMQabxcM8K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320730, "uuid": "b2d31faf-5748-4d6b-b3ca-ba62d6315ae7", "value": 92104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320730, "uuid": "502163d9-c075-4d05-9258-7abf5bfc7f71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320730, "uuid": "8aa02bd0-8dcd-4a5a-9379-e96f3ef57f0b", "value": "shadow.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb3114f3-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "e386f524-1332-4e4a-88ac-5db1ab79b54a", "comment": "Malware payload (Mirai)", "value": "9eb3f49acd13704f2c38e1fb8ed29f76", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "298aefb5-52e3-45f7-8082-110317a38625", "comment": "Malware payload (Mirai)", "value": "63ece074e856334a62ca7d73d7580fe9eeeea9fd2014315905ad16e51c2cc419", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "cd16b125-445c-45d2-8e47-c417211f75ac", "comment": "Malware payload (Mirai)", "value": "e48f73971c9172d92cad2331a9e34b346a0a273e", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330089, "uuid": "354be8d1-4020-4431-9d23-03f4d79a06c0", "comment": "Malware payload (Mirai)", "value": "bac0b43bd743c84a5073374b03c83677d62e0d8592480ac0f567b6b9eaaccbe68bd4d3af30ef06a29c2978d2fd08c20b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "b55e2bd6-5f34-4cea-89d1-c99318936c3d", "value": "T1E3D0C98E5002ADF8A06DA9AD73B123CAB2829B0D366A0F5EDD9150B694C2588F618E14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "57547d31-36d5-43b1-95ba-929d8dd2f71e", "value": "6:L6CeAKTjOWV6AWJeAbJTobJl8Ftox8OLJn:ezAMCW4zMAejz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330089, "uuid": "2bbb2098-d799-439a-bc1f-8456ace3953a", "value": 199, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330089, "uuid": "c7023a5b-5965-4add-bc27-c26d202a8595", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330089, "uuid": "1e7d3e5e-e94b-4b45-8541-763651041147", "value": "to", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ef0ec96-de30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295924, "uuid": "74fe1495-ca72-4fff-9ed9-8efc077d7742", "comment": "Malware payload (Mirai)", "value": "eb083f0e3d2384bb1e8c6531f9808ae7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295924, "uuid": "778cbc42-b50e-4289-b4b8-884a3ae8a1e2", "comment": "Malware payload (Mirai)", "value": "64072fa26155a2d5432aa41e2e9d257bfb66b54e3f7867af7205eb92542ed875", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295924, "uuid": "77d05868-3d32-46be-b9ef-5097a4f1743f", "comment": "Malware payload (Mirai)", "value": "13e2901c80673e1e56462fa8eb30d9d4bd89c927", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295924, "uuid": "c606bb4a-97db-4792-a1db-0f343748c514", "comment": "Malware payload (Mirai)", "value": "4c2269ce80fef1aebe5a1ac994ea64cc1caf66f06afff779bc5597fa31c442a495f2d6676df2c3164d5a83a84c71ea28", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295924, "uuid": "d7c153b5-6d09-49ff-969d-88305145dc3a", "value": "T1A12309C8F443D9F9DC5A09742036FB2BDBB2F6BA2329DE43D7A495236C51702A805D9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295924, "uuid": "a42e9fbb-5c9c-4e12-a9fb-cb39bea05069", "value": "1536:6nJRT4QPfZfW5XTOeY3Dve3AGX57/4Qw7bn2iLe:Gv4QPfZfW5XTOeoEzJ7AQwf2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295924, "uuid": "35cf72bd-cb74-47b4-81dd-9565650a7327", "value": 49936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295924, "uuid": "4f9c7049-2c0a-440d-856c-b7ffb4e4a4b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295924, "uuid": "8ef2fbf7-59ad-422c-b53f-1e769bc3f45f", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "486388c6-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309684, "uuid": "f5ee827a-e103-4795-91bd-caa54bb39d0c", "comment": "Malware payload (Gafgyt)", "value": "89d8fab7b09652a5238696da8ab6d891", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309684, "uuid": "ff7fe7e0-bdf5-4caf-ab6f-6bdfee429c73", "comment": "Malware payload (Gafgyt)", "value": "64ac0106d1d980984a2552aa1095cb4e603c2756024754ff7d77aa73ff92560e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309684, "uuid": "6a01d7af-8744-4c55-9814-700b88b54a38", "comment": "Malware payload (Gafgyt)", "value": "a1fbfe7f9ce028da23171deee3e40fd7ff915722", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309684, "uuid": "4a644792-470a-4628-9164-daf646182e69", "comment": "Malware payload (Gafgyt)", "value": "18886582f34f7feb33d64eb7e8b2d6b5730f1412bfdc4f30dcbe4c6651d2a5f667f43fe5ff33d50a902134a36fd32126", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309684, "uuid": "b1b498c0-4d2e-4408-bb1e-b09ac44bef26", "value": "T1FEB30692F900DFF2F40AE67604C34B2566B0BF660F536A66B21739A79E721C43867F41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309684, "uuid": "5bb744c7-cedd-491d-a029-b26710e88bb1", "value": "3072:gLWUEK1FSHGfs1QbEE6QyPwBs/avcWVRm2pgYMx3IPtW:gDsGfs1QHyPesSc2Rm2pgYMx3IPtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309684, "uuid": "a93e0ccb-9acf-4a01-89c2-622b6262d653", "value": 113759, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309684, "uuid": "aefa41cc-9cca-4546-a5ff-277d3a7d0410", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309684, "uuid": "83321d50-c5ec-4ec9-9710-414842734fb6", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b31f9a49-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309863, "uuid": "9f35674a-f91d-4ad4-819c-5d9a53a95197", "comment": "Malware payload (Mirai)", "value": "e648d23b2ddd858b8058db03c084aa7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309863, "uuid": "177f91e0-9138-478e-9983-6b023716456d", "comment": "Malware payload (Mirai)", "value": "64fcab57c878f909ecbefdb13bc62c66db16a4b0e858f723844a70019a913d6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309863, "uuid": "7a37592a-be83-49e8-8499-34d6f12a7f1d", "comment": "Malware payload (Mirai)", "value": "d5b6d9376af49b824931c618a5ba817001452dfe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309863, "uuid": "e88d7f95-be02-4469-96af-5b1c9e68b17a", "comment": "Malware payload (Mirai)", "value": "4d50645e39b3a342050900445a3e25568712b80e1c56e6ab701625c64deaaac1abb42127ba0db4e1d6676ed6cd2c5ede", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309863, "uuid": "a0bd11f7-dabe-4a27-af8c-58017c5517be", "value": "T152A30886BC819B22C5D562BEFE1E518D331317B8E3EE7202DD146B25778A92B0F7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309863, "uuid": "e3ee9296-4c34-4ed6-89c0-f027a18039c5", "value": "3072:DWUnfQRo1K40gZvN+b9PtAJSy3M337Mm4RvTl:DWCfQRzgZV+RPtAJSy8337h4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309863, "uuid": "f4e5a39e-293d-4b5c-86d7-3b4b38852dc0", "value": 104456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309863, "uuid": "b5567d2d-cc1f-468c-b09c-c62b4ce8c806", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309863, "uuid": "39a0b115-6436-4287-af58-a85a6de3bf8d", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c89d56bb-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295725, "uuid": "1b4c9fb9-1b77-4db3-aca8-e278d31d9737", "comment": "Malware payload (Mirai)", "value": "6e21b344666c1750e2bb03bac4a7336f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295725, "uuid": "3c5eda0d-a795-49b7-83e5-adb389bfdd4f", "comment": "Malware payload (Mirai)", "value": "6516488922050b2511dd892297f9d0fe7cda54f17baa392910b343a62bdf06c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295725, "uuid": "b3c79064-9543-41e7-afc0-069817dae436", "comment": "Malware payload (Mirai)", "value": "ec6ef3a8ae758c19a0ec510b834b9ea37cffa2eb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295725, "uuid": "7d4f90a9-e064-4948-bc53-93c1a6a6eb91", "comment": "Malware payload (Mirai)", "value": "a30a40720e840488d0341c18c52bf23fceaf87bdd3b46c9cf55d32a9178a2087d6703d4df395cce8159d130e60a1c1fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295725, "uuid": "084ce0ee-99cf-4e67-b5d5-7a0bb3406b37", "value": "T1C8230231490E8EF124303C76DAC9979376F12AB1C5673123D6294B386F756131D47E4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295725, "uuid": "4dd4d6ae-3609-4814-8ea0-61c67fd46fe4", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3J9q3UELbUXfi6nVMQHI4vcGpvr:DECFd+A6YHAx8LRQZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295725, "uuid": "6aac0c0d-6c37-4d7f-ba6f-5aa45c1b4de8", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295725, "uuid": "85244357-6bec-43e2-8801-3b7e2331dff0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295725, "uuid": "b5fb8ff7-1076-4a15-aebe-6f2b5facb13e", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d257a0a-de64-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766318335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318335, "uuid": "938fc177-f085-42a6-8256-6ea2855fe8dd", "comment": "Malware payload", "value": "046834d4b87245252900aac5bd470bb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318335, "uuid": "01afce92-c72b-49ef-8282-b8f12b7b281a", "comment": "Malware payload", "value": "65b1ae86bc7cc8cf542248577a0abe4e77be354d60228e74da0f22423eee623f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318335, "uuid": "4085c73f-d139-4367-8c96-1a575cf35000", "comment": "Malware payload", "value": "ebcaae0d5fbff67794ef178ae5e73f63c9f7f882", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318335, "uuid": "e21e4bfa-dc12-4104-9c5f-7c3c72cf514f", "comment": "Malware payload", "value": "35155c6e53eba6789a9fdbe07faaa72518c0f3b63c22ce0df90543b1de581c69c71b1c349765702c76e4ac5714b716a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318335, "uuid": "1538ca37-ffa3-41b0-9c47-9245c7a252e6", "value": "T1FAC3EC193A91ABFDF15A833447B38B30A6D4239117F4D785E29CDA1C2E703CA984F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318335, "uuid": "c7a3308a-694b-444a-81c4-8789a3f0fb5f", "value": "1536:3o76jw/K6GVreJX6plOEHc/DwLdee5mx5xvP3HSy+yUKz9GsPgsih+XcS8N+hH:3o7+w/uZeJqbWwkz5p3qJacSlhH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766318335, "uuid": "932c32b5-063a-4130-ab99-0b2abeb04f4c", "value": 120651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766318335, "uuid": "7237a79f-a56e-4ede-be7e-32a1b99b54af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318335, "uuid": "463d2473-01bc-4f93-9aab-0de7254c8521", "value": "n2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a391108-de0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Amadey)", "timestamp": 1766280991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280991, "uuid": "7053ef54-624c-4ebf-b706-c87f147fc105", "comment": "Malware payload (Amadey)", "value": "eea30919ad0071a4eaffe4d227deb43c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280991, "uuid": "7107765a-dd05-4448-9630-4bbe16f0d08f", "comment": "Malware payload (Amadey)", "value": "66233ea314a3a5be48a3623f50de1566832fbd54d942b76c947533937fd02a81", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280991, "uuid": "a626f537-b3a4-4e65-9b58-eefb5ffa691b", "comment": "Malware payload (Amadey)", "value": "ec94c4cc0d58dad933c8d1ef522a3ae891d0dfce", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766280991, "uuid": "4e9311bd-51ec-43b8-a565-80ed1fdbec55", "comment": "Malware payload (Amadey)", "value": "69de8a92e984c008e9108abd0cf9d8193443692fa2c58854c49029727b924709b844a8a32387d3c253b3bda0e0af3c84", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280991, "uuid": "e2cddf64-e6a8-448c-96de-f253bc5174ea", "value": "T198945B217813C032D66191711F79FFF285ADAD259B7149DB77C40E36AE202E26A31F3A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280991, "uuid": "72821b8b-ac92-4c6a-9772-63398fb5598a", "value": "4d8e04a2d1d15acb8b94c77c4cf0e065", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280991, "uuid": "8f40d292-efe1-46a8-b410-24b0b02a5be7", "value": "12288:/s9CAe6v/DONHTfIR3oRXs5W53bdls9NGV/3kuDw/yK:q/43b87GpUuDw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766280991, "uuid": "b74a8146-8fd6-4ea1-93a5-80e965661b5f", "value": 421888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766280991, "uuid": "cd1fb8b1-004e-47dc-9e8c-9dda95a47563", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766280991, "uuid": "6b6a0a2b-212c-466f-aae0-31689a8ce1f7", "value": "SecuriteInfo.com.Trojan.DownLoader49.5152.416.4783", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b927c1e0-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330059, "uuid": "ee930166-4511-43d6-a62d-2c0a92e191fe", "comment": "Malware payload (Mirai)", "value": "2c39b6cfd687615b10c9f68bbb4d3d45", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330059, "uuid": "028b9ee6-586b-49d5-bd9b-afbcf02158c6", "comment": "Malware payload (Mirai)", "value": "66dafd99b6fd16f3b66e242cc2c78709b0f4d0076fec8f819781622753bdede5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330059, "uuid": "c6e00288-9e7e-4921-9347-87b9b5aa163a", "comment": "Malware payload (Mirai)", "value": "9bb0a893db63706628e4cc7f3a337725d4b79420", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330059, "uuid": "3d5d25ee-9806-44fa-9ae5-42b5d7ffccff", "comment": "Malware payload (Mirai)", "value": "68e6c573e618d7dad432702ee67e9f4afce06dadea1e21f44ebbecd42e1a151674ce12a4204e32bfee1cdb0f2f345dcd", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330059, "uuid": "1452b71b-60b4-43e3-8b34-88f915350660", "value": "T1A6F0A44F0302792B526F9D783AB167C57460BB4D74066E8DBC81867BC1C8E8C7388938", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330059, "uuid": "f1bc5f3d-da82-4ed6-afb5-117210f234f2", "value": "12:eJAMqFK4zTwAewRWm4mnAW1C4m4AJK4m6NIlABL4mSaqAXF:eOM6n1xWpLW11wJdJNIaB8vuV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330059, "uuid": "75a387f0-0949-4234-a351-0644a9d429a3", "value": 599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330059, "uuid": "f2bc0b99-0338-4968-970c-1235b17c6076", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330059, "uuid": "de318dc2-aca2-4c67-8e03-d4df7710af86", "value": "ze", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7712156f-de9b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341974, "uuid": "18cdf550-cec9-4a0e-9c64-8080e89a20b2", "comment": "Malware payload", "value": "6d7582254d35905c5c2e87f2c08c311f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341974, "uuid": "3b2978f6-6e0a-4543-b062-39a704405479", "comment": "Malware payload", "value": "66f3fe67f2d679ea422497dba3653e8f248bba7e55c0373d56753ca2687f6ca6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341974, "uuid": "291cb5bf-84f1-4c03-a746-6f8ed8cb2821", "comment": "Malware payload", "value": "05763eb5408d07673fadc2f1ff9f91fab8dd0505", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341974, "uuid": "bb0ccfdb-7fed-4bee-beb2-6064939db703", "comment": "Malware payload", "value": "2d7ac9a7c7ed92701f46031d089770433e9f0355d37527573347390239470c7a9ed4d8b939292949367e9ff847a96e50", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341974, "uuid": "af94646f-b668-47eb-a903-aa5be86bfcf5", "value": "T1FE43F885B991DA15CAD5657BFF5F82DC331603A8D1EF7303A9186B61368B82B0E3F450", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341974, "uuid": "516a1fb6-24f4-4a33-8e09-f1bfc58d3b5a", "value": "768:8pYos37ry/aggiZ3aMa6EAlQWMXcq+JyIcBbnTNUBxlWuNkhYKBYgwXPfyFxmT2P:uYo8GR/EAlQWMsWvGBbwvsfimT2bVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341974, "uuid": "04c3b35b-5587-4fe2-b80f-aa0dbbba353f", "value": 59312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341974, "uuid": "ea81806a-2497-4850-9333-bf5f059f4cde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341974, "uuid": "7813f7a8-9b4b-41f8-afa3-d35663d85c05", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0475cb2b-de0b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766279934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279934, "uuid": "3a7db4bb-af27-4e45-b724-d60bb4adbbc3", "comment": "Malware payload (Mirai)", "value": "a67f1dd91567e77a95f718ffe21712c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279934, "uuid": "7bfe5a93-80e7-47d5-84f5-f1b838944128", "comment": "Malware payload (Mirai)", "value": "671fc2d1ae82c7b0321d775a1b27998f777e4e32026a5bcf10567f1cb9db9109", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279934, "uuid": "c4a8c6dd-ac9c-409d-8059-53a1f4a5bd23", "comment": "Malware payload (Mirai)", "value": "e7f585ff55ab350d0ea5b022efe5bf04a3408822", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279934, "uuid": "5cf752a2-1d42-4f1f-9e7a-0d99f6f31386", "comment": "Malware payload (Mirai)", "value": "cb3c1fdbe5e6a7e514839745f1bd539264a2d5714df0f5b741e94cd72b04141a2c0eeb79ebcc44a500461aa1214ab0cd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279934, "uuid": "f87b3be2-eec7-4f9e-8782-7d4691d2c06d", "value": "T16B82D0381064B890CEB0053AE26D9505A79F1BBEC7EE706B2E694B3C25C554738FE3C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279934, "uuid": "1f07d749-b20d-4c46-8137-6908489c1f76", "value": "384:yDQ975GrvHSwM7R8P75ozPtApdqaMXTsFYwP/xtojPvU8TMxSyhymdGUop5hW7KR:yD26ST7R8Pat1aUTsF5/x6jU8IxSys3t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766279934, "uuid": "621747bc-0aa3-4301-a2cf-9a763f7505c9", "value": 19256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766279934, "uuid": "5d0aadb9-6c64-46c4-ab01-5e59ad72c134", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279934, "uuid": "48ddf36a-081d-41e8-a27c-d3352f6ec961", "value": "sdxkzX_UXA229x.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aac6e677-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330035, "uuid": "e65e3423-91e1-4abd-9631-caf0580b9826", "comment": "Malware payload (Mirai)", "value": "cc24c020cf95044c310389a2891e95db", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330035, "uuid": "4f64d8ef-a9f8-42ad-81d0-4f06a5c9dcba", "comment": "Malware payload (Mirai)", "value": "6724b35a89de57521cf0b2954b2782c3f221343fff5db9ebe43cf963e64739af", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330035, "uuid": "1cf279fd-04d9-403a-a1c1-e5cd21f74715", "comment": "Malware payload (Mirai)", "value": "a8a84d68ce4e066d34a80d7bc094ae6046a611de", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330035, "uuid": "326c220c-51d6-431b-a279-e40d3f7c6f63", "comment": "Malware payload (Mirai)", "value": "ff8749888854bd94a53dcf2361257be6f50a9c64d3590d89db534895639c8c93e79cc12a8435233da75265782a992f68", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330035, "uuid": "7915c84a-420a-4c92-9f75-aa74754d61df", "value": "T1B811ECCF14449E3055C855A83AE3546D684006E229E4560DAFDFC16758CFA087B5CE2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330035, "uuid": "87f75882-8bac-41f4-98a3-f00d40974a7b", "value": "24:/9ZOekX3v6hLkX3v6nRkX3v6M5dM5nkX3v6rOOkX3v6rFkX3vXw:FZTkWk2kPI9kIkekvw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330035, "uuid": "979b5e18-e2b7-4d9f-991f-24f8ec14e4bc", "value": 855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330035, "uuid": "fdacef1d-1d02-4976-b548-2fd16933ed24", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330035, "uuid": "e9a5a15c-df89-485b-8b80-abd7cac441ab", "value": "fb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06351b7a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329759, "uuid": "60ebc174-1942-42cc-9020-dcd03be2636f", "comment": "Malware payload (Mirai)", "value": "2745918b9a55fe21643f5750a33ff0c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329759, "uuid": "bd14c9f9-45d8-4d02-93e8-683f6822657c", "comment": "Malware payload (Mirai)", "value": "67a7a0f8fc730923427afee83ea893b0f20779e37eeeaf88065ec1208bacefcc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329759, "uuid": "9965c447-1f07-4e20-83a5-abefcd4e1173", "comment": "Malware payload (Mirai)", "value": "63cd1dbe987183503de4570bb225fa350708beaa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329759, "uuid": "815e64fe-ffc2-4d13-821f-13707dbf02ad", "comment": "Malware payload (Mirai)", "value": "32fd7d97e76c8e413d7034549210e10349f4b1ab8ff6a74402fe8a6ee8573a769dc75a55466891ba123e464bbc106b59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329759, "uuid": "69c99812-18ba-4e33-b2c4-390e007dd2b1", "value": "T1CBA3D61A6E119F7DF76CC23587B78E31A75833D63AE0C685D16CE9005E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329759, "uuid": "04727e76-b4f8-43b4-b1ef-030e72be9f87", "value": "1536:bZ7oil+L4kSkTGi4uOJw2W1XmXb9UiK8yKm0yKKv9DQsA0sdKKhfEpNTlbVR9gc:Zog+zp4uOJx9XbI4xdz6pNTlP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329759, "uuid": "0a6a911c-3fba-4f0a-a456-67f310733f64", "value": 105324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329759, "uuid": "ef90db2d-f6cc-41cb-81ea-b0485ca11df2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329759, "uuid": "1fec75c7-e903-4145-81dd-8c5ff66bc04e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc7beaa6-de36-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766298738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298738, "uuid": "4c3ead9e-8634-46e1-bd16-e912b52fa6aa", "comment": "Malware payload (Mirai)", "value": "ce76a587ac771b2325d740eaaf6ef2b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298738, "uuid": "fe4f7db9-a86c-4b0e-ada4-6e4bd12751b7", "comment": "Malware payload (Mirai)", "value": "67bcae85e624585fa0b682425eaeb84323b1a3222c27aa1fdb46b69e09bbcc3b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298738, "uuid": "e192b31f-ed2d-45c3-a42f-4dc7b8a8b5c6", "comment": "Malware payload (Mirai)", "value": "f2df2d0adca37e5dd2ad779507117b7a64e663da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298738, "uuid": "178a86b3-32c5-43b8-8cc0-571be6b5c616", "comment": "Malware payload (Mirai)", "value": "2023f9be5cb1a50ae92c5678bd5d3b4ace97a205094ec0f4e6d713f2fac1bcb54c6fe1acd21e814d8e437cfa2d64f8ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298738, "uuid": "5e9882dd-c977-4777-828a-875c98e41c07", "value": "T14A632B22B6760D1BC4C1E47D22F78728B2B1978E25BC891A7D720D8FEF246406D43AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298738, "uuid": "e591f14b-6db1-4fa8-b64c-16d7d02320b0", "value": "768:3fy+AA0NeJyHOG9kL3sl2IxiDFtVzhtFtsXO+75V3VvgHFt8NzwJll6If:vy+AF5OGkL3sgDDFtRhtjY75wt/Ik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766298738, "uuid": "0553dd00-5bc2-48a0-baae-f8cbd13757cc", "value": 70952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766298738, "uuid": "5c2dea0f-28d2-4181-bc7d-70eeefb58448", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298738, "uuid": "f57aa694-dd69-413f-98aa-c323ba141e6f", "value": "sdxkzX_UXA229x.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca67b88f-de31-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766296587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296587, "uuid": "42a3dcf9-3245-48e1-b489-ff541f5f9843", "comment": "Malware payload (Mirai)", "value": "f946a0fde6e977210725c8b0a8f5c3fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296587, "uuid": "701d053c-27e9-41b6-b2bd-9942989791ba", "comment": "Malware payload (Mirai)", "value": "69008b5e7815c51d3b6d26bb29ebdd82057ee1c853b0368111bd47a3f145ba5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296587, "uuid": "ad490766-b5d4-4100-8877-251e47b684e3", "comment": "Malware payload (Mirai)", "value": "43708b64d6daad0ded27c88bb163969bfd425c5c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766296587, "uuid": "e7ee6f1c-ab42-437a-ba0d-fd69b2732b14", "comment": "Malware payload (Mirai)", "value": "f92f6d8a2372056436e98e3b5a3360d21164d44d81bac3a9d40a7de1f8181088ae4db4bd3e1242d1f1e97e0f1e24a782", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296587, "uuid": "d0cdb2c0-8c3f-4f8b-a530-90d458041ee3", "value": "T11CD37DAC2E8E3DE2D3C7D37DCD044E21702B74B4C63152B1791253EED29ADAA99F0961", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296587, "uuid": "cc710f2e-4bfe-4721-b639-9a199b14fcd0", "value": "1536:7oKomXVr+4kVN2r+nP6KQUE41eTRczUcSp16ktbg1elceJzVE:mbV4A6KQUEsei4zZNyeWeJC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766296587, "uuid": "dbbbf73b-bc83-4f9f-8bb0-c4b4e72b639b", "value": 132960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766296587, "uuid": "f008b6cf-b960-4d0f-8a17-92e477678025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766296587, "uuid": "e4f7517f-4393-4a2c-847a-7aa4f7a5e494", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3debfc0d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309237, "uuid": "b0ec091c-0030-45e5-83a6-7ed77aa87e07", "comment": "Malware payload (Gafgyt)", "value": "acd9cf0a4a6b6557b408768ff7ab6c18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309237, "uuid": "11466be5-8ee1-4f54-9d93-181208a5cf0d", "comment": "Malware payload (Gafgyt)", "value": "694a10d635c5bcb25f3ee7dc6e6ed8e33027320cf133a1efe7bf343447c3b742", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309237, "uuid": "666f7c8b-f5d6-4ee9-a892-263cbcc3a106", "comment": "Malware payload (Gafgyt)", "value": "61d4a1f67188efc73a3e63fb4b6aed683f82d999", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309237, "uuid": "55f840fe-e087-4853-a2a3-b397847a35e3", "comment": "Malware payload (Gafgyt)", "value": "fbe1f377434dadd170daf9b326caaa982d32cf9c160bdde8cf473a7c3fa517c99731f115529b1b35e04707fff5628dc8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309237, "uuid": "b6b02820-a47b-40d4-ae5a-f8e8db5c6268", "value": "T1B3D32905D9508B23C6D2277AF7AF528E73236BA897CB331256286EF42FC179D1E39150", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309237, "uuid": "dfd6e0db-595a-4612-9e66-6dacda2c0539", "value": "3072:JmfdWmd6pUeQKbQsSoaa2mWA2vKjB2o45hASyqg+8umy/QsYJ0Yj/:sjoaa2mV2j5hA9qVmy/QsYJ0Yj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309237, "uuid": "ffe3ba6f-8a2a-42eb-94eb-52c77907c2b2", "value": 130434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309237, "uuid": "3e306e11-1943-4f60-b981-547e5e72ea70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309237, "uuid": "1d31bb42-4041-4585-8993-9de6da3dedee", "value": "yakuza.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df833581-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361047, "uuid": "60d519e0-bb2f-47a6-86ea-e7720b06403c", "comment": "Malware payload (Mirai)", "value": "33adb51357cb849c75ce26cec845b6c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361047, "uuid": "29c3dff0-8a99-4d06-ac51-4a851b003725", "comment": "Malware payload (Mirai)", "value": "6980a82f2d1a7dfe0a314fef70c7f490335627a7390c45eb368947241bcb4248", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361047, "uuid": "5c76fcb1-d6fc-4001-9519-a4400067a444", "comment": "Malware payload (Mirai)", "value": "f1867dc0b95a4191dc35ed7e1f0256a623f53bca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361047, "uuid": "310b7ea0-6fb9-45e1-8c84-f3ba1ed548fd", "comment": "Malware payload (Mirai)", "value": "7d1a1509f2193834d70fc979c333844752d8f149660fc4ae895d475c0332394d8ee6fad8f6a19cdfc9e92a72a30e801e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361047, "uuid": "d8f2ec4d-5f9d-43be-8e28-33ef17967e7a", "value": "T1C1733A97E002DDBDF80EE677845B0B11B93577415F520F27A69AFDE3AD320848D2AD82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361047, "uuid": "6dbf9af9-d7a6-47a4-a482-1458271ce05d", "value": "1536:YffoLtKLQlDElOFGPH4ct2FAz8QSZODbMieEH1CQsZgoWTPC:YffGEm0Yct2mqMdeM1CQsqod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361047, "uuid": "a84ca0dd-d2c4-4390-b318-39ba6a1ffd38", "value": 77808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361047, "uuid": "c852576d-55ae-4220-9cc1-a5f24a9e6771", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361047, "uuid": "c48c6aef-777a-49bb-8bdf-438cf88553cb", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b05edba-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341498, "uuid": "6c1a5586-b30c-4ccc-a132-e285eb4a774c", "comment": "Malware payload", "value": "1e8cda49881bb1de288abd5674d0560e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341498, "uuid": "ecf3f788-dad0-4be8-8e22-fa40b4ea400b", "comment": "Malware payload", "value": "69d51f8d4497aa143a654133d4b6d27f7fe38c7e73a38e4d1afd44f2804d8145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341498, "uuid": "05afb0c8-2e35-433b-9e4b-f302185cf631", "comment": "Malware payload", "value": "81ffeeb7af50e19121a5bb6e7680d675dfab9588", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341498, "uuid": "5bc8649a-3531-42db-b60e-02cfc5d59e13", "comment": "Malware payload", "value": "bf7faa1efe90245c22974c016433a8256ddcd26aa902063ddae2d4fd5eebbc0768949e2c1a1c6891a460025c0cdbbcb8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341498, "uuid": "9cfc4189-6e29-48e7-9263-57701df150fa", "value": "T1A022EC17F3E5DDFFC8AA577409A313703223C836DB428783680C56543FAB29E6EA5644", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341498, "uuid": "fb26280f-97c6-4e8d-9b1b-ff6da9f8e59a", "value": "96:B74+elu6BS8TddeqMO9tsVVQEnqN42mqMf7q1aiBcNQ2yMBxdxefnbuP:Bso0dx9tsVif42QfagQ23jdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341498, "uuid": "583a2bc4-fd65-4030-badc-3fd6c2a07564", "value": 10768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341498, "uuid": "c6ffc4dc-7f04-4e46-b8a8-4d5289d58d93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341498, "uuid": "294dc045-b100-493d-ba64-c170f4131957", "value": "linux_arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45dc5642-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309679, "uuid": "f40dfd88-9a19-4253-bc40-46292dece368", "comment": "Malware payload (Gafgyt)", "value": "3835d5fa080fc794ec20779e3b0d0208", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309679, "uuid": "ec417f4f-d0c1-4ca8-91ba-c76cb48d24ed", "comment": "Malware payload (Gafgyt)", "value": "69dccd9df0cc01c61af5c79bce5d584d6f9288df8d9ea005b8f990cf3299d24b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309679, "uuid": "76e184e3-7f3a-46b7-ac35-ab3789578258", "comment": "Malware payload (Gafgyt)", "value": "62b229ba4694145dc0c44f3f66b0389ca96593e4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309679, "uuid": "662b6f0f-a3cf-4b2e-b418-582f45842870", "comment": "Malware payload (Gafgyt)", "value": "4c1448d62f115aeae4ad86f3269786d620b9d36b14e4bf36a7246979ce0771f4c82e36eea9ccd231d4255204e21e5162", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309679, "uuid": "0527ecf2-c929-4662-a916-5488733cc5e0", "value": "T10CA35B8AD743C2B3CC530AB2124BA66A4621FD3B092EAF49F7197DB09F374C97125B51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309679, "uuid": "f6638c58-6505-47ca-972f-537ed0270628", "value": "3072:4WCjQrLpnr85EdT9Oa8vqbVr7D/CEgmqAgcVyZIcBI:4f5EdTbpr7DWmqAgcVyZIcBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309679, "uuid": "5c7de97c-f788-457a-8744-5b6069741226", "value": 99084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309679, "uuid": "6599aed6-8b18-4185-9eb6-e19131b9aff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309679, "uuid": "c1385a9f-c38f-43b0-9ace-dc6720da05e3", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15c219c5-de3d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766301438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301438, "uuid": "52cf705a-e675-4898-ac66-9b2564626249", "comment": "Malware payload (Mirai)", "value": "ebbce6b0a0e07e6759511e203cd624a7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301438, "uuid": "1cced918-fd76-45d1-97c8-dafa40003738", "comment": "Malware payload (Mirai)", "value": "6bba0da3baffbbc5ec9d66d6ba8ff52ca7d7bf9782ab900072a64578c8da1744", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301438, "uuid": "2f3f007b-1630-42ac-ac08-413e52b17d08", "comment": "Malware payload (Mirai)", "value": "b013ca18fc5198003ff10f8de3832f0f713c9f1f", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301438, "uuid": "c4a74b7d-78c4-4ce8-88c6-e1fb13db89ce", "comment": "Malware payload (Mirai)", "value": "04231027a8ea6f8d40d90ac8b643d74b320da2be484c39c61167b1f62776ab9e447ef7db399a6aab7b4cf2186caba55b", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301438, "uuid": "d33072d3-69db-4ffc-9fcc-c5b8c83c48c0", "value": "T1655196CD19A1093558A6C4F7D269C28C215AE0FB0CBE5F44DCDE36F5C0ACD4479B97A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301438, "uuid": "69f89015-913a-451a-ae69-c60f801eb2b1", "value": "48:vJyfl3GFJxXnZjsF9cDWTzGg+rb0SolJCsKe34lgrB4i93Ia6arnaeVcaxy:vJyfl3GFJxXnZjk9ZTzGbAzlJCsv4lgi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766301438, "uuid": "a3c6d2b5-3740-41b0-b236-bf3d46a8f618", "value": 2656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766301438, "uuid": "77196ed2-7e58-428c-b7bc-5fe9e9060321", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301438, "uuid": "294bf5dc-e0df-46d1-894b-99abde34b7c3", "value": "ok", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2598bb-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330039, "uuid": "a748db42-6e3d-41b0-a094-ff1c4d67703d", "comment": "Malware payload (Mirai)", "value": "fb04039b1724810018f64022d2751ccd", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330039, "uuid": "4fd3e19d-0aed-4768-ad80-c963c554239f", "comment": "Malware payload (Mirai)", "value": "6d6ada003467900f142a538c15301801ec4449ead2e2ac0495222e6ccbeeedc1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330039, "uuid": "8c71cf8c-1b54-4e6d-be48-6b996c4ee338", "comment": "Malware payload (Mirai)", "value": "840722aca7101bef080dc81a99e70d1e00cd57a0", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330039, "uuid": "834db706-e232-45ee-9e09-70f742011602", "comment": "Malware payload (Mirai)", "value": "15d44afeaf9d21e77679b9fac8a7b5c942fb431ca912c9ae78a51de6e7df193f19eeaa39ef5dc0f579e67b7aab3d560a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330039, "uuid": "0825caa6-c16c-46e4-b6b7-df7065b004d0", "value": "T115C08CEF20252642C00C6E1820A1B819E282C2C227B00B0A9FCC2023F8CF600BB0CE60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330039, "uuid": "105c22c0-282d-446b-92d8-565491179110", "value": "3:LMFdVZVb8NBzSa+ANjavjMFdVZVCONBzSa5Ap92:LMFdVbkPj6jMFdVxyc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330039, "uuid": "fb0fd682-b2e4-4e01-bb34-03b8f2513727", "value": 154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330039, "uuid": "a87af5b5-d3d3-478f-b900-571bfe7b6102", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330039, "uuid": "79983aef-5f7a-4b55-b2dc-1ce602735a0c", "value": "phy.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4220dd87-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309673, "uuid": "ad0be030-8115-4706-ba0b-3c6ba864a3d2", "comment": "Malware payload (Gafgyt)", "value": "2aa85bd1834736ce2e8217f0b6f650a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309673, "uuid": "d01547d8-35c2-4b1d-a41b-f084da722541", "comment": "Malware payload (Gafgyt)", "value": "6db2f66af04bc03344a203b6a563867bd027d8f9a1a48235697cee892ffc058b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309673, "uuid": "e6b4f525-6fa7-41ff-8514-265977cd590d", "comment": "Malware payload (Gafgyt)", "value": "96112d53c5ddfbb999e5f0b6943a4e4694732d37", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309673, "uuid": "f46c4389-1640-401c-a6ac-89969d268b3c", "comment": "Malware payload (Gafgyt)", "value": "80c3b34bf84c57a1902d8cb6689206e5ffe9120773f4ef087cc28e8b4dbb2ccb1626bbda184bc8e6775de27c391aebc1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309673, "uuid": "8a8384ff-3dee-41a3-8399-4562923410d6", "value": "T1D7A31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309673, "uuid": "080ca50d-86e7-4344-a5ce-3ea52f610e65", "value": "3072:VSx+i6mqaObhNOnPNKV+qKmZuqQ4DPwXXtse:y6mRObnOnP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309673, "uuid": "f4eebf46-96e5-42ff-9f88-8b8c94281674", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309673, "uuid": "08eaeb5a-4fb3-44cd-8bb1-4735dcd27b84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309673, "uuid": "caccee19-1aaa-4e84-b06c-3a2a44bf6d81", "value": "a-r.m-5.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69b843e6-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345388, "uuid": "86b71a38-02a4-4ed5-8d4a-93464f0ec9a5", "comment": "Malware payload (Mirai)", "value": "294bfa0693624fb23c569eac351cc7e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345388, "uuid": "c667b7e1-f5f8-443c-bdfe-6c02e043603d", "comment": "Malware payload (Mirai)", "value": "6e5ef3bf9be737135f39f5914a0fd1d445322229ea0233a1885bd329d22c2e64", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345388, "uuid": "ee58e84d-65c8-45b8-a398-a47b0f762652", "comment": "Malware payload (Mirai)", "value": "3df2b6a4c358731e4767c58489629136a94292d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345388, "uuid": "648651a4-259c-4911-9461-4ec62b787bfa", "comment": "Malware payload (Mirai)", "value": "00db5f59187f3862df195f2c67f49df60fee71c244b231f550b49d5deb2946da30d3bc6e542249926a104730426d4e6c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345388, "uuid": "03ecd83a-1229-4ec4-b0b0-d1e7efbbf897", "value": "T130631257FFDC1FACECD927B907AA65CB17A29031987740A409E56D8680AF971209FCCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345388, "uuid": "b3fa9dc4-ad77-453d-ba2b-6d84782bcd93", "value": "1536:27MbwKNGjjH+Xq34n/q8Zu41zmX3sDgx6rPc:27Mbp2L+Xqdfoz2sC6rPc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345388, "uuid": "c25a0402-01d4-4f74-9f88-4930cfce713b", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345388, "uuid": "55bd4963-5a0f-4986-a34f-6d800e555771", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345388, "uuid": "a31539a1-880c-4d86-baaf-116955f14eeb", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbf3c5f2-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295731, "uuid": "23f4dea8-1594-474e-a985-5dbb1607f7e9", "comment": "Malware payload (Mirai)", "value": "544fe3d7629201261eac1bd1f1914680", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295731, "uuid": "09551296-08de-4b40-9f08-6e26fd73f4a7", "comment": "Malware payload (Mirai)", "value": "6ee6896c296f70fe5de5fb82ce6f60b2027208ea33a8d963cb6b4b978cdc8f17", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295731, "uuid": "fa687caa-ace7-44cd-9ef4-b1f5d34aadd7", "comment": "Malware payload (Mirai)", "value": "bff71d5ca8fc736cdc9c447cdba75b4002ec9538", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295731, "uuid": "fc913db0-38a0-4bd7-9795-baf74f65b91d", "comment": "Malware payload (Mirai)", "value": "dce67ea4054624076354c9d6234cdeea281c2ea507e5326ae4017b0fc0200619912c37a52b991475f67e112891511483", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295731, "uuid": "77b401b6-ea1b-4eec-af34-ead39a4b059a", "value": "T10DB2C0CD61943088C98D7C7C178D4A664F6CA1D0BAEDDB26E354CD98B3AEA8F345D078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295731, "uuid": "1b13eb70-efe6-491c-a643-1d069be8dbf1", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpY0ZqSWv2:4QlS07FUXqIYSXQKqujqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295731, "uuid": "ebe556ef-88ef-4f2b-be4a-7dde3501f88f", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295731, "uuid": "6e875ca4-969c-44f0-8789-cc5ccbde721a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295731, "uuid": "3e1a3ab8-04f3-4a80-bad1-6d0b4b371848", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e1e1309-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766340510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340510, "uuid": "0b4b8fdb-86b9-411c-a8e5-6bea78edfcf9", "comment": "Malware payload (Gafgyt)", "value": "b300c7141b817b7252aa07afcf30b688", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340510, "uuid": "004d0e03-40be-48ae-8d65-009b6fe06e85", "comment": "Malware payload (Gafgyt)", "value": "6ef741444a92a0a66c5b58de9cebbfd7344035f3865e9b486220f4cafc4477fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340510, "uuid": "760f1aec-528a-47e7-9c86-ca89e6599962", "comment": "Malware payload (Gafgyt)", "value": "dafac4b17c2d55160eb480ee6c83a51f235a4f9f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340510, "uuid": "42e863f8-f346-461c-a1df-8619cc5ce2d7", "comment": "Malware payload (Gafgyt)", "value": "d1e180e7d8661e84a4c416814f8d817d6d60953a0220254c4fd3f53f43906acedb28604f5bcdf8b9d04fe80efa6ab2e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340510, "uuid": "69b9131e-7f52-46fa-9248-b3e664f3f435", "value": "T166B34A0AB8C1D5FCC868D2B86B5F6135D531F0A82134796E27C4FF163E9CA507F2AA91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340510, "uuid": "6ad7b4eb-33c2-4e05-842c-cfcd3028767a", "value": "3072:b7bBezGlUbMQ7qEfJ1w1TWs3O1ECblMr:b7cCSbxGED+6+OW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340510, "uuid": "78bf306b-b2be-47b2-89a8-e48fbffeecca", "value": 115832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340510, "uuid": "abceeda4-d8bd-4347-940d-5d7dbd899efd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340510, "uuid": "ba5fb428-2911-4c9e-89d2-d57b4861c4e5", "value": "rondo.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d721ade0-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295750, "uuid": "53c49b52-49eb-46aa-b2da-37cebf7041f9", "comment": "Malware payload (Mirai)", "value": "2229ab55a9746b2ae5369b1c063a512f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295750, "uuid": "207eebb0-8a05-41f5-9900-bdb99a1b4ce6", "comment": "Malware payload (Mirai)", "value": "6f7775e5a9f50c21f04a43fd42ee4b5e36197e3793cb22e3dc56cef9189252f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295750, "uuid": "418f8d62-55e6-4529-bd9a-04d25e57bc62", "comment": "Malware payload (Mirai)", "value": "1b43fc88384469fcb8326f531a5dd8cceb27778a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295750, "uuid": "c81145e3-a777-4a8c-904c-76c1c5e4686e", "comment": "Malware payload (Mirai)", "value": "5db57032e19e11e7736f6032bea7f77261e4d62e6e5598e91c2db5f74b1e4be7f6f28f6a2608fa06569b5ad61c13ec07", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295750, "uuid": "6771a5c2-1505-492d-b665-a5b0bcdb9e95", "value": "T14F73A409BB600FB3DCABCC3705AA2B0139DD665721B97B36B934D918B90B25F15D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295750, "uuid": "0c5f969f-a86e-402f-95cd-ffab414743b2", "value": "1536:zJPEBmW5iNWqcGTkwnXHZ84OqdZerESt7:zJPEB8NWq9hqqd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295750, "uuid": "4b500133-e5bc-4a53-b662-ad226129f134", "value": 76120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295750, "uuid": "33411018-b069-4282-ac2f-92fc4c45f95a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295750, "uuid": "971819f2-7b44-4cd9-b694-b1a713749a88", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4bb7a03-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330025, "uuid": "301fa1f9-ffda-418f-a141-d012013cc42f", "comment": "Malware payload (Mirai)", "value": "4395b5512370b9a4fb69c43f40ff0888", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330025, "uuid": "14754934-062d-43c1-a538-effa4b544639", "comment": "Malware payload (Mirai)", "value": "6f8b88e1a2e70256b74996f6185b41bc9be47897b53cb1f1dc59d931a7199e72", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330025, "uuid": "a56421d1-9b90-4846-9345-df09901bc302", "comment": "Malware payload (Mirai)", "value": "ea6d93f8d4fe3e2a44b01db3e0dcde23d15b7a23", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330025, "uuid": "8820dfca-2472-4d23-896e-1ccbdfd29b73", "comment": "Malware payload (Mirai)", "value": "3784d18c521a64239ceb4ed0bdbbfafe6455e6a6433a2d235f1109eaacaca8b09bb533941ea8065b5d88698cd5ec7044", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330025, "uuid": "ac0d252f-ccc5-4ff5-9219-136d0df05546", "value": "T155C08CAF20272A41C008AE7028A13019B6A1CAD226B00B0E9BC82033F8CE600F71CE21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330025, "uuid": "7a08ad6f-3545-4a92-b8af-8c5bb594b5ec", "value": "3:LxAjdVZVb8NBzSa+ANja9EJzgxAjdVZVCONBzSa5Ap9mun:L6VbkPjoE9g6Vxykun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330025, "uuid": "42921d4c-e6c7-4f37-9be5-58f5754f0c94", "value": 152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330025, "uuid": "80ff4c67-36e2-4326-a3c2-4f7038ba47d5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330025, "uuid": "35889274-7021-455c-8812-55cfb2d0daf1", "value": "cnipc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a7e5f68-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347859, "uuid": "be315ace-a409-4788-a69f-f168aada65c5", "comment": "Malware payload (Mirai)", "value": "083c25d1629f175ae7f2245d576e687b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347859, "uuid": "aabb619d-9e0c-4d6f-80a8-a4e7b8095a7b", "comment": "Malware payload (Mirai)", "value": "6fd825a32c266431d859e9635c5ae064437e5a82fcb420ee6c6ac75e738cde00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347859, "uuid": "7b1c0bdb-e02f-403e-99a3-bcef33e04f40", "comment": "Malware payload (Mirai)", "value": "dc952500f80b9c6a5f873aebde7b0e4bd2439d39", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347859, "uuid": "17d50388-7f28-46fb-8638-5d959041b6a7", "comment": "Malware payload (Mirai)", "value": "36232df72db309f8d03a9f1e954b8c8c07661c7a7ef8786ea45513d975bf25e58bf7fb7d0368d7c02585a27b0c7433af", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347859, "uuid": "e224d1a9-9081-4d7b-82ff-33d14e729136", "value": "T18B63E782BC80E629D3C0177BED6F109E3310A7D8D1DA3252DC285BA47BCED5B0DA6B55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347859, "uuid": "8e8ac2ab-564c-425c-85d7-1d9115fa57ed", "value": "1536:sv6J9pZZpTThFcsXWkdBOMsRgnHeXfU2/w2Ky:Y6J9pPRThFcsoAH2M2Ay", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347859, "uuid": "c2552584-9a1b-4948-8d99-711813cab291", "value": 67856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347859, "uuid": "60d60878-8a7a-4598-9daf-b297934aac8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347859, "uuid": "fc0a5c94-f9c3-41e5-8cd2-5fdf0c196a51", "value": "Fantazy.arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada096bd-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330040, "uuid": "3f2142a7-efbf-4234-a19f-51cecca619f9", "comment": "Malware payload (Mirai)", "value": "7276748e6e65fd7d987867f13b6badcb", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330040, "uuid": "2137dcd8-49df-4fca-8551-dca2248a12d4", "comment": "Malware payload (Mirai)", "value": "700b319ef583013623e047816b27bcdd4a9ce876ed3bb384a6930206f91eb0fd", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330040, "uuid": "0fda6a44-9c7f-46e9-8e3c-501902bf3ee5", "comment": "Malware payload (Mirai)", "value": "8571cc872cc4e03e14905dee081dfd629bf4fc4f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330040, "uuid": "f7bfab19-edb8-4c18-a472-383eef3c52b4", "comment": "Malware payload (Mirai)", "value": "6d6796b84c324d81c399de235556c00b592e212e38780b4199acdb457be9a3008588fbe1f3cd17de86f3e9b8389d8a0e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330040, "uuid": "931386f5-79e3-4435-9cf7-12c500e3f674", "value": "T1C7D0C99E5101A9B0744FB9FC32B223CA31C2CB0E34750A2ECD8010B3C0C054CE618A1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330040, "uuid": "877dacfc-c4d8-4705-8354-6f0cf960e977", "value": "6:L6CeAKTj7KD6AWJeAbJTobJ+0TPATVWJv:ezAMndzMAewUh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330040, "uuid": "80fd1503-bafd-4e71-848a-1f4b17e2b1dc", "value": 196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330040, "uuid": "32a4b7e7-f6a7-4b74-bd99-a9d089b2c9ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330040, "uuid": "d052c3ef-210f-4df7-8fbf-62c3de9648aa", "value": "adi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f1cfe66-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "669dcc44-6ed3-4a31-bb96-1fa1ce4a1e05", "comment": "Malware payload (Mirai)", "value": "fb07d61a3286a9f443d5fefde6486750", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "9fdb1234-f86e-49f2-81fa-4ecada65ecee", "comment": "Malware payload (Mirai)", "value": "701abf1c2ed356cf909fd6fb8ecc5420d15bc370a9e68610fc6a8ebeaf389525", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "777ad584-bfd8-4f80-9687-a806262c023a", "comment": "Malware payload (Mirai)", "value": "990571b435384c8cdacd0fc30905b472ce0f924a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "dcb32c45-5126-4ec8-bf98-ecc6748952e3", "comment": "Malware payload (Mirai)", "value": "ea710d3803818f71487d0575be38e609279ddf239f80ca0f2d59d5c25f46d633040231206a541303213ca11ae778cc61", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "59b12171-576b-4717-9542-d3dee6567e15", "value": "T12711849F01459D90C48CD43A37D2850DB4D44FCA187B0BA69EA600BE10F45CE7738E55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "237f5659-808f-4f3b-b12d-91c12bde9086", "value": "24:k7uSa7M5QSa7iSa7/Sa7V+Sa7PSa70Sa7bSa7XSa7kSa7beSf:knawHajaOaxa2axaaaGaZarf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330016, "uuid": "1c022f0c-7245-4127-a4b1-98ceeb8e660c", "value": 1039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330016, "uuid": "ecb26e3e-307d-4c5c-84ec-5c0ecbf8d000", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "c3845f64-0784-470d-83ed-764a1e2c0764", "value": "lil", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d6002d1-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340213, "uuid": "2c37737e-7504-4596-b664-530bbf45eb90", "comment": "Malware payload (Mirai)", "value": "968bf213c37cbfbed3c371cb84c38297", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340213, "uuid": "f02faa8e-cec1-4944-899b-a4107b652227", "comment": "Malware payload (Mirai)", "value": "7047ff936fc25cd29591c76892e49481da90e2ccbb34270e281340551dbcf86c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340213, "uuid": "b24ce2b9-4e16-466a-836e-9e3e0ec09949", "comment": "Malware payload (Mirai)", "value": "e361ee05e948e75daa3523bf1fdb4ab66da46beb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340213, "uuid": "30ccb80d-af0f-444e-8621-c72b47674b73", "comment": "Malware payload (Mirai)", "value": "b4dc6fb6af50482a511a30f92f2f47433ad9f4d29267ef5b4087610d403bc9f052be557ea48fa001e944a8886116e159", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340213, "uuid": "3fd449f0-b1f0-4587-9ffb-ce1f0ae78f3a", "value": "T16C436B3BC11E5C80DB4846B47412CEB96713B3499C662FFDA64A8A58C007ED8F959BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340213, "uuid": "165c4a31-57dd-4788-9590-e9923c6cdf8b", "value": "1536:QJJg+EC1ls9kw9heQcTv9HmMBf16jkACcz:n+flokw3sTV7BN6jkA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340213, "uuid": "b75c28fa-2cfe-4173-a343-bc077bb3e690", "value": 59644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340213, "uuid": "14c5eb66-94d8-4d25-b6ae-601b72a55dbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340213, "uuid": "6da0f515-ca0c-417f-af22-4ae6cbc247d5", "value": "shadow.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b354205-de0f-11f0-a129-42010a9c0007", "comment": "Malware payload (Joker)", "timestamp": 1766281664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281664, "uuid": "e29b9ff8-130f-423d-ad1e-04315cef9b28", "comment": "Malware payload (Joker)", "value": "1624a00326cd60a9d00b29babd83b8ff", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281664, "uuid": "cafc2a48-374a-4464-8fe5-71b8c1245b03", "comment": "Malware payload (Joker)", "value": "705b25b05ed81a3763d262a530022ddff14f4d68aaed7c33511eef7f440f20e5", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281664, "uuid": "90296070-5081-4ab1-96db-8a212e85716e", "comment": "Malware payload (Joker)", "value": "46020980320c969dd2285c4c5567f006d6f3a316", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766281664, "uuid": "fb4ac325-2b4d-491c-bf03-95ffec21f614", "comment": "Malware payload (Joker)", "value": "1c2a885c9c273a49ee933483ed438d35b7999555072994a41a5a82e84b281b5400f614fb4f6d44b97a1ff0721df2558f", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281664, "uuid": "fc06261a-7a07-4579-8cb4-ec725b93805c", "value": "T1B6180149E31DA912E9C6F0BC8E5A47A371267C915260D09B382E750CFFF7BD0CA66790", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281664, "uuid": "64162892-093c-4f44-b2cb-e5280b979596", "value": "1572864:xMg0IOrRlw4wQKlabydebKfI/VyRw7LJsgz3U1uTWS:nfZ7wbKg/VjJsg7U16WS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766281664, "uuid": "9faa00b9-b1f0-47cc-85de-2bd69df49aae", "value": 85288518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766281664, "uuid": "5d4a26ba-c664-4764-86d1-588ec5fa9e1f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766281664, "uuid": "1cec47e7-b049-4081-b9e7-84a857e05fa8", "value": "HD+Beauty+Camera_5.6.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369d6914-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347879, "uuid": "09631440-1b71-4e87-abf1-db85fe6c7ad6", "comment": "Malware payload (Mirai)", "value": "e96dac6053171dabe2cfe13e1a43c887", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347879, "uuid": "90c6e805-3680-4e2e-913c-3fbfea4809f0", "comment": "Malware payload (Mirai)", "value": "71678e4bb17ef89a6df23dc992e86e90a0d9c10b7c42ef126e3ba4a295757d78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347879, "uuid": "bc254da0-a0c8-4efd-bf44-cbad9883aba9", "comment": "Malware payload (Mirai)", "value": "c49bda74f4a4b80c44765b1d9719e70bf329f78c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347879, "uuid": "fef7afce-cac5-4404-bf62-ce6d6581f9d7", "comment": "Malware payload (Mirai)", "value": "c1a27c77781c54999d7e95ddde236abe79ce28b39b65747368ee068891df41762774b1e9530228a468b6c61f88307aec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347879, "uuid": "3a787cb7-afaf-428b-8907-7090755160bd", "value": "T1E0B3D085B210AE55C02672FCB1870A80D2B17E7B4B5A190B44B3F5B46DBCDD47E0BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347879, "uuid": "dd83359c-0924-42cf-acfe-8bcaced9ca80", "value": "3072:dX56Ikx2TO6b4Zxnu37565s95S7Wl4wu5:tyH6bwur5PGk4wO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347879, "uuid": "6b7aa54b-c5d1-40b7-818c-f576fb80bccf", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347879, "uuid": "87f9a8b0-0dc5-4599-9cc8-d5aa6027593f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347879, "uuid": "bc800348-3da8-4beb-acbd-b3190e720ee9", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f45da5-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320732, "uuid": "aa59e1a3-840f-495b-a9e3-73619b65fd84", "comment": "Malware payload (Mirai)", "value": "684cddd5ea54d8838bc51fdc77950f4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320732, "uuid": "b33503bc-be6c-4b4d-87ba-84a518a1d03c", "comment": "Malware payload (Mirai)", "value": "7241b97b91da0f9621a3c8e406a8c493f06114c570424f4fbe323c641b63726d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320732, "uuid": "00600dbb-7117-40ff-98e5-898ef1589ec5", "comment": "Malware payload (Mirai)", "value": "f3e7288aadc1ad480f7cbc702044cf644a7c5232", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320732, "uuid": "199b2122-bdcc-4411-a829-fdf3ddad8a58", "comment": "Malware payload (Mirai)", "value": "974db6085188913e767a6a8223afbb1132cf4aa22251a0902269104016d3d78a66faff5668b402df8c90b244ea32f58e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320732, "uuid": "f7091fbf-b0bc-410a-a71b-a051fd0e8b03", "value": "T1F95329C4A903DAF1EC165170E06AFB3A4676F53E0119EA9FD7D68867D463E02E70239C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320732, "uuid": "9d2dacf8-0ae3-479e-96b4-c7c8d0db8740", "value": "1536:4IL2IxuBqWoArsGCsLSmaOhOGza/RXNyt8:4I/xuBqWoAYGCsLSmaEOGz4RdC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320732, "uuid": "79422fda-affa-41ff-bf5c-77bfeab2af4e", "value": 62044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320732, "uuid": "5665d864-230b-4612-b544-496a976ba7f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320732, "uuid": "6186ac61-2879-4365-a765-f6b9d3077fde", "value": "shadow.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5883bc1-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309518, "uuid": "87d25676-a97c-4743-9e39-848282dd8be2", "comment": "Malware payload (Gafgyt)", "value": "a251507c7030a5bee8aaaa5b9c8dbb38", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309518, "uuid": "727a60e6-60fe-4f3f-bfae-110c85ccb4aa", "comment": "Malware payload (Gafgyt)", "value": "72f07e0609282c65723c7b4a05dfebddef9b91519234f26840c15f8c41d32941", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309518, "uuid": "0e0c55b7-31b1-4722-9669-0b17d5d240e7", "comment": "Malware payload (Gafgyt)", "value": "dcd9cbdc9da44ae27e98648211984f756782b958", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309518, "uuid": "237be49a-8d2d-44c6-80fc-2f32ba239d47", "comment": "Malware payload (Gafgyt)", "value": "38680a3653f02f89dd21fef71314216b228b994b3c04b1e3e9499cd7b68a673dad59d2eb0edb97be35f7010e14f73d49", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309518, "uuid": "aad2a305-61df-480a-9005-7daa42558b25", "value": "T196414ACB109207F7AC90DC3732794894F6D892A698C69F47ADDC7CE448BFDEC6854682", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309518, "uuid": "e034ca1d-643a-4de8-94d2-9b4c05a5ff4c", "value": "48:vUsd8jUDttQdMUqYUBRUf7U8T6UeCUKIUpL1Uz5NUKIURxUIT:vUsd8jUDttQdMUqYUBRUf7U8T6UeCUKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309518, "uuid": "30845379-f69b-4a9e-ac92-9a9fbfcdc85d", "value": 2085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309518, "uuid": "d00311c5-0250-4a08-88a1-5edef70421d6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309518, "uuid": "e0e7a3d0-609a-4a6f-859f-1601e834725f", "value": "Sakura.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0976e68a-dec5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359829, "uuid": "2514b4f4-5d4a-41fb-b913-ba1ad36f49b9", "comment": "Malware payload (Mirai)", "value": "319aab549f15a6279f2356beaadb472c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359829, "uuid": "8fb9c285-3d61-4b33-a9ea-b2d53808ef0c", "comment": "Malware payload (Mirai)", "value": "73eacee889039aedc8fb6a51410ae9c9e984815df08accc79bdabac14e804fcb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359829, "uuid": "ce3518a2-7d52-45ed-aa2c-5a62276f7f6a", "comment": "Malware payload (Mirai)", "value": "f7080e3d4f9fd182ced3fe5cdba4cbe8b3f7ae32", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359829, "uuid": "5a043fed-934e-45dd-aae5-ee2fb8830633", "comment": "Malware payload (Mirai)", "value": "fe977e67a2d4b9baf6e4b0a928d33fd4b54bda65b3079b292838beb6df2b66d1d8f6e9f1018700dcac2fb238bcaae768", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359829, "uuid": "5bb01072-8ed0-45e5-bc04-e01befbe37c4", "value": "T1CE835B42B2184E43E9A30DB02D3F27E183EE99A021F4B786655FAF4A4675E331446FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359829, "uuid": "56d23697-a63f-446f-bb8e-7c61f7ed0567", "value": "1536:h9rhNJdMkG/S3QcozNXSlnVU9xuXDtqqmg8T2bVR84S:ZISAZXSM9cXwnT2E4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359829, "uuid": "3e1a63cc-02ea-4230-9d60-7453e673eb16", "value": 81284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359829, "uuid": "13d6c2d0-9fee-4882-9085-8436447c5e88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359829, "uuid": "30979428-97d6-4edc-a8e5-f7d365a4bc3c", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95ad7c53-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345462, "uuid": "1af64882-1290-4d41-821a-ccb372d51362", "comment": "Malware payload (Mirai)", "value": "009e6fa5deb9f9d752ad90e06aadb4bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345462, "uuid": "e0bd11be-0ba2-43d5-a1f1-77a8c9ebae37", "comment": "Malware payload (Mirai)", "value": "7444cb6a1e3439663e2384b9a16bdc7f0322a40b05285e27b250ce5928ab435a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345462, "uuid": "66e56e0d-fda8-4b39-8db6-87d22bb7e157", "comment": "Malware payload (Mirai)", "value": "3877cecb3aa87d5ff90c969b0ace91b0ab1877c0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345462, "uuid": "c82732d4-2931-4b95-9c28-b690df23abfb", "comment": "Malware payload (Mirai)", "value": "355923f42ccfa799e7a1de13108bae38d16da02a8593a87c37c4b7876e9c1d54e9c2f919722a8af8f100647d0be02a03", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345462, "uuid": "f6561b80-ef02-4b7e-8718-86eb2074f000", "value": "T1D8148D68FE4F68D2D2C7E37DAE4A0FA2312779749565C0B51A00A29FD5EAFD488C0613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345462, "uuid": "91eaf361-a1b1-4404-8687-1c072224d862", "value": "3072:badBpAIWIfbEdOcdY3rZiigZ2eNRzPx+:bOVfbEdxm4iubA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345462, "uuid": "e465be41-878f-401b-98cb-971a07e5e9ab", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345462, "uuid": "998a6f62-e126-49c9-9464-631fd5ee4be1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345462, "uuid": "14910ac2-7c7f-4811-a376-e0ae05dc5bbb", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60603df2-de49-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766306717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306717, "uuid": "402d6e2b-fb83-4fda-be27-1fcc8d5e6f36", "comment": "Malware payload (Mirai)", "value": "0e4081b5fe98f5448a18c485b44846ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306717, "uuid": "b8f07d39-4cc3-4bef-93f8-753bedba0917", "comment": "Malware payload (Mirai)", "value": "7501f714f4c5c7ec1efc47ba26305c02859416ad276d01090665117a2183065b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306717, "uuid": "1084769a-9af3-4bf9-acaf-7652d504e35f", "comment": "Malware payload (Mirai)", "value": "e65c1f30364193bb95cecbdef47eb46a90b43c08", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306717, "uuid": "548d155e-ed2f-4df7-90e7-abd6cf779620", "comment": "Malware payload (Mirai)", "value": "891b8eb70fedf77a0ca0ec9a9d225c1e04c00f82c01eaf0331ef5e556faf8868176f877cf6f11767ba119b2649fd18e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306717, "uuid": "6175e508-026c-45b6-9959-83d56e2387d6", "value": "T199438D37FC2B5D54D44846B0A0764EBB0B52B04882171EBE19BAEBA5506BCBCF1053FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306717, "uuid": "724c320b-db11-423c-8bbf-e5af2903f835", "value": "1536:vGGAiw3E2QEqOVu/lxLdKP/sAKBd+CzgZUVjW3ZW3ZW3m:tAiw3E2QOV4FEPSBd++VF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766306717, "uuid": "5d796560-0072-40ab-a79a-70b988602ceb", "value": 59604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766306717, "uuid": "73f414b6-333a-4308-8bcb-18a978e4262a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306717, "uuid": "8cf02e9d-84c6-4b94-bd5b-1eedc4136ad5", "value": "sdxkzX_UXA229x.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d8b9353-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330013, "uuid": "1f81bbcb-a235-4c81-a844-fe73f312a97c", "comment": "Malware payload (Mirai)", "value": "9972c35ead2006a1dabefc5ce6ae81b4", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330013, "uuid": "c92e0fb3-4813-4d00-948f-b2a0ed43eaec", "comment": "Malware payload (Mirai)", "value": "756b6e041316c9bbd85dbf0eb9180b6abc6fa626dd7ec6497d20e6979624d962", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330013, "uuid": "18abcac6-7d12-4df8-903f-04f6b01f6bb3", "comment": "Malware payload (Mirai)", "value": "1b45aa0d4445c41546eb095f0b72a34df2ce803f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330013, "uuid": "3c4f1a4b-704c-4167-a90e-41c61ea60871", "comment": "Malware payload (Mirai)", "value": "c5b1aec2e4f0dbea392d988cbdcbf82d8194eb5bd65e71b02de2792d55e41ff0a3e62c8ca48242b7b186df65bd860016", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330013, "uuid": "af57f4ab-b2c3-4b92-8ec5-eadfae96b519", "value": "T141E092CE03065C9080CDD87937E1E60CB4D05BCE2E771A982D9218BE80F05CE733892A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330013, "uuid": "9a5b8a3f-8602-4af1-925b-b2db95ae51c8", "value": "12:JGmT7m40iXVa7mnkiXVa7m3iXVa7mWiXVn:H7NdXVa7ANXVa7rXVa7OXVn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330013, "uuid": "38944376-2f0d-4fc9-80c9-ce5063186c7f", "value": 388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330013, "uuid": "ba2ffcb4-9f53-4397-b3b8-408606a2e11e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330013, "uuid": "17709477-fccb-4f7c-b09f-f9232a94d651", "value": "camera.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd6a177b-de9d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766342951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342951, "uuid": "5893eaa7-4904-461f-bb57-645abddf3b62", "comment": "Malware payload", "value": "a38373004f49dbece740eae0dbe7f229", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342951, "uuid": "e9919dc2-3a49-4c89-8c18-62429bc97961", "comment": "Malware payload", "value": "75c815493f0b3014c8bed9801d3df083f298b2a0dc7021a0365a27be8fa448f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342951, "uuid": "efcabecc-adc0-4d6b-872e-9b475c614f07", "comment": "Malware payload", "value": "faddd8910994fda120fd4746a3a85b7dd6f33156", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342951, "uuid": "7ba2eb2b-2271-4358-a10c-b43d676c67f6", "comment": "Malware payload", "value": "a0f4594f4a8a0cb46ada7bcf7b4a55cb5cb805d8ff7b92e3671b8a2db8b89935b15e797d42b0449c5a29dfc7ae0dd4e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342951, "uuid": "b73ebf62-4d14-4624-98ca-68384319ef41", "value": "T113D3195AEC819F51D9D526BBFA5E8189335307BCE3FF31128E244F25239A92B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342951, "uuid": "4ba103a2-b894-49ac-8a5e-64bf5a29a07d", "value": "3072:VFrPBlYbjsdB3nCNa+ogaAGAnas6EjtiaWmgfscuWh:VFrZlYbQzhNgaAGAnamtiugEcb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342951, "uuid": "c118c9ff-6a35-46e6-9c53-cbc3b168ea03", "value": 141496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342951, "uuid": "46f29aba-0376-4e75-a779-10f55ad81770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342951, "uuid": "e7f5f063-9994-4205-8efe-196a49dbafdc", "value": "rondo.armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a78ca560-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "eab87148-7a90-4a2f-8e4a-ba149046c366", "comment": "Malware payload (Mirai)", "value": "2ae2a00a96a1821d336b9f55758bd102", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "474b8c93-1a5f-40c8-9d26-5c328d08045a", "comment": "Malware payload (Mirai)", "value": "75f5f777c20243f68da4a8b8dee1b8d2cf13ea2b6bb31dd967a577fe0bba55e4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "71ebd5a7-7fec-4423-83c8-f13fbf6ee288", "comment": "Malware payload (Mirai)", "value": "fe035a7b505893a4d4dd949df31033d9f5681df9", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330030, "uuid": "48df7d3a-b95a-43b6-ab01-9ceb39ddba4b", "comment": "Malware payload (Mirai)", "value": "f855d3034907adb95c8dc48eb0b45af49c9fd8fba65e3a42eb0d011478faf6e40c9552556c6f36463fc24b70fea89d3f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "e780ef4b-eb2e-44a6-b830-7fbdc0f4ca53", "value": "T18911968F0112BD40846C9934767AE494B5908BA5AAF6165DBFD6003FD4C8921B738E71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "b15b4f78-bb4c-4ec7-95fb-db0b7b4226dc", "value": "6:L6V1OWT9FOL6Vb+gtFOL6VqqFOL6VQa6RcbFOL6VeOB9FOL6Vc5wFOL6VcODyIFp:eO0v3MY368MOBHmy/2KjDFMY3DRnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330030, "uuid": "8b8be759-9fdb-45d1-9804-65872a5f33f8", "value": 904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330030, "uuid": "404b9ccf-9fde-463d-9fd2-67d0ae9606d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330030, "uuid": "d0e8c517-14eb-429d-87b5-eda6604cba69", "value": "sd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dd69e2c-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329128, "uuid": "f7efa8c0-97a4-4384-96ff-7e042a459f56", "comment": "Malware payload (Mirai)", "value": "e634fc0a58b4e507ff195e7d036827d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329128, "uuid": "eb4357c1-d6fa-4848-8b40-913db6bbcc29", "comment": "Malware payload (Mirai)", "value": "769524462d1951e76839df7d4ffe691cd7624f2e664e70059d6cf43d7d8c5706", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329128, "uuid": "e0d9025c-7450-4931-afe4-86cb32626e0b", "comment": "Malware payload (Mirai)", "value": "fe728508c7f7d0abcfb40be6b862e7021a12e631", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329128, "uuid": "0c0ca65e-b3f4-424b-ae88-90511bb090c1", "comment": "Malware payload (Mirai)", "value": "76334249d9b6050743c959f8a06c3ad30f382ef59c2a447e1f4d72d173956f62f2e062530d796b070ccc5aa4bbda0e19", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329128, "uuid": "a6eeda2b-72b5-4724-9546-9a97106fd1af", "value": "T1D183079AF9819F11D5D665BAFF0F518D331347ACE3EE72029D246B25278B82B0F7A401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329128, "uuid": "9387afd8-d1b9-4eb8-b11e-7c3ac52d4331", "value": "1536:W5ndTSqWDQvavY5kDtv8kBuhyzGN7h2FlCf3gNluIiOWG/KL7SAZBAYmNvTlbVR:CTHxyY5U1u4SN7h2FlCj3Gw7SArAhvTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329128, "uuid": "ded261d0-891e-47b1-8f78-a78a3ec9af65", "value": 83300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329128, "uuid": "4be9c257-2f65-4010-9fcd-fbf33f69740f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329128, "uuid": "5563fca0-77cc-421c-9f80-87e10fd2d3a2", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3c974fb-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309864, "uuid": "f8fba8a6-eb37-4fb1-beea-c9a5f255af84", "comment": "Malware payload (Mirai)", "value": "8f11f9f73c29505741a10b393819721d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309864, "uuid": "bf674ddf-ea1e-4507-95ba-265b468d6557", "comment": "Malware payload (Mirai)", "value": "76cef13d393b6a2d6b81ce5ce644536b2d77edc858a36b5aa3c45645e90b47bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309864, "uuid": "4db7beae-e6fc-4883-8fb3-f5625b218c94", "comment": "Malware payload (Mirai)", "value": "f52332f58b07f52510db1b2090b457168e387f30", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309864, "uuid": "c64d37a2-8f65-4398-8260-278461ae8634", "comment": "Malware payload (Mirai)", "value": "e68fd12a2d09a674b9e1cd68bf1a0304099a05bc9a85f99ff48ffcac0a36a5d1b36ec46b39cb843278412797fbc8ac43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309864, "uuid": "40e00e7e-007a-4494-b617-589c5fde18e7", "value": "T13D832A85B881DA26C6D962BBFA5E41CC372613B8D2EF3207DD256F25378682F0D3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309864, "uuid": "5a7bd615-1d2f-41e7-ad81-fe8d2c510cb9", "value": "1536:7b8KVoTB4X0/g6jaRr4nLEQKMSKB9u4kFk/eA7uldvJTlbsRI:7brCiQLEQKMSKB9uzFh/lJTlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309864, "uuid": "62dfabe8-54cc-4530-a7e0-e1ef91a3d818", "value": 84176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309864, "uuid": "93ec96e2-eaff-4819-8235-b38a0207f0fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309864, "uuid": "c5513ad3-8379-4e4d-b1e2-ca1349fc2d70", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f7c7941-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340217, "uuid": "99119ca5-40e6-44fb-aa13-a108bbf6cf9f", "comment": "Malware payload (Mirai)", "value": "6fedf5e4a6940d8997247371c39c959e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340217, "uuid": "a98aee02-6875-4641-93a4-76ccece0d5ce", "comment": "Malware payload (Mirai)", "value": "774aa41f5755c79673ca63492f9b3c1153b1255f26d80d7f45bd178c03e1c40d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340217, "uuid": "d7d9a813-5345-4da6-b3f2-d2fa426991ba", "comment": "Malware payload (Mirai)", "value": "2e19852953f3d747849afff6d1c926303f5d84b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340217, "uuid": "4d7de2e3-0e91-4971-b8da-418e8df75a05", "comment": "Malware payload (Mirai)", "value": "03c00e307a7e808088e0979e5eadb15f8e8fcb1155e01975e31bf6a96cc8dfe8806580ef52a309963ff5871215b35c6e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340217, "uuid": "12170656-0e51-4095-8b9a-2826a5b7b361", "value": "T171533AC46A02DAF5DC161170E07AFB7E46B6F63E0119EEAFD7D58466C4A3D12A70238C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340217, "uuid": "1ad68758-4c14-4fc2-b061-49ed087ad279", "value": "1536:Mafu/uBXq0fdrsPv0a7UUevkegHav8/ZRy+Let6:MD/uBXq0fVsPvj77eMeMhRte", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340217, "uuid": "4947f686-6240-4d80-bb4c-5eab7554c7c3", "value": 62044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340217, "uuid": "34b1dbe5-7412-451b-8c7f-84e3dee2a1e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340217, "uuid": "1d6376d4-0ddf-4d05-9c11-b21759e97786", "value": "shadow.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d44d2b01-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295745, "uuid": "8ff69f0d-5bec-48a5-86c6-21055b3e1b69", "comment": "Malware payload (Mirai)", "value": "60bb4fbb85d32837b8577c0277ac7fe0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295745, "uuid": "3ee4686f-8440-4fd6-af5e-60bea695ac23", "comment": "Malware payload (Mirai)", "value": "77c1ef3819869d69d608c17deb6c94d6cf878baca431186fcfc93162dfcdc306", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295745, "uuid": "ed4321fa-7f46-4a42-b930-2ff89f5e0b15", "comment": "Malware payload (Mirai)", "value": "92b243ec83aedd69101f8f7d2aadba7ead99fc39", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295745, "uuid": "1af9dba4-2bfd-4390-946a-9c6224fec0ec", "comment": "Malware payload (Mirai)", "value": "fd7b3c918d4f81ac0918a3fb774e0fc58d772ebec544e49d36dd63c78f191e3ca49979795592cb9c045789853b0678bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295745, "uuid": "0d79ea56-9cc5-43e3-9265-068e5f910ea2", "value": "T19FC35B42FA418F13C0D61779B6EF42493322A79593DB73069A249FB43F8679F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295745, "uuid": "df051ce2-236f-45c6-ac48-178c53b77126", "value": "3072:cowpuQyNSG2eRa1styK9flTQPHo7rScVM/9OAvjik:cowpuQyNSG24a1styKdlTuI7rSmM/9nd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295745, "uuid": "9fa5a456-73ac-4d50-9ef0-dbef0dba5d97", "value": 129940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295745, "uuid": "acea345c-0817-4ecd-ad99-85713fc72f8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295745, "uuid": "ab337c3d-1b89-4525-a6f6-9e900af0ae48", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4d8a030-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309517, "uuid": "1d9628b7-9df0-4b7b-9672-ec5284ef8595", "comment": "Malware payload (Gafgyt)", "value": "e913408d84eaab4e37de9c0b11ee0f2a", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309517, "uuid": "af23229c-cb53-40f5-80de-ea1a6899420f", "comment": "Malware payload (Gafgyt)", "value": "77e957178cb311ea3377847fe4efb45515541df2271e75b3360d00d1fa5245d4", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309517, "uuid": "12139cf0-6693-44ed-bb7a-9b22a6c75fbb", "comment": "Malware payload (Gafgyt)", "value": "2ae1ca72b804ec469207873c07a664ac50c134ee", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309517, "uuid": "8417464f-4f5d-43bb-90cf-e2030ad7d5ec", "comment": "Malware payload (Gafgyt)", "value": "06fe0f84e943d42b92bbfafa2f417ee401623463fe79a5fef59c643dbfde349e91d381b9da96818ef01886a1dd5f8221", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309517, "uuid": "740df783-e706-4a8a-ae86-86a98360f8a5", "value": "T1DC3144CA21A14D746CE8A93732AA4C2435D7F1CB14CB1F592DED38F9588CE05F510B97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309517, "uuid": "0ec79b12-2003-4095-bdcf-139208f98ec0", "value": "24:v2w+2f2ac4k2jas2/2Cs2Hb2as2v2MO2QaF2IK2o:v2r2f2P4k2jb2/2T272b2v2MO2L2X2o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309517, "uuid": "1c3db314-8498-47a7-9c2c-c60841962a8c", "value": 1574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309517, "uuid": "c7c75199-9307-4d3f-8395-a022c7833983", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309517, "uuid": "4ffa7c1c-0b87-453e-b87d-38a572ffad80", "value": "sex.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca3ce657-dea2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345120, "uuid": "f9dd16c6-f2fb-42cd-bcbd-fd92eca10367", "comment": "Malware payload (Mirai)", "value": "06f10b7e997dc565f8c2b8e7c34f34e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345120, "uuid": "4149a35f-4fe4-420c-b850-a2cc4a9aaf26", "comment": "Malware payload (Mirai)", "value": "784710f0be61df90198f1fa4bfd67e5502dd2a6f4d9a4b025e8d329063597e45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345120, "uuid": "8b54fdd2-3d37-4eac-b304-f38f59fabb68", "comment": "Malware payload (Mirai)", "value": "c0a8827490280a400ba15c83de8ee88ff6de1f9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345120, "uuid": "d893b057-553d-4e73-86b3-e02c8f37f938", "comment": "Malware payload (Mirai)", "value": "55836043beb24a08b592f0723fe58716475279b66cce31d8e50b4099a246749f5b96a4504cd0dea40c45779af7041572", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345120, "uuid": "24d5a313-13df-401c-a5ac-b37f2334ab6b", "value": "T1CD832A86B881D612C6D5667BFA5E42DC332613B8D2EF3207DD24AF15378682F0E3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345120, "uuid": "3f75af15-8ee0-470f-bed4-8e2ee8f0063f", "value": "1536:qvIKLoxOLgbBvZuEiiSLcLmKMS3ipaJFhB6RoRFcvGT2bVRgPZ:qvfkoyLmKMSPh84qGT24PZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345120, "uuid": "e0fe03f0-e4b8-4508-b1ba-503838b05496", "value": 84712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345120, "uuid": "cb7d145e-33dd-4db6-b7aa-44f6f5378660", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345120, "uuid": "f5529f40-b1d8-4d21-ae6a-500c078924d7", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e267352-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309693, "uuid": "46dbe22f-1235-4c31-bcb4-3c0513e6b401", "comment": "Malware payload (Gafgyt)", "value": "6aa22fa66ce0c74c8aa9499986e0f74f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309693, "uuid": "cfa07be8-7cc0-40cc-9e54-9cfeb04f9603", "comment": "Malware payload (Gafgyt)", "value": "785f5d1c99d1ce1ef8d4fa148f70b1efcbd16f62338cad3aa17612ee83c0f8e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309693, "uuid": "546d2282-f026-49d4-bbe3-31d526eff8c2", "comment": "Malware payload (Gafgyt)", "value": "5cc8c7559eadeba212069020c0abb8bd27e37a02", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309693, "uuid": "21d70fd8-62bd-4803-a0a7-125e2a54e50d", "comment": "Malware payload (Gafgyt)", "value": "2326b153368c9f5b2e138b3b950fb0eaf2f0002ff44b44e87957fc2fb477f6c47643bafe8b680d79bd907a2994891aae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309693, "uuid": "f468683b-1ff4-4e9b-b0ab-e390e7d0920b", "value": "T188A3F896F800DFB7F40AE67604D34B24B670BBE14E532622731739A6AE762D53823F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309693, "uuid": "56824846-96c5-4a05-ab1a-baae96b60543", "value": "3072:Vgdr2vIBAxMyAOLRcft1hOemuxVqDr78fz1e:Vgdr2vIRyAYcLhOemuxVqDr78fz1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309693, "uuid": "387e5793-773a-45b9-97a7-49e8c5522b2e", "value": 98919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309693, "uuid": "a06e598c-6e24-422b-974e-3f1388bd810d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309693, "uuid": "6c2fb77a-078f-441d-9ea2-a04f7008be77", "value": "i-5.8-6.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61c2ac13-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345374, "uuid": "ba12a127-6afa-4aef-8da5-06bf45600b92", "comment": "Malware payload (Mirai)", "value": "053489292cf114ec5115d76eda256d2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345374, "uuid": "90eea6e6-2fa8-4e8f-9514-912cd5525f32", "comment": "Malware payload (Mirai)", "value": "79275fc868353e050c7681f7d5fd73fef27f744b7b396f1a7134904f64201772", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345374, "uuid": "69b6a635-3f43-4259-9203-886926a51eaa", "comment": "Malware payload (Mirai)", "value": "286bfe35544f3fff1a5aeb96dc1a2035a295f45f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345374, "uuid": "38e19aeb-7713-4da3-8051-5e86ac8f0fdf", "comment": "Malware payload (Mirai)", "value": "48ef3f097fa3828e09a0774ed62616469ee14e7ac593ba4e65c8ca4badc66c91c53f6732b9c758e26979dc1e5e04f08e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345374, "uuid": "c5142c96-bb03-4958-ae6d-a4045655510b", "value": "T1EDD3B021E4006DD1EC2129F578BA96BC0350EE740BDE1582EFFDE95E747BD94386D2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345374, "uuid": "2daa0875-a7cb-40fb-9f50-e9c2fb8126df", "value": "3072:PHiBTNkAgcly+hoVpE6AKUjq+8biA7JBd/xr:PCdny+hovsmzbisJfx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345374, "uuid": "14ddbf33-7015-4bed-8a2d-6ea6dc1e3d2e", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345374, "uuid": "36edb3aa-e495-47f1-b919-a534964cc52b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345374, "uuid": "a32ccbe8-67c5-4a7f-9d7d-75b8bbdfda1f", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39a8f33b-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347884, "uuid": "674c3b77-dae4-4392-8198-342d2bf3f736", "comment": "Malware payload (Mirai)", "value": "ac3d4644ad34fdb34aa5774bd5c0c30d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347884, "uuid": "0b87bf28-bb5f-4561-873c-6f4fee14aa2f", "comment": "Malware payload (Mirai)", "value": "797e9dbd9df173b17d69b7662a6ba2c7f0732248f96f01d8cc04a22e2e8dfed7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347884, "uuid": "513e63ac-6902-411e-a339-3e700f3b3181", "comment": "Malware payload (Mirai)", "value": "973ef8d630d62241f20938c3c19ab181e3719b85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347884, "uuid": "0701f519-b80a-4f20-9768-6194151dcc7d", "comment": "Malware payload (Mirai)", "value": "16e80fffc954539d82b13e75768872bf640174c5b5b2b5c13fa372c8dda5a27192d5964dd33cfdf9f1dfad2b8ad8cdcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347884, "uuid": "5a520560-27e8-430a-94bf-66c8b8eac7ea", "value": "T115532B82E6DBFDF0CD44077C286BAB329A33A4336169CFE7F398A5579586342605136C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347884, "uuid": "e7494a1e-1ffd-456b-9666-fdbf682ceb3f", "value": "1536:2yNUup1foF17RczQX0D991ZUihNpKx0Psi84:2y6aoF1N4+ihNpK0Psi84", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347884, "uuid": "bee28f36-d314-45ca-9713-560d1cd26c4a", "value": 63060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347884, "uuid": "a842ec3a-3aea-4711-bf0e-998c130d6ccc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347884, "uuid": "ae8712d8-c4be-4d49-9b23-d4b9f8730aa2", "value": "Fantazy.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5df2f98-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330054, "uuid": "d3d6e3d6-225b-4c73-ba46-a0c20763d2a9", "comment": "Malware payload (Mirai)", "value": "b0a45aa5ac80c8888ecd79b0f487cc97", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330054, "uuid": "15a199d6-3747-4e84-80d1-bccc22e6ef0b", "comment": "Malware payload (Mirai)", "value": "79e283980897a11dab8f3608fc7d73698eb413884d4bc6f2da032499ba95d2b5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330054, "uuid": "5b211714-387a-43ce-bd90-941017a57410", "comment": "Malware payload (Mirai)", "value": "9725293ae3fefb84c56669c7fa21e898335afc00", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330054, "uuid": "872f61fc-c716-4fff-b338-b4f461eef43d", "comment": "Malware payload (Mirai)", "value": "101c567937fdf83f239417cbe4d06f2733e8cf6579d9df0461688f3d181e5739069d1c46a6dd6129283e29a63c51fbf6", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330054, "uuid": "024bf804-c3dd-41bb-9282-2f7230229a61", "value": "T1AFE04FAF0023CF13C11A9D6065A330333031DAE022A08A1EAFD6883784D8B0033ACE25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330054, "uuid": "b918293e-3ff1-4d9a-b6d9-d828483d5336", "value": "6:L6VcfiAK6iqLGmRD6VcFGNIvF+6FakD6VeaLaNgoCKD6VQHzaQ7:eGLK6nypVNIE6FakWMaLaNgoCd2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330054, "uuid": "c29fca8a-131d-4f2c-9a8d-019edf0d42ac", "value": 320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330054, "uuid": "5a264157-766f-49a9-85ab-3e8e0f4a1864", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330054, "uuid": "af2007d5-de1d-4e7f-b102-9f7a39583de8", "value": "usw.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95013868-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "8b115a80-9f1b-4b72-b04c-5fff5c842caf", "comment": "Malware payload (Mirai)", "value": "9cf62d126114966fa5b466395a6503b2", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "6247f515-698b-4177-872b-ca65dc20c614", "comment": "Malware payload (Mirai)", "value": "7a3633e23722d57c437a6242da6c1191fa2c739ff1b70d23831bf5a9039a8c10", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "03c3060a-e0a1-459a-ada2-9558fa1df0b1", "comment": "Malware payload (Mirai)", "value": "401bd7e4d0e22f0503b4fb39af4ffb4cf429996f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "98a0e191-b97e-45d7-a87b-4afe19050a4e", "comment": "Malware payload (Mirai)", "value": "efeffccfa2e42f5fe67314acb0c3dd7f9671c4b600297270316589d007f6d5441988b60b6b5a6dbfae9956f93a65cb96", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "05778ac9-8092-4ceb-af99-885ea791b58d", "value": "T1EB21325E06015EF0908DD43D3792C40A70804FDA193B4BA86F990ABE18E05CF637CE15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "a9249f15-2474-4b5e-9f20-96db5f9fdcd5", "value": "24:QXz7Cr7M5wr7er7br7Vyr7Lr78r7Pr7Dr7Mr7bSr7yr7pt:QjWrw2ryr/rQrXrQrLrnrorKrWrtt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329999, "uuid": "6f66720c-66ac-4d58-bd26-dc57cb056e0d", "value": 1228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329999, "uuid": "6c47a6ac-e705-4a27-970b-fc46ef33a7c7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "3ab9fd5d-50ac-4f7b-9468-00ba59c50ead", "value": "sk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b004bb6c-deaa-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766348512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766348512, "uuid": "db04dd68-3ca5-4d97-9b8c-4af2fb286534", "comment": "Malware payload", "value": "6a9af204f495a741436ad7926deb2e34", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766348512, "uuid": "fbe5ff7f-e6e0-48bc-aa55-89a2b4d78c73", "comment": "Malware payload", "value": "7a3e3b906ff0bfc1feb51891285e06549a756fe4310bc9eee40c699092584ff3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766348512, "uuid": "59fd7a03-1e21-4c1b-a1d2-29c338beaaf4", "comment": "Malware payload", "value": "79863ca086d51f4642338e32361a96c7bccffc5a", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766348512, "uuid": "38dac710-e177-4d68-9457-7333d8a23025", "comment": "Malware payload", "value": "520571df51580fc676d74170f108bddefc1fc2920d6a6ddb8f7d6fa698baaf767febfa9acc7892f4a449857108c4ab37", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766348512, "uuid": "0a51512d-17e9-4026-8c8b-95704f06e83b", "value": "T14BB65CA2ED540A7AD99FD33EE9E201856230B444077120D77A9037695E3BBC41B7BF2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766348512, "uuid": "26f53b7a-acca-49b3-bff5-94df0237e240", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766348512, "uuid": "a8b15164-eaa2-4de8-ba91-d8b681d50f9d", "value": "49152:E/RD37qtOyRIeLDYGbwqEMDmNxVvLkfTrKd1rqDujrGAdAJXXhYLhhGz1YAXSx8Y:EpTyFYUEMiNxdXHGAyXhnzG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766348512, "uuid": "1efff353-2e73-4bdd-9378-7e5751a9d33b", "value": 11450504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766348512, "uuid": "602670a2-01cd-4788-9560-6ab711d9c541", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766348512, "uuid": "fef58e33-a484-4578-8322-b335ad980647", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4532bd2e-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309678, "uuid": "c0b6ddff-0462-435b-8875-ae4856f27705", "comment": "Malware payload (Gafgyt)", "value": "76aa5202f5eef7f5735d85959c72da40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309678, "uuid": "642e1576-4d60-475a-b952-c032369cadbe", "comment": "Malware payload (Gafgyt)", "value": "7afaa3584cc13583601c59b242e67d840b15ea62b98d9f3a880a9f19fdadd287", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309678, "uuid": "825c1243-f641-48fd-9d90-33ce9ceb17a0", "comment": "Malware payload (Gafgyt)", "value": "d1b8a94e21352744dac11d139695364248062ccb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309678, "uuid": "43112010-1c5a-4ace-a79f-9f4bb6e4788e", "comment": "Malware payload (Gafgyt)", "value": "a3e7b3d5114defa7ebb5a2e85454ac71b906a10c099fb1644e1b7d32faae7420fb0668b879c2ff2c42c5c50e2ae66929", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309678, "uuid": "7ecdea15-3e64-4f09-9a6d-89d6067a4751", "value": "T130C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E39921", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309678, "uuid": "fd77ce41-8710-43e0-a96b-f1cecc87222e", "value": "3072:ekYPUfsgnsb0J2ag/VfnkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0nkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309678, "uuid": "1cf45335-87cc-43d1-aec3-3af3a839f139", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309678, "uuid": "bd3dfd4b-ffd3-467d-ba14-57f7bac02076", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309678, "uuid": "6f3d53bc-00c9-409e-9f19-32af5a92b45c", "value": "a-r.m-6.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59168b59-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345360, "uuid": "f3fa4019-33b6-4126-a3c7-7d1e90d0813d", "comment": "Malware payload (Mirai)", "value": "0195a50909f763da128aafbeddae6d26", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345360, "uuid": "14eab59b-eae8-49df-bdf0-964a592d6677", "comment": "Malware payload (Mirai)", "value": "7b18a4ab208cc82154562dccf44de196ac8ebbc09b9abcf5f1944277a8da2283", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345360, "uuid": "4fbba565-f24f-4612-a385-ed5b607068b8", "comment": "Malware payload (Mirai)", "value": "65a3b8b769aa2ca3dff886a60b2683f1299a8711", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345360, "uuid": "88eb1ce8-f569-44ed-9908-2d9b4875b8e8", "comment": "Malware payload (Mirai)", "value": "83edad1b7c65365ef69860214879de463b450f5b6daf4ae0e06aa3b66dc23026bd2a3c711ba9a7bba81b28a951ba568b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345360, "uuid": "490f8934-f59d-4bc6-9586-3d091ab55e25", "value": "T129D3CF32E0086DA0DD2116B4347659BC0340DEB40BD59243EFBEE5AE28B7DA57DEDB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345360, "uuid": "b371802c-7d0d-4c90-a0cc-40da49ee7343", "value": "3072:kNulV+GOAc3YSmDEjdX/VuHVv3WDRGGRhaUNZkP0ZGa:yulo2ubIVv3sXL5NZmOGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345360, "uuid": "3efc707c-77ce-4eca-a1f2-f5a506a8a8cc", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345360, "uuid": "f79df59f-dcca-4fb5-879f-aac32dcf9d5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345360, "uuid": "49201bd0-f5f8-4996-9fb7-b184303d58c2", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37b8bb40-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309226, "uuid": "34ee332f-401a-458c-ae59-832d060d317b", "comment": "Malware payload (Mirai)", "value": "0913ddb8e1ab3bceb98f8216d2d03b1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309226, "uuid": "89afaaec-4746-4e78-be51-bf6777c8242f", "comment": "Malware payload (Mirai)", "value": "7b65063f7ca11ab390a37715d26d48715e6b560da64243e8aead03e10ae09370", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309226, "uuid": "d2d5d36d-52de-47da-a367-52d0063e719b", "comment": "Malware payload (Mirai)", "value": "ae4f27ee89755c7154e0d0f19972677b0b790570", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309226, "uuid": "b36dc58f-a983-46a5-aa87-a502fff06814", "comment": "Malware payload (Mirai)", "value": "2080bbcd8caf283032e967a41db91f16be9440589e77d710f7374004d3c4ef696169ad34f1cd255eb124dfec68f958bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309226, "uuid": "4e4cb317-6003-4937-9363-31514279e645", "value": "T1CCD3E60A7B250FFBE89FCC3705A5170129CC591622F97B75BA30E918F64B25F1AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309226, "uuid": "1984f03b-e064-4aac-87e5-dc46f587d6cd", "value": "3072:t8M5DCfWM2OOtzcKhW2DCR6x+I1DQVvDz+qP:tz5DCfWM2OO5jWRzIEH+E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309226, "uuid": "fafd4026-6b9b-4ffd-8467-5ffbc2cfe562", "value": 142236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309226, "uuid": "09c799ae-891d-43f4-8170-38ea5c4dd6ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309226, "uuid": "dafd0b4b-dfdf-4a7a-84eb-c7b7f254ee94", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c51ef977-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330079, "uuid": "beb70b3c-86f6-475a-b060-63eaee69dad7", "comment": "Malware payload (Mirai)", "value": "7668c3e1cc24e956c7d59cf620fc340c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330079, "uuid": "6b5e8700-eee1-4b63-9c4c-a433b9c9fce9", "comment": "Malware payload (Mirai)", "value": "7b682530c4f168f4e981023feda8a6bdc9f87f88cef669680f0a279ba63df619", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330079, "uuid": "0b2a0dc6-1e10-453d-a87b-3e77661f3f69", "comment": "Malware payload (Mirai)", "value": "8c9727eea8d078f201b27d435038eebd72e9f60e", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330079, "uuid": "a5a25a31-ebb5-4ff9-8529-894f6c7a18f2", "comment": "Malware payload (Mirai)", "value": "3035cba8ccb8f25f6c7f038f29a921033ef1cc00267eaac389603f24026cf55408de323273f95fbdf1af3f49183518f9", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330079, "uuid": "b447dc09-ddfe-4dae-99e4-fff91320cc78", "value": "T11C11518E4570EA02802C0D7CF1F78455715086D42DB98A68BED5493A95C8694BF0EF62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330079, "uuid": "5172b155-046b-4a56-895e-393781cbd3f8", "value": "12:eOBsavqsaM1sa36JsaMOBasam7sa/2TsajDMsaM1sa3DRWs7:ekIIkMYQ08i0L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330079, "uuid": "64cc3641-d9d8-4b49-9172-0258cc8d25e4", "value": 942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330079, "uuid": "0791f946-e7ce-4cc1-834d-b32f5a309926", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330079, "uuid": "b2c4acf7-0fe6-48b8-b656-693be3747910", "value": "Ffdgsfg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fd5f212-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345371, "uuid": "583e71aa-6daf-487b-9412-27bc46977e64", "comment": "Malware payload (Mirai)", "value": "c37e4fe86ba06e139f8cb12f5f4adcf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345371, "uuid": "4ec6c957-ec83-46fc-aad8-102b5fd913fb", "comment": "Malware payload (Mirai)", "value": "7b966f8d69ac5044ed5b3eaae45157ba5ca1982bb4e177d3f0aaeec45a4885f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345371, "uuid": "47ffeff3-0157-4f7a-89c7-446c84eb083a", "comment": "Malware payload (Mirai)", "value": "c73eabb9266941a8cc65f790b52703d77c28aba0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345371, "uuid": "0fefb2be-5e72-4690-a11f-151eb68ea1a2", "comment": "Malware payload (Mirai)", "value": "c23d255a0b9011ba23465d97acebf731da0fd95fec5da922cf1aa908fcb71ee495f3581a4cf644e08b4f90c9bfbe09c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345371, "uuid": "2f4a01d9-3a4f-4220-bad4-6ee31299faee", "value": "T17E148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345371, "uuid": "eacf3b3c-ab77-4eda-9765-db99a6d3e08d", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRAUKG:IcY5JpMByVs9jSbf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345371, "uuid": "82686445-ff5c-42db-994e-c25912b4e0ff", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345371, "uuid": "ce41a817-b479-456b-8501-9981be682d4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345371, "uuid": "717e67bd-3dda-4c27-9cbc-efa671e070d2", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86eee226-dea8-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766347584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347584, "uuid": "10737ab0-a684-40c4-9604-096eb2dfb6e9", "comment": "Malware payload", "value": "cc32e3c9c7d927f2b084c5a63c5ad79c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347584, "uuid": "fb752ae8-c85e-4174-93f4-3615f5e17196", "comment": "Malware payload", "value": "7bd2924ecc2c70b802880e00c3be4ed81f888870e2e5ac8dcf593da9d0745568", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347584, "uuid": "6c2b2979-5fd4-479d-b6c4-1114691015c7", "comment": "Malware payload", "value": "514c3c74f38d914d0e50eb5ee81336a5011fe52a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347584, "uuid": "5f9b78e2-9aee-4a0c-8b48-add977252692", "comment": "Malware payload", "value": "c7a7798b13856aabffad2203b1d6b10ff93ed17a08f98c85f38ad6444a3089402c727038164e4f462be1f6d8d3466026", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347584, "uuid": "abd24b9d-04db-4c14-b38f-3ebd1225ffc8", "value": "T124330881B8D55A16C9D4227EFA2F029C372623B8E2EF7207DD126F15778A82F0D77611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347584, "uuid": "024e88d0-3bb3-4fcc-975a-7e51e1abafc6", "value": "768:XIXN48mvl864yA4Kpcjfmg5KMjOi3kM0Eqogz479cZIwHGq35M9CkNFBxM0/W0MO:o48mv+v4j+gWTNEqo3ebqCkxxSTNG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347584, "uuid": "cad2afd9-c630-48f4-8f50-ba502ae6fd24", "value": 51832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347584, "uuid": "6260ffb5-e1c4-409a-9749-e1a0cd83dcd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347584, "uuid": "1e84854d-27a8-47e1-b5cb-558abf79adcc", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc5117b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330067, "uuid": "5f9d1647-84f1-46ad-813f-a05e064bf868", "comment": "Malware payload (Mirai)", "value": "1315b4eff545a58ff97a075afc7c55ae", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330067, "uuid": "8245f8e3-4212-4ea0-8580-e606d21194cd", "comment": "Malware payload (Mirai)", "value": "7be9d41227dc443c9a9cda926404d307171517e0d1f160be50120212c9ba6f6c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330067, "uuid": "8687e871-52d4-42c5-93f7-b3ccf7620b2d", "comment": "Malware payload (Mirai)", "value": "0948dd1ad115a073ac2f0b6005ea88550dc39b8d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330067, "uuid": "8ed9d535-247b-4ce8-9c01-97e1b334a2f2", "comment": "Malware payload (Mirai)", "value": "930adb555f221c35e0ab2e88e7918446b39ab0432f19967c3f9679e99a26defcdbdd3e6a4d01830e101246ff3ec9963d", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330067, "uuid": "a84dba10-c003-4727-b66b-d0b68d18fb3a", "value": "T127D05BFF0037CF1382544C54557670737030C9D012608A0E5FE1807741F4600332CE11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330067, "uuid": "c87c53a4-e76b-4469-a066-95d7ff221b8c", "value": "6:L6VeaLaNgvKV6VcFGNIvF+6qgFKV6VcfiAK6iY:eMaLaNgS4VNIE69w4GLK6T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330067, "uuid": "ea58c0de-2857-40f9-b905-cdd49ef6571d", "value": 240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330067, "uuid": "0bf31260-9c3e-454d-a532-7aecb14e0f0d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330067, "uuid": "d505cac8-ad38-4e64-9e78-2b39aad00110", "value": "netcom", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e22a015b-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309512, "uuid": "b111231a-d746-4367-b04f-7dbc6edabcc6", "comment": "Malware payload", "value": "90d6c5756efb32c124dbcab3fbe00b3b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309512, "uuid": "9a7871a6-eb68-4836-9ae9-ff1953afdaf9", "comment": "Malware payload", "value": "7c2c731c7f6e3be0fb0f7d4b6f2337a7daeeccb470ebfdb8d06274414e312ad3", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309512, "uuid": "418e47e5-d74d-42ff-b670-d0914198099b", "comment": "Malware payload", "value": "0b9876cda4fe12d7c491736c06a2e0628ba0ceac", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309512, "uuid": "2d842631-84ca-4808-9330-7c2078360877", "comment": "Malware payload", "value": "d0f9e65f4927ffbbc6b1d7ccd3a254bd1bf67b737c6e1688cfcdfa8bda0165b6d977a17a5ce4546a24322479b7e4fc47", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309512, "uuid": "89c3ba75-c2a7-4fde-985f-b0ff3e795209", "value": "T1615199CC03838B315DAEDF7777A9888C7098A5E5B8D18E31D9DE7CAF448DE88A446143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309512, "uuid": "2e2b09f4-2bbc-4302-be6a-f4a935b9893a", "value": "48:eSDq3SDR0SD0t7SDQhSDBkSDbqSDTiSDejSDLaSDiPSDlwSDBkSDENSDo5SD9X:BtRfRxdN5dP1Vdbx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309512, "uuid": "b6301b7d-8a50-4c77-a655-ffb5d9494da5", "value": 2790, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309512, "uuid": "64964a85-ff9c-4a6e-adb8-f566b13e1bde", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309512, "uuid": "fee4dc92-435f-476c-85d8-e4e1d53b961f", "value": "telnet.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfba1ab3-de00-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766275524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275524, "uuid": "a8cd5d0f-54ee-4533-818b-4877c72df545", "comment": "Malware payload (Mirai)", "value": "340b4f6362bd01e712cb4723824d3f1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275524, "uuid": "12b2f840-af9c-4a40-8929-4bfbfebf5c16", "comment": "Malware payload (Mirai)", "value": "7c82343c4c4a957d1b542e21447b157199157b41125c5bb4d820fa05ec79b603", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275524, "uuid": "6e1d052c-7cc1-4b58-abbe-d858b42e3878", "comment": "Malware payload (Mirai)", "value": "7f9925349a6156d4467a8b519c1fc2050860fff4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275524, "uuid": "dd311c95-6164-4b9f-b957-4652482ca680", "comment": "Malware payload (Mirai)", "value": "003f86a8ca8623359e0ecbba3a99385436b40aade7eb92ee5ed6349f9cc7f21c22d335e2c3da4439b7c879d7826f06d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275524, "uuid": "3ccf245c-af45-4a5b-bef7-bfcbf900f37b", "value": "T1BD833A06730C0F47D1921DB02E3F27E8CBBEB59011E4BA98691FDB969674E321586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275524, "uuid": "53ea2008-2958-45d6-95b7-1c844de38869", "value": "1536:8VgXVB2sboCB89qHi0V64s91mILNW7Yef5MTwWxdiiqKz:XWsbLByHc6x1mIxW7nOzdiiqKz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766275524, "uuid": "adecfde0-2a34-46cc-9538-81efaa498cd4", "value": 88132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766275524, "uuid": "02c03ed0-6985-4ca4-900e-1f1f9f739e21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275524, "uuid": "4313a481-98d8-4624-af74-9c3b46e9fda3", "value": "sdxkzX_UXA229x.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72557ea8-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338960, "uuid": "65d33ba6-919d-4377-8bd6-93a2a6cd4695", "comment": "Malware payload (Mirai)", "value": "bcaf4ef4a2e31b6580f5a07142e2afba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338960, "uuid": "7aedd935-5847-4b97-9846-1aaca9c89c61", "comment": "Malware payload (Mirai)", "value": "7d1feadf7b1de9268cd5b2a5dbd4948355e31cce3d043cc2d873627f66048979", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338960, "uuid": "979810fd-0d77-4e46-bcd6-34b19f26570c", "comment": "Malware payload (Mirai)", "value": "6ac6fe22a069988663f69c6332fa2ce913b7ce1e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338960, "uuid": "3197adb2-f5d9-49d5-a777-5a6d28bbbba9", "comment": "Malware payload (Mirai)", "value": "117aef3bac19eaf42c2f3b4f79abdb154790e88360f12dcd29223ba32b8b3b4223d4fca642f46b244e2fba1f996f37ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338960, "uuid": "265c381f-4068-490d-9a0b-f2661eb94dc2", "value": "T120233AC4B583F8F9EC15457C307B97729EB7F43A603AEDABC39994239815601AA072DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338960, "uuid": "66b8799d-aacf-4ebb-b3ae-bcba406ac989", "value": "1536:4LInPCqAAXJLE7cxtdX8NCqBNM7vk9YXPSP0Hoa:FCqxpE7cxtdX0Cqvsvk9sSMHz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338960, "uuid": "0a04d74e-995c-48c5-846e-30ea40138295", "value": 49752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338960, "uuid": "84570feb-a543-4e8b-b774-3aec849ba9d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338960, "uuid": "23b5e27f-8713-47e2-a7d8-b6de40319196", "value": "Josho.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a234e60-de73-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766324612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766324612, "uuid": "0054644c-be76-4b0e-b4a4-d5d80a9f0aaf", "comment": "Malware payload", "value": "debd26c4dd8a708df040a05eccd8bd7a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766324612, "uuid": "095f1082-0af8-467e-a0ce-489afa81783d", "comment": "Malware payload", "value": "7e247c4d55da9d12ce7929e736a8b5349fcd0ceb7f679e81076ace9eff2599b9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766324612, "uuid": "7d594ab9-24cc-4868-b7e1-886cfcf1936d", "comment": "Malware payload", "value": "6e685cbaf14aac6af88bb7e23969a5d778c86fa5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766324612, "uuid": "95552db4-e7ed-4fcd-af0b-8a693baa3613", "comment": "Malware payload", "value": "8fbadb8c20bad02c9ac69bc2653b4048d81188a077a8cb49df3465464ec34031df772fc149e531b9f1fc5534f36abb25", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766324612, "uuid": "2cb2fc33-6de5-46c3-a903-a005b8b7c69f", "value": "T1BE46AE19A3E401A5E92BC734CA16C733DAB1BC925734C10F0558F64A2F77EA2DB6F216", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766324612, "uuid": "88ce1f7f-863a-4400-8b17-691a456d652a", "value": "ffd12520e20d98bc6962ad922e3482e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766324612, "uuid": "e526b6bc-3287-4432-b399-60a2b6a849bf", "value": "49152:Ak6HTwp/HCaxJc5ACK3JCzqL7N+nFZXWDrUjMooUqY8aiGVyRLH+ISaTwoRUad1F:oJlK68NOgrUigVy4I9TmGZ+cvRBTsVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766324612, "uuid": "2d62e4c5-6d5a-4f07-90e1-f7a387f76b8a", "value": 5617152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766324612, "uuid": "60291301-b6e4-4a53-aa4c-6d365989dc0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766324612, "uuid": "3d5ec224-96bb-47a9-a8ec-7444fcd1a91c", "value": "LNVAC.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a70a3ff0-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330029, "uuid": "163b95d9-c60e-4d14-a8d4-6c96c4677264", "comment": "Malware payload (Mirai)", "value": "af26181f2b2807884c688a74a66f553a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330029, "uuid": "0b987162-8bb8-4641-b30b-da62e634674f", "comment": "Malware payload (Mirai)", "value": "7fa0a2e74fbfbae1cb1e776d6974f217be4aeb397c8a16dc6735ae6948c4ebfe", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330029, "uuid": "815651d6-abf3-4b4c-b2a4-f01cb72ba19a", "comment": "Malware payload (Mirai)", "value": "8599f833a6c1d84353a33995d3c4d7c8dd2d4ddb", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330029, "uuid": "d7f88293-e2b9-420d-98fd-cd69434b01c3", "comment": "Malware payload (Mirai)", "value": "4b6f561971cb5a7387244345bc253aaff49ca082ddee349fd5c1bfa7262941f7084445e9f5642de79a6ef39585c56b68", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330029, "uuid": "c2ab84ac-9a76-422a-b474-6210bce6790f", "value": "T10CC0809F102715C1C004AE201091385DB751CDC265F00F0D97C82033F8CD521B70CD18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330029, "uuid": "9c026a24-5cf2-4578-a6cf-b83b77108f6e", "value": "3:LxAjdVZVb8NBzSa+ANja4jzgxAjdVZVCONBzSa5Ap9Lv:L6VbkPjtzg6VxyR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330029, "uuid": "7b49beef-3b0d-4a76-92c8-7f3bb2f000c2", "value": 154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330029, "uuid": "0620746f-b8dd-476d-8e5c-8bc952e85b82", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330029, "uuid": "736d2c7d-cdc2-441c-a27d-0958f79cdad0", "value": "gpon", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff473806-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320728, "uuid": "ff01ae6b-58e2-4b40-8387-0a888b303a0d", "comment": "Malware payload (Mirai)", "value": "21a89376eb3e21c7a184dd03906cce7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320728, "uuid": "26261b70-9be6-4da1-a4c4-ac45ba71c8a5", "comment": "Malware payload (Mirai)", "value": "7fd16ee9eb4a853bf04907baee5f8f88de8213f2319355f291ed9fbae71e7e28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320728, "uuid": "3cba72d9-d3a7-4f24-9ce3-3650c0489af7", "comment": "Malware payload (Mirai)", "value": "0a094af5c4a105a935c0d519b1882ed9a350256d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320728, "uuid": "2b22a87f-03d3-45c2-8a71-201e137d581c", "comment": "Malware payload (Mirai)", "value": "cd824e8cd7aba6e9f658ae248a669d1c6aadcc8371f462da5312285d0d4c22cac4c90b8b4b1ba08f41a00651dddfa279", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320728, "uuid": "c3f9f833-4812-4230-836a-d8a8230960c6", "value": "T17F93A7197FB25FE7E86ECC3705D81B4924CC170621697B3ABD38D464FA4A65B0AD38B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320728, "uuid": "696799cd-299d-4069-b8ac-358833e8f48b", "value": "1536:7WwgTzSZrutj90zc49xdQWV5nxZUL8aVetA:7WwgqhS0Y4bc8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320728, "uuid": "55f22a20-803b-4f48-aef1-23c916d25e70", "value": 96200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320728, "uuid": "4a3a705c-5787-40d7-9ec6-fb0f3b6de7ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320728, "uuid": "52d5e867-17c5-4a40-9148-62108221cc9d", "value": "shadow.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0419947f-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329755, "uuid": "058e1e50-cd8a-418e-bd59-b7fb0c9b987f", "comment": "Malware payload (Mirai)", "value": "1fe4bac87bb4193f470706112dccaec9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329755, "uuid": "cbba0933-9375-4240-9ee8-9c3d92900b0f", "comment": "Malware payload (Mirai)", "value": "80a87c2b18d33755c77fa96134821885941bcf94a04548edebe5e0cd1a2edb73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329755, "uuid": "f0ba1164-b7de-4af3-955d-4a02fe00be90", "comment": "Malware payload (Mirai)", "value": "6aaaa69b06524559d9bbd0c8403a9523ce0844cf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329755, "uuid": "26fa7864-acab-4a6d-820d-36dba1dd9be5", "comment": "Malware payload (Mirai)", "value": "d94348802eadcba86ccea0977948d9d2529f75300859fb4be55b1709a2020ac7f0d8cdfbd3355d3c216e5edb4a27d23a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329755, "uuid": "1d2023be-21d4-4c84-8cee-681934314f76", "value": "T114735C42731C4943D5A719B0293F27F1C3AFAA9020E4B78AA54FAB4A4276E335447FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329755, "uuid": "5cec5316-6b81-451b-9cb4-5da3591f6cff", "value": "1536:ft0HJlmdZ8h5cAuxa61Bb39J79nwiMonmKmRvTlbVRe:IX6Hbv9wmnmNTlW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329755, "uuid": "6338a26c-243b-462d-928b-68ee220876a0", "value": 80660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329755, "uuid": "008de1be-23e6-41fb-a61c-5031af376b03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329755, "uuid": "be2706c9-c259-4134-9e6c-c91f532cab18", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "016d0bcf-deae-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766349937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349937, "uuid": "aa3b5727-78c7-45a6-9c3a-c52e7d684c7e", "comment": "Malware payload (Mirai)", "value": "886302dfd4fe29e26c5d134be88e6ca2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349937, "uuid": "5b41e230-a234-45ab-8fa6-65aa0d9ee9cd", "comment": "Malware payload (Mirai)", "value": "80b6b9d16befb1fe540ebce07d884ee9f1abe4222537fbfd2cb1d4af7f62c2fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349937, "uuid": "d6af9626-6939-4a01-b0c1-aac048b61317", "comment": "Malware payload (Mirai)", "value": "251c313402e6048366571afd5675c5d4ee82904c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349937, "uuid": "7e52cd22-a889-43ba-a3ac-a876153c6739", "comment": "Malware payload (Mirai)", "value": "19a0e07dd84c571172c0e98c8f0aa75f15d390b9dae01ae0f8185598b0f3418aae767985e29d98a26fc98cf67658d65e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349937, "uuid": "7e8781dc-c4ba-402a-97a6-22911040d5dd", "value": "T1D6243B46EA404F13C0D617BAF69F4245332397A5D3EB7306A924AFB03F8675E4E23615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349937, "uuid": "a2148f0e-dbc3-4a64-88b3-bd1b0b0002c8", "value": "6144:ZW2goLx/ml4L+qB7w8dasnQK2uKQEG5aWKkiwM/RVfJ/wqmy2WCm25n:42goLx/Fw8dasnQK2ucpyiF/P6qmy1CL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349937, "uuid": "47d94b8c-e68c-497c-8553-77101fcbe824", "value": 220430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349937, "uuid": "60920e28-3593-462c-a027-9f7e4d92a5be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349937, "uuid": "4e6fbaa4-14d6-43d6-b69f-b07a6d97114a", "value": "yamaha.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26e12db7-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347853, "uuid": "3c49f277-e0e0-4c4e-a93c-36f856219b53", "comment": "Malware payload (Mirai)", "value": "7efee3c077aee39956d71c4726f83142", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347853, "uuid": "f47ec953-c5d2-449e-96a1-3cfc78be1a68", "comment": "Malware payload (Mirai)", "value": "81134f62b949b50161cc7679011854d207b484f48cf17133afb2f1a4d8b2bc1d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347853, "uuid": "5f58e985-cf27-4af2-a6b9-119a2fe6d0da", "comment": "Malware payload (Mirai)", "value": "b11e8da01ff5170b0501392636fbb0a389aaabe1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347853, "uuid": "912d1001-db06-4f33-ae50-6a77a2786f1c", "comment": "Malware payload (Mirai)", "value": "73cc9c6c0a1522729f38e2f7655ca8ae3d147d39253a3695a0851b00fdf1074beb6a2bdf2139be3824d9deb17a2aee9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347853, "uuid": "ce94048d-eb9b-43e4-b43b-5e53dd92c7ae", "value": "T1D583F69AF9819F11D5D561BAFF0F518C331347ACE3EE72039D246B24278A96B0F7A501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347853, "uuid": "bf2c0459-105e-415f-a598-747e8886b9cd", "value": "1536:GNnIraLq7qnQVdEnusfAL2uFSyk7n3/lC13NMNlWsoirxf23j/7q4ZiYm4HT2bVi:RraO5VdEnuwAL2cBk7n3/lCdstxfO7qk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347853, "uuid": "dd8e9810-fc83-4d6d-9c6b-22aadb7c6cd5", "value": 84028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347853, "uuid": "5bfe7f22-097e-4a45-b1ab-a132e5864329", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347853, "uuid": "fc0f032d-5841-4749-9de7-bea29ac88c95", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ae53de3-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766346195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346195, "uuid": "4a366cc9-4118-4d69-b494-69a64ecc99ef", "comment": "Malware payload (Mirai)", "value": "62509da62080cefe7371a5cffba6ce3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346195, "uuid": "4dcfb4eb-7897-4bfa-85ec-640061d084c0", "comment": "Malware payload (Mirai)", "value": "82053e159596d5d7df81c433efdb3f24b04e01f2d1d55038231c326ee1336850", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346195, "uuid": "8fbfc1a3-972a-4077-9ba3-3cf087e67a01", "comment": "Malware payload (Mirai)", "value": "3e561df5ef59827a0afc91fe1f71bae9492b58e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346195, "uuid": "fad96e12-eaeb-4dd8-8ef2-f5c13a339015", "comment": "Malware payload (Mirai)", "value": "de9316b26dbfb6f766a23f27a6f39588dbd058b8dbaac577508bbe01a39ce936c30a21b245e26124403111059ec5daf9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346195, "uuid": "0989876d-777c-46bd-ab8b-f310339911e4", "value": "T10D93C60A6E259F6DF36CC63547B78E30D74823D62BF1D645D26CEA014E6038D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346195, "uuid": "91b03309-c434-4644-ac06-de33a0c6c8cd", "value": "1536:76lNj2+26u86RuiRvY6VVI+rqpmPRKCePeeiYeee9h2bR0K1B4LeTAbVRMDk:Sj/26cVVI+rqpmPR12R5KLeTAEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346195, "uuid": "2f985b35-6cc6-465d-8b5b-5cf55c84bf30", "value": 97080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346195, "uuid": "5ced4e4f-268c-400e-8e30-70a51a020071", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346195, "uuid": "45f4d645-e27a-429e-92f8-75e1d7cc9758", "value": "nklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e19f54b7-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361051, "uuid": "742927fe-e4ee-4c7e-b25d-304755ad625d", "comment": "Malware payload (Mirai)", "value": "f6da94893a7c47e5c1fe66fc81ce5a1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361051, "uuid": "5695bca1-796a-4e8a-908c-4d38e41c776b", "comment": "Malware payload (Mirai)", "value": "8222dc7eeddded3763b62fa0586115ba8882c98b380d4e0103813809cbb520de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361051, "uuid": "5620412d-e8ff-410e-8d96-1b7a2c5d1cdb", "comment": "Malware payload (Mirai)", "value": "92444f73cb671875938e3c64ed9c92eb24010959", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361051, "uuid": "b515b7ca-bbc7-45d2-9d2c-5262f33836a3", "comment": "Malware payload (Mirai)", "value": "8ad1deee9cbf7d67444fe62b195614abf5958f709eb4992910948a8d861f6a35b5e7a74e1f00a8d75d236e18221c7569", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361051, "uuid": "71699121-81ba-493e-ad65-bb7afeaa9b75", "value": "T10A733B85B8819622C6D5627BFA2F42DC332613B8D2EF7207DD156F247B8682F0D3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361051, "uuid": "aea248c1-3d76-414a-8539-7d907265da24", "value": "1536:kCTSHCJHKKybVEfn20j59OyLKMSlCZkjZ5v2TAbVR:kCuib59OeKMSlCZgJ2TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361051, "uuid": "ae3c166e-ad6c-4abe-9b7b-60cfd1eecfe7", "value": 79040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361051, "uuid": "525a44ce-c552-4373-b591-e97c59149399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361051, "uuid": "67c0f6da-d6e8-4cfd-bad7-1145d6eb891f", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3910f210-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309228, "uuid": "f8785b7a-118a-4ea4-83da-0670b3594011", "comment": "Malware payload (Mirai)", "value": "7634a1d1a3a54c9081533f7735c61ce3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309228, "uuid": "011228f6-efd3-48d5-958d-cd5da1fcfc57", "comment": "Malware payload (Mirai)", "value": "82356f5cfe12ac2be51418880b76845b4ae49c38667a84b71d777b1f8ca416eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309228, "uuid": "3b3a4053-80be-44ae-9197-e38519967d4d", "comment": "Malware payload (Mirai)", "value": "4a8ae8e9bb283d078ffce3ba3cdca591cb45718c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309228, "uuid": "c5fa473d-90cd-49fa-ad56-d23586f9ec57", "comment": "Malware payload (Mirai)", "value": "501ab4276bbfa36394a41eb2b4c28ce0d35b202024b8e76ce06243b555fe94745bbdfc7579650b7ebd992e2070901058", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309228, "uuid": "bb798968-8f2f-4510-969c-38c7f547839a", "value": "T1F6936BC1AA43E9F4EC4646792173FB338A72F07A123DDAC7D79CAA336845A50D50729C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309228, "uuid": "4153c1ea-b017-49cb-8f02-3f0b4abafb61", "value": "1536:dgZPx5eA3Fw0LmNSoxMPdmVhySIa8Jem7lNMCNGhSY5tQ5bQtbPda/1B0LYSTU:SZx5eA3Fw06NSoxyQtqMCNGhr5taQh1y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309228, "uuid": "3ca6bdca-c4d9-48cc-8b28-2c4fd50085d9", "value": 95312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309228, "uuid": "b02e36a5-1315-4fa4-811b-f59bbd3c5662", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309228, "uuid": "1120a4bc-205b-48c4-8d62-199db5b5b4b0", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c96ad355-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330086, "uuid": "f8ca6977-33e5-428f-882b-c23d95a1cf1c", "comment": "Malware payload (Mirai)", "value": "d6e254327bbe30e357d29406733d53ed", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330086, "uuid": "da5e591d-85ee-4906-8e08-e13e0999cbf7", "comment": "Malware payload (Mirai)", "value": "82a76b298dced8d75707bdc51d91e70fe9752e3d9d9bcda79ae1b5316adee1d5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330086, "uuid": "66313898-aafd-4b76-9721-52b9038ac34b", "comment": "Malware payload (Mirai)", "value": "dc5162f88e3fedff1f34c64f12c2fdd6f9b459aa", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330086, "uuid": "68b30a27-74dc-466e-b833-fd769ff1acc9", "comment": "Malware payload (Mirai)", "value": "78487d0bf4585de56a4a46cdaa5aa727d583c1a93d3447b43d2ceeaceb87bb97b82d9e213a06b842c40cab4be7543c6e", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330086, "uuid": "de3365ef-366d-45e2-a10d-ac12a3c6be71", "value": "T1CD1151CF6510EA00806C4A74717BC496705056E629F6166ABED6413FD4C9A00B72CF62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330086, "uuid": "c7d10653-c965-43e7-be51-606720c6a5ae", "value": "6:1AhV1OWT9FqjbAhVb+gtFqjbAhVqqFqjbAhVQa6RcbFqjbAhVeOB9FqjbAhVc5w6:eOQvXMc36YMOBnmu/2GjDtMc3DR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330086, "uuid": "c9beed82-17fc-4633-a986-1d5cf9ccc65b", "value": 942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330086, "uuid": "78fe0c21-5c18-4834-8b1d-b8c5a5cc7be5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330086, "uuid": "dd891dec-9036-4831-9a74-07cc4d00ee54", "value": "swget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13d82d7b-de30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295852, "uuid": "b0d758c3-10f7-4bc0-b825-c15cb40d1844", "comment": "Malware payload (Mirai)", "value": "eb9d9194511e09cc79f359eca2a71cc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295852, "uuid": "81737bd5-7b79-40e0-ac58-a6f7c3f0307e", "comment": "Malware payload (Mirai)", "value": "838a7fce616281bc32b6a43feb4008ec1f2b5c65ef17b5a3807dc2b1ab0b010b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295852, "uuid": "33f83de6-fe65-436e-805e-6ed8ea42e2fb", "comment": "Malware payload (Mirai)", "value": "cadd24efd873be432bc2e1d49459364c16dd7185", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295852, "uuid": "c16120ca-8cd6-450a-bd33-3d07c88001fb", "comment": "Malware payload (Mirai)", "value": "4e1606c351c29268c217b61940e4a1112d5241556bc5be18e365350724610fe3fbf37951550e5a6cb7d1acf83e6a15c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295852, "uuid": "095d2fec-cc1a-476e-bcb3-c4ef531413b7", "value": "T1A8C2D0E0B726FE31C420687DE52B4D893A51067890FE393664268C358FC1A5B67F88F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295852, "uuid": "5d53ec48-0b7d-4996-92aa-a51f8392ecae", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrJh9q3UELux:OKy4qfqoeJdXWgJUL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295852, "uuid": "71ef730b-358f-4d1a-8eca-f7cc14d5defa", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295852, "uuid": "ea112cb6-b090-42df-8645-b4ede2882656", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295852, "uuid": "bce3bd15-91de-49c2-9c47-38e476dfd69b", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e11b14c-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330014, "uuid": "bbda4449-dfac-4ed2-99e3-63eed1b042ac", "comment": "Malware payload (Mirai)", "value": "6a5836e2d598a970c7db132aec3bda6b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330014, "uuid": "f7c0cd0b-b891-4f2d-86e7-091047e750d2", "comment": "Malware payload (Mirai)", "value": "842354854b0d67fce28c557d3057c1978a80eb68fb7d9824b96b94da25aef22a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330014, "uuid": "bcd20bf4-11a0-4362-a1dd-69e3a202fe75", "comment": "Malware payload (Mirai)", "value": "d231b0c793ec52972da6df07b674f8d8cee5e25c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330014, "uuid": "5ec7ee1f-5486-4adb-9a78-5622c17bb1ee", "comment": "Malware payload (Mirai)", "value": "2350c4f0c345915d655bac87c1e795069a4d02beae598e8e1e7abf2dc0f3dc8d2325e6367c07e151a6268fed6fe7bbab", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330014, "uuid": "65829470-31e2-436a-94d0-1e81c332f344", "value": "T1BE0186CF1A347F00C02CAAB63BA11835A04187A53FBA0798AFD5453B56D3350339CEAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330014, "uuid": "3b55537c-0798-403c-a671-5788985beab9", "value": "12:6OM3vR3M4336U3MOBB3mu3/2G3jDL3M433DRZ:6N3Z3Z3N3MYB393l37393T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330014, "uuid": "34e85e13-4420-4ef7-b523-81b54f77bb72", "value": 770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330014, "uuid": "195a5e37-6189-47c5-9400-c66c89633a73", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330014, "uuid": "57195897-eb8c-482d-84ba-b6a9fdcfc45a", "value": "irz", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bbdd945-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341499, "uuid": "dc041e39-9194-40f5-a689-c5724a5de27e", "comment": "Malware payload", "value": "30bef8d82a05a74ee4b3229d705e7f99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341499, "uuid": "eacf7a07-b908-47ee-9e5d-ed95e6b6c614", "comment": "Malware payload", "value": "8502a4f704f4e09563b347ad4860e33f8f77d0f6824cec09f73553c4eb3dd39c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341499, "uuid": "6d5aed56-71c5-400b-b79a-021fea63f543", "comment": "Malware payload", "value": "5b225c57e584dfdb63fc9fbb8d4b627806dcae25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341499, "uuid": "99cb66e2-1d28-4ff4-a537-3b668f5de003", "comment": "Malware payload", "value": "3d6d625641671d4d05a05a5c2f4a28bc8fbd321f7177353cf35bf45468f8231a5066d37c70f843f9324237c0191a7922", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341499, "uuid": "ca0bd2de-195e-4a6f-ae94-890c0864107b", "value": "T1FEE18217E2E2CD32D8D0137E45930A1A223DC8659E83DF132E0C896D2E537DCBA72B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341499, "uuid": "9de14ab1-488b-4603-b63d-ea821c76e723", "value": "96:f6u6TiUBOUw3feJheuhiU5Zz/cq/BK+M3mh/W785/f7kbalBgBi5pzBIQ:fEcbveJhA6Zz/cl+M2x/fLbpziQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341499, "uuid": "4e610586-cbb5-4b7b-a023-722d546faa9a", "value": 6968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341499, "uuid": "892dfe57-f3e3-4ff9-8549-857c7c305f50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341499, "uuid": "1109cb5f-6dae-46ed-9d5b-3ae0ef11b865", "value": "linux_i386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940f6380-dec8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361350, "uuid": "4163cfe2-2477-4de8-85c1-ce8df636e26b", "comment": "Malware payload (Mirai)", "value": "f0ebfff34e8809bc4de371a19cffe463", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361350, "uuid": "565b907c-7c99-4bf3-bba6-104f850773fb", "comment": "Malware payload (Mirai)", "value": "8505dfff2f15c5da8d2c6a87bed522591933ca8af938cc8beecd000b01009fac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361350, "uuid": "bbf43b15-d075-4b98-a1b2-f31fba90e68f", "comment": "Malware payload (Mirai)", "value": "ed8fcd579899ca279ce7e519af66f116de8b3661", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361350, "uuid": "7e9b7844-3a4c-4499-9634-57d24eb883cf", "comment": "Malware payload (Mirai)", "value": "0546a33eb186aa43689ccd2e9c908495f4febee58549734fd44fc2659f2f7d1b8a9f30f985c3aab2f38596b11d7aa07e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361350, "uuid": "12e1c989-7df2-4688-8a04-e30bac3b3dd9", "value": "T10B831A86B881DA16C6D466BBFA5E42CC332253B8D2EF7203DD156F157B8682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361350, "uuid": "5554755c-18e1-4047-9ba7-4f894416718a", "value": "1536:stYEqxCIwdtCcxsfzZPsg2gKwnwmsAVS2kla/8h3IxXgT2bVRL:stYEqoRz8nwtAV8a/u3I1gT2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361350, "uuid": "0a84d53d-65e5-4161-b994-f961933f40e3", "value": 81684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361350, "uuid": "66c66618-d3f7-4f7d-bed2-434481bbd04a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361350, "uuid": "5340ad41-3605-40ef-bfd1-815f8f42c8db", "value": "jklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0e64992-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295739, "uuid": "6bb16eee-3812-485f-877c-ba7e99c48954", "comment": "Malware payload (Mirai)", "value": "b0088a8a3608824db1394f755e857de2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295739, "uuid": "f3baa684-0746-486f-b64e-a1134d301656", "comment": "Malware payload (Mirai)", "value": "853f2b7e749e709be2a76ce2eb2a59652d6a9b4e250a0b67a2d5b530ec9c219d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295739, "uuid": "bb181588-c8e7-41e3-9b74-ab1bbedfa980", "comment": "Malware payload (Mirai)", "value": "5013f1b3fcd495b5319b40edf1798e98265365f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295739, "uuid": "68e0744c-ea9d-4164-a25b-769814c11f69", "comment": "Malware payload (Mirai)", "value": "9872c13952700d60fc029f380ab6284ac4da9900eaea53ffe596a29c2d20977c57bc8f756a66f57a58b4965b4826888c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295739, "uuid": "0929c2c3-9d8d-40be-b527-6d7cadaa3744", "value": "T14D334B42322C0F17C0A35974252F5BE487FFFAD122E4F685251F8B668A78E371489E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295739, "uuid": "939b5f1e-d634-4bdc-b850-47f75eb01378", "value": "768:3SjbGSLlRrYj0a8C/dQOhPC/+I20Ja6ZZ+GwPS4yns96BktDgIPi8TwK:ivW3jdQGqt7Y+Z+zN9cGgI6bK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295739, "uuid": "26b2161f-8179-4a4f-a94c-8914ef92f57e", "value": 54364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295739, "uuid": "fd8f6e02-babe-4416-ba9b-12012c544c7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295739, "uuid": "454c75b5-34fe-4d66-a05e-5c1cc9e4688a", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065b56ea-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342215, "uuid": "1b62bcab-fcf0-440f-9107-e2aec131d12c", "comment": "Malware payload (Mirai)", "value": "9877f34ebb02f3b387485079998a31eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342215, "uuid": "b0b2c40f-e657-4599-a071-e9bada5f64d5", "comment": "Malware payload (Mirai)", "value": "8541c6580923cfaf6ed7d5d09101d5db3850f64bf751d983a46cbeb280ca0352", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342215, "uuid": "2066e9a9-0597-4c6b-b477-30869937f0b5", "comment": "Malware payload (Mirai)", "value": "76f638f94834f82045cae61b393c6d18b31fb4eb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342215, "uuid": "3e1617e5-a301-4f45-b3d9-de1195984da4", "comment": "Malware payload (Mirai)", "value": "475c0036f1952aa34827ddb65d417575ca455ea341f974030482e9337178bf4dc293537db15cf5ed5764a44a3cfc52cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342215, "uuid": "19d5f84d-753f-4b8d-87f5-115c68f82772", "value": "T1CBB35B52F782D6B9EA6E42F321379B3B5331C9364011CA41CB7DAE319D22902DB1B79D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342215, "uuid": "6f363a3b-cd25-4781-bfe0-ef9d9236bc0d", "value": "3072:hyKmL4w5bK51pV4j6ocRZ7aAARCZ3S5QwvDq:hwL4wg3Z+lq3+rD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342215, "uuid": "6a7304d1-c4b5-4f7b-9ec8-5ed96794ed6a", "value": 112836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342215, "uuid": "06533d91-85cf-4274-b737-77af4cbc72ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342215, "uuid": "1bf451fc-1744-41ac-87a9-dfbff57610cf", "value": "rondo.i586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de60c7c2-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309506, "uuid": "404563da-381a-4e1b-a638-52ea612ceb5b", "comment": "Malware payload (Mirai)", "value": "644de2f9cb961224bc15fe43c8f13074", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309506, "uuid": "af4de8a7-6bd9-4a70-b007-749488fb4fbb", "comment": "Malware payload (Mirai)", "value": "86f4c218e84943d522d755ac06bb0b7bfd91244ebc946cb5ad0de8ef78e604d9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309506, "uuid": "0e559c80-429c-4454-8420-b2cf7c921e32", "comment": "Malware payload (Mirai)", "value": "1dbf23c4b8631c2e35a085fed7f3bd55ffdc577a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309506, "uuid": "9689f6f7-fb61-47fc-9f7a-4314693250e4", "comment": "Malware payload (Mirai)", "value": "258358e7ec5b868b9a8a793fc8e7b907ce8e6a6530fb81260b7a5002b64f47cc8c08abeb47d6bfa0a616906d192ebc7e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309506, "uuid": "aee017c0-9fc2-471a-879e-2d531fdcbcb5", "value": "T1D40129CE11846B7585CCD90BFAD3495C14848ACA0BD92BCA3DDC446792C4BD8FB48E68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309506, "uuid": "aacd18e6-2905-4e87-8b47-e096b9dc8256", "value": "12:KSs6wZcLcVNyHe0fcHEswc6SYeJB/cLpLcjyncg:KSKZcgV6kHEsfueULpgjycg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309506, "uuid": "01142cc2-4333-4854-b81c-441e6b1a4165", "value": 835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309506, "uuid": "eff9e3fe-070f-45c4-aa14-ff5acfd505e7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309506, "uuid": "74ea07ab-084c-44a9-af7d-159305e6d620", "value": "wget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97d2cb7b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330003, "uuid": "51b24292-67bd-473d-9f72-cf96f92d3b16", "comment": "Malware payload (Mirai)", "value": "9f94ab0e06cfe1e0d979279a7ae3c681", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330003, "uuid": "d8915367-5ff8-4552-9607-b02df0d409f6", "comment": "Malware payload (Mirai)", "value": "87a9d7352b8a36ede1cb478a9301fcdbc850ec8d19941ae7bbd81bed7abebb32", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330003, "uuid": "107ca991-0e25-45fb-801e-aeec1a8ad8ef", "comment": "Malware payload (Mirai)", "value": "a9ffcbe5529919594ff1decb1bb3ddb93f0efcaa", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330003, "uuid": "a313ceaa-9479-4cb3-b99b-57c297453684", "comment": "Malware payload (Mirai)", "value": "85976735c50691965ba35155d2cdf12290e829d08320f757c732bb08cc330341fb0fc721b07c4cfdc94015a5ffb90cb6", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330003, "uuid": "ac5e0d48-8953-47d5-90cd-8a0604bccd93", "value": "T1C0D09B8BE0109A70E54EE4DD317153DE76438B5E35670F55AD9910BF91C45D8B50C618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330003, "uuid": "afc89b17-8e00-489c-8fd6-78eceed27f50", "value": "6:L6Frx8ZXdCNwAK7PSrx8Vzg6FrLJZXdAWJNwAbJ78J0bZrLJn:vdJA9m5XdzTwA2aZh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330003, "uuid": "9977f8cd-47f4-4c12-a7cb-9a673bd75846", "value": 240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330003, "uuid": "a496f5c2-c790-476f-8045-feac0d5ffc45", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330003, "uuid": "f08850e2-ba19-407a-9d5d-512df71d235f", "value": "olor", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b188ce26-de3e-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766302129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302129, "uuid": "a0b852c3-91da-40be-9d46-337eb4a1bc2e", "comment": "Malware payload (AsyncRAT)", "value": "3c1be45251d9ac93403c7099ce9c9384", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302129, "uuid": "92001cb2-3eac-4a56-a649-ab03cb3c1ca9", "comment": "Malware payload (AsyncRAT)", "value": "88ac8de5b6b836ba87166c5bc36f2b06b39b05b0164d3ff34e72f556b3543744", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302129, "uuid": "2d747f32-f70b-44c9-bbe0-16197869d3ba", "comment": "Malware payload (AsyncRAT)", "value": "43447dfd59bed31ae059d3d6e749738c87e59bdc", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302129, "uuid": "f380c5ac-1a5a-44fb-8539-ee1f13bd9a7a", "comment": "Malware payload (AsyncRAT)", "value": "9a177bdfb224c6e848adc41a5626215ec7f5bdbf91638e8b15776bff3f2a27a554c81e2e287643b8fb6aa2b46654758a", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302129, "uuid": "697a4e13-084f-42fd-9d8f-6694d2f4e72c", "value": "T15DC22B0473F48266D1EC47BE4832A200E375E54B5D53DB9F6EC494AD2A33BCD8625BE4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302129, "uuid": "2c6ce8ac-fedc-4742-b8fb-04fe9a935f11", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302129, "uuid": "8c02c06e-ecc9-4bc4-9c93-51f4d2764bfa", "value": "768:BL5O5OXTv9nM19EBQkuMyCJhxiFbHBFBZyu+:B160v9nM1QQjtIkFbhF2u+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766302129, "uuid": "08fec587-2f90-4dc0-b052-4d16b0a8c834", "value": 27136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766302129, "uuid": "1862402b-0a23-4276-986c-37527f8e01d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302129, "uuid": "0fc46bfd-d179-4c4d-95d2-b4c788a9c7e4", "value": "Stub.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99c4bd2e-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330007, "uuid": "0bf7b0f7-6294-4f38-a3d0-21e257a2efa5", "comment": "Malware payload (Mirai)", "value": "07ea8a89e879234fbd4bd9d2000229a9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330007, "uuid": "b89d19b0-042c-4a58-9cc0-964c61c100cf", "comment": "Malware payload (Mirai)", "value": "88fc54f8c654f24c890a5b0e77e4ec344d2854447fb0c4f1a636124981774402", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330007, "uuid": "e58663e6-ffc5-4568-9f62-5c6d39e5f9c1", "comment": "Malware payload (Mirai)", "value": "644ac5b6c5dc897b778dc617afee04a91851fa7f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330007, "uuid": "5a1c00e3-e124-4f2a-8383-866e68f63c9d", "comment": "Malware payload (Mirai)", "value": "d2849096ad7ac230a82cf8a6e097d6a19f51735c1ac84037934fdb917d6e1fbf14215d32c4e21aa8d27a71b39793d39a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330007, "uuid": "b3725742-9c11-48df-ae6b-c4b34a7c0542", "value": "T1AE01F5CF315492710D8C4DA078AA581879888FE031700F2C68AEA4F369C9F14779DF3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330007, "uuid": "f71e7436-c3e7-4a8f-9918-7db1c5f4f773", "value": "12:cKjU8qLqU8YNIl5zAU8B0LKjU8+taKAU887nU8sCU8WFEU88jU8CziAUR:cKg8qL78YNI758YKg8+tBl8yU8sD8C5L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330007, "uuid": "0a169f98-a193-4366-a83b-ce9c8661bfcd", "value": 715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330007, "uuid": "81e5d12e-ca16-4174-9398-1a1cee8f8772", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330007, "uuid": "f201083f-45b8-4655-97c2-ffac69e7d2eb", "value": "x.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08851542-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342218, "uuid": "d5adfdbf-ed3c-4af7-8caf-fb27aea36823", "comment": "Malware payload (Mirai)", "value": "4f6fc2903a9d67eed7f0ef9087d05835", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342218, "uuid": "7255f0ed-fb2f-48af-b7d9-18088bbfc95f", "comment": "Malware payload (Mirai)", "value": "894e31da072638bcf6a6d399a4efd0c62abfcf1007746884838099d0274b34ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342218, "uuid": "56086da7-24e8-41dc-8b49-1b83be83254f", "comment": "Malware payload (Mirai)", "value": "b6048cfaced1ba1f077ea314a0928c1f71a87535", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342218, "uuid": "7467c168-a502-46b8-a901-0b230cd6ddf5", "comment": "Malware payload (Mirai)", "value": "8f7c65e155eb44d085ec6cf65aca3ba73b4c5e0891922a4c2aecfe01bdccca22fa3bcbf14c795928bd915ea9187afe4f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342218, "uuid": "8c3cc522-8d08-4d1a-b865-ca65873a35b1", "value": "T1FF332AD9E401AE7CF84EF77EC9130A08B561775562830F3A63AAFD835D722948C56EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342218, "uuid": "c8add18d-2037-44ec-aa6a-25ccda094cea", "value": "1536:TBmI+MZqEWkKvg8gYs8QnZDFEJFkBxU2KP6H8:TBmvE0vggm9y2m28", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342218, "uuid": "f2e925aa-7150-40bb-bbce-5810195e7d67", "value": 52312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342218, "uuid": "f1d7fdc7-5223-401e-94ec-fa072619e506", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342218, "uuid": "d7bc2002-c7c7-46b3-ad7b-cee55ca19e1e", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d132f8f0-de77-11f0-a129-42010a9c0007", "comment": "Malware payload (ScarfaceStealer)", "timestamp": 1766326664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326664, "uuid": "fa60949c-428b-45b8-a617-40e9dcc1e8ef", "comment": "Malware payload (ScarfaceStealer)", "value": "6c9fc7016ced6358318862e63c5f5ddf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#B33444", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326664, "uuid": "f1d4b2dc-d4b0-4190-ac65-17ddeadd29de", "comment": "Malware payload (ScarfaceStealer)", "value": "8953b1bc8a79db168f9262d573b8245e0762c8fbf91386a01b45bc5dfab753fe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#B33444", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326664, "uuid": "46668f9f-51ee-4be6-b09e-132ed7ed37e4", "comment": "Malware payload (ScarfaceStealer)", "value": "0f8430f80bd2616769f60e9fb53cefa60e14c2de", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#B33444", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326664, "uuid": "0ccd1ca4-2754-4d1c-bd36-8a0c6e9c5813", "comment": "Malware payload (ScarfaceStealer)", "value": "75218a1905503e06dda7d9de76e33b5caff3cc943f86ea1689ed2e7ec73b96b245a055bd838c0a441c06a3b5b4232b13", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#B33444", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326664, "uuid": "5c2c9184-5ce2-4df2-a339-18cbb7ab49aa", "value": "T1D9D623D7BCD496D4D8974B7053CB2BCC60E0A2254EF67B397BC71803A630EA7854A936", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326664, "uuid": "4930bbe2-08dc-4ffa-a551-bae29e48c9cb", "value": "6d17b587a24f5693a2bc089c25ef8794", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326664, "uuid": "0a38e278-045f-4fce-b850-ec3503048edf", "value": "196608:DiXCTtNyMMzwBbLNmPAvuxjFLIGzMKED74EEQtfbBXMAq0QmB6Bge1:D4CTqfzwh8PNPEbMEE2fN8Fb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766326664, "uuid": "fb1fdd8a-73da-4a2d-a0c5-1690f89ecd2b", "value": 13825536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766326664, "uuid": "5a242c4a-6d52-46b9-af4d-6a2a8486938a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326664, "uuid": "94357bcb-0be2-471f-bcd6-33955d96a140", "value": "ValorantHack.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bc2ccaf-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345391, "uuid": "a41f181a-552f-44c5-872d-89fc874e1e7a", "comment": "Malware payload (Mirai)", "value": "7c5d3ef787000bdcd4611732fa410a78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345391, "uuid": "3106b2a0-99e6-45f6-8826-9aa04cd3694a", "comment": "Malware payload (Mirai)", "value": "8a2a6a34866c00e605992217ec038ed4c9c866b267aeb219593a4d71701c15ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345391, "uuid": "94f59a0b-584c-411c-881d-f753597653c9", "comment": "Malware payload (Mirai)", "value": "21d7d435a30f768840ba4a3c8e4626856689694e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345391, "uuid": "b40020df-ccac-423a-91c0-c2056475256d", "comment": "Malware payload (Mirai)", "value": "70e936f3427810d363507734c64ef69afbba9401f2386bc38461f0ee9167bbc1860844bdc49a2a6c1b972ba207401765", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345391, "uuid": "f902e3ae-c6c8-4854-aecc-bf9d63e7b97b", "value": "T1A7832A86BC81DA16C6D562BBFA5E42CC332253B8D2EF72079D156F117B8682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345391, "uuid": "74e0bbbf-a0eb-4133-aee8-bed108f184d0", "value": "1536:ZMpC4wf9+Y18Ll38ubqcZYRFGZgRAVxM+649VqP9BXLxn8T2bVR:ZMgha+1FGZeAVxpXqPfXLF8T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345391, "uuid": "832621b8-281d-4c4f-b8a3-9ebe79635bd7", "value": 81700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345391, "uuid": "0182ef53-3706-4d81-8f52-b0604f57a515", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345391, "uuid": "847dafd3-1057-461a-a297-615d9d2ba7b0", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4111aa-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345503, "uuid": "c7691abf-36dc-4402-9650-f5cb4da69c09", "comment": "Malware payload (Mirai)", "value": "d1dbcbae4565370ae99b216c9a11f8a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345503, "uuid": "e359dde1-5b56-4009-94f6-d14b57cc916d", "comment": "Malware payload (Mirai)", "value": "8c0476fddd3353b4aeb7fdaf5180367c27e6468ca0356ea76989a9cf211429a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345503, "uuid": "c8819d49-a09b-40e6-81d0-3ce7aedf432f", "comment": "Malware payload (Mirai)", "value": "462b44b5c239ff25fdb395bace18a17180414603", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345503, "uuid": "cacdd4da-446f-4549-81f0-6bc51c35877c", "comment": "Malware payload (Mirai)", "value": "813902023c3718a65f393bbf88d72a29cd208477704ada82d79d02b80b4da0e901f1bb1c5b8ebcd9185d45f81cb649b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345503, "uuid": "7eaff44a-b52c-4b58-84c6-853ecd535eb3", "value": "T19C145A05FB0C0463CA931CF48E3F0BFAA3621A9115F99115250D7F5A1A32DB7A68BFD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345503, "uuid": "d5819a31-d643-4da1-b951-9a618a5b5d66", "value": "3072:ESZAGIiEgACYrerYqlNSwppHaecY4NXxUaN:HZ15BTYCrYq1QDY6y4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345503, "uuid": "5302d92f-733d-4340-93d1-ebad95891e51", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345503, "uuid": "05f285e0-5b90-442b-bb77-ed2d76851e06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345503, "uuid": "90a7cee7-5e6a-4f48-a34b-009f17adbf66", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f858ce46-de9f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766343909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343909, "uuid": "2322dfa3-85b8-488b-a7f8-f92a7f19b01a", "comment": "Malware payload (Mirai)", "value": "3a01abaedb6877401dd2200869b041be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343909, "uuid": "62d83b19-67f9-4896-b9ed-16f22d3ab083", "comment": "Malware payload (Mirai)", "value": "8c24a9977fa29dba230772a68f2df0d26fd6ff11d9470c3e5afdf4784e0139ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343909, "uuid": "c38e46bd-df1a-4313-a778-4cc7ae0b8ee2", "comment": "Malware payload (Mirai)", "value": "520c0ca626bf59441510a37d462cd46428df3148", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343909, "uuid": "edc71940-9c29-4e01-bb17-9d1383286e00", "comment": "Malware payload (Mirai)", "value": "df904a006e3813c61912a715803573f9e6b73c0e8f55f57cd81522a834a90787d69db868c1537d619ed2636db00aeb41", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343909, "uuid": "e0d11aad-028d-4c5a-8246-0865b3576a8b", "value": "T13B331984B8855A12C9E4227EFA2F42DC372623B8E2EF7207DD126F15778982F0D77651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343909, "uuid": "224d49e5-4f6f-406c-a5a0-73267a0504bc", "value": "768:BS0hDAp2RyOFrvRM5MISfmKJODri+YC77PIek7r6DAK4l3PMZDixNFtp1n2qSWTP:BjAp2RyQmS+KwyzC70RRF2DinTPvTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343909, "uuid": "d4514ee7-b709-4d9c-b2a0-025e9d48f418", "value": 51800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343909, "uuid": "449f3609-0fa2-45c3-984a-86bcf815e620", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343909, "uuid": "f81d909f-88fe-4121-92b5-93206afed449", "value": "zerarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e79aa0ef-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335291, "uuid": "b62e29e3-862f-4d7d-8969-9b006028b941", "comment": "Malware payload (Mirai)", "value": "311c6eab4b4dd538f595a5fd828988bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335291, "uuid": "bcdc5da9-7a43-41d0-b2e1-f148c6559288", "comment": "Malware payload (Mirai)", "value": "8d2d4c7c1ea2e2185e212c3757044f4ad6e89001851ee326a436620fa10ef5f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335291, "uuid": "c7788b29-33cb-44d5-9460-1d20a1eda7ad", "comment": "Malware payload (Mirai)", "value": "8e36f3238034227494d972d86109345d17b15cea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335291, "uuid": "4a4805b3-6b86-4575-98ca-49ed356f4ce0", "comment": "Malware payload (Mirai)", "value": "40be24c9b640945c19aecc35b57abd174704469e903a2653a78f00da9857c54c49cc4ae61afc16f2c15a9296ae117662", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335291, "uuid": "4c1d4d34-6780-4460-a0ad-a887f9101402", "value": "T140432925AD792E26C0D4B57A51F78714F2F2220E26B8C61E3CB21E4EFF04B4065577BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335291, "uuid": "705c949e-bd1f-4138-b6dc-6681c8dd3468", "value": "768:TXon00+q9wp3C+vactfa1sDHZYAzsv6WswWSHoXdss63B/9JO+zC32:TXw00+SY3CaactfI6Zvzsv6vwcGJp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335291, "uuid": "8612051f-75cf-4040-af42-e4efb9ab9d68", "value": 60116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335291, "uuid": "da4cc40a-e732-4973-8e9d-b6486d71149c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335291, "uuid": "083d280e-7413-4dbe-9321-53d8a232197c", "value": "Josho.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c815050a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330084, "uuid": "15ec6d51-3f1b-4b4d-aba8-45677a3e5884", "comment": "Malware payload (Mirai)", "value": "2a50234aa5ce2f24dbf4ad5d21c145ae", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330084, "uuid": "7b13f317-8a9d-4891-9e21-653e91d84a51", "comment": "Malware payload (Mirai)", "value": "8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330084, "uuid": "7943422e-0162-4099-9464-99bb371d8b79", "comment": "Malware payload (Mirai)", "value": "694f2fdc25e2cd021cd02bc7c86052309f85f33f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330084, "uuid": "32463169-ae13-44ec-9e10-b4a60ad4504a", "comment": "Malware payload (Mirai)", "value": "539f76c81681360a5befa72bb0251f0b568fbb20a6fb7f17b7172f45a9d378a4564e3f5f7bf376f0588e0c3444deeda0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330084, "uuid": "98cd4f50-9bb4-416a-923b-993104227e74", "value": "T11811B66F0510BE41D51E5AB4B56B40106150CAD23EB50E5AAED5007F84C4721374DFF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330084, "uuid": "25460ef0-a863-4ce8-873f-274ffcae581d", "value": "12:eOChKkvJhKkMOhKk36ahKkMOB5hKkmEhKk/2MhKkjDbhKkMOhKk3DR9i:e1RhRhR1RMY5RlRdRLRlRji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330084, "uuid": "f45c083c-d996-4288-9bc5-e4772120f3bf", "value": 902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330084, "uuid": "84a2c64b-db4a-4bb3-bb53-6d3e8516fe66", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330084, "uuid": "5b56fd7c-7c26-486c-81db-5c917da7fbad", "value": "ruck", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab4e2a2b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330036, "uuid": "9e3c5449-a8ec-4449-8478-24d7ec89e36d", "comment": "Malware payload (Mirai)", "value": "cbeebb38b3c916bf3d4414cafc673b52", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330036, "uuid": "6c5d216d-2f86-4c7d-a520-0e9c3fe12e07", "comment": "Malware payload (Mirai)", "value": "8de3a759343ab22e8442d49802f4d7da4f73e18b9d08a927a16f643d314f9ca8", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330036, "uuid": "2edb6cec-d0ef-44d2-9c36-6f2e651e8360", "comment": "Malware payload (Mirai)", "value": "a8f88158ec1ed771ec9e8c7bd4e7b806be5bbfa4", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330036, "uuid": "4803f66b-ca87-49fa-95ce-95985577d9ef", "comment": "Malware payload (Mirai)", "value": "bf9ad015a99850d3644e5c30c147230a128fe02854bff234cb0a46471fa73ca8d100e685508058bd9e6f63adf5617e6c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330036, "uuid": "0056d0c2-d8e8-40a7-bed0-07164aa56c31", "value": "T17411215E47056DA0808CE53D3B81881D71C04BDD1ABB47A41F99017E14E46CD7338E1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330036, "uuid": "6677ba77-6342-41ce-8c64-1ed6d6a64f10", "value": "24:f7jr7M5Zr7fr7ur7Vzr7+r7Fr7yr7Gr71r7bTE:fnrwHrzrCr5rKr5r+r6rBrbE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330036, "uuid": "f4799159-23af-41a1-a5c1-8b14d2ab2f5c", "value": 1017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330036, "uuid": "d154d8ef-424f-4d42-8c59-f057026e8ff4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330036, "uuid": "41d44e39-ec63-4229-a5c8-e2a7d3c481cb", "value": "wrd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d31139e-de6c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766321637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321637, "uuid": "548aa88c-bcaf-41af-a690-1a0a6815f7ff", "comment": "Malware payload", "value": "600db9557c637d20149da8bc09f10135", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321637, "uuid": "90aa6bfb-bfc8-426f-87d5-a39d6e980104", "comment": "Malware payload", "value": "8f7bcec5a0231f20aac91ab21a9adbc08d217d7e51acfba67ac6968156ea077c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321637, "uuid": "3538b6f9-88c6-462b-9065-88855f8b15bf", "comment": "Malware payload", "value": "efba3dbb94ee71d7e31a2c3d57eba7fff2534fb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321637, "uuid": "ac1245aa-7f5e-445c-a0e1-46862e2acdb2", "comment": "Malware payload", "value": "999df8c5d3b228abffb55e6d58d1f758a0067ac6589db984e0c03393088b350a443ada1970b56a54fc18710d6b7ab8e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321637, "uuid": "aa19b3c2-b5b6-46c8-bad4-ca9ace6758a3", "value": "T105930A867910B627C7C21F77EE5F035633254758E3A7335289182BF8AF8F61E0E26646", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321637, "uuid": "b7ae3a96-8273-469b-833a-7ef514b262e2", "value": "1536:0rEDSN56X3inQha9tqynhfMEfN8qmkDAZ7VwLLy7fFKZs3mkjL9GsPgg+GQ9NwT0:0rE+XAUqynlNMkEZRMLYfFks3mWJQ9NZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766321637, "uuid": "7b14bc2e-c881-473b-a251-1dba6a2bb015", "value": 97505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766321637, "uuid": "ffad1a0a-3d0d-4a08-942b-6ed22e85cc5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321637, "uuid": "9e3de172-eb44-400f-81e5-aa33cd9afdb3", "value": "n7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c2ad23f-de88-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766333688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766333688, "uuid": "ad8458f0-5d94-4146-bd1c-0597f18a8080", "comment": "Malware payload", "value": "5fe0b78a6aa3c2a4eb0016298748c898", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766333688, "uuid": "15f7b989-dc62-4153-9a15-cc6d4c2addb8", "comment": "Malware payload", "value": "90b7139ae18d7f529400fcb871a0d411502b5a8d924f7abd3650490286bd241f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766333688, "uuid": "e78068f3-2aa0-45f9-adf0-d5712ddf15d1", "comment": "Malware payload", "value": "6f663fa7f1ac56979ad67c656193c5de70cf79c8", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766333688, "uuid": "223d77f8-8dae-49aa-b1d7-54846112296b", "comment": "Malware payload", "value": "64f4e6bb9862d3db09b6c3f60f768c6e40b588fe02c952683f09f0af05d8d56b211ee9cc5a60ad18788ac2e22c4404dd", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766333688, "uuid": "86a4f2b9-e077-4420-96de-d84c5dcce5d6", "value": "T1D9C533DAC3D0111ED5152AFA2DFDFCC1331919CA895AAB4B97E0283C2E072A5D6DFD42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766333688, "uuid": "f85f6196-13c5-48bc-bac8-3f4d986dacca", "value": "dc6b57a7282f87959d9942f26d5c0b74", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766333688, "uuid": "5a1fafdc-d054-49c2-9f08-94ec386ccb3b", "value": "49152:QmARroDie4xpjRFEtq58/GVVwMj6g+kfnPX30soTIHeSZtWHmHeiDQ:Uox4TjLmGbw50P0hTIHeSZtWG+l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766333688, "uuid": "4430dd9d-d459-402f-8300-7f76abee9bb8", "value": 2579968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766333688, "uuid": "03527f0f-2e0a-4760-9dd7-34166399fbea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766333688, "uuid": "ec56ec08-6e51-46bb-9a38-5d4b80c53990", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fbefa00-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309696, "uuid": "88b26794-e78e-40f3-a5f6-ccf31334428f", "comment": "Malware payload (Gafgyt)", "value": "f981669c53735e51b53eb2e47019df30", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309696, "uuid": "47a12181-9c2b-4a8f-9d80-6d7740ac79e2", "comment": "Malware payload (Gafgyt)", "value": "90c0d654af8440b75bdf79fd717aa46b9f67df3934035a40961201138bf2dbd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309696, "uuid": "bd1eb4b9-1b06-4ac3-831b-64167ced339f", "comment": "Malware payload (Gafgyt)", "value": "b29c7827971513e3be8878effe90757321bcda3a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309696, "uuid": "e74a37da-10d5-4694-9e3b-ab8d0f555213", "comment": "Malware payload (Gafgyt)", "value": "70b980dafa8688ca606c0988f0f11112aeb31634049b7c89adcd6d6b7e90519859336b1182fcb1680d71291d36c12eb6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309696, "uuid": "11b4933c-101d-49af-9f37-63fb47a8350c", "value": "T1FDB32993F801DEA6F40EAA7605D74721B630FB660F431A7273173966AE362D53827F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309696, "uuid": "88e4d9a4-88ec-44e8-8349-f191589db456", "value": "3072:D+v5B2mMiWRLbBseyOc1J3PfDJmFZ09DRAoQfgm:D+vf2mMiSBfyOOJ3PfDJmFZ09DRAoQfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309696, "uuid": "0ed2865f-b0e8-4041-8dd8-38908c81c0a1", "value": 109325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309696, "uuid": "436647f6-2ff9-443c-8ea8-3497cc312685", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309696, "uuid": "da6dc3cb-e9d7-46e5-ae1a-748b22416fed", "value": "yakuza.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c92246b-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340507, "uuid": "f82e14ce-4b45-44e8-8f62-64c3bc9cf659", "comment": "Malware payload (Mirai)", "value": "ffa51f3053c29217eef5f5fd0f2f7b35", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340507, "uuid": "b37f8919-19d9-43a0-a049-03f0b205b138", "comment": "Malware payload (Mirai)", "value": "91a418bd9b18ac0245577809c0c1b80d432e640cf1b415cc96bff8d5c5c0f435", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340507, "uuid": "76ba1317-1eed-48eb-b8e5-480cd5a1c088", "comment": "Malware payload (Mirai)", "value": "44a2eb3f1a4830bd999c4ec50c1047e43fb98dfc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340507, "uuid": "74ede149-cdd4-4199-9fad-f5d098389b99", "comment": "Malware payload (Mirai)", "value": "3ee982524be5d1d664cb34e06058ff6d17edf0b4bfb0d12dfbc4003296fb21af93925655a1420f90cca667ee85654065", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340507, "uuid": "f3c88373-5157-482f-bd60-d57b4bf55718", "value": "T19A632A326A359EA7D1C2B47932B7632A79F112DE86A4C82CFC711E0DFF26854910B572", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340507, "uuid": "4b52586e-a495-4b97-a088-9e271e08078e", "value": "768:JiLLfqMfg9Z5J6hoyMyhSRV2vqRQmKW52YO+kx+m/XPE:QLfXcXJ6hH9he2QQmKA2ydqM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340507, "uuid": "4bc8b5c2-44c3-4635-90e8-9ec620fc849f", "value": 70780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340507, "uuid": "941e10e3-fc78-4104-b804-385563eb3e55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340507, "uuid": "c19b80d2-013c-4450-a14d-9faee47facc3", "value": "shadow.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671a723e-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345383, "uuid": "4811a932-55a4-4458-969d-128a3ec06596", "comment": "Malware payload (Mirai)", "value": "5234f23090f694ffeebdd251998bac05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345383, "uuid": "8216b2c5-41cf-455f-849a-9667b56c4a14", "comment": "Malware payload (Mirai)", "value": "91df0c759b74abfc13bfce7b379a6e6c2bf0976854a79c769d7d5f86b90dc24c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345383, "uuid": "95c530f5-e4fd-4510-820f-a274137c62ab", "comment": "Malware payload (Mirai)", "value": "eb350dd1ffa364731fdc8b678ca27363c2f9bbe7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345383, "uuid": "59dbbfa4-9080-485f-bf46-b6d93b22493f", "comment": "Malware payload (Mirai)", "value": "1c4ace7fc21e2ecd4275d3a3dbc2e778ffeff4ca4c41f023c85681039f5bc01167b3fd21466ae61222e0acac84eeb0ad", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345383, "uuid": "06651422-4a8f-44d1-9ac3-6a05dbcc744f", "value": "T17B146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345383, "uuid": "94d825ce-42e6-4dea-b516-466157575192", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtC:BZAyFzQSdS7In", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345383, "uuid": "c96094d2-6116-4dd3-91ce-a0a07a699cff", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345383, "uuid": "666b658f-28fd-4a6d-960f-de6bcf001ca9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345383, "uuid": "dffa523c-919e-4998-8383-3606e0e426b8", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05afe2d2-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342214, "uuid": "5e341252-5108-418e-8572-3bd84ff2903f", "comment": "Malware payload (Mirai)", "value": "31a57361c5046e41721d6c0ace4d27f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342214, "uuid": "c091a79f-c4fc-4e23-bdf9-509b7e27ceed", "comment": "Malware payload (Mirai)", "value": "91f67a01fbe9c03cb7552f354008420098cad785082959e55b5d48a9af50107a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342214, "uuid": "b6d64c80-2ad9-46ba-abfe-ad47fa752476", "comment": "Malware payload (Mirai)", "value": "3ff940affaf212bb53a07a55b6098fd0f784c1e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342214, "uuid": "f83d543f-9971-4f9b-ac61-14c25d24581e", "comment": "Malware payload (Mirai)", "value": "17cbdb4793af4b8b2efd02fe2dd8ed1fd7048734b42db5bd0a21c10a9e3365a2de8f41f86760e95e51d5f79a29265b06", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342214, "uuid": "3a1a7718-8f7c-4196-80c8-397b6a4e8a96", "value": "T12F93F996B8918A11C6D452BEFA1E51CD331317B8E2EF73539D146F247B8B82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342214, "uuid": "9d83fe6f-1d27-4a7c-b7a1-e215b1a6f2eb", "value": "1536:dtn/4D/G9jAMGOfEJtCFKIFw25qbUwLIPPOpOuCn3IT/ysm8rUi3gM7iDPW3uj+n:pjdK2YDIuK3ImsrePW3uj+xT23rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342214, "uuid": "4f2da493-cbd5-4ef5-ac47-32a11b614fa3", "value": 91708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342214, "uuid": "0aacdc6b-2dd1-4e62-97cd-d030c453ad34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342214, "uuid": "45755e28-3af9-4747-a5ad-c9458a1f1951", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c43a27b-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330011, "uuid": "14d03dd5-e629-4576-a5d8-193af483493e", "comment": "Malware payload", "value": "0b80cb61ffa37a78896934be001299ce", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330011, "uuid": "7a91baca-c150-4076-87d7-d53ab80e99c9", "comment": "Malware payload", "value": "926392da70051ea23401ef923c4dc77affef7ae80f5f6d1be74c442472da55e9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330011, "uuid": "b9d4c32d-571b-4e37-aa81-4b07020afc3d", "comment": "Malware payload", "value": "05fd43b2f65f3dc01b896ca5f1b50f31a7e3bfad", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330011, "uuid": "86b086b6-b855-47ba-9eb3-6c0db974562a", "comment": "Malware payload", "value": "e2eb26e67c7a77bcc621c03bcfca7a0dd203bb5c918ecc94ede11314c6c5de7b7457bf3d073a496f51b65b79dd3fcb37", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330011, "uuid": "f6391d77-2079-4d0f-8af4-fab220036c65", "value": "T126E0E50EC20986FFA81684AF6EF83ACC750EA3495ACA2E05AD389D16B481C5C92C1025", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330011, "uuid": "8a35e2e8-5a0a-43f6-bee4-18824b5ec504", "value": "12:/bwgV77Uy4gZesFrFBEGgbu+yfuT+JF8EpASLye:jwgV7OWrTBEGjTuyLpvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330011, "uuid": "b0ff1dcf-1753-4b98-bf28-723870a51ceb", "value": 418, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330011, "uuid": "b3ff194a-7582-417e-8262-cb2c353675e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330011, "uuid": "f17834e6-ff29-4bcb-803e-4236156a2b25", "value": "lol", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93578b6d-dec8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361349, "uuid": "2b505679-58ce-4efd-9267-5dc23d10cfcd", "comment": "Malware payload (Mirai)", "value": "ecedb4e6f90c7d0d058e0c4c4d7b404b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361349, "uuid": "7b6e40ac-8fe0-46ee-99d2-1146374749b5", "comment": "Malware payload (Mirai)", "value": "92672b0ae6d01414680a6361ff8567f96e8ac8085dd7e4f686ea929edeb362cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361349, "uuid": "2f7abcc4-39a5-4b73-a1e2-df6efd5a2a7f", "comment": "Malware payload (Mirai)", "value": "1fc5b1a0500fd9cd4ee0dded7977abdac2a9df12", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361349, "uuid": "37cd33b4-280f-4a4c-95b4-8d1a1c60b858", "comment": "Malware payload (Mirai)", "value": "1a8969fa97bbd8573b2f3a682c8222d65c2e08b6098a935730bb8e6c95e1365a27d7c118608e0f24415d14c5651d2b28", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361349, "uuid": "c6b88723-16f4-4b1e-ae23-42c06780a624", "value": "T16B53F985B951D612C6D5A577FF0F82DC371703A8D2EF73039918AB613A8B86B0E2F451", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361349, "uuid": "aee6b942-69a4-4ecd-b3b6-76aa9d8035c9", "value": "768:sN+Zi7u72Br3eMBqQKMCr2fU+WLcy+TNK1Z7EJNInFxp1ZCFP+lkxoMF47vIT2bb:a+n83KMCafKJ1duu51Lp17vIT2bVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361349, "uuid": "46b3d5c6-c597-4810-ba7a-8140929ea82f", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361349, "uuid": "eadeb338-f908-46ec-8d51-aeb405a8d367", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361349, "uuid": "d72ae4b4-13aa-47ee-b13c-77cbbc8094e8", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec66117-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347866, "uuid": "34a0730a-d24d-41f9-a85f-11954077ac63", "comment": "Malware payload (Mirai)", "value": "1948aace6f24e1a4b42691d3a41fb710", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347866, "uuid": "424dce16-a42a-413b-badc-3bf284ee8136", "comment": "Malware payload (Mirai)", "value": "93aab5f35ee3b44cdb193841cb04fb372e76b230b99206e69ae4104f743dbaf4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347866, "uuid": "744d3ad2-2609-4ab5-8cd9-3c991bd1ab52", "comment": "Malware payload (Mirai)", "value": "a4301c8ea8e71eb6b11f2eead409093f6d92a276", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347866, "uuid": "706ca933-681d-4291-958b-93ef5376b2c9", "comment": "Malware payload (Mirai)", "value": "dcd406e476d3df7a325d109a7207d92c2a7e8e07ae45eba804716c1118e806323329dcdca2e6cf7091567df3ee863722", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347866, "uuid": "fc9c7597-8844-4039-971c-99a300239c56", "value": "T148B3AF87B190BABEF0A49E3FC4135E26A6259F705583273D71BDF9906E3A3503291F42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347866, "uuid": "9a09da14-4889-42b2-9495-aec6c34f2cdc", "value": "1536:ea0rU68uUGW7gYUqwaJiX2mqF1kcM8xBaZeCPjHdfA5MHGuJ41XkqdIQoT15OxK3:eZrslGW7gTU0qFRM8WvcIQDKNnUSj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347866, "uuid": "75d36802-9188-4c48-8a15-74e6bb5ec05c", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347866, "uuid": "e31126db-cc1e-4f7a-ad91-f15cbd6366bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347866, "uuid": "def62f0d-3e48-42d7-b6f8-2652fd0f2ba6", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f1ca5cf-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344377, "uuid": "32c347a4-77de-46ae-81bc-1aaf6d7b159c", "comment": "Malware payload (Mirai)", "value": "b7fc44edd6e4ecf072b79af970a1139d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344377, "uuid": "37b94219-b130-4f16-9623-c9e7b74fae21", "comment": "Malware payload (Mirai)", "value": "94d7788c523286d0ee36937bd44249abbc6b1d6564e2cd5489d6e13dd27bf37d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344377, "uuid": "05631fd3-2b00-4301-87cf-b43071ee3fb6", "comment": "Malware payload (Mirai)", "value": "dab4db40efba08e9096d2f254aebc560c46030eb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344377, "uuid": "16a0ce46-90ee-401c-b527-19b79cd9f2e1", "comment": "Malware payload (Mirai)", "value": "a3c031cf0535b8c6f9af7ec2c22733927a0c16211f255f37a7249c3d117715e72816f0841932cdf756674efcf02294ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344377, "uuid": "4db2eed8-80ed-411f-bc10-7cb283519fa4", "value": "T120D31A45F8414F23CAD512BBFB5E428D3B2A17E8D2EE72039D256F20379696B0D37642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344377, "uuid": "0ed0c4b8-1606-4cd7-b9e1-2e8dc93901bd", "value": "1536:Ny47bMjZXZpHQf7EGAbZSFq8L0bA7Qoqh4V+3F/TIszKaT6s2zYSljfwywAloP2w:Ny4doQY60bpoY4m/Es9+Tz3HtOEbs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344377, "uuid": "1d7ec0bc-bcfe-45df-ad68-6da4583ff7c9", "value": 133696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344377, "uuid": "1349d705-b73b-4e9b-ac2f-64159a8ebb4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344377, "uuid": "66b58994-92ca-4032-ad48-e15e5d80ebbe", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b04d4dbe-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330044, "uuid": "4558994f-46f9-4630-b930-a24fccf78019", "comment": "Malware payload (Mirai)", "value": "e27b940387ab73d57c750106c6faaf16", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330044, "uuid": "d10d7c9b-db76-4be5-8224-e7b1d86696a5", "comment": "Malware payload (Mirai)", "value": "95a958c0ef68a3b87555a77dfda18d31913995a1701602f8fbe4b4a2d5390339", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330044, "uuid": "2a73c714-7f34-4cad-9c6c-684a6317fe1c", "comment": "Malware payload (Mirai)", "value": "ddca8c524b1d8c2df9395763180163e889ea0e64", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330044, "uuid": "101e893d-1011-493a-84f9-81001959640d", "comment": "Malware payload (Mirai)", "value": "aaa92fc451805f8749e96cbe7276b5fa3eeb075bc426df0383392da8d201823115506dbe2591b150579d5fc76f52ddd9", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330044, "uuid": "870c928e-7d85-4ad1-9752-3f6bd2a87846", "value": "T19711215E4105AED1848DE43E7781800CB4804BD919FB06A81E964A7E28F02EF73F8E19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330044, "uuid": "c1770534-14d5-476b-b5b5-fd673e0df716", "value": "24:+7Ea7M52a74a7Da7VUa7Ta7qa7fa77a7aa7b0d:+gawAaUavaWaXaWaTaHa+acd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330044, "uuid": "b5e4d49c-1e39-4de7-a816-9adbe3f861eb", "value": 1041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330044, "uuid": "7b036df4-78d4-4703-8aaf-2e498b23826c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330044, "uuid": "08e458d0-8b6b-4b6f-bf7d-650959080cf4", "value": "ssh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e84b1327-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335292, "uuid": "0b0e18f1-c5c5-4396-9d9e-5d480b48ef64", "comment": "Malware payload (Mirai)", "value": "487a6ee4f61bedef39db94378078f061", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335292, "uuid": "299e819a-520b-4819-b5fc-b2c26327a5eb", "comment": "Malware payload (Mirai)", "value": "95ae4c673b4b6547dc0e35a45220e8ea609893624c04068d45d37be194fd7f86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335292, "uuid": "7b31efa2-45f5-4bc6-a533-92368de5594c", "comment": "Malware payload (Mirai)", "value": "e3ebfa5cb73c7b7c02fb24934db6aa21997e7ae3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335292, "uuid": "5b063a08-7189-4af1-be26-18602de5ae34", "comment": "Malware payload (Mirai)", "value": "876faf6a4837c88cc1ca13a57962f4d7c937baac8444dd090f4bc72ab341071495bf3134b71e6f58053605f798346c63", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335292, "uuid": "bed12acc-797f-4e0b-8808-8a2180b58d2f", "value": "T1B4C32B46EA408B13C1D61777FAEF41493322DB5593DB330689285BF43F87A9E0E67A06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335292, "uuid": "bc35b4cd-d410-4097-9861-03302f1925b9", "value": "3072:CwS6r2/xdwS45hL30G2DoK5BOTKbu9+JsVM/9OrVM/:lS6r2/nW3SDoK5BYK6+JkM/9eM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335292, "uuid": "d32da3d5-1d82-4f2c-9d3a-b7f5e2bf27b8", "value": 128047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335292, "uuid": "2ff441b7-39be-46d8-bf7e-9d9ee837c99b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335292, "uuid": "a1cf3aad-885b-4c6d-9246-2a8a8871f1eb", "value": "Josho.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3197ba89-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347871, "uuid": "6693efbf-a235-4318-8e1c-9e3c08a4a3e4", "comment": "Malware payload (Mirai)", "value": "e95ef0d01d51abdea9f3637de2e4f821", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347871, "uuid": "d701abde-171a-40fd-a3db-434956547ce3", "comment": "Malware payload (Mirai)", "value": "95ff5d8d93bc895f563f6e41acf9c2bc4e3b6e64b01b0ee1546f55b116a3bf6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347871, "uuid": "c6384184-f1a9-432c-9e22-f4c77c568435", "comment": "Malware payload (Mirai)", "value": "2d85a27f8ce0e173633dd726829f6f273959e5ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347871, "uuid": "c27e450c-cf1a-4af9-9c8e-fa9ede591091", "comment": "Malware payload (Mirai)", "value": "738e1b952890a399cfec751564996dd92170668d7b9ea9edc6f76d3be633d9de501e4a0bb629312dcf3664838d3c58e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347871, "uuid": "698801a3-9478-4f36-9028-b1840d547be2", "value": "T156C3F195BB636991D0A342FDA4C00AC387912E318BE213480699F77438BDDFB1F69DD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347871, "uuid": "90c9e880-8cb9-4c06-9d38-cc0688acfd34", "value": "3072:0BgfiK+bePnljS5dGaUXpSg5T0pJ0S0EhitKMMTnB:tL5uCXp95T0lhqKxTnB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347871, "uuid": "1a57d0d6-966a-49ae-bd3b-b5b9e273ebe1", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347871, "uuid": "d3c9aa7c-4c12-4fdc-bd11-fcb10fd34cf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347871, "uuid": "1da91793-0705-40c9-91db-7c7ac44f4645", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ea5e64-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347878, "uuid": "454158c1-0a26-4808-8bd0-b5f77e61ad2f", "comment": "Malware payload (Mirai)", "value": "842bee725f27de8dbfc2ef46ec43ad25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347878, "uuid": "b9e6331f-ea7a-4820-a547-c3386781eae5", "comment": "Malware payload (Mirai)", "value": "96804389b4daaff7b78e3d3753c3579210e7732f148699204c627856d6a43a00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347878, "uuid": "49cc634c-d6ba-431b-bbdb-269b01785bca", "comment": "Malware payload (Mirai)", "value": "c03d2c40baab628dd24631c35cf960ecd5890a0f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347878, "uuid": "ab553217-56cd-4a4b-b616-774c7cf5fdb9", "comment": "Malware payload (Mirai)", "value": "2f80e9ff9eefbaa7971a07c688d6a02101e3321608add268979a0c63df6d84ba547e7cc393cb7f62c82da07a07acbbd0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347878, "uuid": "f61167cd-fab0-4e46-9391-65bf5195782e", "value": "T1EB6302CC12342FF3E3E439B66A5434C4EBD132E930EA56E7B207EF617A866415964823", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347878, "uuid": "ae22cd4b-4546-47d4-81d6-67687e2b7cd6", "value": "1536:WP94/iq+wodQpT28/08WEFFq+OxYNu6ovWNn:SCV+wAGLFFq+FNuANn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347878, "uuid": "b95c9fe9-4165-4385-9775-fae1adebc4eb", "value": 70404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347878, "uuid": "67d80dfe-fecb-4bf3-9cc5-1fd765f99bcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347878, "uuid": "ea14f4f6-4434-4cac-89ec-043f14de373b", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "411428d3-de8f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766336730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336730, "uuid": "ecaac7f6-7ace-4a10-8883-172f368010a0", "comment": "Malware payload", "value": "76e420682864bd41b144b1406541bf41", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.H!ml", "colour": "#8BB97C", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336730, "uuid": "2480ac23-9178-434c-bc67-019465b670a5", "comment": "Malware payload", "value": "96aacc8331bc06e88c7b696aa8f2da19162400204ac86abf7e32d2b0142f2baf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.H!ml", "colour": "#8BB97C", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336730, "uuid": "075d8521-d99f-490c-b5f4-f82b57f95ac4", "comment": "Malware payload", "value": "793012718d7155a5bbf9167df4c5d07496cf8c0a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.H!ml", "colour": "#8BB97C", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766336730, "uuid": "44a9a298-237e-413b-9b6f-42e0e8d68675", "comment": "Malware payload", "value": "763cf50b24578e0856f63f51a703a7567a2deacbbf35ed2a7859467a870df9e51d19ffd2e3e41c3d1598458771710736", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.H!ml", "colour": "#8BB97C", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336730, "uuid": "8fb35a0b-2de3-4b48-90b1-352a4b2e9089", "value": "T108F6CF02F5A09038E5A73271B53D673E8D317DA29B3686DF97846CD42FB82D1603A35B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336730, "uuid": "5af3c551-2dc2-439a-b57b-43be581faa31", "value": "16e34dd111ad30d0f1b7dcf6707ff0a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336730, "uuid": "072d719a-405b-40e5-8a3e-1c819e3da8fc", "value": "393216:bM+IEYfKBlrBGwu+ZJcfW1dsOyzHJzqemJ5fyE1Swg23hXwjfKNOFgH4W03Bfm24:g+IE7s+Z2MvJ4E1SZ+0Jm2E/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766336730, "uuid": "98ecdb42-db82-4ff5-a349-e6c909a2d038", "value": 15956861, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766336730, "uuid": "defd385b-0e5e-4cf8-92c7-931a1f3373d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766336730, "uuid": "37ddf1e9-7d40-4dcd-8349-4cec75b2e7a4", "value": "ChrromSorMXi.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91f14d05-de34-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297781, "uuid": "4512c0ad-15ce-4ea2-8159-1827f9275a84", "comment": "Malware payload (Mirai)", "value": "c52aad951f0241c67ea04d78d1c11937", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297781, "uuid": "1b26994a-e73e-4237-8179-95d0e88652fc", "comment": "Malware payload (Mirai)", "value": "96c43a2bbdd790cc4c8b2721b8364757c774c5c3b7d8617dca11eda425839089", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297781, "uuid": "de235ea1-5fa4-43a4-98a6-369eac7f33a8", "comment": "Malware payload (Mirai)", "value": "8249fd002c4c18842cf590f151fb4a107f290143", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297781, "uuid": "eb145d41-39b6-4ade-ad3e-aefe9bf4887f", "comment": "Malware payload (Mirai)", "value": "1d5da6e021c83d9e448bed9a24f4d5ae81aac7dd6abd3525159e0e63b933b165802429439c6a8041ebb0eed0f9e24efa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297781, "uuid": "bdb59e3a-6627-4703-a87e-6bde068e7e9a", "value": "T15283F706BBA50FF7DC6BCD370AF8170130CD560A22A97B367574E828F59B25B09E3964", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297781, "uuid": "754b4cb4-5509-4ecc-8e05-311b5e441919", "value": "1536:NpzFeX5ZSVEx4d3XMxU3ZeCsSM5dQhICdA:NppU5ho3XMa3CYICdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297781, "uuid": "89a45e7a-e67f-45cb-953a-d425149b867d", "value": 87812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297781, "uuid": "973ed88f-3b7a-40d9-bf26-c2e3793c459a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297781, "uuid": "d3a17d0e-e491-494f-a29f-7f4986d31008", "value": "sdxkzX_UXA229x.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eb42799-de3f-11f0-a129-42010a9c0007", "comment": "Malware payload (Sliver)", "timestamp": 1766302339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302339, "uuid": "91acbda7-f174-4bc6-a9d4-710b1a7bb95d", "comment": "Malware payload (Sliver)", "value": "2ab72487658a6d52e230427fbdb356f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sliver", "colour": "#F89DE2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302339, "uuid": "123fb88b-1104-418a-8780-6b039f384766", "comment": "Malware payload (Sliver)", "value": "971022f5aea46754224a9e59bb44fb5e7ccffbb3090a47707e203f5bed570f73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sliver", "colour": "#F89DE2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302339, "uuid": "5f1be535-f332-4672-81dd-81d1aaf52e3f", "comment": "Malware payload (Sliver)", "value": "03f4af9382c74232c4b3f24d5583856bfe22d9fe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sliver", "colour": "#F89DE2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766302339, "uuid": "09956998-a422-4a60-9612-1e39ceb2ccf0", "comment": "Malware payload (Sliver)", "value": "1c9afbb1b9d11fc56d37e20ca4446ec36341a2de12875125837e70cafd0133f5a9e0976a0cb1cddb0133cc1fc4f67872", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sliver", "colour": "#F89DE2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302339, "uuid": "2a32e5d9-bf2c-4d59-a548-840bd7184e68", "value": "T12DE62A03F8D510D4C4FAD5B489254272BA70786C0B7523DB2BA5F7B42B327E09EBA791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302339, "uuid": "d2b468ad-67a7-4a0e-9800-a4a42f30d3f3", "value": "98304:v8kR99m8S+XN4Mz/ZOtEvsSwNoh3f2FC4jREwtmZa1nC:kkR99XR86sSwoh3X42wz1C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766302339, "uuid": "5fd787f3-8b43-4f6d-bd5f-b9bc893e47c9", "value": 14434304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766302339, "uuid": "da7976f9-ee7f-4536-b62c-1914b10467cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766302339, "uuid": "88e936e3-b467-4077-b4cf-642fc952f00f", "value": "linux", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b20a7f-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345378, "uuid": "9233f2a1-3a2f-4b09-98e6-402ced35d354", "comment": "Malware payload (Mirai)", "value": "43d73dc40ccfebcc13a8b7da2dd4ace1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345378, "uuid": "8b04a463-6815-44c4-b89c-1d732cd068b0", "comment": "Malware payload (Mirai)", "value": "972f77de3af0c2f6f11fd09ad7e5b79c63e867c3579db885a228124dfea5d0d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345378, "uuid": "79c14d8b-8d08-4954-8d63-3067e53a2181", "comment": "Malware payload (Mirai)", "value": "54264bdf2d8ac3694db9830bb4f654fdfda8104c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345378, "uuid": "6cd2a7fa-f3fe-4b10-95c4-46ab5eca1e8d", "comment": "Malware payload (Mirai)", "value": "d6e9c4520a3546f9b29bf99f2ff3b2a84f18c172353970d8cfe026d5482354ac4000cf83d8330822a58f84a59f6c5fab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345378, "uuid": "a5243048-988d-4bf1-b11f-c7c266ea0c1a", "value": "T1A05301771964806AC074CE375B1C8DB2877A42988B7486A7F569B5FF3E41E08F490F2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345378, "uuid": "9e7178f8-2bde-4822-acac-a93065cb0f22", "value": "1536:zoZ/Yzn9l6maZh7RybbM6EwryUxNW78z77SshPFReAQc:cSn9jaBybw6E4yUu707bhPFR5Qc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345378, "uuid": "c27237bb-7c88-4d26-86ea-abb55f5b0158", "value": 63912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345378, "uuid": "ae623747-4ada-4387-a111-2f4344087d3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345378, "uuid": "3840d881-e14f-429c-9b91-cdf5f7f826ee", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee2117bf-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766346469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346469, "uuid": "3c54b7ca-cb8b-405b-b3af-fcfb81512782", "comment": "Malware payload", "value": "46a433345da000da665a8bb997ed5230", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346469, "uuid": "75cf6318-8ea7-4788-bb6c-fa89401028a1", "comment": "Malware payload", "value": "977c60f3e43d31f5018a3332455dcc1a52c358be69ab410752a6d9769f5e668a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346469, "uuid": "d8d16896-61b1-4864-a2e0-8a603b1ffdcf", "comment": "Malware payload", "value": "22ba4deec48bb8a3d473ca996e9f72719d4a37b9", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346469, "uuid": "ff3ab3e3-7718-40b5-bc1c-f74bd7d2ebaa", "comment": "Malware payload", "value": "705d23bc53c6dc82fd4e13f7c98903c444abc42f79e22a281f6f139808f1ab738fa845116e7e807f8e8976c8cb0c135a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346469, "uuid": "155642aa-16f9-4dd8-9c3a-1605802b0c7f", "value": "T1F6516DDB020C5B31961885CEB7F231B4724EE982A6DFD605FA408E2C0FCBD4C7696E51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346469, "uuid": "0bd2c448-f2b7-4afd-91bf-3aa5d92bf115", "value": "48:hnW6V62JMjD5DbiBnfSfuZvWvWcvy5tuCSCbwGA2GWf+ZCtVthM3j/y:xc2JMXRbiBfouZbRbwq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346469, "uuid": "d699fb20-1806-4988-85a4-b0e11ca046a3", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346469, "uuid": "5a6f50af-2751-4e72-b47c-d74b621cb983", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346469, "uuid": "c534bd0f-6a84-45f3-92a6-a65ac6b2fd63", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41528294-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309672, "uuid": "f04fc911-bc88-4186-8612-48579557138a", "comment": "Malware payload (Gafgyt)", "value": "fa6704e113b87f012e08435a3f975c15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309672, "uuid": "de4f889d-b3aa-4e27-ade2-7e2abd26bac1", "comment": "Malware payload (Gafgyt)", "value": "97f711afd0a54227d85c7cd52afd21d0ae41851b7d3a5e379815c5fb091ef691", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309672, "uuid": "cd755222-898c-445a-88f6-690932d44939", "comment": "Malware payload (Gafgyt)", "value": "b646f5c9874b1b26d98f627d36a50038b8761db5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309672, "uuid": "d4bbfd26-c8b3-4729-ac1a-377e72c27419", "comment": "Malware payload (Gafgyt)", "value": "aaf7b6260037bfed77c67f38cd91eb16dbee0321ba55b30971ee322f94a836e1531b514e1cf47bdc5e5de1dc9321bffc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309672, "uuid": "d79fcce6-5fb4-4826-9e78-10632cdbbab1", "value": "T137833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309672, "uuid": "9c10eb20-7c8f-4b23-8486-4cec261bc130", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCodojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JvBQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309672, "uuid": "a5901509-6fb1-436f-a1cc-476a18fc4d93", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309672, "uuid": "cac1a9e1-05f0-4a38-96d0-3edf7bf67dc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309672, "uuid": "441e2a14-a44d-4a92-8fd5-7637337df660", "value": "s-h.4-.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97f9b6b1-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329145, "uuid": "8da5168f-f759-4b5d-8ccd-2836256c0bfe", "comment": "Malware payload (Mirai)", "value": "de12b2d6277ae7244302d6a935e1ee03", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329145, "uuid": "8bec4e71-6e62-4f65-ab4b-cfbeca1ca28a", "comment": "Malware payload (Mirai)", "value": "997fdec9ca58e68e9342fed8c7e8a0879690fac0b7832a9beaa63dc7fd5c9c07", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329145, "uuid": "c6c50c67-a65e-4f2c-8dc1-58ed949b0987", "comment": "Malware payload (Mirai)", "value": "b691320013037638839821edc895db473e9fd517", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329145, "uuid": "12036f10-01aa-4f7c-8d36-3ef18891f876", "comment": "Malware payload (Mirai)", "value": "5a20a3a2dab51aa43dd9428b2834deebaae60899622dc6c0a296e185ad431c1c5eeecb0642c7578e932ce4bb91163923", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329145, "uuid": "f40d374c-4bee-4f8b-99ac-6a317a99755b", "value": "T1FFD02E8F302113B30B8CCF20E4A22C80200993C209B08B28BCDFBC2AB8ED700331CB24", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329145, "uuid": "044a6e69-cfd9-4c97-aa39-b3738c93254f", "value": "3:GRFdVZKaaDSIQ1MVG38dVZKL5KzSIOuIh8dVZKhNIOSIHK+uFfEw8dVZKtFGN3zm:Sd8GMdqLidYNIl5shdQFa0LKiX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329145, "uuid": "d13effb9-32ae-4fa1-8f80-b5c43058cf2b", "value": 249, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329145, "uuid": "ee1a2a2b-dda8-4b63-a9a6-7da800064639", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329145, "uuid": "e6b02d13-490b-4d3a-9833-c89f57afc754", "value": "lil.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2aa1e7f-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335283, "uuid": "b66c2394-08ad-4e73-87f8-ce921f52ac41", "comment": "Malware payload (Mirai)", "value": "d419e49a879af6734c78e968ce8d7e12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335283, "uuid": "173baca3-d897-4a44-a5fa-5cc6c16e0228", "comment": "Malware payload (Mirai)", "value": "998bbff28d0d1b6e09ff03ba6e0ad7c2c043d09e3625d36265a6e827e93bd337", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335283, "uuid": "1c1727cf-c5c1-47cb-94af-c89606915483", "comment": "Malware payload (Mirai)", "value": "002b6a07f238a7bd893c8e39fd4cd21934817b54", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335283, "uuid": "2944df3b-0636-4e20-bef8-784ab06ce4fe", "comment": "Malware payload (Mirai)", "value": "ae5c01a69ae13e9987faaa937c296b70079a17380baa56ae7a27b6b6c38bb61db56353780fd58ec8d8f7a41fb90d121b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335283, "uuid": "1822ad74-f304-4088-b932-270e3d6ac43d", "value": "T151338DA6C5BDEDA8C1544AB87D258F389B73E00086533EFAD644C65A8047EECF1593F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335283, "uuid": "8ee8370b-a85f-4de5-b1c9-340d23242c56", "value": "1536:5aR5ewtQZDt8GdcPs3q/aKlMLEm0DOFCn:5k5eD52P+qiK60CF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335283, "uuid": "b2287ab5-fc32-434a-b262-70344d077274", "value": 51336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335283, "uuid": "e4aac996-3254-4bb2-a64a-bd968b06253d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335283, "uuid": "1c89ed47-d7da-427b-8c02-168cd96bfabb", "value": "Josho.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "718f5571-dec6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766360433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360433, "uuid": "9f6680c8-aa19-4385-8a1c-79ce6757c3fc", "comment": "Malware payload (Mirai)", "value": "993ce97fc26f1b30aa01a294fb45b2d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360433, "uuid": "f4333dbc-319c-4591-a5bf-62a669b825eb", "comment": "Malware payload (Mirai)", "value": "999bf6d1c12c1aa5abfa6727c2f30587751c340b50842e98bcbe4def70784b73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360433, "uuid": "dcb972b9-3495-45dd-8d5c-c0098983e3dc", "comment": "Malware payload (Mirai)", "value": "179eb3c22c13958b37e921d4b40096c0bba51c0d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360433, "uuid": "5519d90a-4a05-4563-a4db-780b0276f746", "comment": "Malware payload (Mirai)", "value": "120b1ae006d4860264beadf5fee30b8dc22473c1bff86eb14e9259e0886a4d239036799a529fa6aa54306bdb9c83508f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360433, "uuid": "a3a85832-4d8f-4bc2-905b-167316af2c89", "value": "T1AA93F996B8918A11C6D452BEFE1E51CD331317B8E2EF73539D146B247B8B82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360433, "uuid": "2d5186f9-03d1-441e-a14a-154453304b82", "value": "1536:dtn/4D/G9jAMGOfEJtCFKIFw25qbUwLIPPOpD+Cn3IT/ysm8rUi3gM7iDPW3uj+n:pjdK2YDl+K3ImsrePW3uj+xT23rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766360433, "uuid": "c27bee05-7a9e-41e1-9899-e844dc4f0ff3", "value": 91708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766360433, "uuid": "6784045a-68bc-4f0d-9ee6-07cb384931dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360433, "uuid": "e0f3f3cd-ca19-40ae-8ad2-e4edc939e6ab", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4efc7a09-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309695, "uuid": "6cb3c439-800a-4886-803c-da806c1f044b", "comment": "Malware payload (Gafgyt)", "value": "49c4ba935e3548f20d9a45138cbf878c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309695, "uuid": "d1db49a5-ab35-46bf-a939-4a8379d5d554", "comment": "Malware payload (Gafgyt)", "value": "9a09d49f0eb8ad4fa8ed9f18a4c08b937d7645e84f686918cb848ffcad62fe78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309695, "uuid": "c87b8741-5fa6-4218-9080-716b8137d0fe", "comment": "Malware payload (Gafgyt)", "value": "41f2e68528d9c8b86137a25b260b65bad0d40fcf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309695, "uuid": "7db7285b-60f9-4eda-806f-f9332c3fbb6e", "comment": "Malware payload (Gafgyt)", "value": "aeb2152534b2aa4556931a705f99652a5f865e0668f985cee1e5275a9fc6f0846862b50163a2e4b30b29acfbedf57e7e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309695, "uuid": "3ab2117e-b498-4f1d-92ac-274c57b2a029", "value": "T164933B0358615F73C0456DB126FB19340B67BE260F4F1E9A752CAAF44B4B8CEB41EBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309695, "uuid": "9ee340de-2581-4918-ac77-be534e07b0df", "value": "1536:Xs5wk8YwcTkzfw/KDbnr1Buvpkkb65xZ/CZ5h8VWI6MihMnhR090jUeQfXm:+JS8iDbuhkz/s5h8VvYMhR090QeQfXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309695, "uuid": "5f27d303-b96f-4b6b-bf2b-09f7221016a6", "value": 95921, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309695, "uuid": "c857557b-a710-494c-bd32-b665238940ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309695, "uuid": "76d1448b-829a-4055-a252-a19efcd350dd", "value": "yakuza.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bafb675c-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330062, "uuid": "13b0e30b-8340-414c-a72b-76730c11cb0a", "comment": "Malware payload (Mirai)", "value": "5c385cfe3f8741808c206b2d3fb9c82c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330062, "uuid": "179095fe-8add-41e3-ade8-e91a211aaa35", "comment": "Malware payload (Mirai)", "value": "9a1d949a6ee536284c6f8fc273c7738594975daf495ca9939660140eb52d9026", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330062, "uuid": "42ddc3e2-a6e0-4ff0-b0f0-dea6b9d12b9b", "comment": "Malware payload (Mirai)", "value": "80425dc0aff931e1362763cfc8b5ef4bdff770dc", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330062, "uuid": "f70ff31f-5764-4fc4-894b-42876a9f5c2a", "comment": "Malware payload (Mirai)", "value": "1548944695a44289cf2f481229a2decfba5c7f205d8bb43e30fdafc080943d209163613dd390d9e457b4ff89abf3d5c0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330062, "uuid": "e45edec8-7d95-4c5a-b66f-e527f4f49399", "value": "T12162525E46226F9CA04DE5797782420CF1D48BD918BF1BB42ED605BE14E21CC733AE29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330062, "uuid": "9d6dcc09-3f37-4110-92fb-218a146b2647", "value": "192:u7wfy5q52aRZ7wfy5q52aR/7wfy5q52aR47wfy5q52aRR7wfy5q52aR+7wfy5q53:4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330062, "uuid": "08656e07-6fce-4db2-a7cf-196bfbf2c1fb", "value": 15749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330062, "uuid": "230b1e2f-72e8-4c66-bc7f-52d81a0384a9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330062, "uuid": "461f73d2-a3cd-4981-b289-1727e73eff43", "value": "bo", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e1ce77b-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340214, "uuid": "c68a34f7-7a0e-42bf-83b6-a2f95cd4fa09", "comment": "Malware payload (Mirai)", "value": "413e2109de194b66c1ca8a580b39399c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340214, "uuid": "d967dae7-6e18-47bb-8cd8-0a6ef708c68d", "comment": "Malware payload (Mirai)", "value": "9aaabd9fe5657b63f74af8a3560db6a700260513f92a88e171f98f8c4cbfeed4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340214, "uuid": "e34ed372-9f06-4490-9598-7d85c408adbf", "comment": "Malware payload (Mirai)", "value": "ce0943f1f04b25e820b41c8a3d182c42dadbea0e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340214, "uuid": "6611f264-697c-476f-98ec-799d166d1b98", "comment": "Malware payload (Mirai)", "value": "3013e253f4dba73909cfe55fce45eabe0549e5472e2558dc9839abaf9bd76591e59260a374ee11c79ee0b1b110f1c866", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340214, "uuid": "0fbdffa3-8792-4890-900e-664d34c43fc8", "value": "T1F693F996B8918A12C6D452BEFA1E51CD331317BCE2EF72539D146F247B8B42B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340214, "uuid": "d766d22c-4e06-4874-bd06-4753c00b6e05", "value": "1536:dtn/eWRtjiXGOgtxJOCFmIKh3qqR69LAPB9pbbCtEYeSoRv2o3IMyiOcRJuBTxh8:V+Gzk3ftzbetEjS8qcRJuBTxhr1rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340214, "uuid": "74c77cd0-cf76-482f-a1df-af490f70ab38", "value": 91708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340214, "uuid": "72fa3e3a-18a1-4a11-8f19-0e35c4ce4687", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340214, "uuid": "7acc9fc7-9628-4fbe-bf7b-34f814a24546", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1538c06-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330073, "uuid": "4e996bfb-05b6-4718-a437-dcec8c82c7b0", "comment": "Malware payload (Mirai)", "value": "c348bdb8ed3f7fe04e1ee8b360e8e8d4", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330073, "uuid": "6be2a38e-150f-4e81-b3cc-c6c0eac12f3f", "comment": "Malware payload (Mirai)", "value": "9ad33dc84704e0d7c3c3ebfec3b9e8645666efd22fc43f23b8d50dc06e6ea235", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330073, "uuid": "cad08419-070b-4492-9dc1-568a2f5d3122", "comment": "Malware payload (Mirai)", "value": "0a52248d0847d0d558e7b9b43e95f49e7b1e37e0", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330073, "uuid": "e5e5608a-2a49-4d8c-90c7-b1aabf6a6c8c", "comment": "Malware payload (Mirai)", "value": "deb9e63a3cca4b5d28c65020ada9cfcf461b079b45005783f47c548ae78d133f9be71402ab7703efd7783a03d81986ab", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330073, "uuid": "c5c0850f-183a-4a30-8f14-2bb935bcf034", "value": "T19FF0D1EF2020FF12C08C2E8F3B99783E48A847C905A79BD86EDD946F14E46A07318D18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330073, "uuid": "40939ea0-04e4-4c36-a353-364cf7b32101", "value": "6:cVbk2FFbYORVxjKZyXIORVQHpZixRVeaLU+9RDZTRVcFGNIvLKHiZBFIhRVcfiDn:cpFlRDQORDRMaLB9DRVNITBORG+Zn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330073, "uuid": "791c9540-0833-4e45-9757-21035f5ef203", "value": 606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330073, "uuid": "edd330c4-3935-4df6-80fe-8b7b1a5a186c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330073, "uuid": "71d9c1c4-a775-425c-a5f7-7aaf94e31e31", "value": "vbn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51cf8b09-de3e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766301969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301969, "uuid": "b2ac7652-ec40-488b-91c6-33bf8dd5548c", "comment": "Malware payload (Mirai)", "value": "e7e52058ef19299a872d16fb087e1263", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301969, "uuid": "f888f605-38e0-4f8c-8b6a-c05cd3986786", "comment": "Malware payload (Mirai)", "value": "9b2a851f233972d421481a79d7be7ac7ee45288b0599ecdb62a6a6f203f44d84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301969, "uuid": "5e3298f9-edba-4c3c-acd5-53366f41a153", "comment": "Malware payload (Mirai)", "value": "8daad84038980cf03511f138d78ea90cee302447", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301969, "uuid": "d36adf55-5a92-4129-8e83-fbe6b2596544", "comment": "Malware payload (Mirai)", "value": "6cbde5a49b5ee47ca601522afacc9771f2100d978f30d105a48d9049f1f28dd4bb68c103a478488a11d82fdc72137e91", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301969, "uuid": "2e1cb2d5-94e6-484e-8436-3ba37315ec00", "value": "T120435CC0A613D8F9E95A46741173F7374732F0F611E9EA63C7A8D933BC81B01DA1A698", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301969, "uuid": "6cbb060e-21e6-419a-8b00-d13064515748", "value": "1536:00D2dhuPhqjxVEuyfFzuafCQyHitKk37Cx2EnpTpGSA/:0W2dhahqjxVlyfFzuafCQqC7e2Yxq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766301969, "uuid": "962e8c23-9b24-4680-90fa-82c6ef49e338", "value": 56528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766301969, "uuid": "b61a692a-7a46-4470-926d-016821b869c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301969, "uuid": "cf54f6ed-8505-4ece-9a2a-94cfe74d9fd7", "value": "sdxkzX_UXA229x.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "974b4ef6-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "611090ee-cc6f-4e8e-8cb6-383a2f4c2b26", "comment": "Malware payload (Mirai)", "value": "57d2c9d355be1eda057481bb8f0c7a28", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "ea981156-6923-4d8b-9d75-8e50a5f8e718", "comment": "Malware payload (Mirai)", "value": "9b8604e737531e8d70070a413933d65310bd356b70991438e3b579cc5384d94e", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "b5b5b4c1-542d-4894-bfec-f185edc945e5", "comment": "Malware payload (Mirai)", "value": "4b886e8272d70361c589474517502658277b5d61", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "875406c9-4ffa-4a80-b86c-eb5d672e6fd8", "comment": "Malware payload (Mirai)", "value": "8aa0837c34571777598de5a2d93e49b08674011997ccccafe1f77bdab68e35a5f79cff77ff4a16703d9c124657e796ac", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "2ce4cdab-fcb3-41dc-861b-b9faf4f48184", "value": "T11E11215E1309A9A590CDE87937D1830CB4804BCD397707595D9A41BD54E06CE73B892A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "fcd7f4d1-1964-472f-9e22-ff3649da13c0", "value": "24:X7NXYa7AHYa7VYa7eYa7vRdYa7WYa7geYa7beYa7GYa73XYa7n9Yy:XeaLaCadaboata8a5aFaLoaay", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330002, "uuid": "b5941de8-f2f3-4081-8ace-1f31714d874a", "value": 996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330002, "uuid": "c9a26ef8-7efa-488c-af79-93cfccc399ae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "41572357-b884-48cd-9b4c-29a526d80bb6", "value": "so", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bc08854-de60-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766316508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316508, "uuid": "61b45676-3e39-4770-b802-71e307efe581", "comment": "Malware payload (QuasarRAT)", "value": "4015b87f2c43d07d778d731280f9ede5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316508, "uuid": "e0b9d3f0-bc9c-41af-b2b2-323f0e5697d8", "comment": "Malware payload (QuasarRAT)", "value": "9b8c87e91f35e1c26bcecc8c4f9a8b4b825d95313927dcbb8b4cab79d99c0d66", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316508, "uuid": "9c569897-1402-4b46-adcf-cfb54c76b537", "comment": "Malware payload (QuasarRAT)", "value": "56c493038efbaf23d63bda8588cb62bb60e5c7f0", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316508, "uuid": "6b13eb4d-bebe-42cf-bdb3-fcb2b1dac17d", "comment": "Malware payload (QuasarRAT)", "value": "cc3845958c5c079c0c0ef0737380525dc04134fcd2d196a043c2d7bd4175f2192db20525b8e300bfeb6780b2c71c0f43", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316508, "uuid": "7e37a1bb-335e-4038-b235-b254a2d1d11c", "value": "T1AE262383B9D460B1F4744B3BE1B7A9D34E367D7F639A255F0680B15119B3282AA33B07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316508, "uuid": "56548f64-2cad-4be2-b0b6-54c53248dc68", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316508, "uuid": "c2874a38-258e-4ca8-a809-b10fe9fb8461", "value": "98304:d90RYWxLkTjZ6EhyPV2OVLXGmjVPp3ScTySUwREOmFV6x:7kYZ6kyfVLZjhFFReD6x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316508, "uuid": "7f9b25e8-958e-4135-b862-e70e10e0ddaa", "value": 4751360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316508, "uuid": "ebc4dc8c-02bf-4668-9c3e-5c6b8c215cc7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316508, "uuid": "0b418e1f-521e-45da-874f-5f705bb111ed", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b405e463-debe-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766357109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766357109, "uuid": "29fa9caa-8778-4fbb-8517-7a3f8dea7a3b", "comment": "Malware payload (QuasarRAT)", "value": "15c98cc90fffdd8c828d5299a5963b23", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766357109, "uuid": "5630ea40-1545-42bf-8c1e-999caa710aca", "comment": "Malware payload (QuasarRAT)", "value": "9baf23c21b67fa1f49ef45097a97fc58c3b0ed73b6262ca450a3859972f1e052", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766357109, "uuid": "e5de7aa3-1fff-413d-873b-162f8f9148b1", "comment": "Malware payload (QuasarRAT)", "value": "c02e79bb3c8e40b20510ef52e8c707742dd166f1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766357109, "uuid": "38534331-525e-48cf-85c8-4de4d808b89e", "comment": "Malware payload (QuasarRAT)", "value": "cc49095e1045f6d3ecc88e748f33c07e18ed776d8724e4c2a31a4882ed7f568dbf716edbb3b6ac194a0a9be66128d48c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766357109, "uuid": "a0e1ffb4-4386-472f-8002-ef3827349f71", "value": "T14956CF8D5961A6AAD57F2BF64CD99702329475053FBABEC7622061741BB31CC083FBE0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766357109, "uuid": "05473b8a-d9ec-44ef-8801-b51a7f2f8507", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766357109, "uuid": "daef5f27-42f6-458d-99d1-52f231096ee5", "value": "49152:6hnU8BQ9hLdBXYVpx7DQeFT9F1rw21ZPMZ/8QV2cpXK89DVyHHmFNyTAxYAWkkJc:6hmAbry8QV2cp9DwnmZPTQYKHsOZ2VP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766357109, "uuid": "f42d2957-275b-4190-a5dc-31989902f5b4", "value": 6111744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766357109, "uuid": "2cd92426-363e-40b8-bd35-7b9803adbee8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766357109, "uuid": "c3e1379d-696c-4fb3-9615-40fc85f94a44", "value": "15c98cc90fffdd8c828d5299a5963b23.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1087a36-de92-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766338206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338206, "uuid": "a7107a93-feaf-4ba9-8e9b-35cc12d3eef9", "comment": "Malware payload (ValleyRAT)", "value": "0dbf71563497f949daf8b6d452fbc752", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338206, "uuid": "e0c62dc9-75f6-4cad-88dd-a648a30ab43d", "comment": "Malware payload (ValleyRAT)", "value": "9be431fedfb3795f38692752c9bb3849c894063f82a46b244470f9fc5e4f0d2f", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338206, "uuid": "ce27c7f5-e8b4-459e-aa09-9428cd956600", "comment": "Malware payload (ValleyRAT)", "value": "d5ada556c408235963ba3a4a06fc3fc23e6d443e", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338206, "uuid": "126c612f-10ab-4046-98c3-f49e1eccaf10", "comment": "Malware payload (ValleyRAT)", "value": "76db11c7d5b4132abf383e8d26cccfaf98761348571a1c09109af86f64cc2be79fb0ef48c8562b8b4595852146120067", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338206, "uuid": "70b4608a-2758-4fad-a76b-e962a1e20311", "value": "T129348D00B4C1C432D5BE15320979DBB65A7DB9300FA5D9EFA7E44D7E8F312C19A30A6A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338206, "uuid": "ce2d48f1-5580-4d3c-8def-147c29ba1ffd", "value": "01ab5e592960df4647bbbfac9c4582f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338206, "uuid": "f02f96f1-47b2-4da3-b524-e21ade8073ab", "value": "6144:AmmkyOAWFCtOoVSA32PHbN+0tNdOKxDr/QrAO2OLA0Ui:Lq2fbWCjQrRA0Ui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338206, "uuid": "ea9ddbf8-d52d-4bbb-a84c-51afe6e93b76", "value": 233984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338206, "uuid": "2c7265e3-bcf7-4506-bd8e-e03caeaa2be0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338206, "uuid": "ecc6e80f-6e71-48f9-ad70-975eb6c87c3d", "value": "0DBF71563497F949DAF8B6D452FBC752.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "607b2ed5-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345372, "uuid": "d415896d-7a61-4ec4-8a7a-8017fa199bda", "comment": "Malware payload (Mirai)", "value": "f030a13c8f2fd7e98950c1eaa01bb77b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345372, "uuid": "37f4762f-7d40-4741-abde-6afbf036b202", "comment": "Malware payload (Mirai)", "value": "9c0d7b49f15c662aa1a0188f61bfd914b5ea1728198b4355a8d99ba6cc934d42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345372, "uuid": "624195bf-4baa-488b-865a-53acdfcf7ef6", "comment": "Malware payload (Mirai)", "value": "dfdd5084cf89667eb95dd692cb97f606136d9d5e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345372, "uuid": "3b0f7bc9-9efb-480e-b654-5e7518b87e87", "comment": "Malware payload (Mirai)", "value": "50afce7bf800a0700d4e9f15971744d0c072c5f44807a7c1f7fddc0a8b470d177c625ba866a8f4c9728a32779164177f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345372, "uuid": "4ea34acf-e830-4240-9576-3289c07037c8", "value": "T120B3AF87B1907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345372, "uuid": "fbf4ea95-dbf4-4b46-aebc-983dec4cce97", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzY8rSR:t3SrlGWnKTU83AQB5A5Liy36f8USR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345372, "uuid": "721277b0-8020-496c-85a8-6ffe4b8bfd4d", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345372, "uuid": "6c64daa0-3e6d-4463-be99-221d6d65963a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345372, "uuid": "1f60e29c-787c-4e1d-88b4-5d943aa6e3c7", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9d5d21a-de92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338248, "uuid": "530c6cba-b372-40af-a3f7-cfdafa3f1222", "comment": "Malware payload (Mirai)", "value": "1c2831f0861f94dc5f78aa75da6831e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338248, "uuid": "fef01e65-e853-4545-a1e4-b25a651f6aff", "comment": "Malware payload (Mirai)", "value": "9c639b692652a7b605d32d1009e34df0fc71c2da23c8f1ae324b5fa056308a7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338248, "uuid": "36b68187-4713-4f30-844f-eb8312082b78", "comment": "Malware payload (Mirai)", "value": "28c4449e34976a18553a293d1ad7cf30384bfce1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338248, "uuid": "e469788f-beb5-4d68-b5fc-952007893d26", "comment": "Malware payload (Mirai)", "value": "ed9c7abd841e0d87195af8586843cb237157771b32c66507feb058b362289f00a0af3b44f75353c0c9a8ed3f869cf070", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338248, "uuid": "286d958c-6dc4-45a1-b798-97469483f028", "value": "T10783D75AB9828503D4D812BBBA1E119D33173768F2EE3312CD305B24778AB6B0F77A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338248, "uuid": "8eb8d8ba-efb0-4550-9060-77dee9542d31", "value": "1536:gdnk5Yi96SyOmgLvxcmUvA17BMjabK9nzdqJL+IGi2nm8ViAeY:F5l6vbvA17BSXm8ViA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338248, "uuid": "828fef13-95df-43d1-af58-71fbccc18dde", "value": 81992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338248, "uuid": "f0d3e1c7-e936-4492-821c-4d4067635611", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338248, "uuid": "47a14e39-9ac5-4cde-8888-a07cda86088a", "value": "shadow.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7b170d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309504, "uuid": "c958c9fc-27c2-4634-b9a3-a8c22342f653", "comment": "Malware payload (Mirai)", "value": "713f3937fbb087749c6ae02272706028", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309504, "uuid": "57064994-a9ae-4c20-8dcf-07647a9b5dd7", "comment": "Malware payload (Mirai)", "value": "9d10ec7f532efb3e6df52e360029c58516b1e87e94368e2c551b8eb6cd31f940", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309504, "uuid": "55da1231-e987-437d-bc25-cf5d51b5a77f", "comment": "Malware payload (Mirai)", "value": "be7d0a0e124d08b916a51c6a2d4a0fbc26e23b97", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309504, "uuid": "94f8f340-b5cf-4783-844b-cd611b4a55ed", "comment": "Malware payload (Mirai)", "value": "bf67ddc3c88cf1faa3725fec8f7312a4fe60c6982407d471fd57861a5e61cee1924823f85332449cb9af5f520d930303", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309504, "uuid": "9ff080f5-543e-45a1-abd1-035e3a502def", "value": "T16EA34D12722C0A47E59309B0263F5BE083FFE99024F4BA89684FDB458675E772586FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309504, "uuid": "90cf28dc-1cfa-4bcc-a009-73ca6a5bd9d5", "value": "1536:4ZsXiJyCEFE4NmCjrdKMhlkyYhgsgCutbMROD1II2GKnWcWG:4ZRmrdjSgs0GRI1I3GRG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309504, "uuid": "765b5e11-25e8-4e2c-8ca7-4b28a405b53d", "value": 104468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309504, "uuid": "d1f7dc24-f7aa-4ccb-9976-2be8100bdc63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309504, "uuid": "f9242bbb-7565-4e3d-850e-c1b08138e35e", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ec343a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329752, "uuid": "58d12798-506d-4db5-8002-f2b4bdd0175b", "comment": "Malware payload (Mirai)", "value": "803ae9c7996334a4a70d838127229b52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329752, "uuid": "2475e23d-656f-4eef-8e6d-de1646c7947b", "comment": "Malware payload (Mirai)", "value": "9d611bb65ce0e8c230bd0b55e0a15c998b45d667f8347f4543ef9e20a173d843", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329752, "uuid": "5478725a-e9cf-4953-9d3a-981f284170a8", "comment": "Malware payload (Mirai)", "value": "531b4a189679eaba1a3b031c6b08617514a1b3d3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329752, "uuid": "10c4de2e-e8a2-4a4b-ad03-796a87481d6c", "comment": "Malware payload (Mirai)", "value": "2ad16ba787b838d2861bf5bd7afd02f34ce70d2f99835f9ec858c777ffe67eafaffd12eb9c131a6a55dacb809d7b5e3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329752, "uuid": "0c9c50c3-d5c5-4524-b005-b2262aeca006", "value": "T112737C2279762D27C4C4B47F61F30735F2F62B4A65A8C66A7EB20D4EFF145002507ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329752, "uuid": "210c35a1-aaf6-4883-b275-b8c538e78c0b", "value": "1536:G0YQSOZbMHoG6lg5fcvT9UVWAQHjOWqZ1K46jtF+zH7uhP:G5FNIGEvT964qZEHuzHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329752, "uuid": "4729abad-42e9-4e3f-b9d6-16cf75f572b2", "value": 78404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329752, "uuid": "06ef1b41-bc49-4e54-8f73-ef30f2751f52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329752, "uuid": "a44c0573-23b3-4b88-87ed-eb44d084cf2f", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ae68545-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309688, "uuid": "4a95f4b7-16a5-4b91-a0f7-a6c1745889a8", "comment": "Malware payload (Gafgyt)", "value": "fc98a8c5e7ac966360edbe683a2cf403", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309688, "uuid": "aa1b6bf1-3b05-41df-a99c-e7e8d373cfd5", "comment": "Malware payload (Gafgyt)", "value": "9dab8fd9e5e9db87ac44e229f53cb9a139744851ab353820dac64f2a5550fc3c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309688, "uuid": "64299523-7daf-4d6d-a6e9-dba3c79ef9da", "comment": "Malware payload (Gafgyt)", "value": "eaaf387ec77857636ac43fe3104c5c2e97c4c0d1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309688, "uuid": "74981bd0-cd4d-4ae9-ba29-5af701d708d2", "comment": "Malware payload (Gafgyt)", "value": "c4b69f1363682b4226c564032ea66df805dbcc211b697e929429b700ee12bc2b9909e226d9e64119daa1ca95e6dfaa22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309688, "uuid": "6a750b59-bbd8-461d-b730-7a5c7252af32", "value": "T11DB30905FC404B23C7D267BBF79A838D773666586BD7331166296EF02BC17982E3A160", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309688, "uuid": "a9e24eb8-7b06-4ffa-a288-c18e61a07865", "value": "3072:9qDUOulvQ+nozmrCyZc5oSlxw5h8ab49OSb/Z7HoDQHDVpZAlvm:3ZcFvw5h8abe7HoDQHDVpZAlvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309688, "uuid": "970d9f30-ad84-4d9f-bda4-87ea99b18ff9", "value": 109454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309688, "uuid": "c1ab0d2a-468c-426c-8f47-c91cfdd2f9bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309688, "uuid": "1c0baa05-9efa-47f7-b8a2-efab54e12d72", "value": "yakuza.arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c964e81-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347862, "uuid": "46cad775-d253-44fb-82b1-3531dad13f99", "comment": "Malware payload (Mirai)", "value": "6ecdef979d6646311ba91ac80959297c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347862, "uuid": "d3e9bd22-1a75-4294-b75f-90b2794e9296", "comment": "Malware payload (Mirai)", "value": "9db3f006600a7d2c23b059c285f6e4d4bcef41199a6fdbd986d63b30376c7d47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347862, "uuid": "90afa352-11c4-40c8-bf09-9dad43db172a", "comment": "Malware payload (Mirai)", "value": "48be2e7c8ae15487e0e142915af48b4d9b5273f7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347862, "uuid": "e23eff2d-9422-47dc-840f-761f297db4b2", "comment": "Malware payload (Mirai)", "value": "6e83cbdac092986f007d137a56154d02c9a3125c9f4da642a46c184774278debec17a60c52ebd3bda3b6dc8a35b92dde", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347862, "uuid": "571201bc-1e19-4640-8a21-67ca1d51e392", "value": "T18183951B7FA01EF3E89FEC37499E2B45149D681A244D6F71B930E904B74E24E25E39B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347862, "uuid": "36732e94-e46a-4598-8dd9-13ddb3458be5", "value": "1536:osR7sJpI6ztijPb/ecTFu5f/fLZI+DKyoYy:onJpIAtCPb/eca/fL+WKOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347862, "uuid": "5b022dff-46ee-4d8c-bf7f-7e775dd12115", "value": 87640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347862, "uuid": "b494736c-aba5-4cec-9527-01b032c9bdac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347862, "uuid": "9abe7771-8635-4309-9b7f-341b80e2d2ec", "value": "Fantazy.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba09faf-de7a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766327862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327862, "uuid": "43eb6dd4-c4e0-40bb-8239-fd2a91543d6e", "comment": "Malware payload", "value": "3f6c8cdc57019dc5ac29c5909b2d9568", "object_relation": "md5", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327862, "uuid": "b4507dc9-ff7f-4474-87ae-7d5e98550c71", "comment": "Malware payload", "value": "9dc97c9b5690553c94ad64ba99eb2fd16f21b8e804740cb622eb3a772e9c76c6", "object_relation": "sha256", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327862, "uuid": "2735ae51-180b-4114-8e80-185c3fb26c52", "comment": "Malware payload", "value": "6a5afaf884f2033104ab862e2e8ff0be3e3e1684", "object_relation": "sha1", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327862, "uuid": "bc4bf825-d8d1-47ff-849d-9f36485d1aaf", "comment": "Malware payload", "value": "72e597b3064f9c2e09808a9f443bb210ac26b08a3670607f42d193daa76e34db2be6822eb494ec909f8e4073f3fc4f25", "object_relation": "sha3-384", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327862, "uuid": "023b0f75-6cb8-45e1-ade6-defe027cd5d7", "value": "T1F5A7330D14B1EDCE378161795A8DF83BEABE11CBF2566EB3D058524B21C992D3216F23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327862, "uuid": "7c7cc56e-93e5-47b5-9799-3760823566a3", "value": "786432:udJmsRsdZZCjcm9uoP5agLrT11Mo0pgdcqbRA4fUd41r3Q2Jp604gLeY9v0uIYCd:ujmsSocOuoP5aUP0poNf2OgA5H98/ecL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766327862, "uuid": "10b32799-3942-4c96-9bae-b0689ecff474", "value": 46622352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766327862, "uuid": "651c8366-9918-45e1-8da0-9df499732532", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327862, "uuid": "3aa289a8-9669-4b72-9c82-2e592910cce7", "value": "ZelunaV10.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89ee1981-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329121, "uuid": "d22136b1-670e-4a8d-8b6d-dcdd3e484ce2", "comment": "Malware payload (Mirai)", "value": "9c6804ee692c20f379abec70a6331507", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329121, "uuid": "15a3b44d-4c88-4480-ac11-903af3bda62d", "comment": "Malware payload (Mirai)", "value": "9e3ff6dc222dcf4614389fbeaa0c4c30ec0f4166067fb80bf76f6453f7cf6296", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329121, "uuid": "368d2d6a-538b-496f-a97c-75667b0efe0f", "comment": "Malware payload (Mirai)", "value": "7cb380092c1c99f53d094b48088a142f37864b0d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329121, "uuid": "d47aada8-af96-4227-a5d3-d3dda7c0b004", "comment": "Malware payload (Mirai)", "value": "7348e00245d8d4a4638e6ac6f2b1bfe548c81274b5204003f18b4b3c2a21297e0e78bba9dd4953b59b4793edbbbbaa1a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329121, "uuid": "83123412-bcad-4020-a6d9-e6c82c44b206", "value": "T1F6734AC59753ECF6F815053525BBE7375E71F43A1028EA83E794F932B843221AA4A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329121, "uuid": "36424966-3de9-4e20-bc48-379e80ae4037", "value": "1536:PPuYcd39acwUxtY3kzPeHgR6eDYg/OQa5jx/8ExsRR:XuP3A5UtY3vHcDp/RGl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329121, "uuid": "35a74650-15de-43d8-9b47-2ed574b7362b", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329121, "uuid": "d45d6cb2-b7a5-452e-be70-a989254b1d7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329121, "uuid": "106aac67-e4c1-48de-901f-bb07215974fc", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09658441-dea4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345656, "uuid": "1186ee8d-6b5e-456e-a112-2d343e42240e", "comment": "Malware payload (Mirai)", "value": "95a10ca3d1a9ebb8911ec0d3ac4bf4ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345656, "uuid": "3ad292d4-2d3a-4a78-b760-fd01ba4075e4", "comment": "Malware payload (Mirai)", "value": "9e78ad096c52d7db0be0fb655c0bca8bfd7f41d7785dd2bc2590c9847e07ad0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345656, "uuid": "d8f10c20-2bda-4e31-b903-98a294bb9aca", "comment": "Malware payload (Mirai)", "value": "24055fa15d695a9375885c3c5ae8db58ea791994", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345656, "uuid": "c824b817-29e7-4d45-b727-25217743956b", "comment": "Malware payload (Mirai)", "value": "359827eb23a3e4597dfde2fea48541ac0aeb34ff98b201cd93da631c5819a63917b4f63a61ff4bf3c90ad20475f7d50d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345656, "uuid": "d309a19f-9a61-48da-a3ec-65e5a5e496bf", "value": "T12D935B21B97A2E1BC0C4747B51F30735F2F7274A21ACCA1A7D720E8DBF156102557ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345656, "uuid": "74dd15ce-2590-4ceb-9e7b-e3fae22686a3", "value": "1536:I+X9xScBoZQfKekrtSZea2VWc7HRw+fzJC9UH1bNltP08zm7uhq:ZtI4ieNzExfzJkUhm8zm1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345656, "uuid": "1d22d4e1-f643-4977-a787-23e7b4c33e71", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345656, "uuid": "c694156c-5886-4c65-a585-3e06a200a165", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345656, "uuid": "e873baee-c5c9-42b5-8591-0f489f8ff0df", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2a62c6-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345370, "uuid": "735fd6ee-e5ef-4cb0-953b-6b6c6504defa", "comment": "Malware payload (Mirai)", "value": "d2dee82998bf5f3a6728ecf3db69f34e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345370, "uuid": "0f4da3c5-c850-4021-85c9-39f151b360e5", "comment": "Malware payload (Mirai)", "value": "9e8adab6e6244deed9ebfe23879fbaf17cb50f6a6b6d5234cac6117f83addd2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345370, "uuid": "f3ef8ed5-d87b-4f88-8cfe-afd0be577559", "comment": "Malware payload (Mirai)", "value": "791f080d9494b273e33f7edfac9f1dde6af63393", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345370, "uuid": "9eb32117-e2cc-4894-8858-9b76684d5d7d", "comment": "Malware payload (Mirai)", "value": "2a9e5d0a29d2100069399ca2d6039126bd4cca77feb222df0828ac64d1bfb2163200ba4928ac22e689aa4e533969f16b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345370, "uuid": "bd05052c-b6e9-46e8-b781-1d154a4fd7fc", "value": "T17C5302F664E4BECDD15A4774060B0A033EC56A786099A93AB2C1F5994BF2340CFD8BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345370, "uuid": "ce28a5fd-8485-484b-87da-b9b205045582", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASA5Lkg4azHp:CM5az1Fy0oPgdZX6hTo8RKLGazHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345370, "uuid": "3596e5a3-7ad1-43b3-a731-a3096c868d41", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345370, "uuid": "626c25b3-662e-4936-8e1e-8ab2ccc18e23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345370, "uuid": "8aeaa73d-127b-4f6a-931a-86867753cfc0", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fe98542-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329131, "uuid": "f55595d4-3d1c-4e5d-af82-3331061add25", "comment": "Malware payload (Mirai)", "value": "a4a3e23ecd7ed22976b34897a5dda6c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329131, "uuid": "ae24fc9b-0c9b-4828-8cf7-1067aae53e8e", "comment": "Malware payload (Mirai)", "value": "9ea26b39278b366c232382ac7c49d62bd2887e6f2228784174cab4b93c3379c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329131, "uuid": "e5df9495-3649-45b6-a966-0faf286c5e27", "comment": "Malware payload (Mirai)", "value": "996bd82e4f2d7a6d5e9db4f6830be433a4d15151", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329131, "uuid": "3ab2a854-b221-4dfa-a746-ce0a52122d2a", "comment": "Malware payload (Mirai)", "value": "54c60ac900a383ce206614041113b7c761cf63821660ea365eb6f8d214fd4c7fcb1511b286b30719584fa1b6f25064f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329131, "uuid": "96e1dcac-6085-4bbb-a8d2-2cd892642bd6", "value": "T127833C87E000CDBDFD4AE6B684570B00B528B3515FD20F27F66AFE9769710989D29E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329131, "uuid": "46cee01b-10a2-4e0b-aadf-2556f7fe7157", "value": "1536:cluMPcHKhsNEdPkSV3Ubyrntm4hxFb8Q1OqMRkXnH2V/IrzIOB/tTP4:cluMHCNES+Osntm4RlOoXnWV/IrltW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329131, "uuid": "e1ce7293-ab77-4e0c-85fe-04ef17cff56a", "value": 83040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329131, "uuid": "76f22f73-dac1-4a17-bac7-8188cbdf4c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329131, "uuid": "4a477fd4-34d7-43cb-80d5-8145e13ba361", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fcb2408-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344378, "uuid": "b2d5b5f9-da0d-44ea-9b6a-755296139382", "comment": "Malware payload (Mirai)", "value": "efde709bf8df5bd18ba885688589d1d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344378, "uuid": "f13829bc-b70d-4878-8c30-e36eb5639781", "comment": "Malware payload (Mirai)", "value": "9eaaf1a37efcfb3d96f775bff25d7927d3f7ec5b11eeca2829246031c24c3cc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344378, "uuid": "3ea83717-ce47-41d1-9cdf-9c754f1bdc88", "comment": "Malware payload (Mirai)", "value": "38b8564092f1129ff2717e4f8d81297d700171fe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344378, "uuid": "6824a64f-0fe8-4fe5-9b07-3b5ba481a02b", "comment": "Malware payload (Mirai)", "value": "df0187d4aced149ad888202997a366e7870f6ef789c29f0e7521c792325263ed132ed69c10dab44a8f5bac26633f1a6c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344378, "uuid": "c5d23778-f873-498b-8330-b08158ac8e63", "value": "T135936CC4F583D5F5EC5305B1117BEB375B32E0BA2125EB43C3699A32AC91641EA0AF9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344378, "uuid": "83eb85ec-476a-469e-a0da-9d679690ed0b", "value": "1536:inESXkVv89d2s9crGtFy8oI6Ei7CDZMxVyyQ7mz9S5FfaJYW:inESXkVv8n9CqtFyFIPPFI7QKz05FiJL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344378, "uuid": "aee31970-f353-46f3-bb6e-26856432e715", "value": 92296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344378, "uuid": "6969edfb-3872-42c5-bd95-201f26606f9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344378, "uuid": "97050300-ff60-40f2-b96c-4553a36d65a1", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "008a36b9-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329749, "uuid": "1ca70649-1eff-4164-b04d-0035c7caeadd", "comment": "Malware payload (Mirai)", "value": "61934560e5368772c3b9527cfa3a967d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329749, "uuid": "88869efc-930f-4ac5-85ef-45449050e974", "comment": "Malware payload (Mirai)", "value": "9ece4b8efcb09a4e445fdb019469098c80ca027f6fdcaac320e90d1d2d156d0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329749, "uuid": "dc9d5646-5e68-468d-a7b2-ebe313674fc3", "comment": "Malware payload (Mirai)", "value": "4b1ecd1dc18b6f0312740b3e06e9abf66790e734", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329749, "uuid": "f984db3b-2667-49a1-ab13-c45651c199ec", "comment": "Malware payload (Mirai)", "value": "455d4385b1527eee640dc9ed5d3259a277e3060f43d71a55e43733e8d87f98ceb7aa943a1436bc5c35065edc560e6e26", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329749, "uuid": "4668277b-2959-48f6-ba3e-0ee15e60b932", "value": "T1CE5319C7E400EC7DF949E772C9474E01B134B7698E420B63B7A2F963ED710D5A829E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329749, "uuid": "213c6930-9914-40cf-bce8-390f54a6034a", "value": "1536:PE8apt8S3cEs8rNQdL8F8QSg+3p8ALsZm6RvhP9tTPpz:PE77Xs8rNQR2dAAZm6RZlfz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329749, "uuid": "91ed42d0-b10d-4870-91d9-2d951b07f6ba", "value": 64212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329749, "uuid": "5883c1b6-277a-4c32-9e34-3f6783f64728", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329749, "uuid": "77b1c4d7-a7b7-46a1-bc0e-c5e625623a0c", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88471c86-dea8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347587, "uuid": "38cf9692-210c-43d9-90e9-7b6d736b02db", "comment": "Malware payload (Mirai)", "value": "9b50827d07a26de2bb2ba6d73e7c452b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347587, "uuid": "c4fc3769-2824-4812-8ac3-29058bc19c48", "comment": "Malware payload (Mirai)", "value": "a048e460c3370828d116a2e808de639408a83beddff82fffb26b35e6c9b0bbe7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347587, "uuid": "3908f747-551e-4fd1-8e41-80e1e28fe48c", "comment": "Malware payload (Mirai)", "value": "46967eb7cb3b2b1c9c4b08f8c77372d2f1d60ca4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347587, "uuid": "e9e87ba4-25c5-402c-980c-7edd3205a65a", "comment": "Malware payload (Mirai)", "value": "894d52d652c013da2799d72f75d8465293b5761abee39a7ecaf314204873630b4bf25f365d35e31984e9756d5a821b3b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347587, "uuid": "1f8dc3bf-95e5-4dbf-9a5f-11e6f154eab2", "value": "T1F763E896F981DB21C6C5A2BAFE1E51CD33130778E2EE73139E146B24678B46B0E7E405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347587, "uuid": "7e801c29-07f8-48b8-b5ea-d80d6ec33b04", "value": "1536:7hnR59qbUW/Skiuo7Zd0UTx7D19a5S3qMoi4Zecuz0wm7fxYZT2bVR:b5sAzkiumZd0elD+Zecuz0wmrxST2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347587, "uuid": "ff2ae2ca-a225-49ee-ba01-da00f309eae1", "value": 70824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347587, "uuid": "35a2f97c-9fc4-41db-a48b-928ed16a0663", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347587, "uuid": "06d96c17-0d34-43c3-9a7d-d026b6f81260", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9a4a766-de34-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297901, "uuid": "fb40244b-45ec-428c-8bcf-68651f39d42d", "comment": "Malware payload (Mirai)", "value": "5aca70227e962873b0c4fbc34194cdc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297901, "uuid": "998a870d-bed7-457c-a112-e13f5c0ae712", "comment": "Malware payload (Mirai)", "value": "a04ede576aa16c227ad500289a8c66fdd19fdbff2697ece9a24705418b42b9e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297901, "uuid": "f8e711b6-bb92-42f1-abfb-f507825d6055", "comment": "Malware payload (Mirai)", "value": "9872623bd726a08fc8beabcc04ec2bb3dbe12bcf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297901, "uuid": "f162b447-6f4b-49c7-9d2b-6451ed308a76", "comment": "Malware payload (Mirai)", "value": "4614d8e56c4773950fd17a099f9b07208de5805954b1efc982061788aec396dbdfe5c878c3e6b9962ddd840903b7496b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297901, "uuid": "99673eab-50d9-4aca-bbf4-78b6626ff611", "value": "T1D0E3940E2E394F2DF779C239C7F74A209A6973C226D1C649D26CF9121E6034D641FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297901, "uuid": "1ba734f9-2152-4a83-acc9-25f8938652d8", "value": "3072:o8TZP1TfMedRCoPBytK+r44TN8YykI3P2iAHYueBYGkeII5MlwaVcHDW085Ff1+2:o8TZP17ZSo2r44bY4gnuV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297901, "uuid": "57f37507-7689-4cd0-bf3c-f3e6b621dc9b", "value": 156484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297901, "uuid": "be37982c-7b24-453b-9483-1cc9fcc8497e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297901, "uuid": "67760ddf-6467-4ee5-b98e-55d3bf6e91d7", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "277ea37f-de9d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342700, "uuid": "c3d73271-37e0-46bb-b1c9-666b4ed72861", "comment": "Malware payload (Mirai)", "value": "6f10b0a61f3ee3229643b3724bad51d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342700, "uuid": "c58c041d-894e-4c14-8d82-341e7d8c1f32", "comment": "Malware payload (Mirai)", "value": "a0a119f5dc06e6d7ca2bd54f22eebdc5285e67d6c72adf11ac51f316d63ad55c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342700, "uuid": "b9bb0144-0bf3-4990-a51f-96c2132d0863", "comment": "Malware payload (Mirai)", "value": "17cbce5b2586d55992aa614d5a248539bcb65b89", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342700, "uuid": "7933b7e2-a8f0-4eda-b3cd-3b8736267f70", "comment": "Malware payload (Mirai)", "value": "89e245d668f6b2f501087ac035ab5d9c3e8ef177d349a5ce3201ef905a0a129df960f6adb5814035f12eb1515396da17", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342700, "uuid": "6721f952-5c8c-4705-89d4-ef033a5aafa5", "value": "T10FA37DD9E243D8F2E85705B06036E737AA32E07A2119FA47D37C9A31FCD1941E617A9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342700, "uuid": "9407c762-51e9-4e9c-b861-1fadc50bab91", "value": "3072:jfqVnVqdY0JM3qi5v1V3DpuIwx2zvv/8GQfgt02TuLYJH:jfanVwY0JM3T5vL3dEaK2Tu0JH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342700, "uuid": "d9d3b315-9b76-442e-8d2c-d180cbb37460", "value": 104584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342700, "uuid": "c98e9c7d-74ad-403e-93d2-723d712e6aae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342700, "uuid": "49eff577-2677-4ed4-9caa-69fd0b832f5b", "value": "debug.dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "964c55ea-dea6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766346751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346751, "uuid": "4f638558-ebe9-4b3f-93da-e2568fbd82eb", "comment": "Malware payload (Mirai)", "value": "4786e954fee342b2cc01165ccdb93d61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346751, "uuid": "4a77f100-6ef1-4620-83c5-545d8a9dbc5e", "comment": "Malware payload (Mirai)", "value": "a0e4250999f15f0e2b350356427102f0d5c8c4f28ebdaa83bb13eefe80d0d460", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346751, "uuid": "fc4991ab-a57a-442f-a36b-9b54e216adcf", "comment": "Malware payload (Mirai)", "value": "b98deec395451e2155a1a7bbdc2791d3659420a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346751, "uuid": "cf3f8687-ba35-404b-95f7-879f97a56850", "comment": "Malware payload (Mirai)", "value": "869b3754c421a215ab1628e81d0141819d77b8733767c5600f30babd3df502eb5ede093057bce3d437d77bcbc85648e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346751, "uuid": "a1bc44cd-77a0-4f72-b45d-6f5b11620471", "value": "T14C83A41E7E719FADF66CC63183B74A20E75423D622F0D685D26CE9045E7034D682FB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346751, "uuid": "0f64b727-5741-48a3-8fd2-7d98588cf94b", "value": "1536:BwUKvfOjZnOgJPvgYNVBQ0o5aB3iBVriBBTA/ykBrCxD+YrOT2bVR/:+cZPvgYNVBQPFvC3rOT2H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346751, "uuid": "7758f65e-27c8-48e7-8330-3dee5f5f7d41", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346751, "uuid": "ee2d39be-fce8-4a45-979e-4fab01779b66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346751, "uuid": "ce10bfe5-12e7-40a3-a3cb-784c91b300e2", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6116ed95-de3c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766301135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301135, "uuid": "7304f2d3-ce00-45f1-bd02-775c3359be1c", "comment": "Malware payload", "value": "23782e9634682df1c6bafbfb1638fe8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301135, "uuid": "706cfdbe-e011-47b1-9fe1-9ff615b521e8", "comment": "Malware payload", "value": "a16ca63d5027bd0c74dccf7982d323f167ad3595cac26cd6b24d3bd49f6fcf63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301135, "uuid": "0f503518-11a1-4b0d-8bb3-371f75545aa8", "comment": "Malware payload", "value": "7f82ae26c057bbea44166c2caa4cca014866f187", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766301135, "uuid": "fa95633a-56f2-457d-b847-dfa431818c2d", "comment": "Malware payload", "value": "aa7a5e8be57a2a37755d20544c9ecade14af8181ede2400f49f4245e20db76b7cfc0942a2b6c695df6270afd3f561abe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301135, "uuid": "015df184-03bc-4710-960a-22692cfe679f", "value": "T153B36B43FA83C0B1C2AD42F311765B3B4631E47251558C02DBFCBA76AC6A942EB6676C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301135, "uuid": "3a1de920-43a1-40ef-b7fe-c13f4744e58d", "value": "3072:3F5LsITodhc1rOtgqP4UUQDx76xTN4ojoU44JJB9QBBBBBBBBBBBBBthrIey:PLjoE16gw1AN4K44JJB9QBBBBBBBBBBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766301135, "uuid": "11991146-7dcc-4e1e-a6e5-fa19ac63f91f", "value": 112844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766301135, "uuid": "ea7a9d02-a9e4-448d-bc69-d7a1130b3282", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766301135, "uuid": "e157bb93-c02e-4a10-8f3c-34086c0836fd", "value": "rondo.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbac06bc-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330090, "uuid": "787989aa-5689-4ddd-b7c2-12cd55eabdbc", "comment": "Malware payload (Mirai)", "value": "7747959dd1b8b3934419cf4cfc97d94a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330090, "uuid": "c93870fe-b411-4cd6-a51c-e78be89d9b81", "comment": "Malware payload (Mirai)", "value": "a1e1cccd0057b9d1ee9e971bb87d7c502656cc0292574b1b526dd8c3e63f0bde", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330090, "uuid": "a788947a-815b-4c27-80cc-4cc40f599916", "comment": "Malware payload (Mirai)", "value": "7bfe4464b74733fe43f9bc2b311a0b0bbae27d05", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330090, "uuid": "0555aa0d-256b-4158-af94-512cfe4c0e44", "comment": "Malware payload (Mirai)", "value": "dc3191b1c0ab19f439249f6027d346d1627e7b16a6abea79144a92277399e425385144fa7b75f676df6db220053e1384", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330090, "uuid": "26f94d2c-5f7a-448e-9f88-105a07867ac2", "value": "T1E7E06D8E0302580B111F8D7036B2578430A0F74D2466399C7CC2903BD0C0610E7A8A3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330090, "uuid": "53119d7f-e0cb-4f39-8021-ce26ed8f9ce7", "value": "6:L6m9AW1rJBV6mwAmL1BV6mueATT23BV6mWA5K1AfXFfX6fXu9SfXf:em9AW1r74mwAmL/4mPAq4mWA4EdMvf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330090, "uuid": "3b26a3e5-5626-49e2-9eb0-ac9d79bac8a2", "value": 389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330090, "uuid": "f8c25411-de3e-4f78-bb79-b5e7e86fd956", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330090, "uuid": "9a1a1886-7d00-472c-ba7b-4598e0092992", "value": "poco", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8613eebe-dea0-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766344147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344147, "uuid": "7cb89ccd-4c8a-492b-b4fc-aca8eaa20358", "comment": "Malware payload", "value": "c49c5590ac84b97dc228c0db2ccbfdc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344147, "uuid": "ae35a6ba-caf4-41f2-bf21-26606ce82c21", "comment": "Malware payload", "value": "a2108a9b9b291ddd8d11d06e39d4543e57def83ccd1641bb29484615ce622c36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344147, "uuid": "91e0e207-39a5-473c-93a5-cbf0d694870a", "comment": "Malware payload", "value": "58696a849d87562dc295ffa57f2e65f52b8cb6fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344147, "uuid": "08f070e2-f24d-4584-abaa-f4b32b5aba69", "comment": "Malware payload", "value": "167820a67b97e2b27af2626c4d1fd253bc915845c607d344a94072f3b1f7eeac320e082c22fd585c26f0ae756e6cc05c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344147, "uuid": "2b101de3-7223-4a78-af64-7d2072ea61e6", "value": "T15DB3D81A3A619BFDF55A833487B38771A6D4269127D0C389E25CDA181E303CE9D0F7E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344147, "uuid": "d20e73dd-ae78-4a80-a18d-21540dc1b5fb", "value": "1536:ao3HjDP7SzU7hOHNfTbPZelDncaLAnwKKA9GsPgXfMc1:ao3DDPiSalbhWncjm1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344147, "uuid": "fc1d62d2-7f09-4d0f-b18a-5050efd28c45", "value": 108720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344147, "uuid": "4d4778ca-758a-4eb8-98ca-bb5329c90f73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344147, "uuid": "3c56f735-94fc-442f-af17-8566cc5ae534", "value": "b2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1193f666-de0b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766279956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279956, "uuid": "9d91627f-eaba-424e-98e9-85eab0ff9952", "comment": "Malware payload (Mirai)", "value": "ba5b052363943ff9ad2db9ba6335f87f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279956, "uuid": "cd377852-4e1d-450b-92b6-316e9e3e3a4f", "comment": "Malware payload (Mirai)", "value": "a2694bc3ee8c763bf6a279112136c90da6cdc75f0cc23837de5e78460f8175e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279956, "uuid": "33411205-78d9-4b2d-aff8-9c516a4aefbb", "comment": "Malware payload (Mirai)", "value": "7ee5dfbda9e559337b204c30f2bb0a58c23a92ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766279956, "uuid": "d8ccf6b9-d95c-4f4f-9348-2461f9cda031", "comment": "Malware payload (Mirai)", "value": "1820455b542beabb2c1d1ff6a473bf0dc6396f0f5da2f782a3d9d6a6e58b7bf4bb4bf59fb6aa61db6e590c824cfc8585", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279956, "uuid": "9f132a12-4e71-49e8-8437-3f2152bd9d99", "value": "T1A943D69278815A27C2E023BDF66EC19D3324A7E5C1CFB7179D624B01378552F8D83B92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279956, "uuid": "cc0c7411-8f5d-49ce-bec1-61d0ef745a61", "value": "1536:3tm7RFZBBiA8LaysVlFUt0VQWhV4hWjBk5sWkjVBB/I8/d3F6IIM6:3tm5i1YJWkjPj/d3F6IIM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766279956, "uuid": "be6f3e07-9e87-4c71-94fb-503a6e309c39", "value": 55328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766279956, "uuid": "fe1aa2ff-750f-4d16-8002-413c00e3df2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766279956, "uuid": "48d710f6-1905-4b5a-9cb1-02387742b0c4", "value": "sdxkzX_UXA229x.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9385b052-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345458, "uuid": "650564f9-3faa-4c96-936a-5d9a076ecf0c", "comment": "Malware payload (Mirai)", "value": "b4357a5e46dfff43dc1452792a8ca08e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345458, "uuid": "5003e588-55b3-484c-9511-f9fd6d578d8f", "comment": "Malware payload (Mirai)", "value": "a306ffc68350a8f8b1d53e701e93ceb48524255ba85163fb43c917da2e3f4036", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345458, "uuid": "b2375f65-d855-49ce-9c21-a946a716857c", "comment": "Malware payload (Mirai)", "value": "4f1bd26609ffa3d2efc498e7e40d6596e133cbbd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345458, "uuid": "92db48ba-d967-42dd-9e42-e7f4e7a3d262", "comment": "Malware payload (Mirai)", "value": "09d84a567275b73917455089401b2b5c014fad17e3ace59e8676402898b7743439922ece8bee51b9f158a3a3d935aef0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345458, "uuid": "5a7d2572-57d1-4e56-a634-303648fec839", "value": "T181F33C47B7208FB1C368D67009B3CB67A6E6269216E19985E76DCD107A3075C6C3FFA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345458, "uuid": "6a6419f8-7ade-43f0-ba9f-6dbba534ee4d", "value": "3072:o3VJgzikZXyrNo/tqTHmnsHgCtEUQW0l/1wLxpvEcJz3nafau:oFJMZBtqCnFCtE1R1WpvDUT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345458, "uuid": "7cd5b781-816e-40da-9bed-40afd9414538", "value": 166944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345458, "uuid": "a3d18d23-7493-4768-aa29-5e9a9a6be527", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345458, "uuid": "a4a0e6a6-b605-4fb6-8128-99856ce2ddba", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46afffc2-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309681, "uuid": "481c9612-891e-44db-97e3-11bc2687d9ef", "comment": "Malware payload (Gafgyt)", "value": "f11fed416fe82f3b7209a73207fdb6d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309681, "uuid": "9d1e3e75-bfe5-4cb5-926f-ede71a94945c", "comment": "Malware payload (Gafgyt)", "value": "a3dcfa97805436ee950f4e42d624ae23b334ba1cfa262a7a872897cf5df38363", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309681, "uuid": "60bb13e7-4c48-4b99-ac35-207c6be96e25", "comment": "Malware payload (Gafgyt)", "value": "d3bb8df26e28aead39ae5a0bd40e37387024dafa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309681, "uuid": "95c52c75-6bbf-4bc4-b9e9-edfd5863bbdb", "comment": "Malware payload (Gafgyt)", "value": "73ad687fcb6ddb2083a5b9c30e1ec05accedf5c026088d2830d7b6bb1685cdd5a8302f993df59705c30da41d929c8514", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309681, "uuid": "b67f1dd1-5bd6-4b99-bd3a-1f0d21994695", "value": "T156B31845F8408727C3D327BAE78F479D3B36579467DB33116A38BEB42BC17892A29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309681, "uuid": "d0993565-8eea-4627-a336-6cb094ab361a", "value": "3072:MSY+46m1qOzssPFPPKNy+AmkZrQAhPDCXFke:06mgOzJPFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309681, "uuid": "7dc45b61-0c66-4552-acc2-9d0ca5d4c034", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309681, "uuid": "2383317d-349f-43fd-93c5-10d67dfb082a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309681, "uuid": "e427dad6-1d4d-48dd-9324-b79e120939d7", "value": "p-p.c-.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a044e132-de60-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766316703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316703, "uuid": "2f266b7f-2475-4458-bcbb-371b303b883d", "comment": "Malware payload (Mirai)", "value": "248f26e1a6b71c7b2afb4a1529c116cb", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316703, "uuid": "d4b712fe-e8c6-4456-9c1c-a63e77f46de7", "comment": "Malware payload (Mirai)", "value": "a424a82841f3804076601f67f5b79f362994ed79ac70bb669f7c8d758af9a7ae", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316703, "uuid": "4ff35642-3702-4f46-b2b8-0d7f444120a4", "comment": "Malware payload (Mirai)", "value": "861fffb3ebc50d6a8abce26696e352462e6c6dea", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316703, "uuid": "464c7252-bc44-4b43-871d-e647f252f036", "comment": "Malware payload (Mirai)", "value": "17a725fa9e4b9bd1063765e327b9ae04a58d270959b56e23e4986d894c2c515fdf5ef0981d1f7839e0d98d2978daadf0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316703, "uuid": "388d6066-e56e-464e-a89c-7c626a78832a", "value": "T113513BED3AB236336597CE94F4624AFCB00FA1D473900EDCE47E28F595A6915B820B35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316703, "uuid": "a2c264b3-7ac7-486a-9388-7f71a6168335", "value": "48:z56JjHUTiA3nxNUyHfHsiu64tiylQOHiOeuZ78:F69Hm3xNqTPeui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316703, "uuid": "e01c45ee-d9db-4b4a-86fb-dcfe658dc567", "value": 2926, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316703, "uuid": "2f46cadd-c08c-4995-8cf7-bd1afedeb0f1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316703, "uuid": "91916997-b2ce-498a-a976-1db6316f2229", "value": "tplink.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e42123d-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345476, "uuid": "bf6ba7aa-1e3f-4fb0-a494-52e70264e237", "comment": "Malware payload (Mirai)", "value": "41bf64dd2acdd2136a85d4a92bf02325", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345476, "uuid": "673f1dd2-273a-43a3-aef6-cdbc70cec3b3", "comment": "Malware payload (Mirai)", "value": "a43d4eef00de36d3723cfd9c25c99bd25d5bff9407e7c9ab31678c7e5043ffb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345476, "uuid": "ca221767-ceaa-4a2d-8d63-b31786eb2764", "comment": "Malware payload (Mirai)", "value": "56832cf848b69f2801700cc414a6bade80bbf92a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345476, "uuid": "6323d64f-78d5-426a-b35c-186382e5d771", "comment": "Malware payload (Mirai)", "value": "8f72f596c80897d6a370bce50349eca2a0f5ff3559f85bbeec7f3177a96f042c71e257cc17b51f811fccda5fab6dd236", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345476, "uuid": "49263800-fe8c-4741-b600-180c02f5dcfa", "value": "T15E148E68FE4E78D2D2C7E37DAD4A0FA230277D749565C0B11A00A29FD5EAFD489D0613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345476, "uuid": "127e4dc5-cb56-4b90-85f9-fcb58ff433b7", "value": "1536:OYtdyYq3BANtiz4UoUWHyeCFbjKEdAStt8YTpQURvqL4dqiofCsHNNjzPx+P7dZ8:/yt4wz4UJP8EdAxYC4qfiofCeNRzPxT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345476, "uuid": "849c559a-3eff-46f3-8d78-fe3e92236817", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345476, "uuid": "9c83d1d0-9c16-46f8-8921-ed40dec9219b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345476, "uuid": "baad4e6e-cf3e-41bf-a1b9-ff2509b81d9c", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdad82b4-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329745, "uuid": "7b613937-35fb-44fc-b6b3-da03d1ed5bee", "comment": "Malware payload (Mirai)", "value": "2bda710f5399d9fd9d29770bfb51f284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329745, "uuid": "1a5e571a-4fc3-48cb-b4d5-cf4b52dfc326", "comment": "Malware payload (Mirai)", "value": "a448bdfda2556d186923190ccd987e2bc18fa551998162e6834971c8c9ffc5ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329745, "uuid": "6793cd7c-8874-460b-8610-99260401c1db", "comment": "Malware payload (Mirai)", "value": "3b8548cd1b8af65c4dea8886696b83260644f7ae", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329745, "uuid": "2c4ec3bf-af78-4289-8ffc-86800a7bcb07", "comment": "Malware payload (Mirai)", "value": "9fb511ed02e1f198b4ebc6944dc2b28590679d40993409bd2b842cb9d55c7d7411eebe3a0b678cd9e7830a23d9ce8076", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329745, "uuid": "f0fc6b57-bbe5-4c1c-ad03-96a5a72196ea", "value": "T14A63E796F981DB62C5D591BAFF0E51CD331307A8E3EE73139E146B246B4B86B0E3A405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329745, "uuid": "269b31d5-d249-4117-864a-43a829c2d8f6", "value": "1536:zhnhsJqZWuaZbV55Y/VAx+zuEt0vH1QU5e3UMTio8OFueabS7G+YZTlbVR:LsoeZbV55oRudPk8OFueabS6+STl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329745, "uuid": "9606ed1e-ec36-4677-95fe-98bb54eb72ce", "value": 70824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329745, "uuid": "20cecfa1-b532-4c56-b163-333b6958672f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329745, "uuid": "c7adbd9b-2597-4195-8a1a-d8c0306e8477", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06e3af76-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329760, "uuid": "35997978-c8c8-48d9-83fd-369c50242bbf", "comment": "Malware payload (Mirai)", "value": "a8236060b8825c20e80c5f7c7ef0a221", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329760, "uuid": "0d792f47-6890-4513-baed-4ffe02aa8bb4", "comment": "Malware payload (Mirai)", "value": "a46f71b632037aee2b1ae468559467ec5d2787ad04b17873b6450c2b80ac00b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329760, "uuid": "2c4c45de-2d35-4ec6-b98b-1090210a8a99", "comment": "Malware payload (Mirai)", "value": "b40078daa5294368254ab2c978b7a49571a4ad3a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329760, "uuid": "d7ce714b-18ed-46b5-abad-60184ebbfa12", "comment": "Malware payload (Mirai)", "value": "ba59fab18acb8d017fe94b60587ecc3a6d16131f885ae61612381378cb204b8fe57fcda85e811e06798338d6ac46354f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329760, "uuid": "0a575d2d-2242-4ee6-a186-5e137b9bd525", "value": "T149331885B8D59A16C5E4227EFA2F019C372623B8E1EF7207DD126F15778A82F0D77602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329760, "uuid": "fb07d4cf-bdc7-4fb6-a3ff-e469fbbab5ef", "value": "768:jiHN8n2GyWplRv5BturmmjkiSEAYd8ser7/bNJrGXpuCF23TMP0NF5HcbWcksT:u8n2GyKbu6m4BhYdlwzrCtMezT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329760, "uuid": "10403ac9-fd86-4ad4-a3da-46917e2e9b24", "value": 51920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329760, "uuid": "a548d0e3-296b-431e-bc69-766aae4905ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329760, "uuid": "963fccfe-ca0e-42f5-ae1e-7b8c52f59dc5", "value": "zerarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64fce481-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345380, "uuid": "52c452f3-d101-465e-985a-d87f4e6c2cc5", "comment": "Malware payload (Mirai)", "value": "c8a63cfae2a21b3570385cdc5109a6b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345380, "uuid": "0c9c8922-8f78-4f05-a89e-11b73546be26", "comment": "Malware payload (Mirai)", "value": "a5afae212e6baa0bec37cf40a5b1feb7bb4262c26b775c9ef05ff902175ee635", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345380, "uuid": "46d58cae-9093-4ce5-bc7f-d355788bdaa2", "comment": "Malware payload (Mirai)", "value": "24b1aaf49ddb92fa5ce3225d3455bc598dbe6d27", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345380, "uuid": "9fa774f3-c70a-4b3b-a945-adad74577f10", "comment": "Malware payload (Mirai)", "value": "5e59d99d29a2cc1a843747d095c51d0aa57f32b393e291186ecf4c84f629c6a4ed0c7af9f46b5a5a8f9bae9ff2908b62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345380, "uuid": "44ae7a12-ce12-42ee-90a8-6cbe75fc43c5", "value": "T18D53025129B8FC2BCED3C5380F6841F946CC59B49896900F43C97DF84A06D78EAAC6D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345380, "uuid": "08108a99-0d43-4a10-927d-bdcebf7633cb", "value": "1536:Idcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/RyCYVAQW:IaHJgMo8FwOA4zUFGUO3UhnHYOQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345380, "uuid": "bb4cfda3-d9b6-411f-8625-072cb1828ffe", "value": 63936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345380, "uuid": "38ac9f17-dbb1-48d2-934b-5b48fa6ee80b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345380, "uuid": "3ae38222-9670-414c-9a8f-2eccc81192d2", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a59bba07-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345488, "uuid": "aa946250-5c85-42ca-8de3-5c9ef0bdb64b", "comment": "Malware payload (Mirai)", "value": "0c4763282844d544a0a689055b16043e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345488, "uuid": "e9713087-a70b-4a53-af8a-b2d551d5588b", "comment": "Malware payload (Mirai)", "value": "a6331549cff56866f5a5d98cdfc32874ebb2ba1d3ee902d36014949b77e7e650", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345488, "uuid": "b7236c9b-0721-4f2e-930b-b2adde2ab74d", "comment": "Malware payload (Mirai)", "value": "ab03e0a44ba3d0c0afa9c5d0fe9f34bf2f812aef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345488, "uuid": "07683cf3-d893-4aad-b52e-807a530962e6", "comment": "Malware payload (Mirai)", "value": "d6238d16ce8fcfb6582eebf1e88565a0b61bb4112df69836b087f83ad39faa8920298375a4f5515b591eb1ff0ff1b641", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345488, "uuid": "827612e1-398a-49d1-8d4a-f196cd8b9002", "value": "T1B7F33B47B7208FB1C368967109B3CB67A6E6269216E19985E66DCD107F3035C6C3FFA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345488, "uuid": "d03c420a-d3d7-4634-a5c1-d408af7335df", "value": "3072:93VJgTdgahP/2o/ZrTheIsnjCWRXFm4UpM1wLxpPNNOziHifam:9FJMgWPZr8IaCWReS1WpPe77", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345488, "uuid": "117b345d-4727-4647-bcac-88a6d65ddf7a", "value": 166976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345488, "uuid": "ee9f2cd2-0b65-499a-8fc4-1faa3aa98e1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345488, "uuid": "70048acb-3184-4cf6-a139-8c7d8d85a122", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ece73c3-de81-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330740, "uuid": "2fed3ac4-4db1-4601-a8cf-98264cd69347", "comment": "Malware payload", "value": "0730f52c71e6b38a0ca3db735ec9a4fa", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330740, "uuid": "2dc89414-8afc-4ca3-9411-076d526cbc28", "comment": "Malware payload", "value": "a6ba9f0bd07689bafcf7560bef5dafc98ab8b52c2f685f4a5ce289b8a5ef8992", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330740, "uuid": "db00b5ea-0d6e-41ce-be27-67f3e14136ef", "comment": "Malware payload", "value": "7d79262d043b8b8636c53ffc61579587746e04bc", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330740, "uuid": "2c3e6e67-1a64-40f0-9ad1-94071f56b887", "comment": "Malware payload", "value": "a24cc502d81ff200de78602b6c203a50d27cfa5e9b7ea9a8b49be29586327edbc2a00be8ffd139587b43cf7ddb6b02e2", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330740, "uuid": "66e97aaa-7fb1-4e7b-a251-0e7de78ba7c8", "value": "T1C0762355A9D9D6FCC8CF8BE05A0150DE748E326B89FD782D3ACA4C01A765CAD804F793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330740, "uuid": "2d2227ce-bdc1-4d26-b7ed-e8fc67937288", "value": "d0cc7437ea8fca6ae1a25c150ca0aaae", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330740, "uuid": "18f62d84-6208-4d7e-9276-5461767c8c59", "value": "196608:QIeWkYbrHHgg+LUqhjKRMGFqJZIAkj1AJXu:QDWNbjAeMGFU+N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330740, "uuid": "252f0615-8b9d-48c7-b09c-37d357c68bbc", "value": 7538688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330740, "uuid": "3b44cf7d-4c07-4793-9639-9484d59f51a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330740, "uuid": "e68a923d-d797-4e14-9bc9-bfc87781429b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0edf608-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330019, "uuid": "ab313d9b-347f-4823-a7a3-4ec63b05af52", "comment": "Malware payload", "value": "3f325f9e5bb62a059d4cf5b118e99083", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330019, "uuid": "45d8915a-e70f-485f-8dcd-740416e06dd8", "comment": "Malware payload", "value": "a8843fe541de9e18997b79d6c65f446d66f1081ee2793963b99893649d733d6c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330019, "uuid": "624b5a33-ae1e-4d10-8025-af9af6aa9331", "comment": "Malware payload", "value": "2cbf85e479c5ee68ef87ec0ce037dac28b03d8c3", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330019, "uuid": "b82f6c99-6a7e-4807-b4ff-48d197b289b6", "comment": "Malware payload", "value": "179934510106a79ea0888af6eb1e2e4d928e339b8d63785ddc525d17e0eb03db3f73fccc38aef42b405d5dc8d29d1d6a", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330019, "uuid": "74e836bd-8d0d-41ff-9d4f-b0771229e488", "value": "T192F0E92FD10E8BBB6816A5592F693DFCA61E41585E8A0F54ADB90D0A74C8DB861C0075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330019, "uuid": "43026973-bb4f-42d3-b936-ce9a50026485", "value": "12:/5949dJ37nBhBUFKoIOqZWgZesFrFBEGgbu+yfuT+JF8EquhHdiA:ha9X7WIO1WrTBEGjTuyLqg9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330019, "uuid": "5e755e14-43db-4f9f-be09-23d864e3922c", "value": 498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330019, "uuid": "e0899dc6-18cf-4566-9f12-b792381f8974", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330019, "uuid": "ceeb7e27-630e-4e5d-8e32-abc802712904", "value": "rob", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96531dc4-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329142, "uuid": "68308bff-53c0-4a14-aeae-ab670fd770cb", "comment": "Malware payload (Mirai)", "value": "2e8b8e1ade4e760b8d7cbe3b0e175d7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329142, "uuid": "147a7f86-9bfe-4d9f-8d5c-3258e97e6c69", "comment": "Malware payload (Mirai)", "value": "a8a957c59b97f53123a9406ded737c532249bb21ecd290c48bdcb9c2a378542e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329142, "uuid": "e49064f1-a3f7-4853-a37a-d392dfdf45e0", "comment": "Malware payload (Mirai)", "value": "0d7ad08ce84591446bd401482ddef7911116fe7e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329142, "uuid": "362fe0dc-47e0-45c7-a4e8-2b5eec84d715", "comment": "Malware payload (Mirai)", "value": "6c7ed54ecf58d613cb2a80e0eaff0958a6c32fff0c39e998b4159135beb9b15fc9057cde93bed15d3236a622a2a0f6b1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329142, "uuid": "666787b0-77bd-40e0-89b4-68206f9f59ec", "value": "T11793078AF9819B15C5D522BEFE1E518D331317B8E3EF7202DD205B25778A92B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329142, "uuid": "f2f67ef4-1a14-4328-a182-af0525b4689e", "value": "1536:+enlR6B5yF6tib1l0EeP+acCtell+hLIxZfDbS8+jdvXlW3a9BktCA3XNloFidJA:GRotP7xZfDbRSvXlW3a9BktC/OJq7m9O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329142, "uuid": "f9c679b8-acf4-4d04-ac05-282e47e2c11d", "value": 97608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329142, "uuid": "deef4d6e-a89a-42e9-82f3-773128c01c81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329142, "uuid": "4a1856d6-5180-4fb4-9251-bd56d02c9667", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07162c6c-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342216, "uuid": "de99879a-2687-4c38-b50a-4600acf33615", "comment": "Malware payload (Mirai)", "value": "c7f055c6956c2e09ee54b868619bab0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342216, "uuid": "fe849045-5a17-49c5-aad6-7f06bdaded19", "comment": "Malware payload (Mirai)", "value": "a917e03f98afa2cd3fa687fb2b6aed534ed947fd8f56c09862050003571b60ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342216, "uuid": "377f7240-96e7-4234-9724-9ede67feabf6", "comment": "Malware payload (Mirai)", "value": "93d93e9068ca0e4de669ce6e589f574833d425d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342216, "uuid": "d3903d5a-4e8f-4232-b84b-04b66875852d", "comment": "Malware payload (Mirai)", "value": "df6eb9b5df669fe5d7040c5b1a4aa35b66cfb1d4ba50d36383ea8928432923a7bd2420742790d1f612bbeb6c3afd7338", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342216, "uuid": "681e5d4e-024f-4bcb-b28b-ae23fe944351", "value": "T118C35CD6F283D4F5EC5705B03037F7368E33E07A6139EA43E7685922EC91611D91AA9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342216, "uuid": "50f4ee45-4675-45e1-a189-9c8ace21038d", "value": "3072:bPH5XiZcbPNXeLc7MrbhlyWOrxniBdtmpi+1Ev:bxXCcbNXeLhrbhlsY5+1Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342216, "uuid": "a7ffa17d-8247-4abf-9c97-c87265a704a4", "value": 119720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342216, "uuid": "5f647dc1-acec-414c-9b8c-4136898094e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342216, "uuid": "e13b199e-a64b-445f-a17e-9a661e16afd9", "value": "yamaha.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d3f44c3-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309235, "uuid": "fe3dba82-58ec-4d05-a7f6-4629db77ba9a", "comment": "Malware payload (Gafgyt)", "value": "61a5e950342a5f047e9d0ab8eeb241a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309235, "uuid": "3bc24343-0797-46b1-b60b-f9b2a1cbcaa5", "comment": "Malware payload (Gafgyt)", "value": "a936cef7f683e3f80720ab0c5658e0d61a56bc6614010f916a980b98f5c73c49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309235, "uuid": "26103921-1ef5-496c-8b57-5fb21dbabae0", "comment": "Malware payload (Gafgyt)", "value": "a605e0b3cdbb9f28638d045208f13503ebe76a21", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309235, "uuid": "23cc40c1-bee2-45d8-ba26-c8ddf0d84b9e", "comment": "Malware payload (Gafgyt)", "value": "d7c891236659c6d851af34811aef15ada02342fb323d33f5f2d4b6cc1a6318c2db81952b3b952c3f057365f130db1170", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309235, "uuid": "8d2e3843-75d5-4610-b493-5973a79b43e0", "value": "T150C30A45F941875BC3D327BAE74E428C37355E2897DB33156A38BDB42BF2B982D29120", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309235, "uuid": "8aaacc57-c325-43f5-88a6-4793c4e91ad5", "value": "3072:hQrFRNfuLrGhEPOD06g3gNlmBoHQuQekQnYW:IFzuaEGQ6g3CmBoHQuQekQnYW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309235, "uuid": "b9b15a48-09d4-4208-8981-4db3484cc397", "value": 120177, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309235, "uuid": "bc350877-f38e-4c71-812a-46d6b20b666b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309235, "uuid": "6a016280-1323-4150-af63-f704933f68ba", "value": "co", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e18b0d4e-de93-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338717, "uuid": "9c81a96d-01a2-424e-84f6-ccf443b60ff4", "comment": "Malware payload (Mirai)", "value": "62f562c06a0bd90e4b7084bcfc01185f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338717, "uuid": "8fdf5c71-6590-4dc3-90aa-6319fc581c8e", "comment": "Malware payload (Mirai)", "value": "a9687fbc701d10bd212cdd6a4d0bef5e6b239a9de36c1f04801726dca97b097f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338717, "uuid": "437e5f83-614b-4c6d-b6fd-01e220f42f7c", "comment": "Malware payload (Mirai)", "value": "13a2f3ddae7fc18a1e8fd2c45ac1a9f4e1e175e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338717, "uuid": "b3ef6f5a-f127-4f9f-9f82-f2b3d0a47478", "comment": "Malware payload (Mirai)", "value": "33cbb708db431512044f4c9c962ef0116b917fc776c9d1ab1243d9b7ae8d602c0f1e4dd6fc983be0c9b67bfa62cda35e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338717, "uuid": "4ff9e7cf-a90d-4da5-8487-80c7362f8c88", "value": "T15463394BB44D45FDC058C23C0769B07BD536B4BE12BDB2BA27E8FB066983E105EAD419", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338717, "uuid": "527d76fc-1317-4084-a54d-6912b7beec4a", "value": "1536:JjL58IlSs1d0K4pJRN3LDTO16oQZ/EXlC1EEOcOl2c2vaZx8IdYGkPtfOKXxB1x5:J3lXL0K4nL3LDTO16oQZ/EXlC1EEOcOQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338717, "uuid": "6f6f50e8-ad24-4bb3-a1e7-37150e50131b", "value": 70656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338717, "uuid": "dde5744e-c269-4fc5-b321-bd5834111c50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338717, "uuid": "7080d69f-9d64-4cf7-bed9-c3fb9a465b78", "value": "shadow.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0aa0668-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345480, "uuid": "2089b574-7b3e-4f79-93cd-2b6773413c3f", "comment": "Malware payload (Mirai)", "value": "953d3f7feecd487b6b8d810d3ad02397", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345480, "uuid": "08f15ce2-e081-4002-a414-7d436390c628", "comment": "Malware payload (Mirai)", "value": "a9a3b28baf736dcf0555d9e7363b13a06b6bdc4f9a01fc1e93db78240dec0c85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345480, "uuid": "94388834-b125-4851-b2b2-e7b2d188f09f", "comment": "Malware payload (Mirai)", "value": "efd3e7ea84347a48beeef7eea4332e2753fac7a7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345480, "uuid": "630bebbe-f294-400e-b2b8-b73b77bb31e6", "comment": "Malware payload (Mirai)", "value": "c4488bae04c36e38630e5fa26041ebcbde22e185bf0a1583e83064a91cc053f81b703283964af1751c4b27879e9c3996", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345480, "uuid": "9463b4d4-4255-4d6d-8b84-9f05d217d767", "value": "T109C35B82E6A2D0F0E68701B00557F3E68935EA305416CEC6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345480, "uuid": "c8b3e478-e273-441b-abdb-8ecc18010d4a", "value": "3072:36tJsoRNjmj1VGCLUZMIV9Sr+QVrxZNio8w:VoRNjmj1VGc3rRio7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345480, "uuid": "ab2586ae-e621-4c9b-84d9-846b82d23d84", "value": 123472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345480, "uuid": "5c83a344-f6e2-45fa-bb66-4244fef22b71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345480, "uuid": "f09c9324-be5c-40c6-b23d-95074fbda5a0", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c2a5b73-de69-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766320562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320562, "uuid": "49e16d44-01c5-49c2-b128-9f607e249b7c", "comment": "Malware payload", "value": "fc945fe6fcf6ae3fbc5c81809e0167ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320562, "uuid": "65a6779f-a3dc-428d-8c9c-ec56d11d24dd", "comment": "Malware payload", "value": "aa4159c80bbecface26a26be3b128d189061b5f49a6f754a29937fbd835778f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320562, "uuid": "f2e6ac36-ca4f-4d81-b099-ae5d1cbf9722", "comment": "Malware payload", "value": "86f0c499fe33fd0814bd334e696cca4fb789ddb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320562, "uuid": "3d253539-c7c1-4fea-9eb0-2906e9f3a39c", "comment": "Malware payload", "value": "2006d51a1cbfc3d2a8e9be51a59302203d0772ef24d92f61e6754de04db201ee718b02c8a22e00ff54e59941b6766076", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320562, "uuid": "1d315a7f-b6f2-462f-8680-be5cb6f7214e", "value": "T11FD48CADE782D0E1F16340F1164EEBF20530A52B5063F7F2EB492A573472B916F5A329", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320562, "uuid": "7f27ad7b-a8c4-4ee5-a779-a1ab53b03ddf", "value": "12288:Poyf8nh57hFEu8BgTXSFqKTHpO0OHlGbgyh0bhpc0VkYHspZK:wyknh57hOu8BgbSFqR0OTg0VkYHsv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320562, "uuid": "1b3f3c99-78cc-4a63-9f14-85e691a6ea5b", "value": 641252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320562, "uuid": "6c53063e-5664-48e8-a18a-d4773ceee9b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320562, "uuid": "0d4101a4-bea1-481e-a508-36da23d48cac", "value": "b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d20d481f-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295741, "uuid": "d9a597d6-15e9-4c1e-9525-4d789cb7411b", "comment": "Malware payload (Mirai)", "value": "0c393784422ee72562ffddadab3aacb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295741, "uuid": "c1929a51-d5e8-4e56-91e6-9cecbf5b10ca", "comment": "Malware payload (Mirai)", "value": "aa65b1a6dc08d657579ebef7d5863d44de2b90aa2d8b744bfaae34609417ef55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295741, "uuid": "1eb70b42-1192-4739-b919-151d07034afe", "comment": "Malware payload (Mirai)", "value": "3dd38874d61fef686f7cd6367d50bdcf86ad1af2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295741, "uuid": "8b0d72a2-69fd-4a0a-9250-170c37f5ed56", "comment": "Malware payload (Mirai)", "value": "f4a60d40abbaee6adb230268bb98b471a3cb1ba3dba94c71ab2c3477a1efb48d216ef8abf879a97ef9f67f47bfa3a4c3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295741, "uuid": "5bd90e9a-f821-4aee-b94b-1af1aa831b06", "value": "T12C63951E7E219FBCFAAA863447B78E16564833DA37D1C581D1ACD6012E6064F340FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295741, "uuid": "c6cddd39-6455-4a99-8931-aae22e936bef", "value": "768:7ZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatA5:UnN4ZH2SyOyuIq8LMEIUq+cvtpvXzaL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295741, "uuid": "6b600590-d73e-48f3-b8ad-147da47abb85", "value": 72024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295741, "uuid": "027d88c0-d6d7-45a0-b9c4-94a4a56a1bee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295741, "uuid": "0e813d7c-2d57-4988-bc19-79f4949af66a", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e1a160-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347869, "uuid": "77bcf21d-62e2-407b-b38c-97a1f67c75ee", "comment": "Malware payload (Mirai)", "value": "01dc043c60fde865eb4497c124ffa40f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347869, "uuid": "92cad6a9-97e8-47f8-b50b-9254b30bdb8e", "comment": "Malware payload (Mirai)", "value": "aabbbdcfe874f266d737d400c3ffbee99b881d89d369f2eb2da6d3579634547d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347869, "uuid": "e09a7eb3-6364-4d0d-a05c-98bcc70375d5", "comment": "Malware payload (Mirai)", "value": "2a4ad55792bd9aa896d31edd4465ef0715b3546f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347869, "uuid": "fafdc69c-5372-4e88-ab5a-635adab54c29", "comment": "Malware payload (Mirai)", "value": "92c87b0c56a94859318fcb63b3e8754f874090e9cedd7902b11998232feee9e20d18e8c454e7d6a5155c914c3175c1ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347869, "uuid": "ce27e32b-262d-4907-a881-da76f3a5d22f", "value": "T189432D4D64002EADE9C65CF992698F0DD9105220A0630F17FA7BFEC23D731A6FE465AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347869, "uuid": "e91b8fbb-6dd0-4af6-a949-7c57fd95dce2", "value": "768:ms+6G40GEpWkgBGIe3ikcZsgdWtpbD42mtafN/WTU77Ss/f0OtfMtM1d4XQvO0BZ:ms95xkgBNjkdk00I77SxOtfMtMrKQvN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347869, "uuid": "1ee23ab2-4e56-49d9-8c04-bda3b9c3df92", "value": 58116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347869, "uuid": "75bb38a9-e3ad-4ebb-b958-d6a4949a3994", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347869, "uuid": "6a8ee44b-36e9-4f39-ba7e-d8f482ca605b", "value": "Fantazy.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b026eb8-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340504, "uuid": "70acbf1c-f610-4a1b-b9a4-c6f80e14ef0d", "comment": "Malware payload (Mirai)", "value": "68db1bb11609ff304cd21eec8f7d5e6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340504, "uuid": "d7e5d7c7-0c33-4c86-96e2-5c9a3b9186f9", "comment": "Malware payload (Mirai)", "value": "aafd2fdb698a5860b62617bebe4b111c0082ffeacbad718ada6f8e7875a183aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340504, "uuid": "43a2ea02-8564-4438-ba05-75fad92824b0", "comment": "Malware payload (Mirai)", "value": "1b2598f0997a544c4a6c7b15e7bb2767dfdd9f3f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340504, "uuid": "481bd72d-74f4-4d5c-beef-016c59925403", "comment": "Malware payload (Mirai)", "value": "21740736d9da69ce01748981c82c64795ae67ac02f20edd97233eebf1d2dadb78db3a0431e4e7109abef26d270b80ab9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340504, "uuid": "d0b8ef51-ae96-4499-853b-842177299969", "value": "T14A734B21BA752D2BC4C8787E11F30674F1F62B5A256CC61A7DB20E9DBF115103607AFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340504, "uuid": "8cae5462-aa4f-4161-9550-aaad76a43e9a", "value": "1536:1FdSUkN84xw8rDNffplVWCImHo8fhoce4lMBVAGg55ATMzA7uhK:3M7Zy8LzSq44C7rnTMzAZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340504, "uuid": "fad393b2-02d3-4254-a73f-021217eaa0a4", "value": 79516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340504, "uuid": "6de12ecb-7846-4837-9ac1-799206e9c37b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340504, "uuid": "5f163694-7514-465a-a718-0637edd1c319", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea74a4c0-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766346463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346463, "uuid": "d2b7fd05-21c3-41d7-8c13-0d337c895c97", "comment": "Malware payload (Mirai)", "value": "6af9700ccf59e8add1f754f83de2b987", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346463, "uuid": "e9dfda77-1ec1-40af-8f67-726e245a9ca4", "comment": "Malware payload (Mirai)", "value": "ab2a13b9660e3afcb252ff536cab43970365d33cd29b9f399d0cb6a7b4de6381", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346463, "uuid": "ae920e23-e21f-43ce-b73c-92d23ce0ec3a", "comment": "Malware payload (Mirai)", "value": "0edf5ed64c56a34094b05d152c1c52a3cc3876ba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346463, "uuid": "4579baba-1217-4415-bdba-639c23e9ed9a", "comment": "Malware payload (Mirai)", "value": "e53b42932bbc1b967671f7a0a48bd1338cdb3e38194c3449a57a838ca4cec6fa6095506690a169b0831b6501589f1d2f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346463, "uuid": "01ab5460-e154-4b6a-ac2e-a5c692250da8", "value": "T1E1A3C61A6E159F7DF76CC33587B78E20A75833D23AE1C645D26CE9005E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346463, "uuid": "6993d687-ea78-4099-8f74-4d008ec93f8e", "value": "3072:2qj+vh6NLanfcMlHSzgv2zAMQ+jSyrT2f7:2y+vIB3Lz5QiHu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346463, "uuid": "63ca65d7-9619-4e84-b77d-57bb6b752f47", "value": 105516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346463, "uuid": "8f7963c7-0e89-4b77-9226-9453a108d40f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346463, "uuid": "35b5413f-cb87-4eae-ae38-c71557b231e6", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96ce6754-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329143, "uuid": "ea70be66-c887-4c09-ba8d-da017c24b48c", "comment": "Malware payload (Mirai)", "value": "3ba877cdb6a4d2342d8e8e2fafcd674f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329143, "uuid": "90269ac8-fa09-46e3-8423-4dc1ae4f566b", "comment": "Malware payload (Mirai)", "value": "ab5e9a48f8206d90f233fea8fa10d8dc0a474357ad8d89b6eb7e991067528cd1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329143, "uuid": "d29160e7-c4ab-468b-8bb9-6785674670ee", "comment": "Malware payload (Mirai)", "value": "24257d1ec5613cf29fb9dcfc76ced37f3364b36d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329143, "uuid": "d27814c1-8b30-479c-8778-8fc6c7e37146", "comment": "Malware payload (Mirai)", "value": "d83387869a3dacea0d927279bd0f672138bcd9ced4096cb2e3a9341b371385e9cee78f0db623f9336777ca627b799574", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329143, "uuid": "ea82c00e-9e30-4a2f-b0ab-aab6f71c0f94", "value": "T1D201C88F1124AE2191DC0F693B92A02568D097A5397A17687FFB41BB44C5641376CFA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329143, "uuid": "f6be8d0f-fce5-4408-8cf1-2c469f902031", "value": "12:2OzKivgkM3T3Djd36L5MOBHwTimhn/UJStjDW6MttN3Oc3:2kBYkYrdk5MYHwTiUnMcG6UNec3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329143, "uuid": "66073f21-f723-4a24-a468-918bde19d370", "value": 758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329143, "uuid": "37d422bf-475e-40f6-93b2-1aef5f2f2877", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329143, "uuid": "d687b6e4-533e-400f-8a4a-bbca25eb9463", "value": "w", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec8cb72-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340216, "uuid": "a8c1d582-f733-4e76-8022-c2f11864c90a", "comment": "Malware payload (Mirai)", "value": "b5579579b15ab4a8a49d4ae87ed67fdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340216, "uuid": "16b24826-16c9-4969-a0f4-5c7d831e44d3", "comment": "Malware payload (Mirai)", "value": "abb35faea8f0cee05277d697a3ee43dcbf2bb435b7dd467a476b4d51f85bc020", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340216, "uuid": "4607b052-9e17-4718-a16a-31b3c3f3f682", "comment": "Malware payload (Mirai)", "value": "ac9dc9baf15588b6f50459f78ce69ed486350347", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340216, "uuid": "9911c2a0-e1ea-4eeb-982b-1f110cf08b20", "comment": "Malware payload (Mirai)", "value": "916e999e3f2fadc46e669be76b1f5ae44edb50823b89f41aa6899505106db8fc24cbdcc6bb475d24fcb4a4d25b5a4d61", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340216, "uuid": "f40841dc-ea1a-47e8-8298-a1dd5b29c386", "value": "T1FE530846BC918B25C5D412BEFA2E118D332717B8E3DFB212DE106F25778A52B0E77912", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340216, "uuid": "0a4c0c5a-096e-4b23-9fe6-c2fd203fc5f3", "value": "1536:2gnkr8w59WFzyy39n6N1stBDyRjExGQIQZHjYb8MeiyCUqV+oT:ecINC1nIIXCUqV+oT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340216, "uuid": "50655a6d-8b99-4fd3-837d-ac59c02bfd9e", "value": 60832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340216, "uuid": "1b75a981-d39c-4070-a506-a9db337a8974", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340216, "uuid": "cde8ef3f-2d76-456a-b009-320a513407af", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a059e122-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330018, "uuid": "5817a557-8e4e-459b-b6c4-726245664e3e", "comment": "Malware payload (Mirai)", "value": "cc863b62485f4b6a63ac0dcf4de22509", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330018, "uuid": "c4cfcdef-868b-4b37-a991-c1756f9ac612", "comment": "Malware payload (Mirai)", "value": "abce053574d34f3a096e77de968246121faff839f3bad55816efdbaddbc76403", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330018, "uuid": "4135d527-e0b6-4d3e-8321-69c388bf4491", "comment": "Malware payload (Mirai)", "value": "6c1dadb9c5be8a3ee10352627883d41428acc23c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330018, "uuid": "13555e58-1e6b-46eb-882d-90dfd12aa1c4", "comment": "Malware payload (Mirai)", "value": "50cf3b7a0b2f087412be1272ae525511207df2b768694bed1c86a3af8af510945534de7f3b7c7cf8b0fd6ad46959420e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330018, "uuid": "b4be1b64-1897-4806-af81-d08b1b14629e", "value": "T11BE04FEF0022CF13810C1C0820A2F833A0B1D2C127A05A0A9FD9C43FC8E4B50332CEA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330018, "uuid": "41c13703-aa27-4b89-9d1e-3add25aa4973", "value": "6:LMFdVQHzIXgPCKVMFdVeaLaNgJPCKVMFdVcFGNIvF+6oAPCKVMFdVcfiAK6i4wO:od2IXNKKdMaLaNg4KKdVNIE6otKKdGL3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330018, "uuid": "a3d571fc-aeb3-472c-a53e-81d0396ca1ed", "value": 323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330018, "uuid": "75bc07ca-e511-447b-88d9-8197149e1750", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330018, "uuid": "fcc3b4ff-7f32-4852-9e75-1bc58ff7525d", "value": "smd.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fab3776-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "317eef79-0d53-48f6-82e4-a2df600727c5", "comment": "Malware payload (Mirai)", "value": "99a77652864f24dd4ddfd360f66e0d77", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "065b6a66-6619-4c7a-b729-d936a31a3478", "comment": "Malware payload (Mirai)", "value": "ac26f064be98e866a4dc16f4a46b5db06acb5696706c12c54642a204da250016", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "c6700971-992e-4a51-a0bb-9005bb907a20", "comment": "Malware payload (Mirai)", "value": "fa7784ceedcf08126d0f3c1d8649dcde0508e643", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330016, "uuid": "cc0a8e01-d93e-42f1-891c-481e469af0fb", "comment": "Malware payload (Mirai)", "value": "1962529916aa3b55dfcb370ff7f37df4b52a5c2f68ed3809450cad59bd97a0be90e1ff558b4ee0a0c0f14674041d8f26", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "00afb247-6ae2-45c8-bd1f-624be9ef6c26", "value": "T194C0129F10162D81D00DAE6421A5385DE68086C65A320B89BAC92073A88D921B758E64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "3ec9700b-92b6-421a-b34c-65d8dcfb82a9", "value": "3:LxAjdVZVb8NBzSa+TSJa4TJvGBwVxAjdVZVCONBzSa5T69LwJvn:L6Vbk2QhJV6Vxj/hn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330016, "uuid": "2030cca6-27a1-4dcb-9d0e-946aaccc9ea6", "value": 174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330016, "uuid": "1ac92498-3017-4db0-bff6-ba95440201a0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330016, "uuid": "6ea351e0-e957-4c59-a1db-5b0a39e65eae", "value": "bah", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb41138c-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329741, "uuid": "5fe7f43d-4bcb-412f-87c9-b7499b2ff6e5", "comment": "Malware payload (Mirai)", "value": "fa1a7c1a30ffad6e9767894706cd4cb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329741, "uuid": "8a7de8c8-1106-4fa6-9565-15443ed48b5c", "comment": "Malware payload (Mirai)", "value": "ac56de2228984ce9a2da505b9673fb5ac0a815c69b325f15de762cefd0cefd21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329741, "uuid": "36a7e5f8-2be8-442e-9a3d-7dbe8efa0074", "comment": "Malware payload (Mirai)", "value": "00859ea7fc3e88cd85f0b8a970eb3887676fb25b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329741, "uuid": "7c4db0af-63f3-4d67-bf89-056b0ca226e0", "comment": "Malware payload (Mirai)", "value": "153a23b62071e4cf921260efabf1e7ec45307d3f4b6671bef764ff13187bb4a8eb5aa8a0376eadad4e3a1e6cd649d197", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329741, "uuid": "4b65c044-224d-4e00-b40f-92b489788f76", "value": "T198635A21BDB62C2BD1C4263611E34235F2F7174671ACCA2B7E620E9CBF14A543617A76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329741, "uuid": "25dc6dbd-09f6-449a-817b-e3712495bb06", "value": "1536:AZe0aOVWkuHSe1u3jEqFh0BXnB8zF7uhm:YlaMCuzZzCB8zF5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329741, "uuid": "eb733737-ca77-493a-bfb9-0bfaa3b0d775", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329741, "uuid": "255709be-20a9-4215-bf78-c11035adebfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329741, "uuid": "9fd2f400-8498-4f6b-9ca6-db07c5ae31fc", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5580bc-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347885, "uuid": "bc89b112-df1e-4196-b01d-39df25b05e1f", "comment": "Malware payload (Mirai)", "value": "bbba80638bc733531e8d160dc85949e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347885, "uuid": "ab68a092-1c78-4eb3-8d1b-839e3c7fd602", "comment": "Malware payload (Mirai)", "value": "ac63124690eddb764306263d1fc3c5bbdb0006890f5ec674abd42d14b3b84760", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347885, "uuid": "f2bfd3bc-ca66-47ce-a1d3-1a8a99eca916", "comment": "Malware payload (Mirai)", "value": "29a219ac6640bf9bc45c512ad05a64447131456f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347885, "uuid": "94f832c6-86f1-4ff7-8917-7028c7c2c8b1", "comment": "Malware payload (Mirai)", "value": "441afd6e6e10986ac6dca6bd42b328cf05ce69f5fd08432d498da62108a929c5fff88c8d9f8b21b0f9d692264d65dc3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347885, "uuid": "f2f35e43-85b3-4bf0-8ef3-07804c5e9fe7", "value": "T1E153E692F882492BC1D452BAF96E658D376163F9C2CB3717DC200B507AD661F0C7BEA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347885, "uuid": "2f9d6b9b-9a09-40e4-b8d5-7ca9daa09a29", "value": "1536:za/Tb97y614dGa67G6r4X44ipYspiHEI:za//9fVplM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347885, "uuid": "93640c4a-a789-4627-aba6-7a8b850e6512", "value": 60900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347885, "uuid": "f47ef299-95f6-4373-8a3f-4bab5896afce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347885, "uuid": "cef840d2-0b8b-42be-8d8b-f87aaff20e48", "value": "yamaha.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87c4432b-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329117, "uuid": "8037dd8c-c0d2-49b4-9db5-42254247af87", "comment": "Malware payload (Mirai)", "value": "54de2dc54dd44a23a3f1b2c7b4134b2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329117, "uuid": "a5f00f0d-d4fa-459f-9dbe-2629bba5a559", "comment": "Malware payload (Mirai)", "value": "ac713128acaa4ac62947c969c4fbb1b6c0707c99c1cb81328256f832483768b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329117, "uuid": "4ae884fb-6bd7-4374-944f-63b54e8cb31e", "comment": "Malware payload (Mirai)", "value": "142caebe1b3738278ad9e7bdb8e359a670529dbb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329117, "uuid": "70e8265f-97a0-4e2e-b164-78f32e4d23f3", "comment": "Malware payload (Mirai)", "value": "f32f63d5a30c1359f8d60c58ee231c8b76126488671a1f37cf7bf75893aba41550c3fee16236c5b58dedebd37edcc913", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329117, "uuid": "f4914cc9-7aa0-40b2-b6e1-c170da8477a8", "value": "T14D93F996B8818B22C6D452BEFE1E51CD331317B8E2EF72539D146B25778B42B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329117, "uuid": "090cfa9a-ad2d-430b-adfb-c9d2b6d36578", "value": "1536:qnxnP+2at+j5/GWMKw69rzMzWsDqPEYH55KYTZOmvCc5PmjSP3CEMUinYucuyuWw:qZS+JKWVP5KYT7vBdKYucuyuWi9zrTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329117, "uuid": "16e22d1a-bbbf-4b45-894a-f2e220fb005e", "value": 91320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329117, "uuid": "b32b858f-72d5-4cd1-baf7-b7e33f95bb87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329117, "uuid": "2c160583-7cf0-4c1b-99e4-5923540780e8", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bde03c5-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347861, "uuid": "698244ca-4779-4f39-80e6-7d2fc45397b4", "comment": "Malware payload (Mirai)", "value": "3af6952beed9036670dbfc720bc5b3d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347861, "uuid": "ff65c3a8-ff8a-4d77-ab21-5af7759b1036", "comment": "Malware payload (Mirai)", "value": "acbce56bc4dd7101b06e392300010e61302a1c5bcafb2e613936c9870aec7869", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347861, "uuid": "caca5b57-b088-4db6-aab7-63ca36edb941", "comment": "Malware payload (Mirai)", "value": "6e02fc0e095f8d3944c5555c6d483eef8229cf82", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347861, "uuid": "2a375099-14ec-4c98-9df5-7ea7acb3c885", "comment": "Malware payload (Mirai)", "value": "dbe09c61e1758f7ddb494b5922f27a858533115ae42fea4bd04952e12d3fc482ebdeda029fb20b05641702379453275d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347861, "uuid": "2a5c753b-e780-4b5d-9eb8-3b6bb5796c15", "value": "T1EF630882BC80E629D3C1177BED5F109E3310A7D8E1DA3256DC145BA47B8ED1B0DA7B46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347861, "uuid": "9310a167-8fc1-46c8-a6c4-cc3a833deec7", "value": "1536:qIc+Z+GeFOKcB2x6UOJPf0MIpWXfU2/oK3y:qF+ZxeFOKc0peM29y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347861, "uuid": "ebd91083-99c9-4bff-b55c-87386521d02f", "value": 67900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347861, "uuid": "0d90c17b-42f0-4e63-810c-9b78ec74fab8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347861, "uuid": "b04b6fd1-3a51-4cf4-b4ea-690c92049815", "value": "Fantazy.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77422c9b-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338968, "uuid": "a82946cc-b0bf-411d-9fdb-bf4415f47ebf", "comment": "Malware payload (Mirai)", "value": "5e447d9d84d1ba500146a980732f6a8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338968, "uuid": "aef0fce0-8057-4b8d-9952-add3d904c97b", "comment": "Malware payload (Mirai)", "value": "ae478b010850cbb4b6fb48f4e234a98ce18d19f537780950d2a5c6bf51b118e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338968, "uuid": "f50aa0dc-db08-4fff-a8dc-cbda3d1c3ad5", "comment": "Malware payload (Mirai)", "value": "15b5b591bb2cc89dfa132463298fa85fe046e174", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338968, "uuid": "bca417d4-df36-4cba-a197-32119418f75c", "comment": "Malware payload (Mirai)", "value": "67135a6d78903548f88d5c3ff8bf9d67c7f4c1f5e897b1b1170391e9bbcb149ffa44e024c1355a40a7e8d014632a61b8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338968, "uuid": "d62e613f-e36c-467b-9fda-a9f906e661eb", "value": "T188C32B46EA408B13C1D61777FAEF41493322DB5593DB330689285BF43F87A9E0E67A06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338968, "uuid": "8717a66a-e5d2-42ae-b099-8417fbb0b0be", "value": "3072:CwS6r2/xdwSX5hL30G2DoK5BOTKbuD+JsVM/9OrVM/:lS6r2/nR3SDoK5BYK0+JkM/9eM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338968, "uuid": "e9d2b871-b3f2-46e9-b98b-923015c58b97", "value": 128047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338968, "uuid": "f5f49bd7-9ef5-47e7-b925-8c3d7b052e0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338968, "uuid": "4b52a20a-5bad-4d9a-9097-a32c391287e8", "value": "Josho.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8396310-de98-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766340795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340795, "uuid": "6dcdd91a-a039-4308-be95-86e6f31eebf6", "comment": "Malware payload", "value": "429bd0de6b2a5b3b57c62bc1f4dcd8ab", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340795, "uuid": "e672d4ff-202f-46ca-bf32-ddc26e3ef008", "comment": "Malware payload", "value": "ae54f5cc038825e241d2daaa16080582ff610ab1ee8af4016b13aac3a7a4097d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340795, "uuid": "2bb83d5d-3eb8-4055-8930-881f3a75aa81", "comment": "Malware payload", "value": "15b46556dc59fa61c9d5f89fcd43fb25ec39102d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340795, "uuid": "5f478f6a-8462-497f-859e-f3ab1c65f21b", "comment": "Malware payload", "value": "c549eabea5b55c24fb8af1ff029073bfe1d3905020889939caaadb0e79f2a61268133dc6a257c6b56498b6ac24215b47", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340795, "uuid": "e19c7711-14e9-4f60-931f-9899d5b3a4c0", "value": "T12EA2B722524536B5220E45B8D897A0402A76106B411C393C76DEBB48BF9CFAD73FF7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340795, "uuid": "2e7a6d89-8063-4e76-afce-f906c1e6b66e", "value": "384:hOUS1SKKJW78mIxR0Q/+c7+F68gHdVf+0+0tSJyqeW1VTed0:wUS1SxJW78RJN7+F6thqyqeW1Jee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340795, "uuid": "11b68309-6e2d-4263-8cfe-180929fd6772", "value": 22656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340795, "uuid": "85027598-26cf-4d9d-a47a-32c1a23fdb98", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340795, "uuid": "168b7dd1-0735-416d-8a96-9dfd80379581", "value": "4thepool_miner.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60f7ea94-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340219, "uuid": "9c5bffb7-f105-452e-b4d3-1178a2ce1164", "comment": "Malware payload (Mirai)", "value": "830e64cf42c0b074714d84b1c8289dd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340219, "uuid": "a9b9e5d9-fa43-4d3a-b67e-2fb8ac0b1a17", "comment": "Malware payload (Mirai)", "value": "ae7331e65512c2ba1ca0e15a0dd82b1d9208236cafe920e5a6d96c6021b4b539", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340219, "uuid": "be75dc1e-19ff-48de-851a-b875f1799a12", "comment": "Malware payload (Mirai)", "value": "856a926a1f203f7e1030d4e0a35df52bbf799f01", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340219, "uuid": "3a9726fe-9259-4662-9dc5-901f6d8619f2", "comment": "Malware payload (Mirai)", "value": "900ae64ca144ce4c3cf71059c9ae288f38d49e9fd068dee372e729ee5c1e2fcb0448c16d14a2831b560e90e7c482d697", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340219, "uuid": "6d67cfc2-03df-4fd4-86ee-eeb5381c8cd3", "value": "T10973AF77C46A6EA0E4588270A4B1DB391703B404A6972FF76D85CAF58003DACF64E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340219, "uuid": "66f539c8-35ed-4a7e-9253-fc86da47366b", "value": "1536:WkxSJY6+AHyTINRJqc5/F3L3wUAn5nh65jCvnXEGBT2bVR:Wk36duMq+ZtA5nh65jCXLBT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340219, "uuid": "401b96bc-3c12-419f-a205-7f29a5d7e7f8", "value": 74940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340219, "uuid": "f670ff8d-9aec-4592-a629-eb19a0ee8478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340219, "uuid": "2d26dd58-0bc0-421c-8848-4e07ca667308", "value": "jklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e13dac5-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347865, "uuid": "ab3c971c-30c9-43ab-8630-2af856f309ad", "comment": "Malware payload (Mirai)", "value": "7728a45f1a193e29f20a02c8c7c8dc10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347865, "uuid": "232bea56-e870-48ff-8c01-e8794e43f5cc", "comment": "Malware payload (Mirai)", "value": "ae948107b21e72121fd4a53d79ba6097f68a0c78502ebd1b82db388dd09ffc98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347865, "uuid": "c8fe0014-7d10-445c-85f6-2e6c26dfe90e", "comment": "Malware payload (Mirai)", "value": "9e7cff3d189a553e68f6330154688b4f019a5ed2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347865, "uuid": "ac3c8ad9-47c5-49ef-91ea-17b863953b89", "comment": "Malware payload (Mirai)", "value": "e7b63e34a386530fec7ddd2608ef972beea4160b0683d66f4c42f71d698cbf01af62e2dd4a7f29b9d03bfc62dccf9e61", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347865, "uuid": "235a69b8-3463-4cef-9dca-ba1cec354a52", "value": "T1F55302A3A8C8056CCFB31D720F2E55FAD940CBE57107352CA1D880D45EA0667665DFEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347865, "uuid": "6a0f2cd3-1c22-47e6-b80d-3bac5a40533e", "value": "1536:DHAZdYokV7gX5ReEbBv3uRLZ2iBS6uhmZ+JArtte6o7ZQoLkg4azH9:gNkq3eEbBvmZhE64J+tte6NoLGazH9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347865, "uuid": "030c3f0c-b5a0-48d2-98c1-e942b6b184cf", "value": 60772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347865, "uuid": "c39c3765-115d-4e77-9d5b-f15a9bda2267", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347865, "uuid": "06ac666e-931c-4e21-a357-12cbcafd40c9", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "516638c9-de9d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766342770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342770, "uuid": "7866cb0c-05e2-4e9b-b264-bfd849e8627f", "comment": "Malware payload", "value": "ca978b801c3c62f2be8b500507d52b40", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342770, "uuid": "68bd27b1-8497-4728-a019-85c300676b99", "comment": "Malware payload", "value": "b0512b00c39de877b82417bb1aadaade779c1fb409284eb84da2ba8ebb2931a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342770, "uuid": "21cc27f5-5fdf-4678-ac0f-5d6c68b3a8b1", "comment": "Malware payload", "value": "24fbd7aaba055cf369f57dcf66c19e6542c62d1d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342770, "uuid": "1bb228f8-25e2-43b9-af28-cc66c0c61bac", "comment": "Malware payload", "value": "133d909c74de23299da6b28ac55a17517eebd1cf1bf18cd6bc8f644a0e50ba67abc033738b89566aae75afd74cf4f76c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342770, "uuid": "086e6cba-c373-4f57-8b93-b43bc60656b6", "value": "T15307F95AFB7600C2E4BAC0399252E227FD7134AAC37563DB96415A561F23BF4AE3D340", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342770, "uuid": "d1ba0e78-0194-4b2d-a550-c58a9b5d9435", "value": "95c19080afdc9c833af572e76165fa41", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342770, "uuid": "f216f139-1684-4fc4-a0a5-75a41b08fa16", "value": "98304:wFL9PL2JBoka7wKASrgxDfji1hbfUpGyNFnJhN+VCDMvPbE:oCBirgxDfji1hbfUpGyNJLNRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342770, "uuid": "0150e1d1-9158-4d44-a502-e0b2c4d111d9", "value": 17807872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342770, "uuid": "e0188157-f571-48ac-987d-6be18c749cee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342770, "uuid": "f06f0ad0-32c7-4163-995e-54c2925ab5e7", "value": "b0512b00c39de877b82417bb1aadaade779c1fb409284eb84da2ba8ebb2931a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3f14d25-de7b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766328413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328413, "uuid": "442e475c-09d5-46f4-9f82-9a83086caecf", "comment": "Malware payload (Mirai)", "value": "8a760484852215b3f352eb4b1f2c5988", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328413, "uuid": "cd969b58-f5e7-4486-bb3f-c44052ae54b6", "comment": "Malware payload (Mirai)", "value": "b0b492ba5baabb241a6b203ff4b33517e407e417c55f78d33dfab38cfca07f2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328413, "uuid": "cbb40e38-78d7-42d0-88f0-fa76e94454eb", "comment": "Malware payload (Mirai)", "value": "32cc2e516883050cd0a59a2fcb025bc6d1ada88f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328413, "uuid": "5ccf557b-d7e2-416a-a19b-91bb0a963b3b", "comment": "Malware payload (Mirai)", "value": "d01ddff225516e934858ff822470d80e7bb4f24d790be31446eb0d131b434e8f3679fa18d63abac9d6a8f1622cb51c74", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328413, "uuid": "79b95800-164d-450b-a2e9-4ecabffd3908", "value": "T178142A45EA414B13C0D327B9FA9F424533239798D7EB73069928AFB43F8679E4E23506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328413, "uuid": "c6a5e308-5cd8-4f40-8af9-cc7f59f808fc", "value": "6144:pwJWk5pMVgaxKxCBwisYniN/rWurZSeM/RWvKi:pwM+MVgaxKxCBwhg8hSX/0vKi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766328413, "uuid": "6839e079-4f3f-41d1-8ce9-36d246d431a4", "value": 204186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766328413, "uuid": "0ff83eac-12a1-42fe-98e6-0f1da24a00e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328413, "uuid": "b05a038c-c996-4f66-b1a8-b1a5d0386102", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704f476a-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338956, "uuid": "58733686-692c-45af-b687-1eb0a4fccf42", "comment": "Malware payload (Mirai)", "value": "494b161321628a7e0f10ac9e942b9efb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338956, "uuid": "81a87b3c-9387-4102-82d1-82aee7462ae3", "comment": "Malware payload (Mirai)", "value": "b118c0f6c43b30c2b22fdbe35881aa4a12db2c2f3a086eb5cffee24ed2522659", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338956, "uuid": "7d9f5642-2958-448b-af4c-bcfc7a851261", "comment": "Malware payload (Mirai)", "value": "81617fac3ffc633d56fb84e6bc5e7b61ab6ea520", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338956, "uuid": "da48095a-58a2-4975-bbe9-a136252634f4", "comment": "Malware payload (Mirai)", "value": "9c2c3e9af686b35b26b5e6158639f41a80d6710a2d624e5fecc6a4ece0063b804d8d067d46303188e9b7275e9615486a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338956, "uuid": "2ef38111-0115-4404-a6fc-a6c264488664", "value": "T17C332942B22C094BF9E65AB0353F0FE093BFE98024E4B585695FEA458136F335586F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338956, "uuid": "0516f6bc-d78e-4b09-8578-f81040bbb0d3", "value": "768:/KfsbnHAt1ezbnAgCN7RkIV3fgB1yRNRR7Eg3tbv6VFssuWXwdyBB:k6HAt1ezbnAXZUBO33tbC/3XwgB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338956, "uuid": "38a70e24-aa01-4648-9192-75fa3fff15f2", "value": 51332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338956, "uuid": "f30a02e3-df91-43e4-864c-1aa50fdfb205", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338956, "uuid": "f5c65881-f4da-455d-8be7-75710e10c7af", "value": "Josho.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a2bc4d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309364, "uuid": "7fbae345-bdf4-42f4-83dd-8a4df96e0dd7", "comment": "Malware payload (Gafgyt)", "value": "95195f491aaaf7357b3a2c8fcf8378d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309364, "uuid": "c09efdd7-8746-4f56-be61-3ff3f79a4789", "comment": "Malware payload (Gafgyt)", "value": "b1500282a2ee850ea50c95b65de0178c6b724076ea6b461c6d3a6aa5805f50a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309364, "uuid": "40969f2a-30ea-4db4-a58f-5ad8267d3a18", "comment": "Malware payload (Gafgyt)", "value": "12874365b4434ec32d596bf73f7f749944b5111a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309364, "uuid": "ffee4cec-8bb3-4077-a370-19221cf246db", "comment": "Malware payload (Gafgyt)", "value": "16139f1496ee74f4b9d14ac2e182238951c25847c8af2b0d1d16088133b869c82a8beaef7aa7f24d06bbfd7fceed95b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309364, "uuid": "a71bd6dc-f5fa-4222-b78e-7f21cc71fcb1", "value": "T1ACC3093B7B270A23C0D9507102E31332B9B9DE5938BA43D7A9D07D9C6F3A58834567E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309364, "uuid": "1ce5acad-719a-413c-a2c6-24245ea01a81", "value": "1536:ctrv5GE2dFg8aI0DN95P8tf7PJtAURdc0sfm7ypwYujl3IdnuW:ZP0DNPA15sfm2pwYux3I5uW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309364, "uuid": "c83ca503-f968-4caa-bd6a-128c489d1b75", "value": 126446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309364, "uuid": "b4960b78-0462-4dce-b7b6-f98158926240", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309364, "uuid": "9b1bb56b-b410-4ddf-aa75-7e0069a4aeb2", "value": "dc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e62a3b75-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309519, "uuid": "a0e5f012-392d-4933-b8c7-9f8b8040c87b", "comment": "Malware payload (Mirai)", "value": "c87c29edca1a82e09b16604a8b157d7d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309519, "uuid": "de265fb9-d551-4a0f-99ad-420228c05873", "comment": "Malware payload (Mirai)", "value": "b17eeecbaf37d56aaa2ea01f57a214cca6a42ccd8efc3c7cc8033418ce06b97f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309519, "uuid": "82e3a09a-588a-491a-88b5-4d772488f5dc", "comment": "Malware payload (Mirai)", "value": "7de674fe81868f0d90e83adf4dd0adae988a48e3", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309519, "uuid": "51735e6c-f99b-49c6-90a8-4a48eaafe4be", "comment": "Malware payload (Mirai)", "value": "daff6410c6f288a4ffa508d4371fb03055c79ec22ae2d7c6530bdb8f772e669c90e400b14166d0926bba49c9256ba259", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309519, "uuid": "cacae9fe-2024-4ce6-9047-bca2d15c7423", "value": "T18D61848A1115E7392E67C72273B745D972E0E1EAA1C39E4760C878F3A44CD4364A1EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309519, "uuid": "57d3f691-301d-4b83-9662-10512507c4f3", "value": "48:v0ks1ks7IjksQks7ksQkspksFBLksaksbksOkscfksTksHksZksR:v1sCsvs5sAs5sOsMsLsgsXszs4sEs+sR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309519, "uuid": "df193cbe-be33-49d1-8313-87ca20d5d37c", "value": 3392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309519, "uuid": "bfd970c9-98e5-4b39-8d4f-9ddc692910d3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309519, "uuid": "e89348bb-cee0-46c7-ac23-cceac33ca635", "value": "dvr.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9a54c7b-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335295, "uuid": "85e2398e-e9ff-438f-8e7c-31030ffba530", "comment": "Malware payload (Mirai)", "value": "feef86afd4912608391d8aa11cacaf47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335295, "uuid": "9d448892-22b8-4872-8cd9-f1bf55eda154", "comment": "Malware payload (Mirai)", "value": "b2e51bbd59f217cd66363d02818fb02ecbd46126494c11155a777a0d7a0e6356", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335295, "uuid": "92983a86-7a97-424f-abd9-44e97623853e", "comment": "Malware payload (Mirai)", "value": "6b223099a7ec0964d714996310643bb58be8e5c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335295, "uuid": "abac0a90-38cf-4ed2-91b2-ea1a6164dc17", "comment": "Malware payload (Mirai)", "value": "1a91fbd2d0087089f9dae923f68819b27ae5245aac51163f67eb1c0b00e409ec31c99c5605ca079625a7ed7c5adfda1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335295, "uuid": "10af27f0-8e30-4884-9746-041958c6b177", "value": "T13F63A506BF214FF7DCAFDD3749A91B05258C640B21A97B397E34D828F64A24F19E3860", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335295, "uuid": "f4066690-1e87-4624-8d3e-9ff0ca12dd76", "value": "768:QxNCJ0EYlDYhHnUwqsFDwLX3U6ngBhN6PNUpGXS5SyeweVKe0n3oNWpkmPqXitMF:QxNCJBYl0FwwjhwPTXSNxIKzn6CpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335295, "uuid": "8df31014-9436-4b3f-abf7-f8b5b7b722a6", "value": 71528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335295, "uuid": "fed89f32-bd5e-44db-9b21-077eb7f93ac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335295, "uuid": "222d88fd-8793-4cd4-a60d-ea67e5e26756", "value": "Josho.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e7383b4-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344376, "uuid": "d7b50a3d-adfa-4543-b1b3-9daa6d69ac9f", "comment": "Malware payload (Mirai)", "value": "1e074705624f69fe3c28e24490d35631", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344376, "uuid": "e373f1fa-93fb-4f47-a9aa-bf8268165c80", "comment": "Malware payload (Mirai)", "value": "b4848bf6aa5d58970b3bb9afd2cb6b8cfa34cdeed0dc1ce2d1aafcd694788ea9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344376, "uuid": "cb373aa0-8333-408f-af9d-edf198a5c321", "comment": "Malware payload (Mirai)", "value": "a313f9f181e33230be038197fd51844937406141", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344376, "uuid": "a6fdad2c-6ace-4c1b-827d-cdc2660af821", "comment": "Malware payload (Mirai)", "value": "e0fb7e61804742d531c9728e90d560b9ffeb9f567a6cf1f2eb2b294e7d26eca28192f0ed09a6f50f95d88afbff98f797", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344376, "uuid": "a62b6d1b-f4f6-4453-bda9-ecf9de48bc81", "value": "T1CE04B716AB550FFBDCABCD3706E90B0139CC554B22A93B363674D928F54B60B4AD3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344376, "uuid": "ca399964-c2a3-4546-b99b-ad6f41b77e3b", "value": "1536:eQxpoSGzX/J1aAsWxTCScaH2vb6cGGFgb4/ZU0pREJ05OkovNuvVZOfaxQN+bwm:eQxpx4XRjn+FgbCyJgOkolu7Ofp+bwm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344376, "uuid": "d12112ea-a208-4392-85f1-647607c6b48d", "value": 177724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344376, "uuid": "72f25fc3-92b7-4505-8a11-aa895ceb1295", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344376, "uuid": "c02e76fc-5872-4241-a694-01132a2fe85e", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cc4d6f5-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329770, "uuid": "07b1ad6c-7410-417c-a77e-6b61c726a663", "comment": "Malware payload (Mirai)", "value": "004af4d960f72d01867387857d35e9d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329770, "uuid": "5a9dba68-8bbd-4ef9-a8a0-b4c9a1ec1022", "comment": "Malware payload (Mirai)", "value": "b493fd982c2231468c037262657fa521a592140f0824d90466a71ba0f18baf9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329770, "uuid": "23f50e9a-a220-4da4-a48c-1950399cf893", "comment": "Malware payload (Mirai)", "value": "192fe66f4f667381bdd02139d695da5505f1ce85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329770, "uuid": "f8cb4e71-6d1e-47f7-832a-eedeca941c6f", "comment": "Malware payload (Mirai)", "value": "76e9ce1368bd61a0a7fc5831792e29574e1b12d3009db8b049da163d001ea98bd860a19db09e6999f1bda282cf2f7e99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329770, "uuid": "968bdd09-f04a-411e-af4b-c4c42da8a10c", "value": "T10E83D749BBA14EFBD85FCD3701BD4B45359C920722A83B7A7670D418F29A14F4AD38B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329770, "uuid": "85743e40-ce05-47e0-b8cb-1bda1178e5dc", "value": "1536:gUnCPbnBrOU5nWZvzmFdlR5JtwOcj6e3kw6G/TlbVR:gtPVr7isw6GTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329770, "uuid": "8f464f3f-6530-4b07-82c7-49f5c3a7075b", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329770, "uuid": "134f0556-9d56-461a-998c-682baffccf47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329770, "uuid": "a6f1f581-6e79-4231-be9d-2bf8b5e4644b", "value": "nabmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "619f8ba5-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340220, "uuid": "c7323922-9d92-47b2-ac6a-22f09f483abf", "comment": "Malware payload (Mirai)", "value": "617b696e76a2f7988654e32b7b2902e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340220, "uuid": "9927a756-852d-4b14-bfa4-afa71d720100", "comment": "Malware payload (Mirai)", "value": "b49cf6e5d5df515e49a55b2be4ca11651e12ad82d7acf443adae026b40f9e151", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340220, "uuid": "64a004fc-219d-4d32-9ba4-1d80b99f60f3", "comment": "Malware payload (Mirai)", "value": "5e0fbde79e11c0b7d68c8c42c38544184df0206f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340220, "uuid": "84848c47-1f87-4638-8934-caa918de53ca", "comment": "Malware payload (Mirai)", "value": "0894cd28d6fc24c624175f2516a29d14f54195e23821f7b7d9ef5b7106f45f5c4de66424a6322ea5f1a056f2bb78f942", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340220, "uuid": "5f38c2cc-3e00-4f7d-a337-1238434a3dbd", "value": "T167A3D61A6E219F7DF76CC23587B78E20A75833D63AF0C645D26CE9005E6034D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340220, "uuid": "5922690b-0083-48f4-a0a6-43366daf3655", "value": "1536:FLr6iG+P4kSkbGiK96rjhNnfcMljn67rPiK8yKm0yKKyafkskjslNmUEhu6lbT2H:F6z+PhK9OrnfcMljn67r7UAKzxlbT2H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340220, "uuid": "b0cbfb3f-9822-41d7-b013-b360952414a3", "value": 105500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340220, "uuid": "1bbb9528-0a2b-456c-914d-6fc2a68ad199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340220, "uuid": "b768c3af-4bf0-45eb-affb-3ad2fcae4823", "value": "jklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c657014-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345392, "uuid": "6f9eaa1a-e43d-4153-85da-3a1ad01e738c", "comment": "Malware payload (Mirai)", "value": "3a225fee880e54b2696da8f22da0b105", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345392, "uuid": "fd8c691f-fadc-491b-91f9-d7870a036207", "comment": "Malware payload (Mirai)", "value": "b4a358851f870e634c6c7c00a46b1ecb28f3c96a1d3d76d263c073427b18116e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345392, "uuid": "288766d8-ed76-4755-86f1-9da101454a80", "comment": "Malware payload (Mirai)", "value": "ecfb5d35e65f441d3774736c206acc4d01b56a1b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345392, "uuid": "1796278f-e6a6-4da7-8227-38397f4afdd4", "comment": "Malware payload (Mirai)", "value": "34f83b36291f64d4b1fb732601581fb021182fc4e6d008ebfc839e6f7453f74aa620e5c9f72481956c521490574c2f7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345392, "uuid": "a6f847a0-c571-4697-8474-28e92ed77146", "value": "T1AEA30886FD819B21D5D522BEFE1E518D331357B8E3EE7212DD206B25378A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345392, "uuid": "3124922e-00ad-43ec-80c8-f5d4293941dd", "value": "3072:UCGY1QTVbVpT9eQSnISBJyCpAvF7ExxSqT2l:UCT1Q3eQ+ISBJyC6vF7uxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345392, "uuid": "ffc3e3e0-165f-48b2-ae62-c25b5ef1bd41", "value": 105120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345392, "uuid": "842be599-81f1-4427-a67b-606436f282e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345392, "uuid": "ef4dcb50-00ba-44d7-9a81-56b67609a4e8", "value": "splarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bd04406-dec4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359538, "uuid": "89d203c7-39a2-47c9-b094-3f710ef06a89", "comment": "Malware payload (Mirai)", "value": "0db652bb4ef23b992f306e551dc44299", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359538, "uuid": "c26b80b4-a026-4d17-a793-a0b36ebc9064", "comment": "Malware payload (Mirai)", "value": "b4af234303f169d2c19d42bbcd6d1d5788de4e2081a50e8cf472de05dbd0e175", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359538, "uuid": "dae33ee7-6321-409d-8ad0-6be997251577", "comment": "Malware payload (Mirai)", "value": "bb90f07ee7394183c0e9f74db08b6379a9288469", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359538, "uuid": "36a772d6-bf47-4a8a-a34e-9d2ef91dd6c7", "comment": "Malware payload (Mirai)", "value": "bee1819f606da2018fcf65b97a08d685a10273518b87023bc35feb01ffda3302f7f1c7dd1730b11de8159a8655c590ff", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359538, "uuid": "eb3db548-5770-4b38-aa8a-fe7cc1d24db2", "value": "T168A3C51A6E159F7DF76CC23587B78E20A75833D23AE1C645D26CE9005E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359538, "uuid": "7c441c8c-cdd6-4354-8f1c-f404d0f598c7", "value": "3072:2qj+vh6NL8nfcMlMSzgv3TdMQ+jSyrT2fe:2y+vIBAST+QiHL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359538, "uuid": "d6316c6e-57dd-4f8f-9df0-05bdd7211c6d", "value": 105516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359538, "uuid": "04ab390f-5852-44fd-97ea-488ef5b5f8ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359538, "uuid": "f70bce0d-fe62-4caf-a853-67bd7c6a79cd", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7c436f5-de64-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766318568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318568, "uuid": "8287ebda-9876-4323-8711-701213793302", "comment": "Malware payload (Mirai)", "value": "605a3ee67dde53d61aaa47c622b6587c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318568, "uuid": "a6c15232-9999-4bc9-9b1f-9e346d84e6e2", "comment": "Malware payload (Mirai)", "value": "b4ce5e5924997075e9d3cf9f392a935d7d3ff5c7131e5626d532608272e68a66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318568, "uuid": "4097db8e-5e2c-417a-81c8-90fb494b5dc3", "comment": "Malware payload (Mirai)", "value": "d5ccd8df8ce9f5a6628c33c8599c46c15ee24491", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318568, "uuid": "e9b2ba63-e622-4020-a93b-a757c3346ab0", "comment": "Malware payload (Mirai)", "value": "f68c9af40764f4727fcd6541dee9affe91a0a1b5ca79f8caca1d141c9f5ccb4caa336b1d9bd8c4679a0bdf193a201464", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318568, "uuid": "5270e65d-c09b-458d-96c8-a9c36665cfc3", "value": "T16CB3094A7940B726C6C21B77FE4F134633674B58E79B334199281BB46F8BB1F0E26506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318568, "uuid": "5d212f2a-8621-48fa-815c-eefc524832f3", "value": "1536:PrnBNZpJ5pX4aMfqynq+K8EUPUUSzTQw1kpc0mloy8hiZ4WC/SY9GsPgf+SpT4sW:HN4qynO6XSzTQw1kz24WCaXNvQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766318568, "uuid": "47cdca0c-1c85-4ef0-a30d-40f38a4f69f7", "value": 112588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766318568, "uuid": "1b9d2e4f-4d5a-481b-8c40-5d7c280f9380", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318568, "uuid": "f18ee941-b41a-44ea-a607-41809d846943", "value": "n8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b25d41b-dec5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359832, "uuid": "aa650ce6-2fe7-452e-9102-7f6bcd8225ee", "comment": "Malware payload (Mirai)", "value": "8cd70d9e30cd1ad36afcb4be7a6e3cd9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359832, "uuid": "e758e849-9468-4f40-b17e-298039a00852", "comment": "Malware payload (Mirai)", "value": "b52178c63bf2d1f87a00de1b5eaf9cd1660d4fc120477dc8c9b22dd425bd72f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359832, "uuid": "4707dddf-84a5-4897-891f-9337a99b1653", "comment": "Malware payload (Mirai)", "value": "237796a7d82524c477e39d5aea92dcdf649501ff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359832, "uuid": "04c12c5f-e8be-4d68-a6ee-7339cd38dcc7", "comment": "Malware payload (Mirai)", "value": "772663db9d551433eb9fc829009742604951457f2fdf2b1647c5440a3dcfb1bddd6569dca2a1d3bd4e0ace3c6da56b04", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359832, "uuid": "9ec57cc5-2b1a-44d5-a0ef-df9203f3058e", "value": "T163A3D61A6E259F7DF76CC23587B78E20A75833D63AF0C645D26CE9005E6034D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359832, "uuid": "a0daa18e-932d-44f8-b81c-60fcf0e4fa70", "value": "1536:FLr6iG+P4kSkbGiK96rXFHnfcMlmn6763iK8yKm0yKKyytkskjslNmUEhu6lbT2C:F6z+PhK9OpnfcMlmn676LiAKzxlbT2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359832, "uuid": "01da15f1-ebce-453e-b716-96f3b7dc34fa", "value": 105500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359832, "uuid": "00aaf814-e6a9-4c96-9bf2-cdf8b5a21509", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359832, "uuid": "810852ef-b6be-43cb-9720-aec14088315c", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91aeb580-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342448, "uuid": "97848d52-cac6-49db-9914-3bb170f11044", "comment": "Malware payload (Mirai)", "value": "f318c337c3d7b029577899cf1f089482", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342448, "uuid": "f8cedf4a-86c8-463d-979a-5f436cca5c7c", "comment": "Malware payload (Mirai)", "value": "b53de93f49732dd6408a25b24cb7f3c599c98e1f1b402a727ecf1acbc02c33a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342448, "uuid": "cf7d0c0a-1276-4d48-bbe8-ea0cb8b15d76", "comment": "Malware payload (Mirai)", "value": "13c4db51339959679fa9aa0b56fafcd95c0d49ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342448, "uuid": "7428c0c4-63cc-4cd6-8762-89297882817c", "comment": "Malware payload (Mirai)", "value": "85b19b541d2e057d97bf0a82fc1adea2e822d6da3f243c2a58da0581fd361fcf442292ca047bb7b4668a29448070b218", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342448, "uuid": "df444e7a-4a57-4cc3-a49d-6a244dd5eb73", "value": "T143E329CBF800DEBEF80AE73748530805B530BBE155925F372257796BAD7A0990973E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342448, "uuid": "79d3decb-feff-49ef-b024-8baaf6be7f68", "value": "3072:UGUbHhBMcvNeuNhTo4u/k0ijVUjbiSLWjTtFyRERiY+U:eHj+uNhE4t0iqLIyR+P+U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342448, "uuid": "ea9cace3-3737-4287-a2b9-30eb4a1cfbe3", "value": 151168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342448, "uuid": "cd3e5ee4-e1a3-4c45-84da-f14bca2188e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342448, "uuid": "2a004d2a-14c3-45ab-9d5c-7e8f5e4dfdac", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70fe96a6-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338958, "uuid": "e0ccdbaa-526d-427a-b4b4-9503d3313e43", "comment": "Malware payload (Mirai)", "value": "06afb947a0843c76e3f29426b8ac6bee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338958, "uuid": "0e369e79-ceca-4840-ac71-698577afdfec", "comment": "Malware payload (Mirai)", "value": "b5420b2b7c6346def9b749ace18a94371aadbb07b6b02fe4f0a4883c3ba854c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338958, "uuid": "552e7e46-b293-4e36-8b2a-ee0ee9d62090", "comment": "Malware payload (Mirai)", "value": "7b4ad5964045ff1876f7bdf73dea118e83982cbe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338958, "uuid": "795ef964-8c56-4337-bbed-396e7f41902e", "comment": "Malware payload (Mirai)", "value": "c417b9e639356ce4d3082961208e96e03f0ea8768f8cfcb1c81d9c83e9e1da69297a0f63ef133611cb44b5e70ec7e9a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338958, "uuid": "4fed55f5-3247-4720-bb40-1f0ba33bff05", "value": "T17023F8C27942B639C3D0577BEEAF014E3354A7D8D1DA3397C8281B947A8A90F0D67B46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338958, "uuid": "6a595867-143b-4932-a32a-3150428c5648", "value": "768:U19jSzRmPWF8VPebVsl0u1XZB1v0meGWDoCerCjwNWWd0yChk7wCVy/rCxHghW1R:UnjGmGGPeuymeGawNWA0yUfhW05J+rx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338958, "uuid": "0670b1c5-6aa9-4481-8f55-927a7b51ff37", "value": 49144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338958, "uuid": "85d46edf-765c-4db6-8e7d-6821de35ec42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338958, "uuid": "0c3fc747-c94b-4634-86f2-5213f81e2238", "value": "Josho.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e1e3c19-de9e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766343194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343194, "uuid": "a762ac7b-e838-4909-988f-d5e111a35f63", "comment": "Malware payload", "value": "770c015d551d3d96916d514b68f8f14a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343194, "uuid": "0a177cc3-a405-4500-a502-b0109378b5a9", "comment": "Malware payload", "value": "b5555015c3fab31248c83cf8078081558887d3cf2d5982cffd3b896161ef3680", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343194, "uuid": "bfe79d89-3e71-4124-947e-8925f0d9af46", "comment": "Malware payload", "value": "fb6b73a27885fcda933055c41d864b4525793162", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343194, "uuid": "f008fd76-97f0-4478-8131-51ae51be4328", "comment": "Malware payload", "value": "09c5065573f9bbbab024d2b51ca1c075fcbdcef40bb4c9e63cb9d279667e3cab39c794a6debe5e8b26c51898997a802b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343194, "uuid": "c8deca09-f4f4-4474-8739-5bac9dd6edd9", "value": "T1AB832986B881D612C6D5667BFB5E42CC332613B8D2EF3207DD25AF15378682B0E3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343194, "uuid": "515b9798-8a59-4ed4-8960-377ae9b0a1ee", "value": "1536:av0KaoEPLgbqMagR5Iq4LCemKMSJddpcZL18PwucvGT2bVRgPZ:avjPefmemKMSJRcB1GqGT24PZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343194, "uuid": "ca978c31-10f6-46ba-84d3-2e3f6dfb9c60", "value": 84712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343194, "uuid": "3106e8a1-502d-4c82-84ab-e75b88aff965", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343194, "uuid": "d02a3a8c-8bda-4948-9265-45b8addbc8d2", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe94a5df-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (MIrai)", "timestamp": 1766320727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320727, "uuid": "3f800c19-3462-4161-ad08-be89af2c781a", "comment": "Malware payload (MIrai)", "value": "f711166aca42dae0015c542403031075", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320727, "uuid": "2a491eac-d22a-45c5-9c76-588acaca81f1", "comment": "Malware payload (MIrai)", "value": "b60093046813a92c89e2c494a555d6964dcbae15213d2d7d1d5ec77e3cdc17fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320727, "uuid": "3e6acea6-8b4b-437a-9061-0f615f372a77", "comment": "Malware payload (MIrai)", "value": "a2d90405251bab0818ed2deb3f76d075bb159de8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320727, "uuid": "6a3204cf-5971-4b91-a572-7c9be993ce7e", "comment": "Malware payload (MIrai)", "value": "7d3db1692593d1969d040daf60e9778c21823786a81c9f6265ec160530aabed7aac710db71b200b45e87fb5cb19fdbe0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320727, "uuid": "b1826054-7d75-4677-90d4-dfb5ba4a0561", "value": "T15863B752B8859107C9D8A6B7B31E019E330513A8D3EB3307AC356F623689D5F0EA7E59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320727, "uuid": "6c0dc884-5cb3-4393-bf1c-25a3942dea43", "value": "1536:dDWw1GSIyPqjbJIw7v+lZRWLeQIz/Ge5m/vdIku:dDWw1xIyGJIhB1zad3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320727, "uuid": "d565fe2a-0170-433f-8833-20f8fd9fe965", "value": 71180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320727, "uuid": "eb95edb2-3b39-4633-9c5f-08438958116d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320727, "uuid": "1056d478-3827-47f3-bda4-434d3edd5ad1", "value": "shadow.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d31652d-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345367, "uuid": "04e16525-55be-4d52-8fe9-4d4691603608", "comment": "Malware payload (Mirai)", "value": "85aa98fa86e8c953179d4fca65429e64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345367, "uuid": "6bd6b582-382f-4886-872c-7811cabf1bdd", "comment": "Malware payload (Mirai)", "value": "b60ebe01143a71e127714a3c7c82be18c97c57d803cb60b1737aab0161b8462e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345367, "uuid": "afd149ce-504f-4f81-a032-78b2fec7f0e7", "comment": "Malware payload (Mirai)", "value": "63c528f4fd0be947a723154eb029c665bcc3273c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345367, "uuid": "be0d1707-449d-4e91-ba09-08d4ce9adf69", "comment": "Malware payload (Mirai)", "value": "370e4f679c1e9508d3ba9847a4cb87513db2f804f7136063d3fb4d1cd829df876074f3fd97c41eff2edb25f0ff1e6ba9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345367, "uuid": "5e73ea25-49df-4d76-9a83-0785c2b289e1", "value": "T1C96312E69635BC4FDECC6A785450127AA08CD3D1F373A95075DBC84E975922FC01C7A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345367, "uuid": "2f72baa4-da4c-4291-8a9a-81a6193f102f", "value": "1536:XVUQ0TcrWCT3gcHB+cyepg1k/zJhw7nWAvnQGUgJViXZjbzbNZ:Fp0T2WCbgc8bm/gCAv3JwpjbzbNZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345367, "uuid": "b792e6e1-ce21-4c8d-99f4-d97ca190e63c", "value": 70436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345367, "uuid": "86731dd8-aae8-4d9d-90fe-5205de0f5a06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345367, "uuid": "702bdbc4-87b7-4de7-809a-aff3c2d99542", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3d856e9-de33-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766297409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297409, "uuid": "d621c2cb-6c5c-4599-bbc0-038339949431", "comment": "Malware payload (Mirai)", "value": "aa167b7e64ed3bc2bb9419bf9a0b89cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297409, "uuid": "4f9ff380-e580-49e0-a9ab-6223d80250b9", "comment": "Malware payload (Mirai)", "value": "b6ee760b9fbfe272a0013850886a8e4e0b4fd824fb44b2a038ce187e8126dece", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297409, "uuid": "0644167e-d5ac-4d1b-8c30-e24008da6b30", "comment": "Malware payload (Mirai)", "value": "1eea6f63d0ba700788fe641e3963af5f715f9ef2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766297409, "uuid": "146cf311-c959-4de4-ada2-d577c5244b8d", "comment": "Malware payload (Mirai)", "value": "76e60f25bf6a92af4ee8fd8201db2739226e6511b20a3ac5ea8eb6ac9253e395a06c167c9c0ca11260d6d4867112f3dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297409, "uuid": "a482d6e3-64cf-4b18-9d54-14bd9a39d5ed", "value": "T1D2D38CDB734F9860C4618BF01BC78F8E2A6362168E1789E71E1A2679393D7CF15197C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297409, "uuid": "50427c53-f3ac-4d92-8c5b-54848306c659", "value": "3072:quHaiqDXFntJUKqCQXM1Fj7EfooZu5jyghndfq:qXDVnqg7A8dXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766297409, "uuid": "7a31c56e-8157-411d-9faa-5530b7fbb64a", "value": 140656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766297409, "uuid": "6fa86d29-3327-4362-bbc9-755f58b86bf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766297409, "uuid": "edeb457c-25b7-45dd-8fe0-ed68b3cf79f8", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0aa54e51-de81-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330625, "uuid": "5d27d9d4-f145-4b59-9768-b03219a73289", "comment": "Malware payload (Mirai)", "value": "bb6223f3ecf0b937268b4bda5ba6bc6a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330625, "uuid": "2c96d2de-0314-4cb5-bb68-58eef5dc68ff", "comment": "Malware payload (Mirai)", "value": "b80c304c154e78c442f468a2d986124c4e14222c343aff4cdd3d332c9ac3822f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330625, "uuid": "80239279-e0a0-4b4f-b20a-eb4c53fc0440", "comment": "Malware payload (Mirai)", "value": "cc688571a5cd955fce8cf47f2e3e2c129498dcf9", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330625, "uuid": "66705073-c500-4701-9415-520d811c6e4a", "comment": "Malware payload (Mirai)", "value": "c810f58a8ee65e99810be1668cc796efbc3f2a1f0893f835d556d097c5949ac71fb12229b09d44d0017f57be8e22858e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330625, "uuid": "cdca5dcd-c18e-4732-adeb-68af0814af35", "value": "T12A71F0CD22B020367CA18ABEB2A786577BCFD376DCC51D8454EB34E864BDE4924D0B52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330625, "uuid": "afa56440-d6e7-4a91-83c0-6ba0d65ab54c", "value": "48:NB7+xh7oU8BI1ChwG7rsyj+HjKCbdUBAz82U7Xg5:NBQn1ChwGHaDKCbdUGz82UM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330625, "uuid": "dafe17dc-e696-4bf0-9884-7f776ed6e916", "value": 3751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330625, "uuid": "e2b78386-bac8-4fdc-ae4b-cd26c8f5bddf", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330625, "uuid": "eddd50ca-543d-46ce-8af4-b0b8b5898e25", "value": "bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec3f23a-de9e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766343195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343195, "uuid": "23d7c32c-7492-4c9a-8dbb-bf16083fb3e3", "comment": "Malware payload (Mirai)", "value": "599632ec7958388837c6782dfde40d9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343195, "uuid": "b1938fae-ff8a-4f41-a198-197dfdff1703", "comment": "Malware payload (Mirai)", "value": "b8a8d8bc1b9f20487d6964df0a311e47fb2954328258c25246b1de909577dc0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343195, "uuid": "04147c0f-041d-4d58-96f4-8e1ddbf64029", "comment": "Malware payload (Mirai)", "value": "edb58b100b7b2ec2ed2a48cf267136f6f1d039dd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343195, "uuid": "789a326e-e56b-4b95-8938-627e49a18686", "comment": "Malware payload (Mirai)", "value": "dbb4b9ed6523ac1210e63e726864a09779fa9cf82b388c6339f1d57d3fe9b17ffaa7ec090e8eaf6695029bf7c1f709c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343195, "uuid": "1cb40f8d-a58e-4283-8bd5-cc30c12adc08", "value": "T16B14961E6E228F7EF6A8873547B78E20975833D713E1D645E1ACC2101E6079E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343195, "uuid": "ed778a4a-711f-4548-b22a-878863146112", "value": "3072:dGuOZYs8BtEBjPYa6HOGvT+mBsmLtqIpMBP:dGuOb8BtEFJCgmRLtbpMB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343195, "uuid": "f3eb3a0b-e810-4211-adc6-dbb8c5411fb6", "value": 206684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343195, "uuid": "838613a0-9c73-4e0d-a1f7-ed55beea59d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343195, "uuid": "9270df51-89ab-4b77-ac89-110cae84710a", "value": "yamaha.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b91671d-de95-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766339217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339217, "uuid": "24957b8c-6941-4462-b728-2ceec75d97ff", "comment": "Malware payload (Mirai)", "value": "507d33979191ee61ceb3cadfed4ba5b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339217, "uuid": "8326200a-bd1f-46dd-9c17-3f8f175aa989", "comment": "Malware payload (Mirai)", "value": "b8f119e084f2d7b1a8f51134b54afc2bbcca63f5d57b5e3a2962082c1902c09f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339217, "uuid": "a76430f6-d105-4b31-975e-e0e5cd4d7e9b", "comment": "Malware payload (Mirai)", "value": "377014cd6c199395019a319d13ea79c364bc92a9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339217, "uuid": "31ac8c28-689d-43df-af15-ccf8e04ed914", "comment": "Malware payload (Mirai)", "value": "840168bbd8d75297dfc509d6bcedfce351e90ee80f8cb6ee27e39d3b5885ba9631a82c5d939fbed95356c2f8ddad4d76", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339217, "uuid": "2715e425-ecc5-431b-8bd0-d9454ecc0cab", "value": "T1E6B31A5AFD81C551CAD31A73FA1D9289772752E8D3EF310B9E294F21279B82B0E7B500", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339217, "uuid": "a844b560-1852-4d56-9ca5-8274feb41267", "value": "3072:jHVV8A5PP5l0lHlLlxlWlPy6lwlClM/l1KlZGl6ldlJIlSl0lMNl1l3lrlzl3l72:j1V8A5PP5a5pXo9y66ka/fKjGg7bIwuT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766339217, "uuid": "80ed9a38-c091-452b-94e8-d4b21e3148f7", "value": 117908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766339217, "uuid": "9d8640d6-3eef-41a9-867e-a8a257ef552d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339217, "uuid": "505585b5-332d-4b28-8807-3510302ec5a5", "value": "rondo.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b266c9e-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309232, "uuid": "140ca904-8ee1-412c-b249-39707bcd9632", "comment": "Malware payload (Gafgyt)", "value": "72368e4e7f16eaecddc4f2b719d51760", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309232, "uuid": "1b3d622c-eb44-4db4-8f58-ede2f24d61e6", "comment": "Malware payload (Gafgyt)", "value": "b8fdf0e2fe8d1e6412c9e1b88ae4e1278f4d104e629e2ff7ef7d260601098ff2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309232, "uuid": "90c9b6fa-bb5e-46c5-9609-8e465a0c2a3a", "comment": "Malware payload (Gafgyt)", "value": "66fd268dc9d2023e94fef3de6faf34e592a9d6f3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309232, "uuid": "07c65eb5-e949-46c5-8918-a440ea4ecc0b", "comment": "Malware payload (Gafgyt)", "value": "1b78769ac6fb005be317bb2df20ff4965384e2e866bd4b4c6b9d760488f428969b8f03c1ac6af971bb254a2958ad4d6c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309232, "uuid": "5b4a7228-c530-455a-8438-e3fe86118189", "value": "T131933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309232, "uuid": "cbe822f8-2d7d-4a23-ab8a-f67109f763d4", "value": "1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8kl4umXxVqDrstKfz9e:Q97vk51RcG7Aul4umXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309232, "uuid": "c3efbdd6-08fa-4afc-9bd1-cbc50db84e2b", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309232, "uuid": "de84a15a-cef6-4a99-ae37-a949996f17a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309232, "uuid": "d92f3d5f-774c-4c6e-9dc2-af7ec7ce7a1c", "value": "a-r.m-7.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0eb1754-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361050, "uuid": "0e68aebf-97bc-490c-a021-dece1a5188ed", "comment": "Malware payload (Mirai)", "value": "20c177e110d7b08ba6b775b74fd6cb89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361050, "uuid": "b0398831-483b-4f16-b355-c4c6f139f02b", "comment": "Malware payload (Mirai)", "value": "b95201e040a89554f506e19c81655dd8a26ddcb5940c0b11d7eacd63f7fd9091", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361050, "uuid": "d8014206-240d-426d-a49d-1af8cdfae6eb", "comment": "Malware payload (Mirai)", "value": "9abd441df58315bbb38f422b3d0336217ef39107", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361050, "uuid": "1f474bfd-5206-4466-a7f1-46b43f36493c", "comment": "Malware payload (Mirai)", "value": "8cb3c920d0b32ef40f818d39b00d8c6d045b2ba697dec66aee33a311ce7b09c04919566f8526e8bcc96765e8e07e6c34", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361050, "uuid": "8c17b9d7-f706-49bc-9dcf-3bffeff9799e", "value": "T111A30886FD819B21D5D522BEFE1E518D331317B8E3EE7212DD206B25378A92B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361050, "uuid": "a6a1c3b8-0faf-465d-991b-1096e1cba044", "value": "3072:hckXjdEj+312H7mY2u4SBJyCiYv87ExYSqT2l:hcyjdq7me4SBJyC3v87uYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361050, "uuid": "bdda6ea3-f96a-42d6-909a-bb5b5c1b8ce4", "value": 105120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361050, "uuid": "49fb8cf0-35e9-45b8-8c9a-ba0d477c1930", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361050, "uuid": "b90c3187-cd15-4237-b408-701b3924a333", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1332519e-de30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295851, "uuid": "d5a8056a-27ec-45c9-90d9-3e06c8a629c6", "comment": "Malware payload (Mirai)", "value": "46b61428db15b54d9b1202f6ca844809", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295851, "uuid": "fca073b7-168e-4233-891b-16468689aad2", "comment": "Malware payload (Mirai)", "value": "ba910e770a3dc0a56dc32f2730f559a9142917a9a6cefeb29301b129aad7fe0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295851, "uuid": "7e6f132c-e8f1-4aa2-b887-22a62e00fa7f", "comment": "Malware payload (Mirai)", "value": "ad96fef0c5fcc59b7abf0c7fbf6908d9518431d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295851, "uuid": "cb254f52-74dc-48aa-82f8-ff174c91964a", "comment": "Malware payload (Mirai)", "value": "ce4419bc5efb7f65a11e73e1ecb870dc2f7096a54f999643ce3eacc38675d49b9b024d6ca893e106b52c39f0a4c47891", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295851, "uuid": "621b92f8-f723-4a75-b95c-097c3c574c53", "value": "T105A2D019BF2886CBC832397545D9F6D22392FD61F29CCC0D2940D16FB4A33E96830E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295851, "uuid": "006d6623-a2fb-40dc-9c9b-21cc1109fada", "value": "384:Mg/Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT9:598o08kxofBE+ZkXaITbp2F2TWul0c5p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295851, "uuid": "807b7c80-2355-45cd-8083-34f18af14984", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295851, "uuid": "2b3954c0-cc1d-43c9-9a74-e66b09cbf6ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295851, "uuid": "0e87a961-c1e5-4cdd-8b30-dfc39ca49745", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98e21ffa-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329146, "uuid": "dbf8e6f7-1270-433b-8ee4-7205387f5370", "comment": "Malware payload (Mirai)", "value": "76831132be7cd075ebcfe48fbb6e1b2d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329146, "uuid": "bfa28ed8-fc7d-47ca-aec2-17766a495892", "comment": "Malware payload (Mirai)", "value": "babaa9bf3d7d56abbc77a49d11399ef9497efe67cf3140ef2ecceb99023cb023", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329146, "uuid": "ae40bfb5-32dd-434e-bed4-25ff4e8ba47a", "comment": "Malware payload (Mirai)", "value": "440981e5018489d299c5985dda1ec11fed86e4bf", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329146, "uuid": "1f5b6780-2935-40b9-baef-e738f2ae5bf1", "comment": "Malware payload (Mirai)", "value": "673f6c8f30a3ef374e19a4e4f20e5f8e1b3fe73f4cdf71acdee7c09ea608f363b408cfcc71dba01d1cd1b49a5e21cc70", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329146, "uuid": "fbeab50c-b945-4a3f-8f3d-252036a789b9", "value": "T101910FEA7474977A3DE0EDB362D5C642B18061A6E5D41C0EE7E5F0D5088CF72F688A82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329146, "uuid": "f51ddca4-edb7-49ad-8cfc-7188e26a6d2e", "value": "48:vrSMV4k0r51V4QrrYrWV4hrGoV4brEKEEV4EfrqkV4/r51V4Qr1ZV48rMSV4xrcj:vze/nlin2ApEpfFMrbLZhyr0jJb1vf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329146, "uuid": "b7398661-49f6-496a-8086-88eba3a5a1ee", "value": 4466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329146, "uuid": "05189eae-39d7-4286-a923-fec3925250ab", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329146, "uuid": "765f82c3-fa0f-4302-b9d1-999dd03a11da", "value": "jaws", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "086c5108-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329763, "uuid": "1c526ffd-cb40-4680-9dc7-dc4496ba5760", "comment": "Malware payload (Mirai)", "value": "4ce125d7cd0d7b811a2ffd8b400b66f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329763, "uuid": "388d5254-7d67-4890-8dac-a7de9a2d4523", "comment": "Malware payload (Mirai)", "value": "bacb61fcf94967fb8d68f3f7aac4261f3004e59482c05c4d2030e867ca33a8dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329763, "uuid": "f142dd43-94ab-4372-a2b5-74bf083bc12e", "comment": "Malware payload (Mirai)", "value": "cd82f3b57528cedf18295d2edb700d91bdf9dde9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329763, "uuid": "f38fb958-08f8-4b7c-ad8e-4fdd1c4982b9", "comment": "Malware payload (Mirai)", "value": "90df1c9e252b3616ad6328b40cdab02af17f737525fce77147d5f225be1a9dc217d52e69d5c434ec056fcfe6e2fd976d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329763, "uuid": "237d011e-c6bf-4f08-8726-6a503dddbdba", "value": "T15D836C21797A2D1BC1C4687B11F70371F2F6234A65A8CA6EBD320E5EFF15A503107AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329763, "uuid": "fee0a8e8-8c24-4ad8-93a9-99af1e3df54a", "value": "1536:DM4QSDSmJoNWZXLsoHZekpVWtCHA9AQ3jnq/KTWzIeL9H8zF7uhcT:DFF8IZz5vTQ3G/eMbH8zFh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329763, "uuid": "0cfb19b8-d929-4937-b0ca-0edfb9ed2cb5", "value": 85740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329763, "uuid": "4b181d21-b8f2-4382-a44c-a3f9be5da664", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329763, "uuid": "eae5c30f-2876-4ea3-802e-aee464fd0de7", "value": "jklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6539cc0-dec5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766360146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360146, "uuid": "a2ce4fa4-fa70-4297-a966-4f52706ca550", "comment": "Malware payload (Mirai)", "value": "45340f280bb1aa9e8d08f73d6de39a0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360146, "uuid": "03368acf-ca51-4138-8b9f-bb80d03c5b6c", "comment": "Malware payload (Mirai)", "value": "bad5790935665d80c7605522ad4e1918ee05f6dd1e6f5b28b5ebfee05c06e4c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360146, "uuid": "67397f93-4cb2-497c-aba2-d3b35fc8d4c2", "comment": "Malware payload (Mirai)", "value": "61a9c9fbcd82bf025c9147cc467b29df672b779a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360146, "uuid": "a4ac9b42-d389-45a7-aa57-80294ef7140b", "comment": "Malware payload (Mirai)", "value": "0f65104229c6465408602b4e5259a3c7dd58996349b6243666e0721ad4f42538c3823fe46fb2fa2a17344e44ebc88663", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360146, "uuid": "b81c1a84-443f-4697-b242-589ebf6d987c", "value": "T18C739F36C8696DA0EC584671B8B1DB751703A500A6462FF76E89C9F18003DACF68D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360146, "uuid": "9b17d4f8-79a9-4972-9894-60f6ca62dd8b", "value": "1536:xPSJ4aeA5fSooN0JYPW4XsMUpn5nSclCG8m3pGiT2bVR:xha95dTdmqp5nScl+6ciT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766360146, "uuid": "ca06a7c0-89ea-4439-b40a-93b389f6e031", "value": 74940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766360146, "uuid": "f50e561d-b60f-4ea1-951b-5c48e2e31f38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360146, "uuid": "e8db7d73-e069-4507-9218-62ec90dd525e", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11bdc64a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329778, "uuid": "cbc86b92-6958-49bd-918d-0b80accce128", "comment": "Malware payload (Mirai)", "value": "5dd9759f4749f14252f9997e57966c36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329778, "uuid": "402e3ff6-27ae-4f95-a9ab-89e1e800449d", "comment": "Malware payload (Mirai)", "value": "bad8bf32d2d85ab9261f2236de947c154db5f19a9967c687c8e98a9e23e6d7fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329778, "uuid": "cf4fe571-3360-4bf4-814f-f342228999a9", "comment": "Malware payload (Mirai)", "value": "1713cb389025758e90a05e460834bb204746f214", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329778, "uuid": "b4737c9f-33ea-4666-8533-b5e03c191daa", "comment": "Malware payload (Mirai)", "value": "7abbd8a4132cef83159b71f726bfba6049303d994b16a2a66fbb3f709b44da66449465260fbd9e2d58758c061842c1e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329778, "uuid": "40636030-a7a5-4f69-b6f2-a1d9c3b8195b", "value": "T10B63C415BB650FB7ECABCC3B06B90B0539DCA50A22B47B397934D918B54B11F19E38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329778, "uuid": "34f8011b-79d6-475e-a3cf-120835bbda8f", "value": "1536:jLQul5LycEG6QqeDdBjX+xNxYq/1A0oT:j3fLPEG6iTPnT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329778, "uuid": "711ae593-0341-47ed-8359-71386a21696f", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329778, "uuid": "d2c15fe7-ced3-44af-ad42-b7214f26ebea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329778, "uuid": "1f4bfd8a-bfd9-418f-9b65-795ab81b0cfe", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e93a201-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330015, "uuid": "644c8671-f8d8-4211-844a-289fe693372c", "comment": "Malware payload (Mirai)", "value": "4cd37cc3524151d97fd940a9045e5ad7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330015, "uuid": "14301ca0-ceed-4f38-976f-7bc3887436ec", "comment": "Malware payload (Mirai)", "value": "bc897284eea230580b9b187457b3a293433a7dc3ea378d85fbd351fe4f179ce5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330015, "uuid": "bc7fd588-eca4-4b68-9754-82f3ab674dad", "comment": "Malware payload (Mirai)", "value": "74fcdeefdb0b3f61f8c8fcffc41bcd29f39f503a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330015, "uuid": "1b1e15f1-60df-4599-86d0-6dee05b7bfd0", "comment": "Malware payload (Mirai)", "value": "1f4fc68aeba8144d423242cd17172af357094c040cf7ae9ce072ce347f8e467e0407a0be76d377fd7d01c4c842024039", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330015, "uuid": "a30fd964-f47c-48e7-9ac3-aa316e63b98f", "value": "T15D11215F4201AED0858CD43A7783C10CB4844BD919BB06E45E96057E14F42CE7338E59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330015, "uuid": "24b7b887-8a28-4a58-a13a-360155a75c46", "value": "24:+7XYa7M5tYa7bYa7iYa7VHYa7SYa7hYa7uYa7KYa7xYa7bnY7:+caw8a4aRa+aZa+ataJaGaA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330015, "uuid": "a96b2234-ecb5-4f83-90f4-47e1b1b27791", "value": 1009, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330015, "uuid": "74ea332f-5a39-42ca-98b3-32c1dde5bdde", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330015, "uuid": "ee5dec75-38c4-47cb-8beb-44161117ac26", "value": "calix", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1487ded9-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329783, "uuid": "55ddf4df-07c1-4779-8989-942c091ab857", "comment": "Malware payload (Mirai)", "value": "cdebcbc47760e2da42bf64ab117b02ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329783, "uuid": "1f05e707-6698-4a11-a665-08dfb4dc2188", "comment": "Malware payload (Mirai)", "value": "bc8e090af02223041507c811baf2d718101317807f87bf13fc12bc99dc6e460f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329783, "uuid": "40d5324a-bade-435b-91e8-fedda9f35ba8", "comment": "Malware payload (Mirai)", "value": "feffbf0d71d78d425401530569f4a293005f011d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329783, "uuid": "966dbf04-3f05-4c4a-b4c1-0c311df57118", "comment": "Malware payload (Mirai)", "value": "e075f20eba6af660782d505679adee7b0de8735eca3136668fffcec1e793c6b7e2c7cb118702ec74984d9630bc218839", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329783, "uuid": "2b7faa24-c145-468e-b3c8-d5b63c868b76", "value": "T1CB93F896B8818B26C6D452BEFE1E51CD331317B8E2EF7253DD106B25778A42B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329783, "uuid": "1a263a59-b333-4518-8900-1e55fe3b3b4b", "value": "1536:Knxn+cPIOaji4GagiRSph33bofqcgv7uv3v4EMbsBEpbCmtW53xM3ifLDZqu0VNe:KbIonoiav3xBSuTDZqu0VNHYdrTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329783, "uuid": "220dd55e-4036-4591-8983-208202d74e14", "value": 91320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329783, "uuid": "7456dbd0-b484-41eb-98b0-984a35fcbd03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329783, "uuid": "45cfb7be-c299-43c7-9049-9b832bf6e178", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8287ce9-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309495, "uuid": "ef4ac159-5249-439a-8627-62205b54ea42", "comment": "Malware payload (Mirai)", "value": "e5abf9d23c1da2abf8c8294419cf2170", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309495, "uuid": "406458f8-12ca-4ecf-b6cc-fb55d0b23eff", "comment": "Malware payload (Mirai)", "value": "bd537dde6c0e6d0c7d292a6c7543419446b9bfdc7b81cb5390e76a60f2382bd4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309495, "uuid": "d2429ad4-e962-4706-8c98-cef415dd53fb", "comment": "Malware payload (Mirai)", "value": "1852537a8e52550a0ea99695758a62b2141ec35d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309495, "uuid": "6a16dc61-5f7a-4739-9c39-8cf1888e35dd", "comment": "Malware payload (Mirai)", "value": "0d5bfe5b9d01e056cd0290f513199171aa666f8f5f7f9e8489f26dd38d6944bacce8f657dbc4194ac900d36a0b63103e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309495, "uuid": "19277b44-501c-40d9-85b6-679e8887988c", "value": "T104B34C3279352E27C0D0B47E12B34351F2E25B9A26E8C61E7D720D4FFF25A502553AB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309495, "uuid": "6e4a20ae-26c6-42f8-9ff4-fb6d147a786b", "value": "1536:IbdZ10PprrrZzWSyOlWJM5jCbUBwI7n3oFlS8tkc62PPMT4E4xiuafxt2lWT51zt:+doJn3oXTi28T4EhxMlWNNC0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309495, "uuid": "58e6d30b-58b8-4a32-b8e0-3f317033fce9", "value": 108944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309495, "uuid": "aca5c03e-db06-404b-ad41-2a3bce2a2b16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309495, "uuid": "a711de2a-4f63-4fce-a674-b0b947b58f89", "value": "UnHAnaAW.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b975bf7-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329124, "uuid": "7c82e366-28aa-4716-a41f-98f096b4646c", "comment": "Malware payload (Mirai)", "value": "a474f4ed9eacd1588b288477894499b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329124, "uuid": "28116eee-11ee-4772-a21b-be6f5896cfa3", "comment": "Malware payload (Mirai)", "value": "bd93f3b53d2702bddb071a835ced4d7e9ba493d72331cd651307ad78da154e74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329124, "uuid": "6a833d6f-17e8-469a-a11d-e9fbf7ac1632", "comment": "Malware payload (Mirai)", "value": "d6fc53784800f4a8a971a99eb867efbdcd767bd8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329124, "uuid": "19dc26d0-a77f-4997-b55e-8e4855ae3ccd", "comment": "Malware payload (Mirai)", "value": "53a78892fe3ab29c2ba478815056d88ec6942a28a6b7001b3e1fc33856173f3725bbad1b1267b29c35ebe88402103435", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329124, "uuid": "591874ac-7e18-4e37-b1da-580bd86753b6", "value": "T1DE73F649FC819B11D4E522BEFA1E118D336757B8E3EFB112DD101B25778A92B0E77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329124, "uuid": "2ef36b3d-960d-4ade-9bc1-98839713cef3", "value": "1536:mhnx6FMVC+jhmU85Uf37JIrmD6EawFAHQBdAfqu8glp99ltvienwpnP9cTG:zDbhlrHQBdAfqu8gLfnSnVcTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329124, "uuid": "68091ca9-9600-4199-83ae-337d237345ad", "value": 74000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329124, "uuid": "8b0f2560-2935-4bd9-9f99-abfb1f88d1f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329124, "uuid": "2d788756-68b8-444d-b620-d0671b48afd1", "value": "zerarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4df9252-de83-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766331770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766331770, "uuid": "c171caf9-b9e4-45d1-93cd-3be0c27aba2f", "comment": "Malware payload", "value": "8915da9c2cd38a58702b3cfb937674d5", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766331770, "uuid": "3f3e7036-d901-42dd-8a8b-d9fc0eb42cc3", "comment": "Malware payload", "value": "bda4f0507ef5274e59463e35b629f8abe0d15f11d5058807be618e32e7016d41", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766331770, "uuid": "3e5c097e-4311-4df1-a018-f9e2bcb179c5", "comment": "Malware payload", "value": "8735a16521aa43214c628a1e254b2ca6a1ef0248", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766331770, "uuid": "34309c8b-a9a0-4df3-96e6-43a009ffad67", "comment": "Malware payload", "value": "01548bf1964f602ccaa288960b5fe1df29cf81c37d96147ac0550c1f6e05d42b4d324bae46d8928c788dd0b99efbf1f0", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766331770, "uuid": "701054ed-b813-4e14-b741-2d721df166e7", "value": "T13E773318D86A03C3C9AF843992757C1846716E594F97A8BEB6097BD777F6BC070FA002", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766331770, "uuid": "0d75e9f2-f320-4fd2-8641-e32359aec37f", "value": "786432:sOj+GaRoaJyJSIwwpIKLWUJQK0Otfj+AfhSW:sOj+LJcSKNPj1zcW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766331770, "uuid": "06b8b3aa-e7b3-4e50-9765-84e3dc3ea91b", "value": 33202176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766331770, "uuid": "2becee42-b03b-4499-9550-5fb00ece45f4", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766331770, "uuid": "2743f357-f348-47ac-aded-bfa2d524efb2", "value": "Updater.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9383af8c-de7a-11f0-a129-42010a9c0007", "comment": "Malware payload (SantaStealer)", "timestamp": 1766327849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327849, "uuid": "ecafe1e5-8b66-4dd0-a340-045e9d833d9e", "comment": "Malware payload (SantaStealer)", "value": "0d29d0e52411e3c7a9c40ff175d286ef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327849, "uuid": "3ae04cbc-06c8-4f72-9814-ed43fda77fc9", "comment": "Malware payload (SantaStealer)", "value": "bde88c4f174c60bc1a43c4e1c3d8e6c2fa67813bb26fe9fd02aa33da4a3fbbda", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327849, "uuid": "0fcd62a4-9112-42ce-a725-158c4a62815a", "comment": "Malware payload (SantaStealer)", "value": "6bc979797d1b9f4ba230e8d917ccc144f0483669", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766327849, "uuid": "39f34454-ace3-4979-82d9-510f31b7e33a", "comment": "Malware payload (SantaStealer)", "value": "059feb55c18131d0f1bfff207018a95cec2cbd66950286153045006eb85c87acd90fa68cb8f9a18483dea9fc95c4d767", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327849, "uuid": "6d8fc5d5-6f19-44a0-a816-41c6d2787d25", "value": "T14C5633C5B77F006DDC2B4DBF8C2EDA616A92ABE70B652F40DE673346784981106E02DD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327849, "uuid": "fa05d641-2bcc-46ba-b3b6-ea429da49c80", "value": "7ba020781313987a6689a115c764b4f7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327849, "uuid": "a0d2f98b-6ae1-470e-aea9-64d53521da4e", "value": "98304:qBZ0SGKAHPzhvg80FaAWkGC0Wz9LUiOBN1sqFl3ZOyjcMVDmVj6/1di:SeSGLhKsAWkGOz9eB7FTOWgZ6Ndi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766327849, "uuid": "b0e59b3c-c951-4972-947f-4ee88764fd4d", "value": 6209024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766327849, "uuid": "49081ade-8e88-4f4f-8475-ce5afcf52955", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766327849, "uuid": "30b77f66-2654-4ecf-8bff-ec5195429665", "value": "ainuder.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "375cbae8-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347880, "uuid": "b59d7799-9a08-4112-a29d-4cabbad733e3", "comment": "Malware payload (Mirai)", "value": "7a504c3c1e76e3e31f438d5379757271", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347880, "uuid": "9ed6f44a-a634-4996-bb7d-d6a5982398a8", "comment": "Malware payload (Mirai)", "value": "bec1afbd5d28f0edb725ecbff02ce53164e008f9d64afdca11fd5d2bc1756ae7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347880, "uuid": "b910ae55-162a-4677-b028-e7c52173fcd9", "comment": "Malware payload (Mirai)", "value": "d4545d7951a4781697ff51b2293038b7125c88db", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347880, "uuid": "f3b5ddc0-96a0-4b83-ba8f-dc1bafb75564", "comment": "Malware payload (Mirai)", "value": "6c94d1a414c9396d614bc12ffff93e19848a256e98496d344b6381d12253aae48e0bf1fa664e24ce03e05df6b33b996a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347880, "uuid": "6e92e27a-c03b-4263-a112-e5cdc9116e49", "value": "T17F04392F258191F0FA411B746BCBD3976C390BBF5199909F6B416329B6E0B7BA02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347880, "uuid": "dd65d17a-4bc9-4b42-b86d-42ce507a5db9", "value": "3072:8WzZblNfOfNhiHesHLbAzh80w6igORNzJxnNgRdgJi55weUXN:8gXmkjrbA2nP/NgEJi5ab9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347880, "uuid": "061b8c69-cd3c-47ea-91e1-7ca10a8dd769", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347880, "uuid": "5826c8b5-374d-4586-ad08-edde56d0360c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347880, "uuid": "93a8413e-5f3b-45e1-9327-9c02521daa00", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c1f81ad-dead-11f0-a129-42010a9c0007", "comment": "Malware payload (njrat)", "timestamp": 1766349606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349606, "uuid": "19a3343f-8d74-43ee-8ac6-8e139c997978", "comment": "Malware payload (njrat)", "value": "0d7ca44d9a5fc95a47613aeae3f65bac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349606, "uuid": "c5193f5f-eea6-44ed-9246-398e015eb09d", "comment": "Malware payload (njrat)", "value": "bf085c28fd75b40135dee69cf3a18423a66828009d3e3086ca17688d33221d65", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349606, "uuid": "dd606240-4543-48d3-a059-d01dd7fa3ab3", "comment": "Malware payload (njrat)", "value": "bede22997cdfb412523733b30ad0a7e3cb66715a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349606, "uuid": "49b0b96c-8a72-432d-8c6a-193c71c69992", "comment": "Malware payload (njrat)", "value": "4c9ae34f8db7e970835808845a4e4937c24a09dbd92154b384c00332ba73cfb066683beb593e2fc399d7364f1c3c5561", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349606, "uuid": "c6241103-f2a0-48ba-8a42-9036f4a5451f", "value": "T1D515D0AA32444E45DA991974CCA3D81003A2FD9A5A72C30E37A53F5B3DBB3535C13F8A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349606, "uuid": "ef22804b-98b1-4c9a-93e0-be7a6ce0aa56", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349606, "uuid": "afc2b424-a6e0-434b-98d6-23f8ca0fc2b3", "value": "12288:clNoyowOz+MloYAV9pXh0mB90heCCVn/GBMi9eahAIkWytNbFq8xDOgvlimfM:cvob+Mm9Bh/B9ceCC2M2vkZrF5xDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349606, "uuid": "d6e91861-a53a-45dc-afeb-b2008993adff", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349606, "uuid": "c653b3bf-5fde-4b35-8831-643aece3d134", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349606, "uuid": "90b97da8-05bc-4eb3-a072-b151698e444d", "value": "0d7ca44d9a5fc95a47613aeae3f65bac.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7505c1e-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295723, "uuid": "5ca8457e-a0d9-49cc-8f38-28451357e4ab", "comment": "Malware payload (Mirai)", "value": "5fc1b669e67703f8c7a82959bcbd5b1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295723, "uuid": "29220121-a72a-4d18-bb70-7aebaf44e16e", "comment": "Malware payload (Mirai)", "value": "bf6c9e4963ee8953de311d88b339545dc4d100cd1b21725818683f0a82feb96e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295723, "uuid": "13750914-d2cd-4ef8-bd46-e2389c7a1871", "comment": "Malware payload (Mirai)", "value": "b30cd0227390356f998f7cb8b33c830696a87011", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295723, "uuid": "d76444ab-6f06-4673-9bcf-41d1733863fc", "comment": "Malware payload (Mirai)", "value": "ecf958758c1486842ffd22f47151a35e23180aae8f047de7ce3b35887d0a1890b0627552feb56dfbb197696d791543cc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295723, "uuid": "a25c552f-d993-4eb9-8486-f2a3648bf325", "value": "T15FB2DF3C1B111BA8DE1AC0BD839C1B613CB81B6591429D4A7207EDD79FAA8B47453BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295723, "uuid": "0c67e7aa-1a4b-413f-8a64-1ec4218c9184", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiXmmdtJgGlzDpH7uNj1JA+:YeD8ZSWvZHZbs1row697qohQvg9WitJI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295723, "uuid": "dcd96166-eaaf-4209-84db-67d32e8e5eee", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295723, "uuid": "5ce98d01-21d7-459d-a60e-51d21762c006", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295723, "uuid": "c358e14c-343b-4a12-bbf2-242d0c2695a0", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74701726-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338963, "uuid": "ef7ba9f2-df5c-4f1f-9124-21a34a94d745", "comment": "Malware payload (Mirai)", "value": "e5906ddf28d9ac15baa3571640e77df8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338963, "uuid": "7b5086af-d972-450a-b85b-e9bc4adb43fc", "comment": "Malware payload (Mirai)", "value": "c031bd5df82003a74880e86501f73dd22fb7e672d1d688f2048abc2c9b82a8ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338963, "uuid": "18c5d9b4-2cf7-4c7b-9d00-1f29959e0709", "comment": "Malware payload (Mirai)", "value": "81b74a2bccda2a255faa1639322b9c242fb38099", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338963, "uuid": "6d3a07fa-8486-4c54-8485-dbe19cf2b760", "comment": "Malware payload (Mirai)", "value": "ce5140f1f9433ae1b05e5b3e5a1a94dcaa06dfff211625a5cb8520a0020bb947002ec6df5bf0a8fc496d86f7b5ee6022", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338963, "uuid": "2cb6aef7-b55c-4b30-8c57-7e5676624860", "value": "T19C338DA6C5BDEDA8C1544AB87D258F389B73E00086533EFAD644C65A8047EECF1593F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338963, "uuid": "f348368e-7e0b-4634-bc4b-055cadc26b30", "value": "1536:5aR5ewtQZ3t8GdcPs3q/aKlMLEm0DOFCn:5k5eD92P+qiK60CF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338963, "uuid": "2d0cb57b-969c-4f43-9da3-3d5ad4174d0b", "value": 51336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338963, "uuid": "8c967b8c-a89f-4fe5-b76c-92b5d8551606", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338963, "uuid": "36072657-6826-4182-b93d-a4d487d3366c", "value": "Josho.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d28168a-de37-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766298981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298981, "uuid": "d592bb93-6f13-4718-83e6-e906458476c0", "comment": "Malware payload (Mirai)", "value": "3845402833d2d6e77ce540d204a2e542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298981, "uuid": "5a9703ed-6994-4413-9d15-2128a225b53c", "comment": "Malware payload (Mirai)", "value": "c081b0cb0bf6317b1c5a57c3c6c821afc9656185960865bece92b13f5da8817a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298981, "uuid": "69d0694a-b77e-4d8b-9026-a2f1c5851af3", "comment": "Malware payload (Mirai)", "value": "7978a60f79bbc67d27155ed0d95d0819f66b3813", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766298981, "uuid": "a534f633-d251-4aa8-8e25-a2014333b731", "comment": "Malware payload (Mirai)", "value": "2c0554b4d3763159526129a7d461220df4b913579ffa35ad5ac1051dbfced9ab33ff73d14da4798861b6c32290337936", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298981, "uuid": "ea606877-739b-41ad-9dc1-84938d38436a", "value": "T198D3089ABC919E21C5D212BEFE1F52DD33231BF8E3DE7107DD086B2076C691A0A7A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298981, "uuid": "9ed46d50-d6dd-4ad7-bd8e-467451fffe79", "value": "3072:GayLNFt2IiOs4C0dWh5sLsnyrEH3YWqPrN40nq7XiJT13JA1on53c:GaKNFt2IiOs4CKM5sYyaIvj8yJT81mM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766298981, "uuid": "93d5bb7c-cf06-4dfb-93c0-69642d02668d", "value": 135924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766298981, "uuid": "5265577e-95de-4450-9a93-d901d41b373c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766298981, "uuid": "448528d4-f4e9-44ee-99d5-88ec588c2750", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "211e41aa-deba-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766355144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355144, "uuid": "6d357909-06be-4036-8366-0aff6641b6fe", "comment": "Malware payload (Mirai)", "value": "de596eb5e002f7b70cb917fc152d7b3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355144, "uuid": "0b844273-ad5e-4438-9304-055b1243f7ad", "comment": "Malware payload (Mirai)", "value": "c0efb9d5212edda16eaa27435f9e726096fad77bc0eac30b11c70dc39adbeeda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355144, "uuid": "dc61ea7d-c4a3-4b5a-9df4-5a0159d523e0", "comment": "Malware payload (Mirai)", "value": "17d6243565b5b72fb639396b876ebb0b360738f7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355144, "uuid": "7d99a09f-897a-4ef2-a352-b4161a00a9ed", "comment": "Malware payload (Mirai)", "value": "cde0f1c997b158a4a1a37ee05aecb25879ccd6d9f3ad6ec899969547baba4c7f167bb405fcfb6c48df247fe9baabf395", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355144, "uuid": "77bb3ad8-c5df-481f-a14c-0ccd443fbbc4", "value": "T1A6632CC59753D8F6EC19453510B3FB335B31F03A1069EAA7E3D5E936B852202FA462AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355144, "uuid": "3caf9552-cef5-4aed-b51a-60745d1fc739", "value": "1536:cQiEIfrR9wUcYCaNzvjxz6kgE1954CpAxOMF9PRR:cQfIfF+ZYJNxNgEvmi0p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766355144, "uuid": "8f7c5c18-c397-42d0-bd30-40c8c6baf864", "value": 68272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766355144, "uuid": "0914fcec-6775-4a52-aa19-f6648a6dd7ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355144, "uuid": "74394dbe-2f36-49fa-bb14-e26fa3f5f7db", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc15d9a3-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309502, "uuid": "47d3e99d-3f3a-4611-8cc7-ae10c035b033", "comment": "Malware payload (Mirai)", "value": "1f21f8e1eb087f8833cb86f377f7f40a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309502, "uuid": "8e93d781-a1cc-4bb2-b971-9bd584b800b1", "comment": "Malware payload (Mirai)", "value": "c147ca458f417cdfa3e44e4de5fbdd0b1463e40d0732314cdf5da960a3ac5147", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309502, "uuid": "9d3dad2b-0696-4336-82bb-d8368ac13936", "comment": "Malware payload (Mirai)", "value": "2c4f126646ba76ab3ce1384ea21b47e315d2d45b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309502, "uuid": "0f156dd6-50d8-4d96-9fda-e49cf352d7b5", "comment": "Malware payload (Mirai)", "value": "93cdfca10853bcf41011852fb115c58c49a8cb5c51062db89d180419821c49cee340ae1a4cb70ceefad1eca2b4ee9260", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309502, "uuid": "d30a52ac-eff0-4f10-a790-050596044ebb", "value": "T1B693AF76D459ADE0C0554338E8F29BB61B62F00852B32EF75995C26A1087EF8F6053F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309502, "uuid": "589d3415-0769-40fd-ab40-3e0db6ba9053", "value": "1536:mc2HMprwUHZrwtkQrHznN4+2W6+JBKWIVkrzKITpNNVi0CcKs3c7/ss:mcjrwUHZrP+V6MBOkyIVVi052/ss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309502, "uuid": "eef2f727-f4a1-4498-88bd-6025b9941d0f", "value": 96636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309502, "uuid": "12763e09-9b37-4946-898e-194b0fff199f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309502, "uuid": "7f4d3f88-6fca-4722-83f7-43e15247bc7f", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcc36fea-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309503, "uuid": "65b48c6f-5258-4099-a447-8686c9bd3541", "comment": "Malware payload", "value": "8a0679d9c1479ae9f4e644524099d528", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309503, "uuid": "c78cf6fc-ab18-43d9-a661-132d0ce19f1d", "comment": "Malware payload", "value": "c2c47fa2b124c7ffbc291e76473ff1fae19bd7de17d30a4fdbd0615b843e0c4f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309503, "uuid": "556f549c-f135-4ea0-811d-0a5667510605", "comment": "Malware payload", "value": "ad56902568ce4252fc7cec46aad3ead81ed0ee8d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309503, "uuid": "5b5e8da2-77f2-458f-bbc7-efa984ae0c22", "comment": "Malware payload", "value": "e0ba36102fb8ef9471456e9fec3f94342be8b7ddeb3e1f7aec968c1f089e8f86a28b02b59ff6c38021e51a151e93e01d", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309503, "uuid": "1167f72a-e18a-4364-8c74-e88b54837857", "value": "T1A52141CF0018B95A054DCF50312654EC33F0D7E860A2AE4B2848B9F3BA886577272E9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309503, "uuid": "99eb39c8-c5f0-4552-9c90-e87c9ec1cea5", "value": "24:1E5u6EcRgNIZEtzEoEVKTXREHygEOjGMETtE23E3epyEKV3EzgtE1GCEkzA:wuER8wPQX4ywjGptE2EepaVwgQGEE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309503, "uuid": "6bb012e3-66a4-486e-a70c-e513827dcdb7", "value": 1212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309503, "uuid": "8c6a83fd-2d23-40fd-8fa6-d6760c8ba678", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309503, "uuid": "9b42a925-4745-4b80-832d-427f648fb3f2", "value": "w.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "077c2d47-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320742, "uuid": "d1fbfaa0-ac57-46a0-b47b-ad51cef995dd", "comment": "Malware payload (Mirai)", "value": "365e0586f68ec4b74455ddd2fb6bfa56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320742, "uuid": "739d86cb-090f-4f9e-ab84-7149983d0589", "comment": "Malware payload (Mirai)", "value": "c2c572db1eddaf9b599c97c10eab8b12e43569ca1fb71a8140db4cdd13a4ab0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320742, "uuid": "0f0dac48-8b38-4a48-9893-241614f34742", "comment": "Malware payload (Mirai)", "value": "b0f418246e691d3fe2e677ad49e98ef8c28c46b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320742, "uuid": "b7e79932-08a4-4cb2-9e71-b034ec98ca56", "comment": "Malware payload (Mirai)", "value": "b158f6e2e861e10fb361c3d961bc10f0f5c4a674c4e64c0fcb92419acd70cfee341581db9120365095f53437522175a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320742, "uuid": "f68023ba-70db-431c-9a62-4f6c1937f52d", "value": "T18C436B3B851E9C80C7584AB47516CFF56753B3485D622FFAB7498A288403AC8F585BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320742, "uuid": "8bb67b0b-9d67-4c0f-b2a1-0fba37595b63", "value": "768:+Zby5z1uWUCNCE2sk7J/7e2yq9OLDj7i6WHH1KTN8MGV1qC6oS/W+CjTIP:0bwwWdCRscF9SDjuHS8MGV1qiYW+CjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320742, "uuid": "3eca709f-ffd1-4283-9a95-1edc81d8dca8", "value": 59440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320742, "uuid": "29176763-21fa-420c-bce9-e5e076b99a05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320742, "uuid": "67d6aae7-585b-4320-91aa-c19cddbaa939", "value": "shadow.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f589db2-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309239, "uuid": "5f737c13-1384-46a2-ba11-7c2750e79441", "comment": "Malware payload (Mirai)", "value": "e1bae0b989f1721fe99074cd59fbf425", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309239, "uuid": "4b50b540-81aa-4928-ad38-115d4bba5d7b", "comment": "Malware payload (Mirai)", "value": "c2ff29518b9e01bdd1aa2c9deedaaa9511d89043a85fa1d425476fcf5fca8eb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309239, "uuid": "396d2738-b154-477a-b843-8c1f2cf876b1", "comment": "Malware payload (Mirai)", "value": "8882576ce41deaae67e88b96823998c6b1326963", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309239, "uuid": "5d49e1c8-9764-43c2-a510-e950579b9053", "comment": "Malware payload (Mirai)", "value": "589d408c02b7371cc2ae697f9cbedfafc0e1232981ece782234c51a82cc5b7fae1e07dc8ac37e8d42231ffc7d006dbb6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309239, "uuid": "0a422535-62cf-4e38-8aa7-45e8d6371874", "value": "T12DB36DCAB401DE7CF84BD6BE44270B0AF5A0635166C30F2B629AFD937D731A85D06E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309239, "uuid": "9e2e449f-66f4-4198-95cb-885cca46be96", "value": "1536:2ibK2OAxXCXrlZkmHmPBhUQmTcfl8HKp19oHv2FD+PIDXONJYW80:2UOWCXvkimPDUQmTcf/JS2Z+AvX0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309239, "uuid": "33315b26-46c8-436f-aa4c-faff04aed26e", "value": 110204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309239, "uuid": "7e760fa0-1511-47db-b079-28889e4e9203", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309239, "uuid": "934be94c-05b6-48b2-ad4f-48bde46b3750", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "417b66bf-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347897, "uuid": "bb2015f4-95e2-47f3-a17c-2a85b766fee0", "comment": "Malware payload (Mirai)", "value": "fd90f2a7086313c9bf9d2b8af7537d96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347897, "uuid": "eb78190e-14cf-45fd-aeb7-041cf4d9e20c", "comment": "Malware payload (Mirai)", "value": "c31e36b0a6679b73bd5353bdb133b09b948d30b2aad71d101e8ec524c22c10a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347897, "uuid": "07043087-b02b-4a6a-b1c7-2e1885416cae", "comment": "Malware payload (Mirai)", "value": "9eda93c7e68ebc52670af4ca9640717bf1be4fa6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347897, "uuid": "a94fac5e-e4ac-42b5-ac0e-d7babacb4e8d", "comment": "Malware payload (Mirai)", "value": "64002088f64ef64af243595dd5e058bec5f7ce241ffaefbc2072fab0f6df4cb053557038da43f16e3f9de17fa9e4b2cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347897, "uuid": "ce69fbeb-5dc9-4408-a072-79f4e8cf43e7", "value": "T143D35C0A78D270FCC687D170926E9F61EA3A745C02183DBBA3C2AE711937EE15E15F61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347897, "uuid": "528ad17d-a5ef-4486-b964-dad63f72f85d", "value": "3072:l5Fbarnk4673Cvsx8AQvk905ouZlX8FsU8YYTj:35sn63CvzrZlXwstnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347897, "uuid": "9bec2468-d075-4a77-b154-3369f4b2ccfe", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347897, "uuid": "39891740-430d-49b0-b6d4-ca446a6da802", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347897, "uuid": "d7afafbe-f75e-48bb-8b90-b0075095319a", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8943d142-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329120, "uuid": "ae9e73b8-0d74-49b0-9f61-849c6cef8458", "comment": "Malware payload (Mirai)", "value": "20124a7754ab1e6fce3c13fe09d38e05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329120, "uuid": "cb671bfc-0c48-44bd-8fe8-0ba12985280b", "comment": "Malware payload (Mirai)", "value": "c3368dbe8c72d6b562974c6aa1c5a3642e0f47ebc4d79888824c8d71b5fcabfa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329120, "uuid": "add79c3f-8908-477d-8c34-e3589f88ed47", "comment": "Malware payload (Mirai)", "value": "3a57b0bcd548e701401d80d12b189a3444b97cda", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329120, "uuid": "7fb3c8e1-e014-4dae-8ddc-d45ef0c66ece", "comment": "Malware payload (Mirai)", "value": "7996a638d6771f8ec97ec5d282d47ee217bc6ed5f29a2a4a94e1767c0f539f890ed67aefc6b1edc73b1dd30ca097ec2d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329120, "uuid": "e984f2f0-caa7-448b-b0c5-fa64fc7c8653", "value": "T1E6A3D60A7B651FFBDC5FCD370AB95B45258D960621E82B393A74D818F24B24F0AE3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329120, "uuid": "9853ba3e-48f7-479d-8cdf-5d3e66c48bb6", "value": "1536:Ihhwoc9Rh4KGSltrA74n1v4zv3MFAajzxnK3Ym8v1HzhKYYTlbVR:I4DhLGSvy8v44jfKHTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329120, "uuid": "ba7050f4-3ad3-466e-a66d-137dfa688ff4", "value": 106204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329120, "uuid": "b8d73f45-7a3a-4e24-abed-34936928bf3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329120, "uuid": "0b4f3ea4-0fa8-48db-a1ee-862d1c9f83bb", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a7deb7-dec8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361348, "uuid": "02ac12e8-23c5-4c16-9efc-2b6048c61469", "comment": "Malware payload (Mirai)", "value": "8f5c8d1b0eb4364d41eddfeffd9f06fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361348, "uuid": "381ef85e-6fcc-4091-a9c7-89260e4a67ef", "comment": "Malware payload (Mirai)", "value": "c34feede8adcef923e40d9347a1075b440e943243f24a0911bce1a5440b52146", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361348, "uuid": "fabfa6fc-9615-4109-a7fe-669846ec43fe", "comment": "Malware payload (Mirai)", "value": "705dfd33fb9a189e8b4f0fe6baae8f376701fdac", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361348, "uuid": "ebe7c5b6-3d5e-4e54-a0b5-9273397bdc0d", "comment": "Malware payload (Mirai)", "value": "2b1699337fafae60659dca4e3a9a0f8878b4348007374b2c8f91b6ccfa0b18bc37973abdd58ab23a2a48c64c2564d569", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361348, "uuid": "f4ce7b5f-ba9a-47d1-846c-83e3ab38a619", "value": "T113832986B881D622C6D5667BFA5E42CC332613B8D2EF7207DD25AF15378682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361348, "uuid": "7f722685-0652-4a08-8120-36a445ecb147", "value": "1536:6LAKso+VP0PIVhXr7qK6w+KMS2Jf/KZFaFyIlvMvqT2bVRw/:6L3FEAw+KMSBba48aqT2I/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361348, "uuid": "788e5126-600e-4048-ba8e-366685687826", "value": 84696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361348, "uuid": "6bc76c46-b14d-424d-9762-ac2da97ec4d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361348, "uuid": "c84c8863-ec73-44cd-9436-d897d92eae64", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "751fd1f0-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338965, "uuid": "4715c627-c83c-4488-8132-6e47858ce7dc", "comment": "Malware payload (Mirai)", "value": "7be4291cb98565039f9e41d01d2af66d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338965, "uuid": "5f6d6646-63a3-4437-a034-deda869dcd70", "comment": "Malware payload (Mirai)", "value": "c35fb23f10b112ba47756810d343312acc800a817d425a42464c72cc2b649fa5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338965, "uuid": "abbe5b2a-8dd7-4c78-9c41-c35a675a4a69", "comment": "Malware payload (Mirai)", "value": "80ae38cfa33f026e091a62e5a4bef8f054d9ee99", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338965, "uuid": "ca20b1d5-6461-4505-a2f7-a315bb84c21b", "comment": "Malware payload (Mirai)", "value": "d1faa57e0e4724ee38a92c24576dd16c0462b7743977d9a453c015f4cbe0ebd40125faa03a87c1cebe6f0110b12e2b88", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338965, "uuid": "77109960-df89-4ac7-9c99-2487c63d741f", "value": "T1FA432925AD792E26C0D4B57A51F78714F2F2220E26B8C61E3CB21E4EFF04B4065577BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338965, "uuid": "477ba69d-6114-411e-af80-3eb6f81742b0", "value": "768:TXon00+q9wp3C+vactfa1sDHNYAzsv6WswWSHoXdss63B/9JO+zC34:TXw00+SY3CaactfI6Nvzsv6vwcGJf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338965, "uuid": "d83b9673-73cd-4c7d-a3b6-a27a537aa7f7", "value": 60116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338965, "uuid": "d31b83c4-55ad-4ef9-a63c-b58ec1850be4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338965, "uuid": "f9dca5fb-0778-4426-8bb0-8290a01e41f0", "value": "Josho.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da316e4d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309499, "uuid": "54acbce0-3b6c-4ab4-9310-4be530cb2888", "comment": "Malware payload", "value": "be8e14cd2b3591f98c8e0c3600dfb5b3", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309499, "uuid": "ac49bb9a-8c7a-4b9d-912c-7c3a2e75e400", "comment": "Malware payload", "value": "c3c5a97e9917175dcd22e388e6f9cc60ab85f90e9d4a57dc0228920e456355d7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309499, "uuid": "a6ca8ea8-35e2-4e78-ad89-86ca33a54441", "comment": "Malware payload", "value": "1ad0c2415dd4a94a8860071bb3a313d19490ab95", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309499, "uuid": "d05e7c43-b1f6-4e4e-96f4-bd093d3faa71", "comment": "Malware payload", "value": "1dec125c2c96a1682e7b655a66d031115bc64baca8b8e654044df718de486c4c5dcc269ecce6364d6ce3082aee4b2587", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309499, "uuid": "968d7862-040f-49e6-a8b1-27ab5ba59cc1", "value": "T192B0129730543300C404FC087CB71F9C1053C2C134544A1C69F90231CD681043C80D09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309499, "uuid": "439bea61-66db-4822-858c-80c9cf1fe5cb", "value": "3:L6FT7KDQNUCZXLE1aGBzSEyLTUWOevn:L6FTODWloI5v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309499, "uuid": "1d01b3d3-c057-4b10-b499-64549ad2386e", "value": 91, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309499, "uuid": "bf57f21f-05fe-4137-8c62-9bd7696857c0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309499, "uuid": "2d44263b-4972-4878-a242-86d51512549d", "value": "o", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "879ff4a6-dea8-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766347585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347585, "uuid": "418bfd6b-aa00-4385-b64b-8d3c7c96e1f9", "comment": "Malware payload", "value": "32c8a01c0fab4b07defd8c5f32a41527", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347585, "uuid": "6fa72e10-0696-47e4-9106-1309068ecf05", "comment": "Malware payload", "value": "c3e51b07585195bed89a56fb43596c6b3640e728d25ba187e6333e4af27b6c14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347585, "uuid": "15adc51b-7d74-40f8-8e77-aeea9ea7d978", "comment": "Malware payload", "value": "91ec6fc5eeb5fbe471c85a0a398c8b631665fb74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347585, "uuid": "16576214-3499-47aa-bb97-7c7d95ca307c", "comment": "Malware payload", "value": "80b18b60b42bbe31f429246d32f2cc4609644f572d32ca3218f346f5166f203f2184bd5260e952d59c28a7273cc4aaee", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347585, "uuid": "ed7d576f-f72a-42a6-887c-4aa71934aa93", "value": "T10A530995B851D616C6D6A577FF0F82DC371603A8D2EF73039918AB213A8B86B0E3F451", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347585, "uuid": "4dfdaa09-b70e-41c3-8fda-fed87f50c771", "value": "768:Ug1Mv7zQ4OF43OM1lIKMCCsvm+6MXOTNNJNAvIplTbbgzaJx03+lklLF/7vwT2bB:D12ALKMCCmmJOuZ3YaViR7vwT2bVRF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347585, "uuid": "132446b3-4236-4c9f-a884-9b8476db3475", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347585, "uuid": "6791f4b4-d9bf-403d-a79c-9d56535b4acf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347585, "uuid": "f08f4c87-fe87-4df7-b24f-d9ea2fc38676", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69b991c9-de58-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766313176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766313176, "uuid": "d2412a59-5423-4b4c-a2b6-df52ac17e33e", "comment": "Malware payload", "value": "213af9fe5a10b7e106d2207ef3c5425d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766313176, "uuid": "efd6ca67-d803-4037-8251-a1cb18f297c0", "comment": "Malware payload", "value": "c48a4b71982b9525c27cda0d6f15d056b8238a6a1e9dff0bad2bbc8804ff2bea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766313176, "uuid": "bbe93c0b-809f-4afd-850f-698f17d37823", "comment": "Malware payload", "value": "9a9e2b3be85c5eb13faaef9d42124c85a9d42579", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766313176, "uuid": "92581cd0-58af-4ed6-8dd0-f5ba4586e050", "comment": "Malware payload", "value": "0677945e762fd25d138c2e906f14876f9acf55388ecb7d37b4f763fc21db1353fe265fdaeec84baf267b85417ea0eb2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766313176, "uuid": "388fd3df-f1db-495e-8958-a78bffd5b32f", "value": "T1E6E2E01353F8266AFAF962743147A3642F30F81C5B6617C3B312226E2C95041CFBD799", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766313176, "uuid": "6742498b-c288-4332-adbd-1dfb3eb422c3", "value": "2530a16bbdceacdf239a430ffb41c4bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766313176, "uuid": "f59dc470-0b90-4e14-9eed-4240a5603006", "value": "768:M7iBoVbHhCja6dAH3GV6znFSmO/Vp+PQOs3N:M2B4tHTGV6bF+NQPHwN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766313176, "uuid": "d83b2669-ae4f-4625-a896-878a60d7e243", "value": 32256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766313176, "uuid": "567f9db1-dd62-46ac-9dd4-e79c0d5022f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766313176, "uuid": "6a136271-633c-4f5f-8504-6e21d0196f19", "value": "SecuriteInfo.com.Win64.MalwareX-gen.21165483", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8e415b6-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340796, "uuid": "93885394-e2a5-4d1c-ba08-0162c2bec1fd", "comment": "Malware payload (Mirai)", "value": "c8eb3971cad54fd1e6ba85d881492a5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340796, "uuid": "7a9650b3-3680-4d1f-9a30-aed3e11a21a1", "comment": "Malware payload (Mirai)", "value": "c5646c3369ed0fb9b1b17eaef47426005614ade772737674bfed0733dd0d73bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340796, "uuid": "65fb2d99-4290-4e4b-a701-9c7c962837ad", "comment": "Malware payload (Mirai)", "value": "58ab9597bda69bdec918c7a2459716106f666d8c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340796, "uuid": "d14be3fe-5409-4b7b-a4b2-ed1930fce293", "comment": "Malware payload (Mirai)", "value": "cd01b6fbd40017151c14f63571226b70a60af0436de841e241da760f7adbdc3801513d6ff2723e6d30e6b96a83f0074f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340796, "uuid": "3a817ed6-b0d6-42d2-835c-10d216980fae", "value": "T1DF235DC49A13E8F4FC594A702077F377AB71F47A1069FA93E3749A33A852710A6062DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340796, "uuid": "ff7142c6-e44c-4f10-8849-37a9af6d475b", "value": "768:VGyXjydk+dL3/nEh9hFUXZFPczf8q4lZQL4ivAjoIdOr2F2O:VGyTy++dL3yUXZFUzf8i1v0/Ir2F2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340796, "uuid": "74daca3b-39c6-4054-9c4c-5dbd930258ed", "value": 46636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340796, "uuid": "34b65188-d015-48ac-8b13-d8a1d0313fbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340796, "uuid": "aa922826-bf11-4216-af62-0d8770b0b4f5", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde9ee0f-dec0-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766358011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358011, "uuid": "760f5d21-38e8-4de7-938d-00ce060b0bde", "comment": "Malware payload (QuasarRAT)", "value": "847fc3c32f13ec8bbe9ddf095b4a19ab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358011, "uuid": "3da89026-0318-4a21-9fc2-d8aa078ff373", "comment": "Malware payload (QuasarRAT)", "value": "c58c70007e8b7a009f5f8ed2d8f83bfed46b7a04d61a4748385672784cb213c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358011, "uuid": "b42bf21b-9105-4f60-bc3c-acb3b67a11f5", "comment": "Malware payload (QuasarRAT)", "value": "8b88d89017af9a8d53bcfa8521f690b88cc803f1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766358011, "uuid": "72af7df0-11c1-41c9-8496-3a4d0be2a4ed", "comment": "Malware payload (QuasarRAT)", "value": "c7bddd7cb4f40966b82d4963fb06186c3fd7379ae983378c4a3dc73a7450df924b31b07eb6948d4ded433df274215c18", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358011, "uuid": "ac7aa267-b455-4fb5-abc5-a6b49d633fa3", "value": "T1A2E54A1437F85F23E1BBE273D5B0041267F1E82AB363FB5B6181677A1C93B505841AAB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358011, "uuid": "c974073d-40dc-4cab-8907-05abe08e5800", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358011, "uuid": "ea33fb4e-1e7c-44a4-9649-2463b4650e00", "value": "49152:qvIt62XlaSFNWPjljiFa2RoUYIkw0N1JvHoGdzmTHHB72eh2NT:qvE62XlaSFNWPjljiFXRoUYIkw0J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766358011, "uuid": "1d6b9e59-7ef4-48dd-b85a-22610a42a627", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766358011, "uuid": "b16a50eb-7623-4df3-8dc6-e4f16206a3c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766358011, "uuid": "8294fe06-bf13-4d65-8ac2-9908d2bdc734", "value": "0c58c70007e8b7a009f5f8ed2d8f83bfed46b7a04d61a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9db48e3-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329738, "uuid": "4ede5aa2-dee0-4048-a506-d7ddb4eee570", "comment": "Malware payload (Mirai)", "value": "17c9f8784c42c1d87a69bbaca891bff4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329738, "uuid": "65ace867-4a3c-466e-a85e-3dfb60a8a4c0", "comment": "Malware payload (Mirai)", "value": "c6ba8a7005cec730afefc2f69865512c986bf08fd201345c83ced08ec8df4ef3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329738, "uuid": "8ae13411-53c0-45e9-9e6c-c20c3dab27dd", "comment": "Malware payload (Mirai)", "value": "75fb2bc08fc77f941a87a00fa457a45f1d3f8583", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329738, "uuid": "55c84027-8111-4ef9-aa06-09ed13c15d19", "comment": "Malware payload (Mirai)", "value": "224afca6cd21d12210121715d9cfc1b7e7ba7552e9e72bebd3daa5f6b6a4603abf16c3fbc05a1bbd9e5da71485678191", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329738, "uuid": "739e06c2-dac2-48d2-a12a-9d33c44587c4", "value": "T154331B99F4019D7CF84EE77FD8130A18F520735562931F3AA6AAFD931D732948C52E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329738, "uuid": "d701c2c4-ee18-4007-8750-7f28151b7f97", "value": "1536:uJR/4hgm1nEB/9KXMYo8QnZD6inUw1/WzT:uJhXqEnKVa9QwZeT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329738, "uuid": "d8488e6b-2438-487d-b10f-e116993e07e3", "value": 52372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329738, "uuid": "13ea9686-8c1a-4dad-8ae5-20df36fff319", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329738, "uuid": "ea5e947e-3480-45d6-881a-765c98f34e01", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "723dd6fc-dec6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766360435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360435, "uuid": "4a834f80-046c-4ba1-a139-0a8b8ac513ff", "comment": "Malware payload (Mirai)", "value": "18fc0509069a1df67a3141a3db43f1d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360435, "uuid": "0feef7ac-86de-4c1e-ac16-b0af04e774c0", "comment": "Malware payload (Mirai)", "value": "c738cdde456aef32551501d9a77e8dbd2f0e8021b463598345e4bc4b609d37ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360435, "uuid": "f2085230-bb57-408f-80d8-62b292ac8370", "comment": "Malware payload (Mirai)", "value": "ec77c0f2e4858906fed3e63fb36d533ff2c42c54", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360435, "uuid": "d280147f-4ac2-41b4-8ef2-e440c6d19168", "comment": "Malware payload (Mirai)", "value": "0b08eff753949f14547f593f9559b73027d403449a339985a6b3b2d163371d9a0b13312e4b8c20a6ab01eb39423b21c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360435, "uuid": "032b15ac-3fd3-45d3-ae34-ab223c3ae53c", "value": "T1C693F706BB644FF7D85FCD3745B95B05258D920A22B83B3A3A74D818F64B15F0AE38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360435, "uuid": "d22a1979-e714-4617-bb94-9b36172e7c7f", "value": "1536:zdzAZptTN2acSK7vn5/ClDR1xhc8F3Oo/mbjPh82hjTAbVRF:zOBNhcH7RG1Mi2pTAd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766360435, "uuid": "495c324c-a460-4590-8a98-a63677f2f3b6", "value": 97464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766360435, "uuid": "c18a5675-16c2-4a09-809d-a41553a7f3a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360435, "uuid": "7d8bd667-f2a9-4ee3-a61a-bab61e3df720", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71d6591b-de77-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766326504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326504, "uuid": "16a9bcaa-d8ad-4ca2-acbe-662197b91ef4", "comment": "Malware payload", "value": "7d70ca08063533ca775aa23b0afbbfde", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326504, "uuid": "045fcfc3-d829-4055-a861-a469b0301798", "comment": "Malware payload", "value": "c77cc2fc6cc1cc42a96b66802666e035e4ba35be006638271e1fc1916344e3d0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326504, "uuid": "4de79554-ba2e-41c0-91f5-845b673d36af", "comment": "Malware payload", "value": "389dd09fb5bf18f82295292a65218ce281ad05d5", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326504, "uuid": "59605f39-cf1a-47a5-ac2b-70bfce1ece9c", "comment": "Malware payload", "value": "35ba61cfef06c26bbfdc8d1de90f965b1cfaadb4e39b0f32db7a09cf29d7250cd93951541d16462a8bbcf146e633bd6b", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326504, "uuid": "ece61faf-0e61-4f15-8bb3-5d085a1e5257", "value": "T1CAB55C0BBCA11DFAC0A9A23188769186BB61BC452F3213D73E90B7B82F72BD05D75754", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326504, "uuid": "d29077fd-6421-441f-a86b-cc97e0a100d7", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326504, "uuid": "01f900b0-47c4-419f-911f-668ee0314a81", "value": "24576:pe+oOq5MNzUnaWDdyKxACvhI4aO+1d5V2yzOGhF+QjPFQMGmcoeleTNj4HGu2U+D:pe+NoOaamcKWqRE1nVbLhFvUmY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766326504, "uuid": "f5ff8fd9-d244-4845-a27f-d5a0dbfece0e", "value": 2413056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766326504, "uuid": "400bd963-1ac5-490e-952a-d96518ca04e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326504, "uuid": "58c833fc-aebf-4448-9843-cfacc613b312", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "508ea6d7-de6b-11f0-a129-42010a9c0007", "comment": "Malware payload (CoinMiner)", "timestamp": 1766321294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321294, "uuid": "592ab2c0-a84a-4a95-94f5-dd3ab87ca7ad", "comment": "Malware payload (CoinMiner)", "value": "9d1da3da1814ab868c4e72a69012fbf4", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321294, "uuid": "57b1e226-5e1d-430a-805f-c48c2812b404", "comment": "Malware payload (CoinMiner)", "value": "c7a0d6ccf56b187e9ee87a11e4ce6e443b2b813848b7cfaa48d413dd9c99ae68", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321294, "uuid": "f9810ada-5a18-4492-b325-ba9e1dd89ec2", "comment": "Malware payload (CoinMiner)", "value": "232945530996f00543547e6c00885362ebcc24b6", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766321294, "uuid": "048c32ed-ad56-4d98-9341-952c06a20d9e", "comment": "Malware payload (CoinMiner)", "value": "dad01961c4770584a89f1de5c908e796d57bdb6eaa4b55e876c4b59b7d5a52c7b73862e6981fa417567d3df71dc52e09", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321294, "uuid": "b999f654-e64c-4045-8ae3-7c89bf3b6ada", "value": "T1A6316412A6E458F45E4F42B8AE9A3350383E604BAD49FB5534FC11615FF85130737EB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321294, "uuid": "b82dfea5-4026-4166-9e26-e12da217608d", "value": "48:rycOfioacqH3g6uCO8R+nTNbt8S8gEapvnb:EqHQ68MwT1t8SdPpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766321294, "uuid": "155ddc56-c33f-4e40-b05c-1b53733c1136", "value": 1614, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766321294, "uuid": "d252d1e4-8970-4ea4-a3f5-87495585c961", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766321294, "uuid": "4b0bf30b-5b33-45c9-ad7d-1b4bd846e3f6", "value": "sex.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "445a46fb-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347902, "uuid": "4f435282-3773-45fe-9a1d-270b47512110", "comment": "Malware payload (Mirai)", "value": "aed37a7689bab47ad96a44b7abc32c6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347902, "uuid": "4aaf2a93-ba5c-4391-9f14-3b92db71926a", "comment": "Malware payload (Mirai)", "value": "c7aae1fed66dbe9c387ae72ac18c72f58d557e246c3c091a90bad83fda1c9a20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347902, "uuid": "8f89fef9-2d21-4767-9712-4f00c80bd808", "comment": "Malware payload (Mirai)", "value": "1c31f39b4b10e56a2237cc4dc99e431daaa3ace5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347902, "uuid": "f629cc27-3974-4fbd-a22b-a54a0fb68c0b", "comment": "Malware payload (Mirai)", "value": "75e4a8351a335c9aad974dfdd171dc4c2704b5f007bef20f8639c47f9ad96711336be406286314a02516c0dd9e054934", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347902, "uuid": "039a0fa7-b3d9-4738-888d-dcc9e62abb79", "value": "T1DEF33B0BB7108FB1C368D67009B7CB67A6E6269216E1D985E66DCD107B3075C6C3FEA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347902, "uuid": "d16c45bd-e6d1-4d7d-a62c-df882ec999be", "value": "3072:c3VJcQNdk+dI/ir3Ts/SMan4P+qXKJvv1Qrxp/3WszH1Gfan:cFJzdUir3qSv4P+/X1Wp/NWC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347902, "uuid": "587202cf-41a5-464a-940f-ca05e93ee1db", "value": 166896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347902, "uuid": "77c76a2e-ae15-4d8d-954e-a3cd1df7f0b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347902, "uuid": "ee33cb08-1934-4229-9377-2dbfc07b2b64", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cd0f243-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330012, "uuid": "fd49bb6a-0db7-4db6-aa2a-9f2073ad4609", "comment": "Malware payload (Mirai)", "value": "adc333e7164f3e0ea94e9ea715473356", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330012, "uuid": "01e4d462-f21f-4466-94e0-cf289c3ac186", "comment": "Malware payload (Mirai)", "value": "c84b0aa49c19799f9019444fee7e488eac73fe0af1997d4d1c60879dd38e8e80", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330012, "uuid": "0438bd82-8675-4b83-83cd-ac92c0ab255c", "comment": "Malware payload (Mirai)", "value": "2560b7ca5e799522b67bc7eeec9ea9f709515791", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330012, "uuid": "3349a313-5cdf-47f0-9fcb-26f94c4881da", "comment": "Malware payload (Mirai)", "value": "4b1b123a3c5bc2812a6d65c0d299071b412248a73ba242db046d7527690a7586ad0d0699d6c7ac2a0c517a75b3d71254", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330012, "uuid": "6bccae0d-4276-4803-b23e-1c282b32079b", "value": "T11E11215E1101EE90948CD4393781920CF4804FD929BB0AA85EDA017E58F06CE7338F29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330012, "uuid": "b59c5656-1a18-42ea-818e-fe8c4d4447b9", "value": "24:HO7fsa7M5tsa7Dsa7Asa7Vvsa7Qsa7Bsa7Msa74sa7xsa7bPse:uAawgaEaPamaHamaja3aea8e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330012, "uuid": "acfb568b-2381-484f-8abe-404a05d9da13", "value": 1027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330012, "uuid": "f9132519-1c91-4f7b-8173-64718ad1be18", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330012, "uuid": "4e9d59bc-686e-417a-9be3-ed127b6a5d38", "value": "esf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e03789dc-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361049, "uuid": "d3df7f03-a8c9-4c88-8821-b804f7a84669", "comment": "Malware payload (Mirai)", "value": "aef5eb818cf43eb9ca70c46b41d0fa0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361049, "uuid": "6462b256-91ce-4fe7-998f-574c97f0d9d3", "comment": "Malware payload (Mirai)", "value": "c899380246515c81aaf2c47a7f78414dd9110ef00e69e12b90d5985f503c5b01", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361049, "uuid": "792a38be-7165-4b28-9248-d78b25386096", "comment": "Malware payload (Mirai)", "value": "c758db47cb40882b71c231550f0fb47da0af329d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361049, "uuid": "480355ad-7c0d-4fb2-a6a2-fb6b473a2f9c", "comment": "Malware payload (Mirai)", "value": "9c0a6723cc330d167445053b299f8307783a4c83461a87457a5ffd75b7a3d26f259a2fecf642febd047aa714593cd926", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361049, "uuid": "fc09951a-124b-4658-a98e-363a9c04def9", "value": "T1FC435CCACB47D4F1F819587118BFABB35A36E53510A9EEC3FB949931B803201B149B9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361049, "uuid": "7f1de15a-7fd9-44a5-9ebd-3a0b6b00cf30", "value": "1536:CZczz9U2z/teUDfP24fRxnVuVxBbmdXRR:CZc2g/TfjfTVu/U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361049, "uuid": "8d59236f-99f0-4205-9740-2317030bb696", "value": 55856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361049, "uuid": "d4530b3a-127e-4110-b765-a6b626100f66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361049, "uuid": "0b69d79b-ddf8-4b0f-b302-1a2576205f0e", "value": "nabx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be17cddf-de9d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342952, "uuid": "130c0e3b-cd29-416a-aab3-b7fe3728d60a", "comment": "Malware payload (Mirai)", "value": "66f5ea5336ae605d4f646937515cc6ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342952, "uuid": "a73c5ca1-a5cc-4082-9e9a-bbbaa10c91eb", "comment": "Malware payload (Mirai)", "value": "c8e65ae106bc331b57d6fe1b1d07ae10221b658f627f2cba1f16955da01c7f93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342952, "uuid": "87b5b456-21ae-47e8-b813-bccaac88498d", "comment": "Malware payload (Mirai)", "value": "0dc2ce5747257701f379632f1fc9814fcf57235a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342952, "uuid": "2ee4176a-7603-4456-8db7-16c193ec502a", "comment": "Malware payload (Mirai)", "value": "8bab73f2e31f700f3766c7081326fa8233fa17d7a256d38fef797be5b3f14da631996dda065a617aaa7f56846cb70d8f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342952, "uuid": "1ccc8fe0-0a6e-4d9e-9c64-0b085f1df475", "value": "T192D37C73D8296EA8C615D474B0288F752F13E19582432FBF69E6C2B05483D8DF905BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342952, "uuid": "d6a5280e-18b3-4e14-8f84-090befa8446b", "value": "3072:EgG2T4CwV2TLTsiOTAPhm4vuzWqC90GC:EgG26k4JkPQ9iqU0GC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342952, "uuid": "9217b808-1fff-48e1-bd1d-98fe6930ae24", "value": 138272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342952, "uuid": "0f35f3c9-cd0d-4956-b96f-dd07fdf7dec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342952, "uuid": "aaafde03-f120-4dbd-ae20-0108ef00aeb5", "value": "yamaha.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e1bd1e5-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329772, "uuid": "5715d4d4-ecae-427a-b06a-9dc54c9b76a7", "comment": "Malware payload (Mirai)", "value": "cb36d21053e69ea6a0d6def137200620", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329772, "uuid": "ceaa3b63-f1bf-4cbe-ba9d-bd72f420236a", "comment": "Malware payload (Mirai)", "value": "c918751bc727db9048648eee53c6bbfaed1d43f92ad5b031c1c9a242192bec7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329772, "uuid": "0e034f0c-c3c2-4979-91c0-8b719ba7cf69", "comment": "Malware payload (Mirai)", "value": "653bbfde60b3ed12ad2bebb5f7314c624400f58f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329772, "uuid": "2fca2ad8-0854-4fa0-8e1d-099d9f0158d7", "comment": "Malware payload (Mirai)", "value": "bdd1b378334a7a742e7560fbf13b4ecbb5606e04268dc8bd7b196f6d8cf7a1a1650c581e4ccb611395501518a51e2d80", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329772, "uuid": "902034e1-9895-4c03-9263-d1e33977f136", "value": "T1D5535C42B3084943F5971DB0793F27E1D39E9B9021A4E387794EBA8D41B7E32450BEAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329772, "uuid": "6c7c8164-877b-4dcf-ad94-ffc63a3bd714", "value": "768:nMX8XshipSHLhp3ia1Z3xl8HqnwpOVwcev9So8N6AWQvXt2MzRWrTlbVRr:PppoLfrTxlU3pU69SFN6AWa2MeTlbVRr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329772, "uuid": "7bcf62da-8850-462d-a6cd-c7244643463c", "value": 60740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329772, "uuid": "521a73d7-b5b4-45e9-939c-48c32b052b53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329772, "uuid": "e27d82ed-d2e8-45ae-bf29-e138c044e7b4", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d5a55be-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347864, "uuid": "8e0f7096-c18e-4eed-a37d-19e183449e50", "comment": "Malware payload (Mirai)", "value": "ccd90ac24f8365cae31598364462eb93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347864, "uuid": "ea4c1d8d-0a5d-465f-b0e4-dcfef7b753bb", "comment": "Malware payload (Mirai)", "value": "cb49dc9c1922372fa31a53e881b3ac3b0652b2e238459aad866fb94a8f0be3fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347864, "uuid": "f57bd28b-7d1a-484a-9cf5-fbc90c021749", "comment": "Malware payload (Mirai)", "value": "517dadea601f4adba73ab6f4c8531b3083fba0bf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347864, "uuid": "02f09ed9-0f19-463c-b6a4-d7df81b3c891", "comment": "Malware payload (Mirai)", "value": "f9372eb6d6dbacbf5e9407f6bebb92395852436bdedd2b313b51896ba846ccd42a8cf08310bd416a90383b0e0305f303", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347864, "uuid": "b826fd10-446a-49e2-9989-3c9519691dbe", "value": "T1C97312BEECCEAB90D5256C72E60468D5B5C701C6CCB87CCAF10DBA577F0D18068D19AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347864, "uuid": "cd06315f-e743-4785-9d50-81f4ab04e807", "value": "1536:OlbdYNbf9G7584JV8c79vkJmZteBnlKrJ9f+torX:OlhYV05mchCmZter2r2SX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347864, "uuid": "90c4c35d-6313-4e16-945b-3b05d9f7631a", "value": 74748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347864, "uuid": "e1f68802-d215-4e89-b895-8832639b0a6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347864, "uuid": "ff5d1146-e1a6-4628-b052-514eb584c600", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90cebf81-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329133, "uuid": "cc5137c3-3989-463d-8d1c-0734898a5048", "comment": "Malware payload (Mirai)", "value": "6322e031af8661d86e058e16ab79985e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329133, "uuid": "d45481c8-75bf-402f-84ee-92bfa77df58d", "comment": "Malware payload (Mirai)", "value": "cb69d78ae1afe3689234f248ad17cbfc30bca4d9922fe79d1789234738ad1366", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329133, "uuid": "a722048d-43d0-43d3-87cf-cc1705362420", "comment": "Malware payload (Mirai)", "value": "b9163294e2cdd84e4c68032013aec66f32665d73", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329133, "uuid": "b677706c-6680-4b14-a157-2ce6f7d10c57", "comment": "Malware payload (Mirai)", "value": "f89f8ed1b3f18664b01342ab2903247f7be298a8165af5e189a4fdd227f0fc0d2c4b80fd6ae6a02a0bdfa369cf923c4f", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329133, "uuid": "3b681f14-9dd6-4e04-ac5c-a06bdb4f3dee", "value": "T1DF9105EA34649B7A3DE1ED7362D6C542F18060A7E5D51D0BE7E1F0E5088CF61F988A83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329133, "uuid": "c447020d-c5ad-48b3-a30b-ba9701fa25c3", "value": "48:vrSMV4kCr51V4OrrYrWV4ZrGoV4HrEKEEV4EbrqkV47r51V4Or1ZV4KrMSV4prch:vzI/DlcnAApEpbFarHLRhsrCjBb9vt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329133, "uuid": "d39db80b-8f26-4c3c-b6b8-633834a1d88b", "value": 4401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329133, "uuid": "f2e30dad-e865-43aa-b55a-03bccdf39a18", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329133, "uuid": "897c549f-a834-4cc2-b19e-0f26b59aa501", "value": "76d32be0.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ddfe5c7-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345368, "uuid": "a37cae94-0199-497f-a594-4a8ba7f62e52", "comment": "Malware payload (Mirai)", "value": "8e6a9a6fcb1c9458787908622839bd3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345368, "uuid": "164a40c1-e36b-4886-ab41-d2ea1d848bee", "comment": "Malware payload (Mirai)", "value": "cc08d1e6c384658eeac77c0284e59b30ad9cec728eedddd559a747f76b09dc6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345368, "uuid": "28076e58-72a1-4d98-892a-322b00d3812d", "comment": "Malware payload (Mirai)", "value": "28199862076b782210ef7cdc761f76e983da42c5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345368, "uuid": "3bc1de4b-7e34-41d5-94ff-b3fa47d6e439", "comment": "Malware payload (Mirai)", "value": "29590d70040de6e46a07c1ae778fd3cea069b099b6e20ec5b86a41869bad8057c8e3bbbebe8ec2370d16bddd6ffcd2e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345368, "uuid": "7fe42875-77e7-4e8c-be04-b5cbecebf329", "value": "T1E45302E140E6F469C26293B262044F02638ACAA1BB05DCDC34DF17676D9EE4F1F896D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345368, "uuid": "bac9e566-a2fc-4681-bc83-6344747838ea", "value": "1536:LznwRRM10ac1B010ZtaS4SV/zQUjsPwttl6rKDLkg4azH1:XrREB5taUVLQlwtt0+DLGazH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345368, "uuid": "c4d104ae-b9e4-499c-9a06-f40cefe4d83e", "value": 60788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345368, "uuid": "f3a92a62-8f48-46b9-9a88-a99bdaedfc1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345368, "uuid": "de0bff36-07a2-4ded-80db-899692dc73fe", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "370be6f7-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309225, "uuid": "215e9730-14ed-407e-ad73-d609cb76943f", "comment": "Malware payload (Gafgyt)", "value": "afbd548cfe8d8588e005602168cdf4c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309225, "uuid": "2c23f82b-d8e7-4f49-aa29-003e1fa2ee2e", "comment": "Malware payload (Gafgyt)", "value": "cc5c6fc83564b20ea2492014557714c2fdb696595e406c2190be865bd84fa38a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309225, "uuid": "676085a9-dae8-4f07-9838-7b26ce1ddd42", "comment": "Malware payload (Gafgyt)", "value": "b9a41fad75c7b64a423eadd676fcb49dcd856fb5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309225, "uuid": "2dda247b-4888-43be-9a17-f12f8ed043b4", "comment": "Malware payload (Gafgyt)", "value": "9ea0743dd0ec33a06d80ddb1fa24862f2a9d0c84ac3a11e3dfb9f7439a7e2325c6d1cab005a0590d2a2e1556865c1528", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309225, "uuid": "ad876209-5c12-4eb1-98a7-cf29201c067b", "value": "T182B31813B7B1DABEC08252B12BDB92F19423FD7D0732622B33957DA51B388D96D59302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309225, "uuid": "b64da66d-9db7-43a4-a906-372dc4bfa99c", "value": "3072:od0w4SAewzi+Xn+8Uhw6W+aPkJmDk1c8xF6KjW:zfO8IBtJmDk1c8xF6KjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309225, "uuid": "43d33827-bed4-44e2-aabc-fa8532afb1df", "value": 114825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309225, "uuid": "419e0ed3-dd4a-4616-94f0-67ee5dd3b0d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309225, "uuid": "c821b23c-2bcf-45f5-9181-6718258be46c", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a561ed02-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344629, "uuid": "f026d655-c55f-4974-9b71-e03ed088ed48", "comment": "Malware payload (Mirai)", "value": "61d0adb1388d30bcb9a0fdab592dcfc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344629, "uuid": "e3fbd1ba-37aa-44e6-b99b-9d7512a56239", "comment": "Malware payload (Mirai)", "value": "ccccf45350809f344040fbaeb04706f880f1da0bd54e8847d5a6bc0c5c96f69c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344629, "uuid": "7224fac4-2cf3-4f5e-9301-f584163cea81", "comment": "Malware payload (Mirai)", "value": "7ff2a0b24fe1ae57ad72dd94567bacf70c1d894a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344629, "uuid": "0c5508cf-8cd5-40a6-b3da-40bb28f3d3a3", "comment": "Malware payload (Mirai)", "value": "a4e13694f0503c5dc498d3c1ddac07f052fb379d8bb7361a100391bc5a2c02d715a681cfff82a72978bb59f6ba90689f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344629, "uuid": "8250ad2d-1768-4129-98cc-d744d2b41ff3", "value": "T1D5335B21B97A2E17C0D1B8BE21F34724B2F6571A26ACCA5D7C720E9EFF1494020576F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344629, "uuid": "a2cdd3be-51ec-4295-b7e7-62fa60644159", "value": "768:0ooMq9OakMQyzXBnNuSdtdVW+GpzO+9xt5nRzKJ:0oRSO9MQyzRnNuSdtdVW+Gl7Rz6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344629, "uuid": "155524f0-13cc-4301-ab65-2d586daf3666", "value": 54084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344629, "uuid": "2a5b9f11-0bec-429d-ad5a-6e14abff35b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344629, "uuid": "f9f0bdd7-3d0c-4dfa-8817-c946e41c6a24", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9712530-de64-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766318436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318436, "uuid": "702fada4-7a54-4cd9-bffd-c30ade1a9ba3", "comment": "Malware payload", "value": "c6a8ea3438bb0abc220654a093b0299b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318436, "uuid": "082d1e16-5784-4ade-9765-3b8f73170325", "comment": "Malware payload", "value": "cd5829453cfc83ecc63a28b6005a6407c7b7b081627e741e7064cd2b1d3800bd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318436, "uuid": "0c359b13-6c01-4bcc-8bd5-cf8c5126a7cf", "comment": "Malware payload", "value": "248a500d951c3d01c150166bb3597a63491f6589", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766318436, "uuid": "7aef6156-a626-4652-b801-2b010b13bfbf", "comment": "Malware payload", "value": "0243f980f927fbc8481f50be38279a86e544fd5fce3b52a47e158d22ede766f6ca6a887fe7196de687a533cf5a8851ed", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318436, "uuid": "89ad5472-21ff-4c93-9eb1-f0da86e6aaee", "value": "T102B56B0BBCA11CFAC0A9A23188765196BB61BC452F3213D73E90B7B82FB2BD05D75754", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318436, "uuid": "c0a3dd13-a639-4cfd-bcc9-5bf3dfcda113", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318436, "uuid": "a41979a7-9cd9-48a5-be2a-cd2600884c51", "value": "24576:nGNyBjZGg2mtPlIFd+hoEPpxoAwAYZsUVuQPKt6MKcADE0q2GmcoeleTNj4HGu27:nGEBkp8l+0hpBtSZHVhA6yADE2Um6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766318436, "uuid": "53caa956-9020-4768-9628-1b19e47cfab5", "value": 2413568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766318436, "uuid": "7cc91952-936d-4ce1-8b92-274f1704f2a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766318436, "uuid": "71842eaa-dcee-473d-a02b-5e6d569c7233", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e336030d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309514, "uuid": "103988c4-82b8-4c84-9514-997e2482fa84", "comment": "Malware payload (Mirai)", "value": "f1a7d4797c823f95901682b131bf7ad5", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309514, "uuid": "5b25bc06-26d1-468f-a31d-cca453a55ca8", "comment": "Malware payload (Mirai)", "value": "cd7fa740d0adf255a3425e702ec1ef2521dacb871079773d90463c918a26fcd9", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309514, "uuid": "db6d6463-09b9-43b5-889c-1a947030fc6d", "comment": "Malware payload (Mirai)", "value": "f787013c2f708481e8c73633538301885ce67127", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309514, "uuid": "45eda2cb-832a-4abd-be3c-a9e3e9aecde3", "comment": "Malware payload (Mirai)", "value": "e3bc8f18316d0533dad4d4a1f33b1810aec621aa69bbe07ad94d061c300e5140b1807d8aa32dab883196dbe573549fc0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309514, "uuid": "d0837218-345b-4a8e-85ab-9c9f87a84b6e", "value": "T1E65129FD39B236336596CE84F4234ABDB00FB1D477504EECE47E28F585A6915B820B25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309514, "uuid": "1bb4b2f2-7579-49a9-9501-f1f15df1a46c", "value": "48:z56JjHUTiA3gxNUyHfHsiuW4tiylQOHiOeuM:F69Hm3iNq3PeuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309514, "uuid": "c3d0e617-0810-406a-8fc1-5d9ac095ef59", "value": 2477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309514, "uuid": "a12fcddc-7257-4b11-b77b-b0be205ded97", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309514, "uuid": "087c2d02-db8b-4986-ab6a-06b50973edb8", "value": "tplink.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba038fc1-de2a-11f0-a129-42010a9c0007", "comment": "Malware payload (Formbook)", "timestamp": 1766293553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766293553, "uuid": "537def6d-0cbd-4551-9377-eabe1e415e93", "comment": "Malware payload (Formbook)", "value": "5d00dde458c1a1334db921b6a19d305d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766293553, "uuid": "388b1b27-4111-4027-98e2-dbeb9f10d88c", "comment": "Malware payload (Formbook)", "value": "cdecb17866aa95ae171740ba4fc9b73b0f7a75ee817119fbe423b074c2c3e8a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766293553, "uuid": "b8c892dd-fe7e-4c30-b8e7-9f30795dd4bf", "comment": "Malware payload (Formbook)", "value": "b310dc98ee5903eac07d6d003469a3f7caa36a13", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766293553, "uuid": "62e7f1cc-d2fb-4a3e-b449-e7ccacb94a8f", "comment": "Malware payload (Formbook)", "value": "47dfa629c0ee6563bdc1e6eeb1f263d34f43c881b0893b25db7a400cff8bc2dee15defc22f4484f3cd8e244eb692f6dd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766293553, "uuid": "1fb0f284-647e-4428-9f10-1ccd4047aa5b", "value": "T11A859D09E3D40978D56B9374CA6B9732D6B1F8414731C68F42A6DA4E2F33BD09A3B721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766293553, "uuid": "ad06c7b9-fca1-4470-a450-88c0f0b26e4b", "value": "d3774c8b4fb397ae74273ae43189678d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766293553, "uuid": "a01eb4a9-08b3-4060-a94f-2225f6d36e52", "value": "49152:Qrh9c3z0vPp4Gf3hClz7L/vfAtc+Y5WWQYBjG:+c3zQpWn8/bYs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766293553, "uuid": "5636625a-4890-4b4d-b88f-8631f0b6278a", "value": 1773568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766293553, "uuid": "420cb921-3ab4-40e8-82d8-c4946e469199", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766293553, "uuid": "f0a4dc14-f18f-4916-808b-13410aaa06d5", "value": "msedge_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f37491-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341038, "uuid": "ff07b425-5c58-419a-83a0-92acae17ec00", "comment": "Malware payload (Mirai)", "value": "3d5c61b8d68ed6f8abbd474c3fd1c08f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341038, "uuid": "3f101c46-32ce-408a-83b4-4c3e451a7a30", "comment": "Malware payload (Mirai)", "value": "ce5b763ba2f38385524625878ac81a10904080f55cda0864d78516dbde57847b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341038, "uuid": "13337751-9603-4fce-866a-51e620c4cc77", "comment": "Malware payload (Mirai)", "value": "87da088befd9df40b144c68709e03d38b5f3463b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341038, "uuid": "e3482171-f6b9-4203-befb-b1c9f96e8fec", "comment": "Malware payload (Mirai)", "value": "fc6f4b54c14547aa1a87d5f42c9fdbbb2cc548d70fc8051bb38f49f412df3b4cda3915bbeaeec693f6784cfca55b444c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341038, "uuid": "5eb1fca5-5113-4bc9-97d4-c39bc294b2d1", "value": "T189434CC68B43E6F2E818193118BBA7775B32F53650A8FF82F754A931B913A01F15639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341038, "uuid": "4354eb2a-497f-4203-9b55-22eb58523fc5", "value": "1536:SfwOnz90l76yyfXEU7+MdfYns1xB72dXRRl:SfwOalXyfJ+MFYsfEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341038, "uuid": "5d4a398e-7d09-4fde-8a7a-1edb44f14b10", "value": 55888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341038, "uuid": "21d7cc9a-493b-49ef-8208-23cb3098f93d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341038, "uuid": "1b7e54fd-761f-4d9d-9c07-182183e01336", "value": "nabx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "963d6791-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330001, "uuid": "e3888d92-233c-4bdf-994e-eb8281d1dc94", "comment": "Malware payload (Mirai)", "value": "6c699ee9b877bbf17103f36f997ec59e", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330001, "uuid": "ffc571c7-1d97-427d-a249-ecf65785d823", "comment": "Malware payload (Mirai)", "value": "cf1ad3b7e2daf383d067eeaccfdbb598d4865aaf739d985811faba50bae726dc", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330001, "uuid": "e3f26267-3ede-42e6-b24d-c8a4a35cd21f", "comment": "Malware payload (Mirai)", "value": "7baa95539affc2fc7b1a07db52665bfd87e58f21", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330001, "uuid": "352fff5f-b3f3-4e30-abee-f35cd6626893", "comment": "Malware payload (Mirai)", "value": "8d6b02bf6af2f79b272a777d8ea4a39824b96367e6ef8c507705c543db550382e99e5b8e58134349cefc4bf9d2a58cbc", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330001, "uuid": "2d821214-836b-4b03-b695-c888ceda6905", "value": "T1EDF04FBE1016AF028A6C5E293A79B07FB170CB9945371F596FC5407E94C9A616338D31", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330001, "uuid": "ff1eb7e2-83de-46d4-a455-8b87a883ffcb", "value": "12:epmopDjduSpb/BpMaLBCRIpVNITESSpGNw:epmopDj0Spb/BpMaLBCRIpVNIISSpgw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330001, "uuid": "f1103092-b3ac-4d01-a9df-236adb5cb666", "value": 642, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330001, "uuid": "ca0e9ac9-d34c-4e75-87dd-80187aef9b53", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330001, "uuid": "04b399b6-0657-4294-8290-5dfc33d5e32f", "value": "phi.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2473abe-de22-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766290078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766290078, "uuid": "14652646-70e7-42fd-a07e-34926ac86b68", "comment": "Malware payload (AsyncRAT)", "value": "de37e1de843ea44b14200bd7e6ef7d0e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766290078, "uuid": "517d9642-a583-4b4a-a39e-f1c8a97b6dc5", "comment": "Malware payload (AsyncRAT)", "value": "cf86be95b4d744d5141fc689631852fc6ae4d9aeb83e2e850b4c0203b7eaaefd", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766290078, "uuid": "c5bb1c11-be45-4893-b5c7-588db857cec8", "comment": "Malware payload (AsyncRAT)", "value": "d9cd54c2c4075684052c3f15d254653a5704fc4b", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766290078, "uuid": "e6911d20-2215-4db2-8f4f-6b8a1960c538", "comment": "Malware payload (AsyncRAT)", "value": "6a258e942fff41bbc59849ca4194d75bccb349242d744f744b3054b36b727577f85a0a85c586374e9ea09374495add06", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766290078, "uuid": "cc73ce01-63bf-493c-a4e5-e80d0b17aec2", "value": "T1C9C21B0473F48261D1ED47BE4832A600D375E68B5D53DB9F6EC499AD2A337CD8620BE4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766290078, "uuid": "678226f9-a4f7-4590-a4b1-659156fe864d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766290078, "uuid": "3a9026bc-c3df-45e4-8e10-493427b17998", "value": "384:aQ4K4Rt1zgeLsQk5MMymrJhxUHqqbuUsJQxnCJf+BWfXW1/tu+:aQlst1ERQk+MyCJhxaFbHBFBDu+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766290078, "uuid": "6b0eba8f-5535-449a-b157-3741e485fde9", "value": 27136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766290078, "uuid": "50d9ae99-c5c1-4933-b4e7-92d4db3a3f8d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766290078, "uuid": "e49038ca-3ad8-402d-ae3f-709b55c56ae4", "value": "Stub.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f2cae7-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "c28e3973-1511-4a41-8a53-fcb696eac0fa", "comment": "Malware payload (Mirai)", "value": "5c3e27fb3101c29817a6c942df01af14", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "9360b0e4-a5ea-41da-afa9-54d6a67f5797", "comment": "Malware payload (Mirai)", "value": "cf9382f6d6cf5296bf1fbda49a772b9924dd932d77b4ed974e3c2e8bc493c789", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "541dca08-aba0-4f6e-acc3-ba64edf27ddc", "comment": "Malware payload (Mirai)", "value": "8e1df842174015871c037f95eec059e680e6b167", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330050, "uuid": "82908bef-72f1-40e6-8ac5-76363a7d00e9", "comment": "Malware payload (Mirai)", "value": "bd5220b0aa659de40c58f35498ec8c16b6e1e2f2bc417e76032a152a84c4e5292fb9b7a24b4af823c6f2a53d665cbed4", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "faeebed4-2604-43c3-abd3-d9d1adca75d6", "value": "T17611425E15259D90849CD43A3793C108B8844BEE1D7B5AA81E9702BE24E09CE733CE15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "7e11adca-3b6d-456b-8f3f-c429923ef6c0", "value": "24:k74Va7M5OVa7kVa7rVa7VIVa77Va7KVa7PVa7jVa76Va7boVl:ksVawMVaIVafVauVanVauVa7VaXVaWVx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330050, "uuid": "9419eefc-522d-4711-9b55-506a8ab4a631", "value": 1060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330050, "uuid": "1d60e9ad-aa63-4a46-a365-8fd124a36c59", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330050, "uuid": "998ee929-63db-435b-940a-281358a60c75", "value": "cn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f0e405-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330074, "uuid": "c3b687ca-6031-46da-89e3-4dcd5fdda909", "comment": "Malware payload (Mirai)", "value": "62ba6b2d536421569dfd55ca81811392", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330074, "uuid": "9248289e-e9bf-4e3c-a891-a7ac3dc312c7", "comment": "Malware payload (Mirai)", "value": "cfb1bfa7cad8b02e4133af67bb3e44259677d36ae1657470852c6ec80f994e4d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330074, "uuid": "0dd3024f-a25c-45d3-b10c-5693cb32d85c", "comment": "Malware payload (Mirai)", "value": "6b5d402a6092a6eabde9f7dc5fcc63376e7d5ee7", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330074, "uuid": "12c6634f-a446-489f-81bc-25e895f9add3", "comment": "Malware payload (Mirai)", "value": "3d5bf17d78ad9b2ec17e842c9b0aa04d772940f2527630cca5916ed9cbb8487ca12f31ceffc1b8a0c76bdde4b487168f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330074, "uuid": "b7e95191-82aa-4009-a27d-4008253b81a0", "value": "T1C5B0927A051BEF0380BC9E6A3AB1A43F74B567AC054B37886EC3409F40885C52278D12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330074, "uuid": "ce99c17c-ce43-4622-8709-b6e85b72b782", "value": "3:haX+v1FWISNN3VZVMISNN3zSaDST63S4V/eXIFIX1ISIIFA:WGWv73VcfiD4EX4IX1vI4A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330074, "uuid": "b4efb224-d2d5-4f70-a436-6e960eb3b083", "value": 129, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330074, "uuid": "a8e13f0f-ca24-41cc-a42c-0ac153974b82", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330074, "uuid": "84afd2e7-ab41-4b97-a8fd-0153e8970dde", "value": "x", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de151b08-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766361045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361045, "uuid": "77797610-e2f3-4276-b8e3-59777dec9ad8", "comment": "Malware payload (Mirai)", "value": "46e49a79c5953dddf6ef4ed9fdaf5517", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361045, "uuid": "194b36b7-3105-433c-8069-d1aa0284e22c", "comment": "Malware payload (Mirai)", "value": "d07a09c9736ffacf606bbebad35a8073febd4d2b062f24c6ced86cc49202f09d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361045, "uuid": "a8136877-19d9-44da-89d7-c28de4eccb35", "comment": "Malware payload (Mirai)", "value": "a87c4a114b6860804d5486d0f9e576b6d55abda3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766361045, "uuid": "9834a0ea-e10f-4f11-9de1-ecee2cc60ecc", "comment": "Malware payload (Mirai)", "value": "acdda28d8fd34a49aab09d01542aa0a8fba95517684313150cc2c93a17f0b9f562ecfee1df7dc79441e282c55c74c8e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361045, "uuid": "1eefe2d4-7bc9-47cd-9058-2a735b045806", "value": "T1DD832A86BC81D622C6D466BBFA5E42DC332253B8D2EF72079D156F153B8682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361045, "uuid": "e6c35cfb-44a7-47ec-bb84-c799fdbcee54", "value": "1536:qneC1wY42Q9gDcItLTEX+qM5AVDfpvhoYZG4PMU6CyK1T2bVR:qnZS4DqmAVDlG4z6CJ1T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766361045, "uuid": "f19f735a-5613-47b9-abb7-8e3ea3569d4f", "value": 81668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766361045, "uuid": "e6065dec-f9b5-4e00-a228-d076c8a5f88f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766361045, "uuid": "5709140b-a343-4be3-9ab4-952e0b700bec", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9b1956-de00-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766275336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275336, "uuid": "d7bc4051-98d9-4067-baec-2e00a27f9fc2", "comment": "Malware payload (Mirai)", "value": "5cdf44d0264187425c4aa46946a687c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275336, "uuid": "1f463973-080f-46c3-9c7b-e2f7ea740092", "comment": "Malware payload (Mirai)", "value": "d08d039bad69599bb0ae34b6849c40eef9e4ed2dee50456b8bee19f7e5243291", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275336, "uuid": "f8f5895c-473f-415f-b680-0df2f9815672", "comment": "Malware payload (Mirai)", "value": "461486b4356e813ea6936e28202fd9507c213204", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766275336, "uuid": "93e997e2-f6d6-4d27-b21e-01b5dcc8a774", "comment": "Malware payload (Mirai)", "value": "993d32cb85f19907fd43efe71cf78f994529eb60b315deaae1df393e7164ee1dda5175c37066aa2c4125b8ee87ec9c05", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275336, "uuid": "a84e1cc2-51c2-4f4e-b865-10acfc6ebee1", "value": "T15F53F1B5D5ACEC37C4F1AC71D61C8087D5BA2734B2BD36A70628AEDC795F4021AAD01B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275336, "uuid": "9919c556-a601-45c1-bb64-897edb34f746", "value": "1536:H+o7tabuMNn7LEGB4B8yaTY4anL7j00q3cvEkZ:HDkLNn7Lr8xaTY4anL7YtMcY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766275336, "uuid": "a1f3fda3-c3ab-4186-9281-2b9da9645065", "value": 62184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766275336, "uuid": "404a1f46-a8d2-4cb8-8cd7-a1b28d64544b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766275336, "uuid": "619c10f4-0aa9-4bc5-a0e5-e6f2b485e4c0", "value": "sdxkzX_UXA229x.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c87fc02-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309234, "uuid": "18c81d8a-8769-4a2c-80ed-f752621cf333", "comment": "Malware payload (Gafgyt)", "value": "a7aa71e3b10eb73858d01a6ce8350b09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309234, "uuid": "b91de602-8332-4678-a3dd-d12898cf7039", "comment": "Malware payload (Gafgyt)", "value": "d0c8c4ba45ca7d11587c5693f86b95e416d7d4c4573795a9d37b65d6f13b915c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309234, "uuid": "535812d5-5d75-4c2d-be55-2be3f69e1722", "comment": "Malware payload (Gafgyt)", "value": "3ec1b35398494e8bfb0628db48c803608186628b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309234, "uuid": "f23c7996-91f2-4375-bb2b-58d532a29149", "comment": "Malware payload (Gafgyt)", "value": "271c7647ecfe45cfb4c335e1fa9364afd896a4d1f7de260bc35ea753745c59dbc2a5932488a022fdf7f87b9eb73aa2d9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309234, "uuid": "54621adc-131a-4472-88c4-4fa6a10ad93d", "value": "T1B1A36C1B6251C5FAC08756F62BDFA6615823F83A0B33710673D9BCA83F218C95D6E781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309234, "uuid": "098f9dda-2a90-43ae-9df3-7c60fcb3f017", "value": "3072:Ed2nDFe2oeLOOtJYyhAD3rZSr9phaiMpTmHyVQX5A+u+cm:BqyhQqphaiMRmHyVQX5A+u+cm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309234, "uuid": "13ab6969-7cf6-40a3-a596-1215908aab03", "value": 102934, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309234, "uuid": "300a3d8e-43f1-4321-93be-286e93fd1c1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309234, "uuid": "e3eac38c-26cf-4da7-9e09-bd492a72d845", "value": "yakuza.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff1c68f1-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329747, "uuid": "6ce9b55e-f942-4381-803f-1a834fad1449", "comment": "Malware payload (Mirai)", "value": "bd1b6e506d6664ce5c93767c40d50211", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329747, "uuid": "2742177e-6599-496f-b6a0-664fb0db10ad", "comment": "Malware payload (Mirai)", "value": "d0fa73dfe2c6b4d49c31db63d4424506b62fae9d95a32134d44e4b76cf3745cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329747, "uuid": "fe12e187-1610-48a0-8bb0-80ae4d8e6da6", "comment": "Malware payload (Mirai)", "value": "267f791f7732eef03c2acb4b441ab6a170961658", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329747, "uuid": "cd340c24-5a30-4b9e-ae2c-30c564ed6f89", "comment": "Malware payload (Mirai)", "value": "6e4c11990ad438022726b5dd50c2f4d1c43e9aa37b975b35b0a0dbfa50b4187472310b784561dc50d726416bb34d97c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329747, "uuid": "c3da3369-5ebf-4441-8454-32dd6a35b13f", "value": "T10C832B85BC819A22C6D8627BFA6E41CC332613B8D2EF7207DD259F25778682F0D7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329747, "uuid": "9bf6c971-daa4-445e-81d1-8d6a25b581c5", "value": "1536:GPvOKnod7uj48OWEYVfM7zW8KMSpL79YwOBJSA7Ge5JvETlbVR4/k:GPRos4zW8KMSd7WwOBJSMdZETlw/k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329747, "uuid": "b384e0c7-4d39-44d6-8088-8568757820fd", "value": 84128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329747, "uuid": "e09ac2bb-1aec-4144-ba3e-0c69a75343d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329747, "uuid": "462319a0-ffb1-4e31-8c82-fe8319845d7c", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba9a5ca-de3b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766300616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300616, "uuid": "14578ba6-0f01-4663-85df-24c7be8c1add", "comment": "Malware payload (Mirai)", "value": "f1d359563e4ca2a4d6b7080e9c83cc36", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300616, "uuid": "e7dd7420-1dc7-47b3-a091-94fe1cda738d", "comment": "Malware payload (Mirai)", "value": "d10ab4a6d83b7ce0e136cd791781049a5c8185ac0c9efcf811450c1b92ff3441", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300616, "uuid": "2009a0bd-66fd-4a89-9f9a-64c6624fa390", "comment": "Malware payload (Mirai)", "value": "67439aec922128f76f368666b9e81f63785abee6", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300616, "uuid": "3e8dc049-f8c1-4cfb-9546-f2dd537535eb", "comment": "Malware payload (Mirai)", "value": "27c2e2884a3dccba97e6234de6fa733c0473295ca9f6a0956c78430169ddc259b4da12e11d9f3d64cc1b3fc8b9e16911", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300616, "uuid": "3397aab0-eba9-4b6a-9432-d6d3bacbee59", "value": "T14001DECC26915347571CCF48B66E821C9458BAC4B4B0CF25E8A4587EDCDD3097065B67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300616, "uuid": "8bae39a5-4a53-4dfa-abef-4e42a4eaa18b", "value": "12:3J3/Yjx/Wqx/yNNIl5zAx/70LKjx/ZgOsx/neCx/9ON/x/RSEx/ktaKAx/ejx/SQ:3J3QADNI7NK0CNDOtBIkxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766300616, "uuid": "943c1027-fb3d-4eb7-8d41-92b037096ab5", "value": 813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766300616, "uuid": "bcc1e4d9-8def-4249-b57e-63706c759ce0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300616, "uuid": "b2a96ecb-3a2b-4fcb-9ae4-829658c45dcb", "value": "c.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fff09fef-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320729, "uuid": "bc5dfe31-aeee-4baf-abb3-97e12012c688", "comment": "Malware payload (Mirai)", "value": "b2cbd1b6dc6dc6beae44d55640cd0fd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320729, "uuid": "0c5a8357-d3f6-4c28-a0cb-3af610f40f42", "comment": "Malware payload (Mirai)", "value": "d1bbd1fdab7da4b19bc9cb3dbffa5eef514922cf98087c9c882e69e3201816b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320729, "uuid": "dad3340e-f04d-4785-96e1-a77e81aa2a4a", "comment": "Malware payload (Mirai)", "value": "556c0977e0a014ef3c28c43064f0b85efca2cba2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320729, "uuid": "9261ddd4-693c-4de3-8186-612e48f1bd0c", "comment": "Malware payload (Mirai)", "value": "ce1a5f05e662c831ec379e2c92cf07b4add1300f97e210973d7332ebb7de4fc59746ee71f7645c0a8b50af0ecc7fa4e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320729, "uuid": "41bfda98-c81a-4b80-abd2-726d057970ec", "value": "T1935329C4A903DAF1EC165170E06AFB3A4676F53E0119EA9FD7D68867D463E02E70239C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320729, "uuid": "7c3410c3-ea41-4c04-ae2a-a45475a33a01", "value": "1536:4IL2IxuBqWoArsGCsLSmaOhOGza/RXNytX:4I/xuBqWoAYGCsLSmaEOGz4RdC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320729, "uuid": "07533147-31c1-4623-ab88-118096648b3c", "value": 62044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320729, "uuid": "9a0116a1-c45a-4f4f-bd31-76165d875db9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320729, "uuid": "b6eeef1c-eb33-4aaf-855c-056510c3698c", "value": "shadow.i586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8c94e91-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309496, "uuid": "dba6501f-4ac4-4c6c-8e8e-458707040662", "comment": "Malware payload", "value": "1ecb66b812afc91faac199dc0d66d04f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309496, "uuid": "98decd14-bbcb-487c-9974-df565240a400", "comment": "Malware payload", "value": "d1e561586f25b4e5a49cff92ce47ea07fbdd7bb5e5a4978da35eb5ee91ce96bf", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309496, "uuid": "f37e5e8e-b58b-40cf-9bf4-bc84d76c9ec8", "comment": "Malware payload", "value": "2fe6d21e0023a527d60c095add08aac5e5f9e151", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309496, "uuid": "dc8592de-e6ab-4932-96a3-2c5f3182f925", "comment": "Malware payload", "value": "406eb14965590b7d01a60eb3ad6fd7b64b5514177e17a12b4e3adaf5111f929793269c1f7c02ffa521d7a797f7d714ce", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309496, "uuid": "11abfe8c-3610-4733-8099-595e41db46e4", "value": "T11621D68F015CB99B160DCF15716750DC77F0D2E8A0B2A943B414B9F3AA882432575EFB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309496, "uuid": "69f9c3be-b907-403f-a9ae-1ae53ce0c8d4", "value": "24:3J3UE5QEcfNIZEtzAEVKT8EHyEOrMETt+3E3e/EKuEzBE1gEkzA:tWHDQJ+rpt+EedX02E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309496, "uuid": "566c1100-13a1-4659-9fc4-5208ce8edb96", "value": 1116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309496, "uuid": "dd19c922-275e-4840-884a-cc978b6e12d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309496, "uuid": "7d91419f-b4d8-4752-91a9-a82d8488f885", "value": "c.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa52d64-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330043, "uuid": "360eb2b9-9a08-4be3-8314-9ccb13448229", "comment": "Malware payload (Mirai)", "value": "21f8db9fcb6592cd202b617e728f9e08", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330043, "uuid": "60d14191-42ed-464c-b74c-7e800299f1bb", "comment": "Malware payload (Mirai)", "value": "d22a081bd991a9b3f95a28c9f1000da56e09a14a0017dd158a8e84bfadfae236", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330043, "uuid": "0542174c-a50f-4646-8fdc-f59fd324a1ba", "comment": "Malware payload (Mirai)", "value": "189afe529567d40c0e2080387edfb347e9788e83", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330043, "uuid": "c561adac-e507-4477-aee8-d2a13b233ac0", "comment": "Malware payload (Mirai)", "value": "89f95486b7f3ca75e29f903ef45de66cbc6025a05dd556adff5c882654e745515123a59a4c205db6e29cc58125e4c57e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330043, "uuid": "453aaacc-17dd-4225-97d6-51ee4af045ad", "value": "T1F3F0448F325597E32F4C4D64F9AA540C7A8586D175700E24F57AE4A158D9300379CF75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330043, "uuid": "20e5672d-21ab-479e-b406-64d684f0063d", "value": "12:3J3nKjQnqLqQnYNIl5zAQnB0LKjQn+taKAQn87nQnsCQnWFEQneWjQnCziAUR:3J3nKIqLlYNI7DYKI+tB3yksNCDSCzaR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330043, "uuid": "b9df22df-bc8e-40cc-9788-cf9471979b2d", "value": 637, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330043, "uuid": "f1e02b55-04c7-4453-897c-8512871295ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330043, "uuid": "514d4364-f991-468e-9c4f-c21ea2c2b5f1", "value": "h.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "352cc839-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347877, "uuid": "984b44d5-710e-4b66-8def-2ebda986c3b3", "comment": "Malware payload (Mirai)", "value": "50d705fb41aad04e406c9a5d692a7ec1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347877, "uuid": "dfee2cde-e8ff-460e-809b-3a3843edab47", "comment": "Malware payload (Mirai)", "value": "d267731014e08a45ca43b1b96f9d69938e40e5fb13f6cd8b134b7d2435542ee6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347877, "uuid": "f5f620aa-8991-4f3f-8fb4-1e27244580e8", "comment": "Malware payload (Mirai)", "value": "443041d46fba4f73523f6b889ebb78c451da2170", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347877, "uuid": "00ee3fbe-8092-4c79-938d-e0a045c4cae1", "comment": "Malware payload (Mirai)", "value": "c1b65bfb73ba179df60bc814fbb3d260cfbb141e109abbb16d2bb6030d88dc3584c0b3918145fa1bba2bab5537ccfeae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347877, "uuid": "79d85162-35f9-4dd7-b4ff-124b296d47e4", "value": "T16D147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347877, "uuid": "1c3ea9d0-20c5-437c-944c-8bf46c6b6ebe", "value": "3072:tcHZcgg7w9JNKTDRwnKRDMLzsi5jb1lCRNUKP:tcYeJI/RWzsMjCk2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347877, "uuid": "db9092be-bb0b-4422-9af2-df1ea17d269c", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347877, "uuid": "42400ece-fb26-4418-aeaa-52156f7a4c22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347877, "uuid": "2b3f5693-18b2-4475-b586-cd36572073ec", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c191fdb-dec7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766360746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360746, "uuid": "47652f0f-02c9-4bc3-9f5b-c58b19178f95", "comment": "Malware payload (Mirai)", "value": "df9877d7afcc488830733baae123c035", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360746, "uuid": "07c7ef0e-12ac-4814-b6c5-969999e755d1", "comment": "Malware payload (Mirai)", "value": "d2b050cc6d57041cde563ef5946ce64ec09fc1ca37b7db5efc94f0c43ddf72a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360746, "uuid": "e697fce5-9e6a-4de2-b1cf-70f70d0fab55", "comment": "Malware payload (Mirai)", "value": "f7dcd178629c5f68912faeaf99f0674cf197ebf3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766360746, "uuid": "f8c137a7-b028-49f1-99e4-1d9f76db479c", "comment": "Malware payload (Mirai)", "value": "180bdb60cd13ee160435109b6bc35cd9184f57a605351de0ea70b26176bddec5f6d41724d57dd531aeebef7640711828", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360746, "uuid": "608ce769-a3cd-453c-bc7e-44d73af2387e", "value": "T139530983E500EDBDFA4DD63784570E00B564BB654B520B63B377F9ABE935088482ED8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360746, "uuid": "653aab24-033f-418b-a783-7188921a0bd3", "value": "1536:Fs0qEaXkedDbsQQUFOBu038QLgxtB8AxXPHd6Y3fDETPYH:20qEVCPZDO87eAVPHd6MLXH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766360746, "uuid": "37bbafbf-e755-4b5d-88a2-fb4cf3b3bb74", "value": 64924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766360746, "uuid": "3f1db30f-65a7-40ba-b5d3-ce25553811ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766360746, "uuid": "92f7677c-e7d7-4535-9b28-cff01345386a", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9932cd8-de62-11f0-a129-42010a9c0007", "comment": "Malware payload (Makop)", "timestamp": 1766317631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317631, "uuid": "641dfcff-ed16-4105-b213-1d23a44a327a", "comment": "Malware payload (Makop)", "value": "97b3e171c4be27404012cfbed7205ae6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "makop", "colour": "#0769ED", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317631, "uuid": "d602a43b-07e9-4f4f-b51e-fb11b494503f", "comment": "Malware payload (Makop)", "value": "d2f2dcb52f79307c4f9745a169986ff1f2d5427fe4ba000efb458f7590176da6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "makop", "colour": "#0769ED", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317631, "uuid": "11972c7f-7759-4cf5-958e-a1c153b28ef6", "comment": "Malware payload (Makop)", "value": "44f6d64ed529f738d6d03d7c71facbb068df5205", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "makop", "colour": "#0769ED", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766317631, "uuid": "65600535-9f61-4ee5-800f-60327d7a7606", "comment": "Malware payload (Makop)", "value": "38c48be132a29b77438bb3bc9aca2b407d81a988c5a5ffe237029c6fe3fa3354fad9ad5b57d330d31eb1547f7ef0161d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "makop", "colour": "#0769ED", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317631, "uuid": "dfe074c8-5fff-4efa-9521-38dffdb9776a", "value": "T1CD139E6AFB42C9F3EEB925B4A29AE247BDAF5519132416F7CB3058507A061D02CFC1C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317631, "uuid": "d6177261-c023-4580-a3fe-15c44cc9ab10", "value": "364f4eb85abb3fe033aa9cfae7ac6b24", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317631, "uuid": "c437bff5-f63e-4842-976c-28878b1a8333", "value": "768:3O1oR/CqVS1RzK4wbs+D/SIJX+ZZ1SQQwZuIOPzDtLiJs2xwOuOgMwG:3VS1FKnDtkuImtuuOu/MwG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766317631, "uuid": "ddada7c4-bf1a-4259-948d-d4015287d0dc", "value": 43008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766317631, "uuid": "073ec060-fae0-4482-89d4-1d76916279b4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766317631, "uuid": "c5574dcb-831a-4816-8241-422cad575663", "value": "mkp_nowin.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96c4fa24-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "b04a6220-b7e8-49e3-b3ba-ad7621849da5", "comment": "Malware payload (Mirai)", "value": "b262d7a545e204da87677c04c9b58f1b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "98577ad9-fb75-4455-bc7d-e58aec6a48f4", "comment": "Malware payload (Mirai)", "value": "d3efad3481cbc1372b1d4a585e08717fdfc008fd4af74a4bef08cccc2ab99e82", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "8c12ee70-71f0-41db-b5b8-f1b9de89e872", "comment": "Malware payload (Mirai)", "value": "bd01ba99655b9f1de6a5eab9a993d7028fc354e6", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330002, "uuid": "8e999eee-acff-4561-930e-943121d9669b", "comment": "Malware payload (Mirai)", "value": "206bbb0c44ee8179369b89ff4d22d294c96dae5e1cb60db8434d8425372224fd4691a3004effe0ee7b9976d591f5aa54", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "abdd12f5-2df0-487a-bf83-2f0492b076b4", "value": "T1C2C0809F10271941D004AE201052341AB151C5C235F00B0DDBCD2033F8CD500BB5CD14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "2fecc10b-1e72-4a70-ad7c-c2a7af86dc25", "value": "3:LxAjdVZVCONBzSa5Ap9lACgxAjdVZVb8NBzSa+ANjapLAv:L6VxyHg6VbkPj8G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330002, "uuid": "d432b033-7561-44d1-b17a-722f283502ed", "value": 157, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330002, "uuid": "5d715e28-b5f6-4c42-86d2-60388eb308d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330002, "uuid": "de2e0a22-e24c-46fd-a4a0-31f34d1c1abf", "value": "vnpon", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee4d7f2-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330042, "uuid": "e8a52cae-eb1b-4d8f-8b81-ce7f6f4a8a91", "comment": "Malware payload (Mirai)", "value": "6d8a74d8b289f7bb751fa1651bd57a81", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330042, "uuid": "2edda081-d509-4ed2-b4fc-04cf50a0a087", "comment": "Malware payload (Mirai)", "value": "d4a2f2a6d106c0bd990a9ed4fb6ea86851f955d5b59c2c23eb658b20fbc8b355", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330042, "uuid": "44c5a86c-0762-45d8-9018-7a884e76ab4c", "comment": "Malware payload (Mirai)", "value": "863eb8063610f51a1d0ea9a1e432f72c60bb645b", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330042, "uuid": "955545d9-92dc-408c-a6b7-0efc5f84f71e", "comment": "Malware payload (Mirai)", "value": "cb8860fe2f07eb3f948b0c5051fdf5d994d31ddd8437350b8df3c96ea3effc059126460975716752740120ba530a8ffe", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330042, "uuid": "9be83d5c-5129-4719-9640-807b4af30a03", "value": "T1BBE046EF0022CF13C18C2C0820B2F833F032D2E023A04A0AAFD9803BC0C8A00332CE25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330042, "uuid": "c361f6a5-d19f-408c-aaa3-dd1b03fe3f16", "value": "6:LMFdVQHzALKVMFdVeaLaNgBVMFdVcFGNIvF+6iyJVMFdVcfiAK6iwly:od2ALHdMaLaNggdVNIE6iyodGLK6/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330042, "uuid": "fae0ac6e-defa-43fe-87e5-0301be1c7c33", "value": 309, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330042, "uuid": "51c30fdf-d86c-4829-8fed-afec57ea1f1b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330042, "uuid": "125b7f55-e0c3-4e93-aed7-3ee4513194c5", "value": "ont.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c7da64a-dead-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766349634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349634, "uuid": "e29ad8e6-a102-4a3f-b48a-990c6b6390b6", "comment": "Malware payload (Mirai)", "value": "f921d7cfbe32f1e83173fb1c9c00a040", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349634, "uuid": "d24557c8-1109-4a48-a675-24f533dcaff5", "comment": "Malware payload (Mirai)", "value": "d4d6dd37b0a8eeaef86167568e2056b56883117f5017569f65ad36ee1d07cfca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349634, "uuid": "720559e0-9ef1-484b-b808-784b65d81527", "comment": "Malware payload (Mirai)", "value": "43be32f4044306ffc01fcb68f07dea917e0b6d90", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349634, "uuid": "23389247-7def-409f-8040-9d434ca93b87", "comment": "Malware payload (Mirai)", "value": "ff63a9950cb7f1233c8853354578b6a200341b8f760d97831ddfa0ab8cba2bb1e68f75dff587e991475fe1c5d2c691b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349634, "uuid": "91b7d24e-ed91-4010-b36e-9ea5a3d6c65f", "value": "T1B2833A86A400CD7CFC4EE6B784570F10F62C77515F620F26A669FDB3A9721988E1ADC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349634, "uuid": "901644c5-cf70-46b1-a00d-e1b93ca98f5a", "value": "1536:y3wFBAGd1NYhE5ObWBzDhkak+znYhQZ4/8QeOInBkX8WMJRqxuob1DETPe:yAFBf+hEldFkak+znYhQiyOrX8dJRqx3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349634, "uuid": "165abaab-5bdd-4825-ba34-1a1123237bc3", "value": 83792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349634, "uuid": "ea26597a-8086-4033-af5a-03696dfef399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349634, "uuid": "8850d0fb-23be-4a43-8c6e-13289a2cbaf0", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65adff79-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345381, "uuid": "d0a173b1-6e47-4dbe-b499-f5882e6c5986", "comment": "Malware payload (Mirai)", "value": "9e97e1957211075e2d0a326f4b434607", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345381, "uuid": "fac8c6c6-4fd6-4807-a824-1875a86353d7", "comment": "Malware payload (Mirai)", "value": "d4db575b43ecf3584cb58ba44c96e1f53936d6888e749e195da832912d8f5ea4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345381, "uuid": "d05d5498-6826-4cab-8b0e-cb2cc31efe67", "comment": "Malware payload (Mirai)", "value": "a6bfef9cf5d4e58ad2426c111d98589d3befa5d9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345381, "uuid": "4704660b-830e-44ce-a4ef-da16be83e6f2", "comment": "Malware payload (Mirai)", "value": "2d8343b6a9924e545cae94dee0baf99b9f422406f8ee2d2ed22b796bdd637402bef3ecda29816553533c0ee6c3062d1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345381, "uuid": "ec851edc-3f58-4799-ba7a-ec43b84c300b", "value": "T1266301BC77EF8474E0D9A432254F21303371EB56A43B53D93E89B5E9E2625580C27EB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345381, "uuid": "ad8fe2b5-1006-4601-bb38-d882b7b477dc", "value": "1536:hltrI7mDmde7Lletk8cghgLFPjihgulh6DoINoHLT1rPV:hl+YmdkLMk8c5PdulINoT1rPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345381, "uuid": "35eb2f0f-fcc6-4447-86ff-326eeb924bc6", "value": 70848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345381, "uuid": "c9c650de-0bc7-40dc-add7-2d218d12edf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345381, "uuid": "a84b7ddb-d4d0-49d2-925f-10c5b103279d", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad825fee-de49-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766306847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306847, "uuid": "5dcfe955-d2d2-4530-88fb-e57d578ffc61", "comment": "Malware payload (Mirai)", "value": "9d3f483c710ba2fc9885d590b9c9b1b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306847, "uuid": "75173a1f-8c8a-48d3-baf7-8f4698adaaf9", "comment": "Malware payload (Mirai)", "value": "d52db1cc49fb05faa69226670727ead0af151c2b303f682a05386719a7e183dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306847, "uuid": "14d74421-8106-45a7-ad93-f42a9a5c958e", "comment": "Malware payload (Mirai)", "value": "89872046aed7e09b97a078524d3c5bf326b06e57", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766306847, "uuid": "db74b629-8d00-40ea-8d6f-625c456b026f", "comment": "Malware payload (Mirai)", "value": "d165a7798e5cc8ff66c08ebfff8b262ccdf5236b45168fd764c0d58ea8fdfbe188b4f54285f314a8473d627399b6e450", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306847, "uuid": "863f614f-8149-4c02-a314-0219b445e27f", "value": "T16C14D90AAB610FBBDCAFDD3702E90B0539CCA55722A43B363674D528F54A54B49E3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306847, "uuid": "0819d19a-9ec4-4db9-8af2-0c0626c75d16", "value": "3072:JGv+rX4OpwmQZdN+z9+JjFxK2gs8aPGxDGcYfTwVRv:JGv+DwmQZdN+zOKps8xZY0f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766306847, "uuid": "384ee687-52e9-42f2-992f-0786c81b814b", "value": 198684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766306847, "uuid": "ed3bb18b-0092-47ab-a05c-626aa82da1d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766306847, "uuid": "1bca971e-1583-40d1-b6cf-46efb59decd8", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "438dec5a-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309676, "uuid": "adc3573f-dcf9-468f-b342-d5f63aefb616", "comment": "Malware payload (Gafgyt)", "value": "c7e8d33c11d3e0722152e3e8abdb6d15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309676, "uuid": "f41bf07a-a1db-4615-8244-dad98c4dd5b9", "comment": "Malware payload (Gafgyt)", "value": "d57830ce7d64d51d8269778a2fca99fa7346c29a52772ccf943f746337ac8ca7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309676, "uuid": "77ed3489-d98c-4b43-b4aa-eaba07363224", "comment": "Malware payload (Gafgyt)", "value": "94a71868c59ce380959f0bcad9d697bb433fd73b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309676, "uuid": "42127a4b-86e1-40eb-a388-787cd064004e", "comment": "Malware payload (Gafgyt)", "value": "01c46309875e539611e5d399ad09b18ae2a0252f689644d78cb712fa43e035a603babccaa033a433166b9ec003daf6ec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309676, "uuid": "4c3e0d88-82b9-474b-bd85-11be004cb69e", "value": "T1BDB33B4795A89EB3C086BEB525EB59300722ED120F2F1A9621387BF4437F5CD741EBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309676, "uuid": "583230af-163c-40b2-be33-e584adc25493", "value": "1536:Aq/W65rWXAiP5dfK4EBbkb25lyDQnAjCRB5+TjgkHmmycgYVLu1IPYC:R/vp+9C4xb2Mja0j/HmDcgYVy1IPYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309676, "uuid": "7de62b39-5aaa-4622-ae8a-55a0f7fc57cd", "value": 108486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309676, "uuid": "a5bef378-4b94-48df-b953-f7413df0de83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309676, "uuid": "a831eb1c-d6e2-453e-ab63-2e181a540d6d", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba6cefb5-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330061, "uuid": "62ac91eb-74cd-40e9-a471-c354da6c8aad", "comment": "Malware payload (Mirai)", "value": "49a2acb38448a49eba300401d7fb96b7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330061, "uuid": "9ae32323-2c3b-4d0b-8a5f-c3eb758fc2af", "comment": "Malware payload (Mirai)", "value": "d5b6eeac3f9ad2d7bf934fd5111c8b6be7eecf7166f114a5cbed451f8d3bf6ca", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330061, "uuid": "b30b1315-3974-4e5f-b2b5-1799b578d3e9", "comment": "Malware payload (Mirai)", "value": "2ea3a67b3abedff53bbfe725f1a23d08084329cd", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330061, "uuid": "3ac4e00d-74e7-4075-b478-a77d8bcbc3b6", "comment": "Malware payload (Mirai)", "value": "807f4545facc0daaf66b58a81bc739408b5ffc869498a0804be75ad0e5afbf37c74fcbcc348690779e86d747d7efcb42", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330061, "uuid": "26c1f6ff-c369-4d4c-86a6-ae0f86166a51", "value": "T179F08C9F18273512C958BC7023AB389D7840CE8A2A314F6EECD7803784CCA007F6CE64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330061, "uuid": "38b97797-a6e5-4923-b19c-48cd5b264053", "value": "12:ep8hepzk5pSqAp99IKAepFNIxOipW+sKGv:ep8hepzk5pSfp99IypFNIxJpZsKGv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330061, "uuid": "64bea6a9-d06f-41a6-88ca-5a1a4ce7c152", "value": 465, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330061, "uuid": "5b919168-bd6a-4985-a9a2-e479bf63220a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330061, "uuid": "b9ae6f2f-f73d-4456-ab20-549c3440857e", "value": "kraxe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc590c80-de39-11f0-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1766300000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300000, "uuid": "2483eeeb-3c5a-468a-a542-0707fa3c7259", "comment": "Malware payload (OffLoader)", "value": "0b498eb9b52afe6635125825908a2459", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300000, "uuid": "7a972c99-5ad0-447f-bada-f32291f0af3f", "comment": "Malware payload (OffLoader)", "value": "d659ad9d00570077e5918aa2f53783c5e5b105ef10c7f776496332527776fc58", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300000, "uuid": "d48ef73f-e74b-48c9-9479-60d1ee6092fb", "comment": "Malware payload (OffLoader)", "value": "feb19aca40b37cc1296320c0370114719b5c2a0e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766300000, "uuid": "84d111ff-eb5d-44a1-80de-9d92ac308e78", "comment": "Malware payload (OffLoader)", "value": "6d6ec95e4427f0dc096648970afc8f270ca636b22ce1565f3d486998bac608f44493892f7fe280e66d35fe3d1d4e6f25", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300000, "uuid": "992e1d1c-9f7e-4d3e-9690-61573b29f3a1", "value": "T1E1F63337B28A673EF02E463715F3C2205D7B7961A51E8C4A97E00C8CCF6A5602E7E657", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300000, "uuid": "29c0dc3e-3043-4f2d-8af9-fe017a3add03", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300000, "uuid": "de9ac83f-b6d8-424c-8f1a-8915943c9cfb", "value": "393216:73onYV8c7oSG/vKb/Uok0UMokfH3icPXj2wa:roYfBCyjiCXicZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766300000, "uuid": "0518981a-ff59-41ff-973f-c7a5a7760c27", "value": 15886442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766300000, "uuid": "78719866-2d57-40d5-8a85-2ed2a35202c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766300000, "uuid": "e9b46478-93ec-4f18-b7ea-e71f29bc9418", "value": "Egzgxemc_2025.12.20_11.57.07_SETUP.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab7ea637-de80-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766330466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330466, "uuid": "d779eb5a-6137-47c6-a505-47e2d8397b36", "comment": "Malware payload", "value": "57fb94af8e2cfe07d40640b197d20d2d", "object_relation": "md5", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330466, "uuid": "5a6ef596-999b-42f6-b1a7-6ef18c575849", "comment": "Malware payload", "value": "d66733f5059d06885c70c73b99a45ced68c375dbbcfe516ab4fd0b68eeaa9482", "object_relation": "sha256", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330466, "uuid": "832ae4c1-0b8a-4e36-b93a-c6b0a548a2db", "comment": "Malware payload", "value": "1968e5b5cf55ecd0099abba2660cc21c83bf3f0f", "object_relation": "sha1", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330466, "uuid": "e665cfe8-0f48-4ec5-a16d-e54075a67fc5", "comment": "Malware payload", "value": "8a587767287f0e8dc55cc6530de45bbc6d83fb90bba22a25b0fbfdd50c78ffee65e39de938fb6e55a78b04d6aadc1634", "object_relation": "sha3-384", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330466, "uuid": "065ce18b-d2bc-424e-8c28-d26b380fbe84", "value": "T173C7BE1663A116AAD977C1388AAB6503EA73B8071330C7DF329C43752F63AE45D7B760", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330466, "uuid": "b25f54d2-a31a-42c5-912c-dac39a7ad09e", "value": "957d237db44af201299a1e8ffc6df035", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330466, "uuid": "f4d6ed16-d955-4373-8e27-2cc1206c5318", "value": "393216:a/jdQ/wilbpfLWPIv1eiHg9aVLB5EVsnHxyataUTKgkggx20+t/VxVDF/xgca9Bp:a5EosxTUU8XOkBKgP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330466, "uuid": "d7b4b189-2897-4605-9c8c-90a7e3fd6096", "value": 54475776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330466, "uuid": "54f184f7-c2e1-411d-b660-cb55ee5d3525", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330466, "uuid": "a1a809f3-705e-41ff-898c-4e05d5debdbe", "value": "ZelunaV10.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a74b626-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345362, "uuid": "40bf04fc-4c74-4ea9-9d81-90ad015a4000", "comment": "Malware payload (Mirai)", "value": "49ed1ef499b71a0d4daa7c97e0e1c16a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345362, "uuid": "7f239fdb-5881-415e-80b1-34dc016725d3", "comment": "Malware payload (Mirai)", "value": "d66d1c7759ea03929e738d59e8b118136a6535c99114e9ebaca3915b81af5fca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345362, "uuid": "c99baec3-63fb-4fd4-89a9-7c068b1adc7f", "comment": "Malware payload (Mirai)", "value": "df6650c805e96ad6904c046ad12177a839bc1556", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345362, "uuid": "bad0e6af-687c-4e0e-bbaa-52f3f34c5371", "comment": "Malware payload (Mirai)", "value": "e66966bba61f8db3ff307f462896f68490e1842f7fe6607f5dc795b70f15fcb971dada695a017c0433ad0c565c721a41", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345362, "uuid": "d3ddf60b-62ac-4be2-869e-b5d06b97e395", "value": "T1226302CFBEB02B26C1DCA1B6703815D6CC3A9D8BE643865D87D2E7954B3843654C8B1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345362, "uuid": "646c0c50-320e-47f3-8c29-d207fe03fda4", "value": "1536:NaxZLmYKVDNSl2y08yumeJyGYVmIMGuN2:NaxZLmYKX+t08jmeJhYTuN2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345362, "uuid": "121df4cc-e6f0-4577-a2bf-ab793532cfef", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345362, "uuid": "1762a0ee-9953-4714-ad85-bac734be708d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345362, "uuid": "2a0af77f-c781-423e-a72a-f95cd2a71375", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95891a40-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766329999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "97a0501c-e778-4367-8e54-2dd4bf930c8f", "comment": "Malware payload", "value": "7b189bc8f57cde7832fed9423b4367b9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "f834133b-619b-4a33-ae35-68015e52458e", "comment": "Malware payload", "value": "d704d46b9fe00bd98c2183a96b82ba5ee63c72c28b32bb6af0bda1df1a372293", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "18bb657c-b55d-44fd-a8df-320fc08f0d28", "comment": "Malware payload", "value": "76290ea643465cfc50098dee806ccad958100748", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329999, "uuid": "af93e789-09c0-431f-b4a8-7d02947e4f6f", "comment": "Malware payload", "value": "5a858b49cc25908c1a6851174de8c3715ebed07126e82251a9a50748f7f5e81bccd2a539bbd5c08c84d7d0eea6e461bc", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "0bd2cc28-c05f-4695-a218-cd92047b16e5", "value": "T189E0651EC10C8FBFA416498E7FA839ED651E51581E8F1F549DBD5D1A7489D685280022", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "a3aede11-1f91-4dd4-bfae-eca5295f153d", "value": "12:/5949dJ3+7Dy4gZesFrFBEGgbu+yfuT+JF8EpASLye:ha9X+7BWrTBEGjTuyLpvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329999, "uuid": "6b973f74-bcba-4efe-b4fb-f89a03debf11", "value": 417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329999, "uuid": "b1f3c97e-f3c8-4182-8334-2392229d5791", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329999, "uuid": "6a247ca5-0011-4837-ba31-9f3354cb7f16", "value": "ah", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c6db6a7-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341500, "uuid": "032150bf-69fa-42f9-9ba9-922fc03f0d75", "comment": "Malware payload (Mirai)", "value": "b19d3eeab461925e0a0a9174d0733b8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341500, "uuid": "7051bbc4-e431-41a0-830b-8b10223064da", "comment": "Malware payload (Mirai)", "value": "d74952221bc2b3d379433bde96c46f05890c319287d584f24101a43397e5782e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341500, "uuid": "bf5676de-d5b1-475a-8ab9-6fa1ee088f8a", "comment": "Malware payload (Mirai)", "value": "33637e249b51f7841209e2bff11a0d90675e7ede", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341500, "uuid": "aa3cc937-a744-4e5f-8e2b-41527a672abf", "comment": "Malware payload (Mirai)", "value": "ce8af834b7c26ed2feec5b1432f9838433d64638237832dcd422d550b97e3d4115283b5f74434682ca0065316dd23c52", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341500, "uuid": "d9275658-c4c6-4ce7-8067-54d575d59d98", "value": "T1A593B55E6A234FBDFBAC463687B7DE208249339223D1E245E09DE9019E7034E784F764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341500, "uuid": "cfcc3e04-50e1-48a6-8a44-7ad46c1ef855", "value": "1536:oS2quri45qxd0eNvMFB+TBRkooXL8L2vaF0jgpWmUDJ2DOaruragVrtjNc+IhId8:oS2h55s0eNv2B+TMo+ILL8PRh3kNVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341500, "uuid": "ec6928bd-5c45-46c7-853b-141f0600253e", "value": 92104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341500, "uuid": "ee009b10-4b70-4c6b-ac68-19f0f78db344", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341500, "uuid": "57aeb22a-ae4e-4e19-b1a0-087fa4816638", "value": "shadow.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a75ce04-debc-11f0-a129-42010a9c0007", "comment": "Malware payload (RemoteManipulator)", "timestamp": 1766356207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766356207, "uuid": "24542db9-6e03-4d6a-98c8-14efbc3635ef", "comment": "Malware payload (RemoteManipulator)", "value": "14dfd50c3e323e0bd529681a52afc04a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766356207, "uuid": "20c86dc8-7b91-4ff8-83a9-4139de38a561", "comment": "Malware payload (RemoteManipulator)", "value": "d74ed20085cac33eeee16294967f3a55a215529aefc2e2f43fdb3947ad6ec8c3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766356207, "uuid": "aa8e24a1-5985-45a8-b9cb-f0bd107c26a1", "comment": "Malware payload (RemoteManipulator)", "value": "808296f8db835953e2572b3c02d87f03521295e1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766356207, "uuid": "4735100e-4fbe-430e-9cc6-633f468f11ef", "comment": "Malware payload (RemoteManipulator)", "value": "eec3d1c5ed5ec3d0daa02457d565d150dcedcb5ce2bf09553b7f853b0c5f9d1747d32a861280b2e73f764a8e9c4b1673", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RemoteManipulator", "colour": "#F73CCE", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766356207, "uuid": "94d9577c-9dae-430e-82a5-a8ed870d903a", "value": "T178571213B3C4653DC4AF0A3645775698593BBFA23A12CE1B67F4190C8F36A803E3A657", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766356207, "uuid": "eecc858e-2afd-4452-9166-b0559a05906c", "value": "cbd5194c7e50b8d899becf865ede0d8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766356207, "uuid": "f485ac5f-5703-4ce3-832c-dff04f2c4a54", "value": "393216:KmQEE+fk23/7URLcCi96+6J6FnVTaL8NOQzhDZ9Z16+aJQQcDR0IkmpTLJ/:LQEd3/7URLCAR4ddNOGZ9l6MDR0YTN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766356207, "uuid": "4b3c2ffc-03a7-472f-bb32-a9d7a51c550d", "value": 27613696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766356207, "uuid": "a496b817-8c2f-49c7-8f02-0d39f7ec0d21", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766356207, "uuid": "49131baa-ff7b-4050-8313-fa7fab266f0c", "value": "14dfd50c3e323e0bd529681a52afc04a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aea7ca3-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329123, "uuid": "4d78e30b-0e9e-4998-83f2-c73cb6758d64", "comment": "Malware payload (Mirai)", "value": "e7b46027cfbccc571020fcc7bb663f51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329123, "uuid": "d9969af2-72c7-4d96-b331-39e523b6eeae", "comment": "Malware payload (Mirai)", "value": "d82849ca96077121a159a0fc6eb237946a6f2c8edc25344455a9a2d7412a2145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329123, "uuid": "431741c8-2ebf-4a7c-be9c-119213c8d749", "comment": "Malware payload (Mirai)", "value": "c8d5a3d2c086c431f8de8567194048656fae2dfb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329123, "uuid": "44568ce6-336c-46e6-b481-5c26beeb5c65", "comment": "Malware payload (Mirai)", "value": "fcc746a41330a3ca1ca727dce550fa78a75327c24c9b29581eb33c974208469f874d1d3ab4c1b79a3c8d53249fc48a29", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329123, "uuid": "ddbd5e52-9545-427e-ae02-adb6d073dce7", "value": "T1BCD33C46FA414B13C0D51779B6EF42453322A795A3DB73069A285FF43F8679F0E23A06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329123, "uuid": "8b6580ef-7575-46ea-ab76-6be66576b3e8", "value": "3072:gdTiyN2MknA0YloZh3t3qZgRLWH5b44XTLADM/9XXmPw/t93:aTiyN7kA0Yo3t3qZgtWVLXTsDM/9HmPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329123, "uuid": "bc2240fa-b0a8-4ea1-9145-014213a8d008", "value": 135877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329123, "uuid": "fc0779a4-fc8b-4774-b482-1128b97a28d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329123, "uuid": "5bfdfff1-fc47-455d-80f1-2358abf2fe5b", "value": "uYtea.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d99aef33-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766309498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309498, "uuid": "5061fb8b-163a-4e43-af64-511e9028096d", "comment": "Malware payload", "value": "f995e4afd6b6bc558c71271f25a9cd30", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309498, "uuid": "a9ae9592-9998-40dc-979a-4e432d457f96", "comment": "Malware payload", "value": "d86a013098423a3915b66145ef5411d3cd053c85c7a713c174a60d1899d33f30", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309498, "uuid": "c6666d9f-b8e1-42ff-b117-57c210dbc9a3", "comment": "Malware payload", "value": "8b53e047c9ba0eb9f3e9f129ec01e6be7e9a7298", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309498, "uuid": "a10ed613-7308-4112-8472-8e969c718b7f", "comment": "Malware payload", "value": "8711b7dfa62d429c961c06b1d3b667f8deb0307d61b2d8ea76a8faa45d8935c36a6951c452a27471ecde444d1c467e39", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309498, "uuid": "ddab0cc2-1233-4f11-bbeb-1cb23b196516", "value": "T131F048CF02960BB12580F9AEFED22864B004D5C914D69A6CEE4D0CB2129D98D3C15F6A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309498, "uuid": "47b57bde-c735-4565-9263-f02d9d06d0c4", "value": "12:lZDcHWMFHW6zvwzMHW2IjDUIMHWcaD2rHWp:lZiWQW6zYzGW25hWcaCTWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309498, "uuid": "2b143df1-cf48-4642-be35-67d5c60c2923", "value": 655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309498, "uuid": "183bb948-0526-46f3-a626-bc7413f989ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309498, "uuid": "d4d95c3c-d166-4bc7-af24-461a85735bd7", "value": "t", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9af44d9-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330060, "uuid": "54add9f3-72a3-4303-a018-5cfcdc834d1e", "comment": "Malware payload (Mirai)", "value": "7a5438a27dd764377f62beeb76379979", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330060, "uuid": "70ee3bb8-a0d9-42cd-a3cc-cc698c908d66", "comment": "Malware payload (Mirai)", "value": "d8dceb71eadce920db80bcae6ee102127b4e20b94bd4746404507a9c93c9031b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330060, "uuid": "803f9338-ffa3-4c69-a88b-ea00849f6782", "comment": "Malware payload (Mirai)", "value": "cd0e22c5387da3a04076511b36558e9cde939fb1", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330060, "uuid": "39b54745-a464-496f-b9b0-2c9e33561787", "comment": "Malware payload (Mirai)", "value": "3540a2c518bb641745e14698d21d11898f15e882f9d4221cf62061e75a1c848de964d63389b58c9e6f3358580d1c66b0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330060, "uuid": "50966007-d2ac-4e1b-8273-ab21f655b845", "value": "T1E5011A6F102AFF23C18C5E5D7E65B43BB07063A945270B886ED540FE988DA53A379D21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330060, "uuid": "72c2bd6d-4cc1-4f30-9908-93e9eac0068c", "value": "12:PpJQDemkDc+H3zoQwMaLBlysVNIT5D3GRz:PpJQDCDVXcQwMaLBlysVNIVD3Yz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330060, "uuid": "f5da68e8-cf69-4786-ae8a-1b46fcc81f2e", "value": 675, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330060, "uuid": "99f5ce91-91fc-4d20-b002-9f114925dca2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330060, "uuid": "9b7b9a77-a73c-4e27-b0bc-cb4c57755160", "value": "buf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "405a987b-de30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295926, "uuid": "196c6395-79ea-4392-9a3f-2ee5acd5054f", "comment": "Malware payload (Mirai)", "value": "68f6c94a1f4403bacd2e320fd7626f9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295926, "uuid": "957bd3a0-8e4e-4e50-8f35-f03e80ddd745", "comment": "Malware payload (Mirai)", "value": "d91e9040a6f4d97d6e7792511abfa2518ab396392fa3e24da1d8c45ba50726a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295926, "uuid": "6374e02e-93e1-4982-b213-d54ac5ba0d57", "comment": "Malware payload (Mirai)", "value": "8ea8d05de517c8ff6118ba474c4ce1a3056ea590", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295926, "uuid": "37ae1e30-6515-43ea-9130-d96a5723dec0", "comment": "Malware payload (Mirai)", "value": "383882f7d62517e17db5d4415f23cde355ba6c9708d506517883f9537a4e44670e0e44573fce3ef2024199fe55bfbb34", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295926, "uuid": "ae6795d0-050e-480c-bf20-b231d3de3dc9", "value": "T157630A96B8818F25C5D5037EF92D118E372227E9E2DFB2229E205F203BC652B0D7BD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295926, "uuid": "95eff543-3b0b-4096-a285-acc8a4bffbc2", "value": "1536:itnPsVkFxV8xk6b5VKLNXduAlCjFlIr57uscvIGiojd70k7h:VqVMkWV8PPX9Cjd70k7h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295926, "uuid": "80d7625a-27f9-45f3-a723-21a1e88bf10f", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295926, "uuid": "b163ca5e-b971-4ffc-85fa-998459a0e98b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295926, "uuid": "aa196b86-ec1f-41de-8888-ec49a3d6b7aa", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "686e3ebc-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345386, "uuid": "bdcd7e1a-351b-4adb-88e9-2025b39dba55", "comment": "Malware payload (Mirai)", "value": "56f7d24af3ca308b85511b2c76db1b80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345386, "uuid": "ca02ff4b-5905-4ab0-bbd8-3730c58c9b20", "comment": "Malware payload (Mirai)", "value": "da3ea7ca7fc68a3d970f540d001c85f3fa670bd3a6dc9e75397faedd6579d39d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345386, "uuid": "3adce4bf-033e-4b75-8891-ee6095df6607", "comment": "Malware payload (Mirai)", "value": "cfb47db1e3bb1f7d5c00b369bb14fbfaa4804a6f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345386, "uuid": "2a52057b-5c32-440a-803f-142eb0dc741a", "comment": "Malware payload (Mirai)", "value": "22c18ecdb013db6b4c97de5736f3cef2789680cd138eac864fe32a67c0522af2e29833255c0a60eccfc2d12671cbeea8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345386, "uuid": "e15f5fc7-91d8-4e72-82a4-0bca27fb3f01", "value": "T10C148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345386, "uuid": "c3501b18-1ca1-4af7-812e-d7494202342e", "value": "3072:BcHZcggFy1tJmajThwnKBDMOzsjJjL1lCRYUKG:BcYFAJ9/hjzsdjy/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345386, "uuid": "25499dab-45fa-4213-ad72-0d2766715310", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345386, "uuid": "d87059c4-05a4-4ae9-8832-d571f021d0e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345386, "uuid": "5656cf9a-e938-4a54-afe7-12f666b30571", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a61969a9-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344630, "uuid": "0bb795d9-af31-43d1-9624-fa0bb955d5f0", "comment": "Malware payload (Mirai)", "value": "e3362dd528bdd64465c7e4d2d17a2d32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344630, "uuid": "3008ab5b-a169-4ff7-8bde-201b438ddc47", "comment": "Malware payload (Mirai)", "value": "daaa10309a39a91cb1314173161cbfcbeafaa7ea2c2c261202151ae048ce7349", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344630, "uuid": "b527b940-4ae1-44fc-ab12-72c45a67a675", "comment": "Malware payload (Mirai)", "value": "5cba7f8fac365e9bda4a47da544094d0f61730ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344630, "uuid": "0120e569-1f4d-4a09-913c-6e63973031d0", "comment": "Malware payload (Mirai)", "value": "85e56eccd437020400c5d824f17a9c0e6e01e3fe436464ca31c95cc96121d34b3e5ad6d16ef9b51f293e4382cd005379", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344630, "uuid": "189e72f5-b080-4c8b-b131-667677a8bdb7", "value": "T13D438C66CCAAAEA4C55C56B0B4318B76471380009BC72FBB9566D9759003D8CF9CE3FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344630, "uuid": "5c33cc43-7502-4e3d-967b-f6bf594a8e80", "value": "1536:RgQ2/PJI1y2HazUgz5XUyfC7L3CmCWT2bVRN:6RRIphglXUyfeLSYT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344630, "uuid": "09f5af89-a75c-4cb3-b6c5-08abc824076b", "value": 55452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344630, "uuid": "b0ec8d4b-fc89-4de6-a658-a9244a5e78b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344630, "uuid": "cf6d1f59-97a5-475c-a5ba-0a54bded1ca0", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da9a0cc0-dea7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347295, "uuid": "fc37184b-a4aa-4e9b-a6db-396958db9688", "comment": "Malware payload (Mirai)", "value": "ab907454fa0b6ca4ca84ff9c5e9fc2bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347295, "uuid": "37c0f1b1-0bb4-4465-bbde-7a6b07324a53", "comment": "Malware payload (Mirai)", "value": "daabf21dbeaa9aac310ddf1bb72fad35b4b64b3250dc9b0dca15c7e11d0824b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347295, "uuid": "ab76b012-f6cd-4d7d-bfaa-be064612b86e", "comment": "Malware payload (Mirai)", "value": "2fef7683c8a5f63c41bb1f7ba86f2dd9238c15b7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347295, "uuid": "3b590125-9f43-4556-afcd-2d0eadb603f5", "comment": "Malware payload (Mirai)", "value": "468d1fe39c10b014c555aaba36a990863000e30b868afd464a212bb0e25e0c8121d45b6570a7877ae5ad8c5b25f2f785", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347295, "uuid": "643234ac-8c9f-4870-82eb-0caa615f82b2", "value": "T11E832A86BC81DA16C6D562BBFA1E42DC332253B8D2EF72079D156F117B8682F0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347295, "uuid": "55da0896-a927-44df-9b7c-03315920c242", "value": "1536:xMRC3wEO+Y1oE2y3rIxYEDFGYmnqAVy9LWX95NOuCc78T2bVR:xMIg3elFGYmqAVDN5YuCC8T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347295, "uuid": "cd50b591-9145-46d3-b0bb-010ccbe8326c", "value": 81700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347295, "uuid": "fe3650a3-4c87-46c7-983a-71e3ec6be6a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347295, "uuid": "ec0ae8aa-5263-4a47-ba7d-b3614a1364f8", "value": "jklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2346478-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "bbcac964-48c2-4691-9841-5c53567df30b", "comment": "Malware payload (Mirai)", "value": "f6b937cedb5e8e4f8b39df8d6f470010", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "076c941c-8008-4c4b-a516-3eae2d9a3ea3", "comment": "Malware payload (Mirai)", "value": "dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "4e4ddad1-2087-48b6-bde1-6f6e0de188e3", "comment": "Malware payload (Mirai)", "value": "a54b10ebf4925fd4ffd7c2c74e1f9efbadea7a84", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330048, "uuid": "86a782fe-ec55-40e3-80cb-14767562863a", "comment": "Malware payload (Mirai)", "value": "cc5c4da51a4cf00cc9459e2c5b09f9ac0d0042fa341c3af3c79a99f12aa760440476a92e09d0c28359253b1edb66c92d", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "e50fb2c6-43f2-4d69-9a3e-6275b2b48be4", "value": "T13001868F1222EE15C02CDFB835A76881B160CAE17EA41A1D6FD9C577D4C46B0731EEB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "c8b121e7-24eb-4dcc-aebc-bd9a687c9ae1", "value": "6:L6V1OWTdyc6Vb+g2+yc6Vquyc6VQa6RcTyc6VeOBdyc6Vc5Eyc6VcODyMyc6V1mg:eO/vUMD36XMOBEmd/2FjDCMD3DH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330048, "uuid": "be2e6fc1-a630-4e16-b770-536220815f36", "value": 788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330048, "uuid": "28661030-2587-451f-9bb8-7f52d825fa32", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330048, "uuid": "2fd25e9a-30b0-4b6a-ae0f-9e4623e481a1", "value": "ipc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e36a6bd6-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335284, "uuid": "5fa0e543-ba03-436f-9fb9-1e52ad58b5a9", "comment": "Malware payload (Mirai)", "value": "2bb7d17566bf26b4fecd7f39979eb819", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335284, "uuid": "b2a3d7f8-e043-4d25-b25c-7c8bffb5704b", "comment": "Malware payload (Mirai)", "value": "db9ea776182b3095044cf145c0e97ae2be8e6f6997e4f0050b7ed680a96b973d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335284, "uuid": "c30d5a9d-05e9-42da-b909-d28bda49bc32", "comment": "Malware payload (Mirai)", "value": "dc76dd5242b211e0a0c0fb16a128bc5219b5d1be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335284, "uuid": "9d0aa982-e8a7-49e1-9737-910e4d97ef64", "comment": "Malware payload (Mirai)", "value": "b9c96f273ce99507ffad48cbdbf2e23fecc9398813a3caa7367ad795c88d68484fbb831d41e815aa4c867945c06758ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335284, "uuid": "2619e499-a560-4a4c-840a-60ef082d82f4", "value": "T174530985B8819A25C6D113BBFE1F018E3316976CE2DE73129D141F647BCB95F0D2BA0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335284, "uuid": "7d2b99b1-e171-4c1d-b666-a904b52f1565", "value": "1536:wdngqwABzQwr+csWY7wyELrGFzVLU1KeKacL/IbiKmUpKWf:Xgzd6c/mwDkhLUwcmUpKWf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335284, "uuid": "468fb3ff-5d0c-4cb2-985e-8a018b352dac", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335284, "uuid": "c40fc9bb-7b23-496d-b280-4417af73cdca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335284, "uuid": "1d1e31fc-2b9f-418f-92aa-26eda9dde1c9", "value": "Josho.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4c1ae4-de69-11f0-a129-42010a9c0007", "comment": "Malware payload (CoinMiner)", "timestamp": 1766320371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320371, "uuid": "c128559d-2f6e-4802-9ade-49ab40c3b990", "comment": "Malware payload (CoinMiner)", "value": "7687eb7d39b11d3e1f38b2f485153706", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320371, "uuid": "a206a6c4-2d72-4dfa-8d93-5c7e6bca334c", "comment": "Malware payload (CoinMiner)", "value": "dc0a766ad6dfb84cedd35a182d7b19b5579a21c386e76c79b16a7f56e13e625a", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320371, "uuid": "24b2b828-301a-4a8c-921d-0258efe3cc0c", "comment": "Malware payload (CoinMiner)", "value": "b6018b27b0838239c7b7c266442e8edde714f2f2", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320371, "uuid": "c46c24a3-95a8-4fe5-aafc-ddb6662f19ce", "comment": "Malware payload (CoinMiner)", "value": "9e51cb44ed3f3aa1dd11283e2fd14095e3d3faf3acd735402be401f98a6a24cfac6c9d206042bf5565f8ff0456650504", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320371, "uuid": "947bad6d-2b41-4750-bffc-3826462dcbbc", "value": "T1AAF07DCA8831DF349C45903F611B8C95E4DAA72E8F4EA5444F59EA30FD1888E6BC7124", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320371, "uuid": "8fae32c2-b6fc-47ce-afbf-f2e4437b0706", "value": "12:1XJeGDW/WLCLQorgvML7HXLWxuUgWZFFWoC0E2/QEX:dJ5QWLCdaMrLIuUTF00Gk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320371, "uuid": "88021f46-0c42-4863-9f36-64313fa56ab0", "value": 607, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320371, "uuid": "1db3d88d-a605-4154-b60f-da14db0af9f1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320371, "uuid": "7c2d24c0-53b9-4ba5-b7f0-4b79f8a183fd", "value": "all.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b38c0ae-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347860, "uuid": "863ad3f5-bd77-4d6d-a67d-9e45526f5b71", "comment": "Malware payload (Mirai)", "value": "83a6d9fc3e962da1f38d71be4f913167", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347860, "uuid": "726ee5cc-c137-4659-b93c-40ef3b18170a", "comment": "Malware payload (Mirai)", "value": "dc3376e0b7ca3cf0c63144dc3b36cd74afc74a8835b245c003574f59675d997e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347860, "uuid": "c954fbca-e1b6-421e-b9eb-a212ee7c8260", "comment": "Malware payload (Mirai)", "value": "db72c9530d665c4bce8500b246413c5ecc30c7ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347860, "uuid": "e3ceddba-931b-4139-ae28-1d0262a6e7c9", "comment": "Malware payload (Mirai)", "value": "e6fbacfdb65d92e3235d52154e4b227cc568dfd0c2e0b0cd94b411b84f0cd23fb38c35fbbc32f5b64135c3061ed9f76c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347860, "uuid": "3beed4a1-0998-4fd7-94c2-4c06ba300b7e", "value": "T1E853022EC329CF6CFF8FD433179F875FABE107021AA5098D99685C05035A8A7C5A7536", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347860, "uuid": "f214e894-bd1b-40ce-9897-4d69c358f22c", "value": "768:FzzmUGS8YedWQ+LdJmtcmsG/nESl15bXH12nkYzOu/CLezQTSJWYZnbVkRsAxu/:dCLSJLMcmsG/nplUnzTPzQ2goBosAQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347860, "uuid": "59082cb9-c4b2-4f0e-b93b-a75b99852d25", "value": 63904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347860, "uuid": "c388a039-d37d-488b-887f-77df4352a70a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347860, "uuid": "4dbd6341-87d3-4740-b0c3-b2597fff7d6b", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6913b7a1-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345387, "uuid": "b23b2adf-ca91-4dd8-865f-24d5a26783a4", "comment": "Malware payload (Mirai)", "value": "3f3ee917a3c96303632c220d7d00aa2e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345387, "uuid": "a6d8691d-0d36-4eed-8a5c-683fe5ddd442", "comment": "Malware payload (Mirai)", "value": "dc3e8fabae68907f1b58d1554a1032e9084b7317962d996bffddd7315c25c521", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345387, "uuid": "c0a72cf3-60d3-4665-9221-244b7dd02284", "comment": "Malware payload (Mirai)", "value": "e526e0af4756ed8cf4c7c7c1ededac029fb27c21", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345387, "uuid": "847b1716-b6d8-47bc-9dd3-63a3daab0aee", "comment": "Malware payload (Mirai)", "value": "f4ba6a1b54566fc76fdb5908bc31fd8aa3c06176ca4833dce5db31e219150a666de4c9330a8930936cbac8be590c67fd", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345387, "uuid": "52f8e11c-7dc3-4f88-81ea-1a40c353bd02", "value": "T1D67169CA1229B2756D71CB9A22F789DA70F0C5D1A1C46E07A1E83CF7424DD0BA471EE3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345387, "uuid": "a014eab8-e353-4b03-a69f-4e5d0d79a28c", "value": "48:vwVVw4RwhVhHwhlw2lwdFwMtwLUL/wPBwkDwrlw/d7weVwG1wsZw1i:ve5e2v4JNqJYQvvlT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345387, "uuid": "17d6b712-d7f9-4330-9b62-e5d778fbe30c", "value": 3552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345387, "uuid": "f477ad3c-709d-4343-834b-1d30078cb5ea", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345387, "uuid": "07e314a4-2c94-4739-ad3e-0cec521dd8d3", "value": "cache", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13285197-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329781, "uuid": "5a294535-bfdb-48db-9f3c-77045cd6348b", "comment": "Malware payload (Mirai)", "value": "82c71f502d21a64a90b61e1db6d84dc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329781, "uuid": "aa1b49c0-e30d-434c-aa0b-57a6a7c13284", "comment": "Malware payload (Mirai)", "value": "dc4a700f935dd717813708581615f6f11339a75d997b63150f13b53c021e4529", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329781, "uuid": "d1e8dea8-1a36-44d1-8ddf-762c4994f169", "comment": "Malware payload (Mirai)", "value": "00b7d37bbed15fda1e6ae7a124a5729ba806c699", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329781, "uuid": "a1dea52d-0ede-4a46-aa21-dbc08cb57aa9", "comment": "Malware payload (Mirai)", "value": "51006ec87f639de665e98b9d7f6e481ebc7e5aa02f52f58101db50889dba59eaf3ce08820d4389fe1c7ee369646b0bb6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329781, "uuid": "0f810019-9419-4321-8c7d-94aad153f479", "value": "T161331985B8959A16C9D4227EFA2F019C373623B8E1EF7207DC126F15778A82F0D77642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329781, "uuid": "6da56766-3af7-4c86-a39c-3daa8f742233", "value": "768:1z8DY5myUl8+J42OHK/01Ft/mADvjuQ8e064SaST7d/75o3Wxa3ZMNoxNF+kEEvi:kY5mb+JZLeAu1X64xGd0Uos7DTh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329781, "uuid": "f5f4351d-31af-4e8d-9242-d37f37554958", "value": 51968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329781, "uuid": "cb547e29-77a7-4b84-9fed-417764b8fe80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329781, "uuid": "fa25cd7d-7c72-40ad-bf1f-c1da54982e07", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "571c05c8-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345357, "uuid": "26567872-4ef5-46b4-a1fb-9665a60c2fc2", "comment": "Malware payload (Mirai)", "value": "d4034352379d3c1865bb75eacf6106c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345357, "uuid": "e1485e30-bc75-4550-bb00-a96233afaf16", "comment": "Malware payload (Mirai)", "value": "dd83f2b47625528113178af640d2e57f42964dfa8b22cd38843d75361fab0a00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345357, "uuid": "90a07510-bd21-43e4-8d60-c642f9164d2e", "comment": "Malware payload (Mirai)", "value": "3fdcbf0c97b57d9d2bcb6352a2f5aa13d7175865", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345357, "uuid": "060c385c-92ee-4910-8698-03446dc56dd6", "comment": "Malware payload (Mirai)", "value": "35d65c0efffe88e7989612bb6c491bd3e6034cd399dbb9eaf2c645adcab396a33c6b7f3a989ab8d9464099d57e35e2f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345357, "uuid": "907fcfe4-7943-4a60-802e-c8612ac93d49", "value": "T185734AC59753DCF5E826053115B3E7739E72F13A1068EEC3E795B933BC52211A60A2AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345357, "uuid": "ca1dfd68-a04c-4c86-a797-a35f59ce41f8", "value": "1536:yDdS05V8pCL1UicDkCzVX4JGn6ihCwtLFkl/gIO5PxtU/9XRR:yDdSw8UBzcDki4JcXLF4/riJ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345357, "uuid": "298a3a22-072a-47b7-8cc3-c64b56fe6750", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345357, "uuid": "5d61f82a-b420-4640-9695-0137d2a7b330", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345357, "uuid": "ecefa617-fe33-4847-a4c6-d203990ed36c", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b0d37a2-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330009, "uuid": "c14e3d15-95c9-4584-b5be-1cdf9c10cd59", "comment": "Malware payload (Mirai)", "value": "63aa96941bbf04a8bf9bcec3e9295e67", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330009, "uuid": "9ee3b8f4-d82b-40d3-8600-5d1d22a9b1d8", "comment": "Malware payload (Mirai)", "value": "dd87268f4a26a7e79d563499b24a54d36fed4d97a99e7dd307ff73691c328cf5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330009, "uuid": "e4f60e02-a68e-4604-a7b8-b9198d7f73f1", "comment": "Malware payload (Mirai)", "value": "629414c2581fb703036aaffd877a9ef831f261f7", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330009, "uuid": "93ed4f4c-7749-41c1-9bd6-e316b3279254", "comment": "Malware payload (Mirai)", "value": "94148a03c840e513d40b50d16a0d8d4a59f55df2c42be072e79ebc94b4022b2abb5780f68e8581ae2266a5478de7eb96", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330009, "uuid": "c013a88c-9f51-4342-9f91-86ab38fb83dd", "value": "T10F11546F0185AD90888CD53977D1911CB4C14BDA1A7F4AB42FA601BF24F07EE7339E15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330009, "uuid": "2feefa8c-1054-4dac-abf4-4715b97b104e", "value": "24:k7NWa7M5fWa7pWa7CWa7V9Wa7yWa7bWa7mWa7KWa7rWa7bdWs:kBWawhWa9WaWWa/WauWa/WayWa+WaXWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330009, "uuid": "fa24ae5c-5a32-4333-af22-7fe1f8185ffe", "value": 1072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330009, "uuid": "5266483d-72c2-4951-bc97-6289e223ba41", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330009, "uuid": "7177a8ff-e3c3-48ad-baba-f3262c9bd124", "value": "bork", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "057a92b1-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329758, "uuid": "668340b5-20ae-4639-9f6f-31dccc6d7f65", "comment": "Malware payload (Mirai)", "value": "ed623ff1a82bd67ad2d6cae1dd933817", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329758, "uuid": "c67400ae-206f-452c-8d21-d36bdd6444cb", "comment": "Malware payload (Mirai)", "value": "ddd2c782f1965ea0a08ab6c29ffeee48fe1ce17249285e0189fe81c3188db6df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329758, "uuid": "74143c90-4911-4c72-8076-643e025d5b20", "comment": "Malware payload (Mirai)", "value": "bd527c7b2de97e95a549bfbad32d3c4c1f0f5605", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329758, "uuid": "5e2c8a97-2785-417f-aef7-d19ab4d45bd4", "comment": "Malware payload (Mirai)", "value": "e79d9a6d8508fe24cf56b40e96a06240eb5ea430acc25381cafe5bead46090d540f62334deb19975e65fb3a3a70f7e97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329758, "uuid": "1ce0432a-82a4-4328-98a3-06bea1389f08", "value": "T1FF732C85B8819623C6D562BBFA6E41CD332613B8E2EF3207DD156F25778682F0D3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329758, "uuid": "14652410-6cc5-4f88-863f-4b6de4cb252d", "value": "1536:n14S4C7/UNxgKmNNf1O3w14VQKMSSEGNFt/j7vhT3bVR3:n13Tvyw14qKMSSEIPbhT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329758, "uuid": "77e52569-0a1f-454f-9654-a98e3b358579", "value": 77504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329758, "uuid": "c7543043-7f70-4d45-9512-edf91b102ffe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329758, "uuid": "edbbeb82-683c-46a0-937f-798fff5d65a2", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b1cdcf-de45-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766305168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766305168, "uuid": "e55b34f0-7002-4df9-8d7f-4bef37880133", "comment": "Malware payload", "value": "a407b294341ab21c05f51cea5e4133c1", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766305168, "uuid": "9aef585a-7cb5-4e82-b019-8c585b28bfc5", "comment": "Malware payload", "value": "de6d9f8c9189bf1c09cbda7595a343757ec894c594d4030a80682b59b5c47b97", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766305168, "uuid": "c0a9958a-2c52-4db6-83db-30ab65bbdd87", "comment": "Malware payload", "value": "901fa7721b5a5657c39fcf87895ad487ec3c29ff", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766305168, "uuid": "280172ae-9807-4346-aa3f-c1487fe03983", "comment": "Malware payload", "value": "9cda97864441aa8c72369e1fbab525a1a53c4b00e6228903bb6eb62b1285974b5a97a846b35fc2536ca4fd4e8f7e0101", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766305168, "uuid": "0463a604-e877-4632-bae4-af0c67ba6bc2", "value": "T153B523D4B551287BCD1DDA3ACCD6A8FA7723BEA59C118D733B957B4E2CB290041213E8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766305168, "uuid": "e2401c62-66f5-430e-91bf-99a922afdf48", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766305168, "uuid": "8a6895a8-f144-448b-8e6e-fa9f3ed8889e", "value": "49152:9xTMrV0NogtpP3NaKeTorQe5P+j36QWtuvoWViWUDGyoPq2l:jTMRkJth9wo3P+jKPtugWViXDGyo7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766305168, "uuid": "c7bec422-71ec-41f9-9bb9-30ce1c31a0e6", "value": 2378280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766305168, "uuid": "cc27a2ad-ae61-472d-aa52-280b1109a520", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766305168, "uuid": "8e1908c9-9096-4fc0-b525-2289d2a51136", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932d5ece-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329136, "uuid": "dfe7a29a-eef6-4664-bc5c-c62461382da5", "comment": "Malware payload (Mirai)", "value": "885900c3d8eec9b286dde9a30d787b74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329136, "uuid": "3e54beda-0803-4d5f-b5ae-b7f3568c7d8b", "comment": "Malware payload (Mirai)", "value": "de816ec819eb958b508450496a4c4b9d56b0cdb481452609bc27e023a5c648bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329136, "uuid": "6d96a653-e8d1-478d-a5c9-630ff3fcb824", "comment": "Malware payload (Mirai)", "value": "4d3a6a02513c7d21f85452134999800dfba59b21", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329136, "uuid": "d96b8cbc-be2a-4762-a0f9-66de4b4c9514", "comment": "Malware payload (Mirai)", "value": "3a21a853079b3544685379ff1a08ad3bb4e78016364911f430d217070c852782c3668b0937ef1ea80beb9eca6c467779", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329136, "uuid": "bce0f199-77ab-4c20-a6c6-0f99ce139efd", "value": "T1C3234BC4AA17D8F4EC5A4A702473F773AB75F07510E9F787E364DE32A852610A60A1EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329136, "uuid": "e076d961-4a94-49c9-a0ec-78d030443bd4", "value": "768:VYgWumiUu2etnELBzFUHw1Qiz/84bTgOgG9sKg+oHSb4a2WF:GgWugu2eIUHw1lz/84IOV9sKBNEa2WF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329136, "uuid": "3a67815f-75f1-48a2-9ae7-e71813c606e1", "value": 46668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329136, "uuid": "2215833e-0f16-44e5-85ab-e88c1bde91b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329136, "uuid": "f6298262-4bbc-4a1a-925c-4b4de60e3044", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a3ad311-dec5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766359831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359831, "uuid": "fb9b9c68-0eb5-4bb9-8c62-4f3a5c54140e", "comment": "Malware payload (Mirai)", "value": "45a6c5c0999d476d4e3c5f9d0b855a1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359831, "uuid": "a69fb82e-2da4-44b9-a5b5-883125a146a0", "comment": "Malware payload (Mirai)", "value": "df133fd5eca8b3e3deeb09309bb7e8e7757098ef5ab2fbf305df496cb94d7d92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359831, "uuid": "cfcaf9ac-2e74-4ae6-bfe2-ca062dbf69ee", "comment": "Malware payload (Mirai)", "value": "d650b9471d394b3af3957d9eab65c175633b936e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766359831, "uuid": "9f6a7d96-1c85-409f-82c7-f1272ff011d1", "comment": "Malware payload (Mirai)", "value": "c6562b931e1747031d67ab9d900601a1eea29c51000578eed052acaee57fb3747c1349bb0d9e3eb9ff196835a08b06bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359831, "uuid": "27d0de7d-b479-4428-a4a1-e947cef88986", "value": "T1F093F996B8918B12C6D452BEFA1E51CD331317B8E2EF72539D146F247B8B42B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359831, "uuid": "bba10ac0-7cf5-4b17-9958-944dfb8f15c0", "value": "1536:dtn/eWRtjiXGOgtxJOCFmIKh3qqR69LAPB9E7bStEYeSoRv2o3IMyiOcRJuBTxh8:V+Gzk3ftG7etEjS8qcRJuBTxhr1rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766359831, "uuid": "01a0e793-db06-4e6f-b46e-d08f8ae275f2", "value": 91708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766359831, "uuid": "a6928e43-ed80-4254-8bf5-b2230af68395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766359831, "uuid": "90e9298e-6c53-4ff3-a60d-f92eb4c6b586", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1382c2f-deae-11f0-a129-42010a9c0007", "comment": "Malware payload (SVCStealer)", "timestamp": 1766350313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350313, "uuid": "d5676270-3009-4a6d-b415-4f8d331b315e", "comment": "Malware payload (SVCStealer)", "value": "49badbaf82bd626add891eb101f5318d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#9FAFBB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350313, "uuid": "067ab1ee-323b-48ac-b3ad-1c2327e9ace6", "comment": "Malware payload (SVCStealer)", "value": "dfa531e1ac9cb7c6ca7cd7cd052c5a33af615cc4f8b1a8cf8a0cc85a1064c3dd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#9FAFBB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350313, "uuid": "c61cc8dc-84ad-41d5-b276-01d46e09d543", "comment": "Malware payload (SVCStealer)", "value": "f9e71e0ed210187cd9a3ddc56634c87a3f5e6d3b", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#9FAFBB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766350313, "uuid": "307ba6e1-2ea2-492d-8a22-8bc468e77b33", "comment": "Malware payload (SVCStealer)", "value": "8f7a03913bff7dbf5e524a45faaa6aa412b8b9e6cb2572ce59ee915498b2357afc1fa2aad9cda928d529e188803108b5", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#CF8ABD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#9FAFBB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350313, "uuid": "d94eea94-32f8-4081-833c-c22cdd5b4707", "value": "T14C558E46A2B500FCC0A7C274C9465A1BEBB27806137497DF5690CA6A6F63FE11E7E334", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350313, "uuid": "59797b11-2709-43ea-b2b8-ff0f0290145a", "value": "1b8477938f5c4b3e6933faf9cd1b3d62", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350313, "uuid": "b2715d7c-8444-4070-824f-7aed2c2b4da5", "value": "24576:UiP+BfZmhdQ6dNsZF5SmO72MlGOXL3N8/f0MF:uZFHOCuf3N8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766350313, "uuid": "f2d763b7-62a3-42ad-9fce-b03f3ba9f0f5", "value": 1391616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766350313, "uuid": "e330ad3c-de86-4992-a4f7-3472b5b83e3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766350313, "uuid": "16bdee20-34a6-488d-9e86-516c06220caf", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e41eec32-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335285, "uuid": "44d193b1-c16c-43a6-be43-d95819ed7791", "comment": "Malware payload (Mirai)", "value": "b103239e12012774b82e63d04eb97b7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335285, "uuid": "7689ad29-52d3-4c1d-911b-5e40d398a406", "comment": "Malware payload (Mirai)", "value": "e00daa12f8d7145f0b5c93edde27d5d4c61a7bed0f61b3247a1b47bd23b139d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335285, "uuid": "6c7a1649-059d-44c3-8635-3b0cda5472f4", "comment": "Malware payload (Mirai)", "value": "a989fcd414ee823c0ff4b0a80dcc6126452639e5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335285, "uuid": "16111272-1552-4de4-af42-6b1757b67432", "comment": "Malware payload (Mirai)", "value": "23455d2d569b9ba4a9c682baf3ed6c564d2df7c2da5cb9b075614e530cb97864111114d4f297623469e641c704bd06c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335285, "uuid": "c29c0693-b412-4c9e-9fb2-eb39dea496b2", "value": "T1083329DAB402AD7CF89FEA7E80160E0AF621235510530B2B67BFFDD37E321549952E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335285, "uuid": "220c8a59-3627-4bbe-b254-ec82fbebf41d", "value": "768:7MehvKgc46P1/mWQc7/JgFHdIp8LujWeXzpUGRJTPOMdL88pI6k:QIK34G9mbBF28Sjp1UGRJbOMdw8tk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335285, "uuid": "bb4e009f-8d04-488a-8b61-dcb0e0147f8e", "value": 52800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335285, "uuid": "71d5068b-7da5-45b1-b682-a08cab4c9a51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335285, "uuid": "c479a18a-fd91-4e1f-b6e9-58acf417c490", "value": "Josho.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "477e21d8-de50-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309682, "uuid": "c6653cc6-6aa5-4c75-a2e3-2fe96682b384", "comment": "Malware payload (Gafgyt)", "value": "38ff0339e00fb869d0f3c726229c82a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309682, "uuid": "bd4e203a-71b8-4f2d-9582-e665122f55ee", "comment": "Malware payload (Gafgyt)", "value": "e08eef1aa7746783e8eb23d18b5eab540e0a33f794a65e314b09754e743ef560", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309682, "uuid": "4a782953-74ac-4581-b6cf-b0767f57dea0", "comment": "Malware payload (Gafgyt)", "value": "632f683256be4962c5a1897d632135cd2b45a178", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309682, "uuid": "0e30623d-794a-47e0-a531-930724d50f9d", "comment": "Malware payload (Gafgyt)", "value": "4bac3f169e1e469be637557d4b2f1ab555a1a5020b7645f9bd09c07fe76424ec7b8729d0a060f0697fd9f66381c487b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309682, "uuid": "7d92dd2d-493e-4566-bbb5-dce17f28b681", "value": "T18FB328436B1C0B87C49B9AB01DA737F18B69BD7112A351C9A90BFEC04733AB81527F95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309682, "uuid": "ef3bc64a-d2ce-4be4-9e94-06d468abbcc9", "value": "3072:WD3l+XQzPeV91310pWudMKakpNDtm2pgYMidIP1W:WD3l+XQzPe713CpWCMypxtm2pgYMidIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309682, "uuid": "7d0f1544-8ad7-4839-9cc3-1aadd2866f13", "value": 113194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309682, "uuid": "ac207084-6590-49f1-b92b-850ebc88393e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309682, "uuid": "af546968-7530-4553-8eac-73c3335abb50", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44e8b36b-de7b-11f0-a129-42010a9c0007", "comment": "Malware payload (SilentStealer)", "timestamp": 1766328146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328146, "uuid": "ae271b2d-f680-48cb-93cb-e01ec8306ad6", "comment": "Malware payload (SilentStealer)", "value": "4e4fb972de07a162097a05c1b94fb202", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328146, "uuid": "b6ad92ea-13e1-4680-bf70-b812cdf6587b", "comment": "Malware payload (SilentStealer)", "value": "e15b82e22081638796ebc85b9257d4a24122dc1f330b93970978bb7fb7e61754", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328146, "uuid": "1640e2fe-9c56-4c9e-bfea-b5fbdb28d312", "comment": "Malware payload (SilentStealer)", "value": "c8c0afd7a8bf50074c8593c7d2f44511ecf0601e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766328146, "uuid": "35f563ad-e35d-4442-bf5f-c613bd99a65b", "comment": "Malware payload (SilentStealer)", "value": "776371c30ecb17d586da0f877341b9a9f8875f7dbf31318bbbc462ec29ef62fb33c45824fdcde9804cb687cf808dfbd4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328146, "uuid": "513ba59e-58b0-4bba-8ff7-f1b627c4a28e", "value": "T13FB53EED1D7234A1CEC6FE8C5C181EE26F69C63E0B17A96255421F683F5A8CD17E8309", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328146, "uuid": "e0ab636f-226d-40b3-be7d-0dda2a7ac8a0", "value": "24576:o9TLHN+zRIoXdCua3vvAynoRj9oWF1qjOpJY:oKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766328146, "uuid": "1eba0559-647f-4195-ae72-f9b6cc734862", "value": 2408126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766328146, "uuid": "c5e59196-72f3-4bcd-8519-4bb69d74f964", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766328146, "uuid": "d1814c7a-a4cf-48aa-bf01-24329ad0d58b", "value": "crypted.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3ffcc16-de99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341271, "uuid": "3a783d88-737a-4b06-bc70-797f2b0e70ad", "comment": "Malware payload (Mirai)", "value": "d1730e71a8e7daca9145f89d7ee49b1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341271, "uuid": "cdae2b18-ea99-42d4-a99f-794418a8867d", "comment": "Malware payload (Mirai)", "value": "e1bc1faac8c3113f1dd06e4e5053fc85208b9b0facff425e66535050cf49a59c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341271, "uuid": "e420c345-de24-497f-9107-b5b6a2f36a70", "comment": "Malware payload (Mirai)", "value": "c502a64b43947cfaa1d0f5980adc22a3fc7ffb47", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341271, "uuid": "5b9e175d-75ec-4c9a-8deb-e2135fb91eb9", "comment": "Malware payload (Mirai)", "value": "170f4bc84dcceaf0af559e2aead5b1aa0ff83f8908710641ff8fe510272482f29f0664cd9cc1345bded2159340bed5a4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341271, "uuid": "18df2463-5cbf-47ac-ad72-a315fef18d71", "value": "T15793F706BB644FF7DC5FCD3745B95B05258D920A22B83B3A3A74D818F64B15F0AE38A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341271, "uuid": "5cf8c074-6687-426f-aa1d-6461dbc79b7c", "value": "1536:zdzAZptTN2acSK7vn5t98SwhVxhc8F3Oo/mbjPh82hjTAbVR1:zOBNhcH7RtFYMi2pTAN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341271, "uuid": "1438d9a0-7146-4571-aa2d-ac6bb9a189c9", "value": 97464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341271, "uuid": "5f2cbbc4-599c-40ae-85a7-a98f72a03ad7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341271, "uuid": "13fc8f26-0464-41e5-9393-6049a15e4d61", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb481b3-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329743, "uuid": "6c851825-f7d5-4edd-a001-4436bc423c46", "comment": "Malware payload (Mirai)", "value": "73803399e52fc836dacfa9d8a84a0f6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329743, "uuid": "1ffbbb71-8c83-4de9-8fa1-425e7497a338", "comment": "Malware payload (Mirai)", "value": "e236100a8e4f0b50fa34578357b985d38d282dae316808ce8eafd06144bdaebd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329743, "uuid": "a1f5be66-13a9-44da-a10f-a4029780722c", "comment": "Malware payload (Mirai)", "value": "bb00810fe311f49d0003f3f4c0d228b93963ed84", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329743, "uuid": "b1edda17-3eac-43ce-989e-b28f15ba82a2", "comment": "Malware payload (Mirai)", "value": "aa72a763a2ebad3c2c8474d3e20b71976490bd518fffb53d2070f58236e55f340a25eacadafa05204ccecc9136f758b0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329743, "uuid": "1d54b2f4-b6bd-4a5d-b79b-adb8b111b8f8", "value": "T165237D76C43D6DA4D84842B5B430DA785B23F005D6672EFB9A86C9B08083D6CFA4D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329743, "uuid": "ee4096ca-33f0-4f1f-9dbf-de12f2942088", "value": "768:uPSJhKrikmxxikmDl+qrTKnItgvD4cjUICyo/tQCTET:uPSJjxckSCnBM8UI6lQCTET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329743, "uuid": "89ea8e0e-8269-4f6b-9ebe-5b358994e23c", "value": 46532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329743, "uuid": "5c2e5874-f20c-4c97-b0e0-b31866bef1d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329743, "uuid": "7884cb5f-41f0-4453-adc4-df9d6a715019", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "985b64d8-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330004, "uuid": "23d8677a-b36a-4bed-b27c-e0a0f1307664", "comment": "Malware payload (Mirai)", "value": "86a016ac011d31fa881923e5ec1cc51d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330004, "uuid": "051e8551-937f-4dcf-ac39-b62be1cb63f1", "comment": "Malware payload (Mirai)", "value": "e24bcd27ceb328f4e8f51b1c8dd5f55d497f13d9884ba4a2a18389097914bf2b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330004, "uuid": "691b5d57-b7d3-4ee7-93b6-3e368ea897f0", "comment": "Malware payload (Mirai)", "value": "40d2efb5cff5f2f52589e7f29efe4d960cde821b", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330004, "uuid": "3d1ff021-e799-4ef5-8e16-f1801318a2ab", "comment": "Malware payload (Mirai)", "value": "e934421c2b61809e8b342407e85e404e605f3e588e244a7a222e324e6771e5da25891f1678e30f24bc20c6dcd1058e17", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330004, "uuid": "79c79b39-a18a-4b96-a6df-87b58db88751", "value": "T144E04DEF0022CF13820C1C0830A2F833A031C6C023A0CA0BAFD9803B80C9A20B32CE61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330004, "uuid": "c5456201-ed6b-4aaa-939d-ad30e2c96a71", "value": "6:LMFdV2jzbgMFdVeaLaNgp4CgMFdVcFGNIvF+69gMFdVcfiAK6isr:odMjzLdMaLaNgpvdVNIE6xdGLK6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330004, "uuid": "22421cd7-b208-431c-8578-8e2fa39b2415", "value": 308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330004, "uuid": "b38431d0-2d02-42c8-a352-966e6f1c4aff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330004, "uuid": "1405ead6-f16f-481d-ae71-602afb742fae", "value": "smc2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b28edfe-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345363, "uuid": "7aacbba5-11b4-43bb-9851-bddabddcd2bd", "comment": "Malware payload (Mirai)", "value": "a99e9d2fe93a436a4f031c60d1513a50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345363, "uuid": "f6dc1570-2a5a-4fdd-8ec5-cff464d40d76", "comment": "Malware payload (Mirai)", "value": "e26da6bd98645d20bcce46485f6b1f5f92c69b1d2ba5caaa169fbb7e70964b9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345363, "uuid": "961d0f15-2375-4e05-88e1-8765500b240e", "comment": "Malware payload (Mirai)", "value": "5cd8e2fe37a530555593ff5db0594070a55b570f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345363, "uuid": "bdcbb197-7c6c-4fbd-b7e2-7db9810ff41c", "comment": "Malware payload (Mirai)", "value": "6b5e93a3d93b4414fbbb8f7cca8314a3d1d288241156f900475201a182c2d5dce045c534dc0ac83c9962163d945f176c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345363, "uuid": "3a56e3db-1230-416f-b704-c86e2af869b8", "value": "T1A5731885BC809E29C6C50377EA7F119E3300A3DAE0DA7753CC184BA47E8A95E0E57796", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345363, "uuid": "64937598-4976-4cdf-a340-1cd516f416e1", "value": "1536:wqQqOoqYTQQ2MBVy9FwGBItktu2fx3botVdOU31M/0hvOPanytr3rV93vZ+j:rTQN9FzBYM1feDdO21M/e2inyp3Jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345363, "uuid": "ec5d2a42-5016-417b-8e7f-5c735b03ab14", "value": 74691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345363, "uuid": "a3c4ee46-8baf-41eb-92ad-76e3536ba648", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345363, "uuid": "b865dd7d-ee16-4948-bcd1-460073c043ca", "value": "Fantazy.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e487920d-deab-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766349030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349030, "uuid": "f7b5a18a-d32f-44f8-9e34-be06174bb8b7", "comment": "Malware payload (Mirai)", "value": "a3490993c47ac6c5b5035eab6e47c64a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349030, "uuid": "1c92168d-9c95-40bb-badd-e74b68174ab3", "comment": "Malware payload (Mirai)", "value": "e28ec273ec41ed3d13a17613d5183ba1b6bfea3b401def5725b005411f8ed210", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349030, "uuid": "e2713b2f-c65d-4921-b323-7fdb29fe0e4a", "comment": "Malware payload (Mirai)", "value": "e556067c94aa7a16c88804055c3088cec46f88c6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349030, "uuid": "5caf3bc8-83df-4b2b-8abf-424ea18d9bf4", "comment": "Malware payload (Mirai)", "value": "40cc93d708a0d59661a63e81ac07236cbb87a5e5c5708dbeaecb80089b57b2655be2d1575dacc329ffb08bcb970c601b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349030, "uuid": "954c60c1-8e55-46cc-ae4e-d6139a0c66ee", "value": "T187F31A56F8818F15D1C111BAFA1E128E37131BB8E2DE7203AD245F707B8A96F0E3B955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349030, "uuid": "0d2b0614-daef-4521-9ca7-72c1e46d1d7b", "value": "3072:lOcp+6JRJYc4IqUPB3HgtNmaMUDdoo+C7aurXMgJM:lOcp+6JRJYc4Iq8pgtEaMCoobXMgJM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349030, "uuid": "a7c364ea-a847-45e6-8b06-3fdb8a78da7e", "value": 167868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349030, "uuid": "a226609e-f8e6-43dc-a551-3d19a6f2c8f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349030, "uuid": "283feb84-38bc-4f36-95a9-17d398fa071b", "value": "yamaha.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd47e26-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329748, "uuid": "92564573-0943-448b-b817-b24849b4139f", "comment": "Malware payload (Mirai)", "value": "c00accab2d2b4680405315266019ebf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329748, "uuid": "539ca980-2a51-46c7-8cf8-cdbbc79b53ab", "comment": "Malware payload (Mirai)", "value": "e36d2400e7ce8f2fad75a987b9061581b80ae5bc5722dadf5f0383987f6384fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329748, "uuid": "3b12afbf-62c1-408b-9691-ed4869d96756", "comment": "Malware payload (Mirai)", "value": "9948b158cbbead0fbc490dcc3c6bccded090ce32", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329748, "uuid": "417029c1-b73d-4100-80cd-9c1b638eef15", "comment": "Malware payload (Mirai)", "value": "fa7a5015c1a8b0695e2b89f3727cb069ae1a47054b0eefe7ad323f34430680569a6d5434a449ac30af1a7bc1f58bd5bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329748, "uuid": "d4fbef44-3880-40b7-95b5-64a41bdd771c", "value": "T162830896B9818B21C5D552BEFA1E518D331317B8E3EF73139D146B147B8B82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329748, "uuid": "fffe9828-9904-40fa-bb9c-96fa18c9d364", "value": "1536:zxnnfaJyeA9/AcL3EwjmLZyU/FptaCkBDZflqbvBevScnT0MbhMriPZAq7DJou73:dcngO3EZfIbEvScJZAq7DJoubqzT3Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329748, "uuid": "cf53cfed-9816-43de-9b7e-8912c59f9fb1", "value": 84212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329748, "uuid": "0f57cb27-51d2-44d6-bda8-93d02b11ffbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329748, "uuid": "7494e33f-b639-4f00-b805-072996ca7918", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4365917-de96-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766339929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339929, "uuid": "434f0eb9-9d3b-4036-87c8-e3e76f9700c5", "comment": "Malware payload (Mirai)", "value": "75cd1cc5de1a9a516cbecca54d1e0da4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339929, "uuid": "d3b75164-a752-4bdd-81e3-078c7bd1265e", "comment": "Malware payload (Mirai)", "value": "e3763b31347e5e0cfb3b5bda9a398c49b4fcbe43d6e968470fd5e7e5ee18e3b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339929, "uuid": "3b7786d7-654a-43c2-88b6-c7430aa688e0", "comment": "Malware payload (Mirai)", "value": "4b097d1bf6559eb8ade1ee0dcc33344f5a3286a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766339929, "uuid": "54f5c637-dd80-487f-852a-762f4cb07090", "comment": "Malware payload (Mirai)", "value": "6387812a4fd54e82853d8cda2c3dbe3b4ca5e5f8bc5cb26d4af98fbd94c27ac6e3b46f40f47591a69345e8dd096ee60c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339929, "uuid": "7a1dfdcb-e3a8-4b5f-9aa9-dc86916d45d4", "value": "T1CC833A86A400CD7CFC4EE6B784570F10F62C77515F620F26A669FDB3A9721988E1ADC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339929, "uuid": "ab0d869f-eb5b-49cb-b426-676f5e0683f6", "value": "1536:y3CFBAGdzJGhE5AZbWBzDhubMGzR4xme64/8QeOInBkX8WMJRqxuob1DETPe:ySFBJchE1dFubMGzR4xm0yOrX8dJRqx3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766339929, "uuid": "e2f248f2-e623-4556-a6ca-ec907b65d0ed", "value": 83792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766339929, "uuid": "543c9c6b-86ff-43f8-89b2-f819e27f02c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766339929, "uuid": "18ac103c-772a-4958-9376-88d04771d386", "value": "jklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b761f8bc-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330056, "uuid": "9012e94e-0707-4754-baa8-266fd391c6fc", "comment": "Malware payload (Mirai)", "value": "55c2af4324297a6c383746844fbeb8d5", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330056, "uuid": "2d983a59-c2c1-4a1c-a0c7-5e180fb14a9c", "comment": "Malware payload (Mirai)", "value": "e38f5c0012e568720d7f9691e1eee939a2c36074adde4897fe288b4264b0663f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330056, "uuid": "5e1369d6-f3fa-4b84-81cb-b259e2a65895", "comment": "Malware payload (Mirai)", "value": "fd44875f9f5db9aaec98371a11d315af1e763ee5", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330056, "uuid": "5fa31878-8a7c-4f20-a182-6c83f1ff228a", "comment": "Malware payload (Mirai)", "value": "18a17ab53b8af13d73b0cc369edaf45c3748501043d0c02ca21dba87cdefb4222e04714ca8fc8356046e9eea7f5e792c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330056, "uuid": "bfa9f050-fcd4-4820-968a-fa3859896bdf", "value": "T171C08C9F20272641D108AE2021A13819BAA1CAC226B00B0E9BE82033F8CEA00B70CE20", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330056, "uuid": "94737265-1499-4985-b5f1-bb2cb8d9d762", "value": "3:LxAjdVZVb8NBzSa+ANjaxPQvJRDxAjdVZVCONBzSa5Ap9J6n:L6VbkPjkAD6Vxym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330056, "uuid": "dd1045ec-ab9d-4184-ab73-7d858ea12b81", "value": 154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330056, "uuid": "bba3dbe3-0b0b-4f1b-9fd7-bf24900028af", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330056, "uuid": "64a571ae-2d74-4c68-9500-0973838f071a", "value": "f.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "503c03ee-de39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766299818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766299818, "uuid": "f810db43-4cca-43e3-8caf-45f14bc0fa37", "comment": "Malware payload (Mirai)", "value": "4cc96a3256194258d39f2ceb6e55dbde", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766299818, "uuid": "1ee9ae51-e05d-4de1-8f7d-5ec7835aca26", "comment": "Malware payload (Mirai)", "value": "e530b4adb8b1ffa561ed18c4ad5886a1daf860aec402ecf679fb8559fa2b4cdc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766299818, "uuid": "d8490f76-bd2a-438d-99cd-dbfb871c848d", "comment": "Malware payload (Mirai)", "value": "3c1d1bae9e8803bada008855516eadea13559ec7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766299818, "uuid": "6fdd1aed-5e8c-4d00-a94f-d8f8700ca364", "comment": "Malware payload (Mirai)", "value": "4fe11f219b3c7c3cde5d6bdce74ce6679c1ec87f8185e034205014e38e62b98194a5f2adff1b8ecb77f568a6ab032292", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766299818, "uuid": "0d91436c-83b3-4d4b-a700-2019f23c3a1e", "value": "T1C383B80A5E228FFDF799833047B78F357A9823D626A1C741E15CDA012E6034E641FBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766299818, "uuid": "a82c9492-b14a-42dd-b93d-e0e4f829c623", "value": "768:GvgxwHXvyGI8P9lhk/3+6YhNCnHoqrQjbQNuqOYWUVpChgbjyAy8e5SXswOIEvvt:GvgKH/nI0bkW8WbVm1pCyblewXtOz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766299818, "uuid": "06ece8ea-bbac-47a0-a20a-9a903241c8c3", "value": 85364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766299818, "uuid": "0a0ef83e-043a-4598-935c-9e886016bd85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766299818, "uuid": "759bd318-6ceb-44e3-9875-eab8489c4ae4", "value": "sdxkzX_UXA229x.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e862d8b-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345369, "uuid": "4f90e843-de94-4a44-81ed-287683d4e273", "comment": "Malware payload (Mirai)", "value": "27e206f679e6550cb22b70b4e62e5672", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345369, "uuid": "35f4758e-88ed-4cd7-a906-e5dd850d7a04", "comment": "Malware payload (Mirai)", "value": "e590f58d83aa6cfbf4446ed4629efc99751686af8ce16b9048522c807affa189", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345369, "uuid": "f031d01b-0975-47c2-bc14-37a2a51b3d02", "comment": "Malware payload (Mirai)", "value": "d08ba0d8dde7f5adc4afdd9c3e9aaeef3845e9ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345369, "uuid": "dcf9d807-7d7d-444b-888c-8bb14e771a49", "comment": "Malware payload (Mirai)", "value": "f28285c439d13b7699b8280c58c03a44dd3dff5f77cf88ac8f3a97b1fa0cc7320c3edb6523af6a9a3c241e7ac3fb0007", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345369, "uuid": "1876933c-2995-4f8c-ac38-b638ba9ea322", "value": "T12EB3BF87B1907ABEF0A45E3FC4135E26A6259F705583273D71BDF9906E3A3503292E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345369, "uuid": "b907cd3c-fd4d-48c7-bfe3-7348a7620875", "value": "1536:toOxCg+uUGWkCqYUqwaJ1XqfXg5AcS5blaZeCtjHXNLdCS2T15OvhSkzN8rSx:t1xKlGWnqTUcXgZS5gZ7CSXhSUUSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345369, "uuid": "0a8a60ac-41cd-475a-8214-843767559ba9", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345369, "uuid": "9a441fee-4b72-47e6-bb0f-4c80e0b08c8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345369, "uuid": "1e86ecd5-fa6e-4dc8-b4db-26ab2e853d96", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29cb2c09-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347858, "uuid": "7b02b900-f8d8-4467-950a-c77d6f894af4", "comment": "Malware payload (Mirai)", "value": "7bf06a712b6e338d28a0663111ca23d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347858, "uuid": "ce1b4100-4166-4356-b9b1-a322a0af9a11", "comment": "Malware payload (Mirai)", "value": "e62f5f056ac1474142e2c89c7456d1db915de656750df58398de554033a4d3bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347858, "uuid": "ca74555c-d1f9-4afa-80e0-c812464820c9", "comment": "Malware payload (Mirai)", "value": "8c6a0cafd24ef7fde02ab10d7414337a818e771d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347858, "uuid": "80fdbdd0-633b-48a3-84b9-cc6b5352e4fc", "comment": "Malware payload (Mirai)", "value": "a132a7fc0f7925654cb5d6ce19cd79c4a4bb83b6d0f76adb10e4b86db78640f93a4a5d50eee697d8a6f38986de4bbbf4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347858, "uuid": "dd34f49e-dc97-417f-9438-3d9008a63fb7", "value": "T15F7328B93A46F23CE9A450B8F4432AD515220A083FDDD1E36C836477BF70789716DE5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347858, "uuid": "eebbcbbe-d070-47cd-b6bb-fd0e72423775", "value": "1536:VTVFFYCAvWSBnrRxxOOw3AVBIVCCfy0K9QjZzon:VLCCAvnRbOOruPhon", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347858, "uuid": "aa2bf7ec-1a13-4a3f-9f01-d35c913f1916", "value": 75136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347858, "uuid": "d71166ff-351e-4de5-9a45-47fc19255ff2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347858, "uuid": "cc7df4de-095d-46bd-b3fb-c540f5c12d57", "value": "Fantazy.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32ece7d0-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347873, "uuid": "3af8fc39-24d2-4a96-a7b1-df88a43758da", "comment": "Malware payload (Mirai)", "value": "f16f2438d6b5ecd2e9fb6a4a7d13dfd9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347873, "uuid": "b823140b-72ab-4a46-9991-c3ee303f392a", "comment": "Malware payload (Mirai)", "value": "e68ca206a825ad943f39f54a46ef37dcb2ed40466362d188d886b250339ef3fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347873, "uuid": "4dab6780-730f-42fd-8053-ae346bb2c9e1", "comment": "Malware payload (Mirai)", "value": "8ac21764681fa61b2c7da98372a389529dbf0e28", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347873, "uuid": "2497332b-41fd-49ac-9406-ee55bcbc813a", "comment": "Malware payload (Mirai)", "value": "a710ed642d8496337d3e1bfad32f55c2953d391b37f86a4c60d4122c86bab6e2e29b277064d8451d950b8395169b3c62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347873, "uuid": "8807b660-ac3a-454a-9291-60c67dcb5d95", "value": "T165532A0177548E07E9D809FA182F17E487EFED4051F1F4869E0EE6160236FA36D69FA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347873, "uuid": "ef5fe8d5-a6fa-46d5-8776-82f3e293a08d", "value": "768:Rw/4G55n8zYsbvUIWRo6U1IrVntE3P6+hpT/AaJl2Zh+H5Jg5cYPZuFLMpU8uBg7:hG5hvIWTVntE/RT/979Zy5Yryb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347873, "uuid": "81dee0c9-520d-493d-8d33-dbe4b0dba8aa", "value": 62612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347873, "uuid": "7eafa7a6-5fb6-4c0f-9fd7-3343e88084a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347873, "uuid": "7805fa11-9cca-4775-b3cd-bc2fe3a6ead9", "value": "Fantazy.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae364b22-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330041, "uuid": "1056429b-d406-4df4-b7d9-13a13735c167", "comment": "Malware payload (Mirai)", "value": "3e226947e93d46cbfa21b3516e4eba99", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330041, "uuid": "d2207d80-82b1-4c9e-af93-c03b82447527", "comment": "Malware payload (Mirai)", "value": "e69b1b263662cc951caf7de54d413b7117a9f0d5b989295e13da0b22b0389961", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330041, "uuid": "37df08b2-a571-425f-b03d-780145fa60b1", "comment": "Malware payload (Mirai)", "value": "ed28e815ba3e7dac2e8979bfea87bfb734c6fe18", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330041, "uuid": "dfa8818a-6981-4ea1-9bb9-4bba691e18f0", "comment": "Malware payload (Mirai)", "value": "427b38b79ffa35f7f20722d0876b0ec713b0e454621d1934209ef19cd756375b33bd0aaf1ff08548c2a1d38cf2551e0b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330041, "uuid": "28172ed0-c0ab-4d08-ade8-59c0759135b9", "value": "T10AB0125FC1154600024C482C39A120406050CA4035EF0D2F5B54403240ED120A348E1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330041, "uuid": "857f8b67-9ee2-4e1d-945d-d23e7e8c5059", "value": "3:LxAjdVZV1HSanWT5YqjKS13:L6V13WTuS13", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330041, "uuid": "f565e37b-7cba-4deb-aa4c-9dc2d18015a4", "value": 93, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330041, "uuid": "ca5169f7-2762-4ecc-9fcc-7456dfcaf224", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330041, "uuid": "a92d7a3d-a713-455c-b41e-036bb5b29da3", "value": "hu", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2381ec7-de93-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766338718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338718, "uuid": "bdcaa8d2-75ba-4507-b602-455fe8a3c9f2", "comment": "Malware payload", "value": "4415f344c7c7af28fd601b852bb50073", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338718, "uuid": "83337890-899d-4b1a-b815-4b8d021a5f7b", "comment": "Malware payload", "value": "e6dd952bd825f669522ff1f2c6c98855fdb1d20ebc34ffabe433b1842cd8769f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338718, "uuid": "e091c7d0-0980-4fd6-942d-ea169e77e005", "comment": "Malware payload", "value": "b82cb473691ae63d0000e650afcfffeafcfccbb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338718, "uuid": "7465b4ee-a747-4892-b4a2-4097b825250a", "comment": "Malware payload", "value": "9e73bed3cd35f87f332c40c4dfcb9b168c564838e990dcac375ec86c1d0078956d0c0370930ee7f5369d4e8394b21424", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338718, "uuid": "539dc30f-a27b-48af-abd7-027dd4ab9a28", "value": "T123C36D5B730D0A43E29A1DF0263B27E6C3EA5AD130E5E6483609FF4993B1E365185BCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338718, "uuid": "ef013875-f696-4524-add2-856537268731", "value": "1536:nP7XSXXTltI34FME0SBthaSePYGKWCdOcfm+mqaf9a6K7M+Ayrb2CxTGgJBZF5/:DeDltbFMENahkXdOcNu1K+yrdLV/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338718, "uuid": "e9bbe342-d7bb-4b90-aab0-63c76b17ba06", "value": 122092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338718, "uuid": "6d0361b5-a251-442c-b7b1-165172feb1d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338718, "uuid": "2e649df6-9e80-4869-a5e3-2173eea55762", "value": "rondo.powerpc-440fp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a88680ec-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345493, "uuid": "45d7d724-c65c-47dc-82fb-29217d352c79", "comment": "Malware payload (Mirai)", "value": "2b8ac030d521ee72dea74153ddedb790", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345493, "uuid": "d49178a2-33a5-4a0a-a0a2-e6393b357b23", "comment": "Malware payload (Mirai)", "value": "e7940859715a7044956467f9c610f9553f1c17c6e63672caa2631d03a3c5b827", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345493, "uuid": "01f387ad-24b7-46b4-ac73-3c2f05564a79", "comment": "Malware payload (Mirai)", "value": "d764a1901532b25ac3f766fe5e6d1b0f2c5ad059", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345493, "uuid": "476a11e1-8d63-4268-8d3f-fad4ff8b4fba", "comment": "Malware payload (Mirai)", "value": "ac9f8c11d25a74564141e9a36bf983699d548a55bd53466f2c7143ead8fecf60a466b6a2055b20e5934a7bc3edf7aa7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345493, "uuid": "23ec689c-24a7-43c8-8398-341867ce3ee1", "value": "T1E9D35C0A79D270FCC687D170926E9F61EA3A745C02183DBBA3C2AE711937DE05E15F62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345493, "uuid": "4f69b564-98a5-41ff-bfe3-6c5811cea2e5", "value": "3072:lAFWsh8fkY6i3iP+9gK8JYYvk9d5dAl8tFEU84YTb:yssqf/3iPcgrerAl8fEtHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345493, "uuid": "6305f24c-e898-411a-83b0-c80291012034", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345493, "uuid": "6600fc47-a4ad-449b-a206-df08bb7282f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345493, "uuid": "21bb5f86-a37f-45b4-a037-a94d4d6d30a2", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b22dd2e-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345390, "uuid": "d35053e6-0e26-44ae-829e-38d006cd783f", "comment": "Malware payload (Mirai)", "value": "3d4e38e11c688a4d5b4277f09de4fb8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345390, "uuid": "89d53b5d-68bd-4c8d-aa52-2de1f57fb82b", "comment": "Malware payload (Mirai)", "value": "e7fae8639ae169753e21789bd638b10337f14b8fb036d195948017cee887e8dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345390, "uuid": "eca86e19-256b-4619-8aa2-9e5d485f466f", "comment": "Malware payload (Mirai)", "value": "55f0ddc68a3512d7cc1e5551d0aaec8848e72616", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345390, "uuid": "668d36fa-cfbb-454d-9dc0-4a8527ac4bcf", "comment": "Malware payload (Mirai)", "value": "c7a6bcf92d6132cee2254fe51c5cc4f809e21954d1c8ff29d38955cd8625f4c2c06a59d2d3f5c407d33f815aea1e9b84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345390, "uuid": "73fe5b55-9335-4aa5-b0ff-15511ac7e3fe", "value": "T1E204392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345390, "uuid": "c9adf4b5-d8b3-4cd5-9300-8fb4589494c8", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wKUXS:7eJpJUVD1A8n0YNgEJi5aXi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345390, "uuid": "001d019f-5cb3-4d33-8ae7-6a43518e0941", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345390, "uuid": "51893f13-212c-46af-a900-44100482c4cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345390, "uuid": "f491a6ff-6d81-4147-82ce-3e7be7bf0fdb", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71ad6ad8-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338959, "uuid": "a0eb9573-f21e-490a-b629-8a8cdca051c6", "comment": "Malware payload (Mirai)", "value": "199ce783fa34fcd02117aa8c5e820fdc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338959, "uuid": "135d95de-f1af-46a6-a0f3-40ca109b7fd0", "comment": "Malware payload (Mirai)", "value": "e8abf6630463ae2caea364a18d2ca11cf76bda4bb82d90941f6c8596f7bb0534", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338959, "uuid": "03dd58d5-f709-492e-840b-293830693012", "comment": "Malware payload (Mirai)", "value": "c117aa66f4a26f7206f2b28708384d12b0d213fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338959, "uuid": "6256ab44-5181-4956-81e6-7056982129c2", "comment": "Malware payload (Mirai)", "value": "5e7f162983cabddfc53ba3338f6ec66ba986e439dac6c9aab2b2e448cb3538a37259e07ed3a8cf5078fbfd1bc4799b1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338959, "uuid": "13580e02-d326-400e-aa0d-3115bd9e0d54", "value": "T15743F8C17881A626C7D45777FA6F018D33199798E0EA33578C292FA07B8AC1F0D6774A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338959, "uuid": "e1ddac64-cabc-4435-ad87-dde58bf6acbf", "value": "768:tRgEigNvAKiD1AvoUTQJkSOf9Kc0m8kiJeU67F1HHj36gawmvTLwCVy/rCxHghWT:tTiVrD1IIm8IHjKga1ShWkB5tDCFoV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338959, "uuid": "749082b8-cbec-4cc8-9516-6a0d3b637364", "value": 56600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338959, "uuid": "7f299cbe-3819-4353-ad41-362d384ceb85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338959, "uuid": "856f57dc-6b22-436e-ab8e-40eb8ebf5952", "value": "Josho.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bd2a707-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309233, "uuid": "16e5c7a6-fb96-4f13-9718-956bd495db52", "comment": "Malware payload (Gafgyt)", "value": "afe3b3ac284f365e9d7da654289c104c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309233, "uuid": "ab5a6520-e4cf-45f2-b976-8cacebfbf029", "comment": "Malware payload (Gafgyt)", "value": "e8ce2f11858a4f4a78c3a7e76e266b741109af90d587be9aef556ad7d090dad6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309233, "uuid": "0fce879d-30a9-4654-9d71-210b3a5db136", "comment": "Malware payload (Gafgyt)", "value": "f2500b52cae1e50ea44cc8cce31e06b8ac41c8c7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309233, "uuid": "b85e02e3-5f81-4d7f-b63f-fc64e9cd0e35", "comment": "Malware payload (Gafgyt)", "value": "564602ae714a0b330dbbadfb2e6c8b5843a6a2e06af2475d3985830ca17c227789db35d061ed9c26a5f4d2b030a94be0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309233, "uuid": "1c1786c0-91fc-4f90-a4c9-32e28da95086", "value": "T1FE933B56A780D5B3D14305B316979B620033FE7B1A5EAE0AE35E7CF18F3A0987221B5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309233, "uuid": "0fbe13c0-3c2c-4fc2-9a9e-d8512a118690", "value": "1536:msqmQTbw7U+OU0Cf5UI8E8WwP6kHzgk81VwcG2emxGMUNLe5um7WAgcVjmZIcBI:msi2UVUtBUI8GwPfHkk8rDeLesmqAgcr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309233, "uuid": "e4fed27d-ec11-420c-8729-1f9e0ddad3b9", "value": 96268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309233, "uuid": "5ecfa092-55aa-4afa-bd45-e5641d552554", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309233, "uuid": "6bad44e8-0b5d-4785-8917-0ca177acb48c", "value": "586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd0b734-dea5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766346467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346467, "uuid": "78b033d0-6e2a-4a71-a4ee-3250f06d9684", "comment": "Malware payload", "value": "a80ed9682ff676578363b2b7658d9838", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346467, "uuid": "c098b76c-f3a1-48dc-939e-16f31bd7927e", "comment": "Malware payload", "value": "e912c422768420f34d8a3f4a438c72f0087f9d07fd483630beb419606c177172", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346467, "uuid": "5af9ec8e-f94e-4789-b2ad-bbc9182695b2", "comment": "Malware payload", "value": "633a11bfbda78dc4e338938d9844d53d7e5b3a34", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346467, "uuid": "41715ef4-65d6-4fd2-a54f-9794d5e193a7", "comment": "Malware payload", "value": "13667c0e372b57c828b04a9460b372876a52c804c24508b622e498edaebed83f7b0eaac6efc78366dc3f494ebbf08ab3", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346467, "uuid": "87785263-3975-4324-af44-f9c1791a7190", "value": "T1EF51F8DB02048F71E71D875EF7F67178610FA0D2E6DB8A84AA46082D4ED9E4D7789E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346467, "uuid": "5cc8ea03-40de-49c2-a8f3-83940b1bbad2", "value": "24:Ju2JMVjbiB98uZ0E1EnE2EhEqXtbwIxJUfw5hM3K:Ju2JMVjbiB98uZ00cvyNtbw85hM3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346467, "uuid": "fdc8d8d7-974a-4043-bf67-13fd889c4837", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346467, "uuid": "31a4ea64-76d2-477b-9173-ceec97b7482a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346467, "uuid": "8f0591a6-905a-4f15-b1b7-29a7d135b259", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38667185-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309227, "uuid": "3b30e8d0-6b7f-4bf2-a005-4402a9d16cab", "comment": "Malware payload (Mirai)", "value": "fcef63ac4914043b1ba694fa7c67b7f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309227, "uuid": "bf836920-0fee-4ee1-81f8-1802b46c4d3b", "comment": "Malware payload (Mirai)", "value": "e93504c7038b0f70451c505f990bf36933fe556af97ce12238858290b60ef916", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309227, "uuid": "71a210b9-4b68-4992-ac33-6f7338d99acb", "comment": "Malware payload (Mirai)", "value": "9596956a842e6240bb5f9913736a7c3837c26683", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309227, "uuid": "a91810c8-4d7e-4c71-9875-2d241f7442c4", "comment": "Malware payload (Mirai)", "value": "a8908e8cbf9cd5a63d80e902dfdfc45f4e3d60b41a496c1f28828035f01b661fd574d2ee841767f8abd7e7bc86da22c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309227, "uuid": "a06ee295-c65b-4f89-8c85-5bf827cd21ef", "value": "T1A8144C42EA818E13C4D5177ABAAF01493332A758D3DB730699286FB43BC6B5F0E77605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309227, "uuid": "00a51fa5-6c15-4199-9565-eb5d40a7ff8c", "value": "3072:BDcxUXRyXCfrIdgVv4n717mASaDwb+pPzf1kv8MyCyGWsOfQOM/9Esdkm1:BDCUXRkdD7SaUb+pPztkkDGWsOpM/9E8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309227, "uuid": "cb31e1a7-1eca-4b54-a567-638264ac066b", "value": 191195, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309227, "uuid": "4037e5c2-b743-48bf-afc0-98cab4231e2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309227, "uuid": "609809fc-5fb4-4ab2-8c04-1db9e3607023", "value": "main_arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69e8d398-de77-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766326490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326490, "uuid": "3301a29d-497c-44a4-8ef7-eee65eb3ddf9", "comment": "Malware payload (Stealc)", "value": "941a1dc8531e8d4f757df305d44d804d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326490, "uuid": "ec81c165-4504-401e-9ea0-aaa53dea2bd2", "comment": "Malware payload (Stealc)", "value": "ea2c9e343cb116ddae3aa2426becf6aab5ce53b4a9c6a0f19bb03102011576ba", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326490, "uuid": "90f8233d-84cd-4c03-b3ed-89e76565c4d1", "comment": "Malware payload (Stealc)", "value": "a72e3c90166654dca0b7966e15320d428cba2621", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766326490, "uuid": "65811cfb-1597-43c4-8031-3226609dc4a1", "comment": "Malware payload (Stealc)", "value": "84d67dec554809fe56d1295ec477ed1e506892a775cb92313bb88951201f3d423832887c19a02e66e001db0d9c351765", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326490, "uuid": "e960496d-17fb-4973-9ef4-ee30b0cbb0fb", "value": "T100164B6B5330D1444F29628BE49B647CF0676AB63AB4740775230DC2130FA6BA9F9B3D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326490, "uuid": "b3557387-719f-4835-b8e8-52811f188e06", "value": "abd02735f28f325b5d3eb138ccffd5ad", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326490, "uuid": "75a56404-adde-47c8-be49-4d5f6d102cd9", "value": "98304:4012ABmM5OCmRALHI7o2eFSgZ+CFLZpFiY+AxUOawyW+1:JYMVmr7AX++LTcrzOawyW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766326490, "uuid": "1f16ed6c-e236-4ad6-bb17-77fff583d1f3", "value": 4401664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766326490, "uuid": "4578672c-ba93-4cae-b448-ea16646716e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766326490, "uuid": "b7f24806-e3f6-418e-b4e7-8e1216da9032", "value": "chrome_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75d113db-de94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766338966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338966, "uuid": "10d97b47-3334-4588-9f9b-b5ceca73acf0", "comment": "Malware payload (Mirai)", "value": "3c0a3cac1cbd2ba3d18cddb0120d4bc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338966, "uuid": "409bb462-1a9a-4f65-8881-602890867d33", "comment": "Malware payload (Mirai)", "value": "eacad908d115f4804f96a559e8dc7f150977ff4cde33c6f5780e1797d4b8600c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338966, "uuid": "29c29113-14d8-4475-a958-8c811278ec38", "comment": "Malware payload (Mirai)", "value": "85d329918ff0989f36a68346e286626c9e566f9a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766338966, "uuid": "436d5c4c-2bc7-410e-8ec0-789b5df0aad3", "comment": "Malware payload (Mirai)", "value": "f742cb7cca79895c9ebd91076dda59ea5c7a9b0da72aecd2464e4920a53f689daf52435c997dfac42372b25892a999cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338966, "uuid": "ddd084d2-2d22-4d40-9c74-031b2ac36b24", "value": "T125530985B8819A25C6D113BBFE1F018E3316976CE2DE73128D141F647BCB95F0D2BA0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338966, "uuid": "c439e668-4504-48be-afb7-0c6e52b8a52c", "value": "1536:wdngqwABzQwr+csWY7w9ELrGFzVLU1KeKacL/IbiKmUpKWf:Xgzd6c/mwwkhLUwcmUpKWf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766338966, "uuid": "4815ab94-5c22-41a9-9d5e-2d8e478cc0cf", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766338966, "uuid": "4dd78942-d2c8-42f9-b987-cf47fd64d918", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766338966, "uuid": "d7ef92be-4d03-45d7-b56c-095413b3c5c4", "value": "Josho.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63054766-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345377, "uuid": "7d18dc66-2fc0-447f-83ca-76f6959aacb9", "comment": "Malware payload (Mirai)", "value": "e636bb4510e8e2cd846eedc8941e5f62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345377, "uuid": "4dfbc8fa-f6a1-4762-b529-f9d201d6b043", "comment": "Malware payload (Mirai)", "value": "eae0a41a2796a2616b2cba2f267307b906d80e17619ffd5f0940503914ad5f43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345377, "uuid": "112d6cc6-8141-4222-952d-f88726595609", "comment": "Malware payload (Mirai)", "value": "87052a34c4b48a7909b6d2c98460e16b481ea6cc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345377, "uuid": "0d69e1f4-290e-4c5a-acf1-9abe5a645fc2", "comment": "Malware payload (Mirai)", "value": "c8583adf81b9b5bd8880ae716cd350240e0b49d3aa18cf4345c7585a89036e1b36cee5fc954029e937e3833c5d4cae0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345377, "uuid": "491381cb-e56a-4795-a304-4eb7ef9a3c38", "value": "T1A9430A88A4E3FDF2DC000A3C287BABB15937E07A7179EDD7E7CC2553A945242E412769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345377, "uuid": "360f952a-5390-42c6-a46f-b0fc3c00cd00", "value": "1536:h1tFrFu1yZfBcXMT1r6O1ozxeyDKKpiSsec4i6QC:hlJugZpcXeWO1ozxeyDKcUec4i6QC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345377, "uuid": "b7749be6-6144-4091-b105-be6c67c1df92", "value": 60456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345377, "uuid": "eb180dd7-ae32-47ce-815a-c2ff9e55a62e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345377, "uuid": "adab8e04-01f1-4aa4-bfa5-f106efba05c1", "value": "Fantazy.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50511e31-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347922, "uuid": "2c0994a6-b705-4d9a-a0be-481da0e903e6", "comment": "Malware payload (Mirai)", "value": "0518ee4ec8037b77529071856e4e2deb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347922, "uuid": "71ddee0f-a7b5-4329-9962-e63b5f858f31", "comment": "Malware payload (Mirai)", "value": "eb18202ab4d9589f2efead8f0ec14f08d1338f56d38706480d3834bc360d9941", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347922, "uuid": "f1334d9a-639e-4bc6-9af4-6a921c22655e", "comment": "Malware payload (Mirai)", "value": "62c5e630ef7652d0b3100abe791c4be8493173d0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347922, "uuid": "ce656157-cb91-4199-a123-8c8628ed8c37", "comment": "Malware payload (Mirai)", "value": "894f294a601364c86b2c4eb4808d58e04644d144488ef057bdf82cad6e52f2f66c3495ba0f7354df07ebcec647d3323a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347922, "uuid": "1787fd2e-fb1e-4a99-af21-5807576c9213", "value": "T133148D68FE8F78D2D2C7E37DAD4A0FA2302779749565C0B51A00A29FD5EAFD488C0617", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347922, "uuid": "d5537bc1-446a-4a8e-8c8f-ee2c94b8bb8a", "value": "3072:rIJ+cnI8tgtElTEdI4R/Fq0iCNTeN0zPxI:rIJfIElTEdIWBiGb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347922, "uuid": "73a16d63-fe61-4df2-bb71-874b07a8ef02", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347922, "uuid": "21c884d6-9db1-41c6-8637-d11c4f62507f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347922, "uuid": "6177e035-832b-41ed-ba93-e90485df2559", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e8bc308-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329129, "uuid": "5b986790-ecdf-454c-91a1-2171bbdcc58f", "comment": "Malware payload (Mirai)", "value": "02e860eb4ae82ae5773c2c038a4c2405", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329129, "uuid": "e6496c71-e38e-4c27-97a3-41379f696f49", "comment": "Malware payload (Mirai)", "value": "ebd1877912ec628403d89fec591218730dfb454d5616e877ed2a70d12edbeedd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329129, "uuid": "463b3598-c874-4d16-96ad-a00136adac01", "comment": "Malware payload (Mirai)", "value": "814b5ba8072d839934dcaf34afe6c7877865f3c6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329129, "uuid": "df9ce703-90b3-47f2-9840-e7520fd00521", "comment": "Malware payload (Mirai)", "value": "adb30dec61c0d66fb838fcb489dae92d8d37a2c4016cacf35bf5516290efde9cad8e7820583ba88b1f2fcaafe5896ab7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329129, "uuid": "c654a15d-828d-4503-9954-61db0114319a", "value": "T1F8A3F786BC819B22D5D562BEFE1E518D331317B8E3EE7202DD146B25378A92B0F7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329129, "uuid": "553eb5d4-b4c7-49e3-a264-d183371b61c4", "value": "3072:yAyVNxEcy3xBYECcdtAJSyEY327MmpRvTl:yAWNxEbaERdtAJSy1327hp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329129, "uuid": "2dda67bd-31b4-49c0-accf-01ec441800c8", "value": 104408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329129, "uuid": "f4978bf0-b3d1-4d6f-abe8-c09035ba1b00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329129, "uuid": "908afbb4-6266-482a-97d0-01bf0f7c829f", "value": "splarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07991faf-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329761, "uuid": "819d90c0-f453-4e3c-a9a0-77129d38a078", "comment": "Malware payload (Mirai)", "value": "dc7d87d1048fde3f92bcbceb89cd062c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329761, "uuid": "a05e2617-cd35-41f7-a5ac-c6f2aa22e8fc", "comment": "Malware payload (Mirai)", "value": "ec6b5406c9d6646a559e138ab0c37e2a990a5e8397151fae40cea959b008fdc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329761, "uuid": "fdcfea96-9b91-41e3-9e5f-5e17471b9a03", "comment": "Malware payload (Mirai)", "value": "caa9608c5913808a61fb134068178ff419949b00", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329761, "uuid": "78ddae29-771e-419c-8fb7-7417614127f6", "comment": "Malware payload (Mirai)", "value": "1c268db97d15bcee06cae737c0cf61b36c224abd864cee0357ecd8520278d66535c9da314166e5a768aeb37077d31a52", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329761, "uuid": "e7fe945e-3743-4408-9c85-c7830639da9f", "value": "T183735C42731C4943D5A719B0293F27F183AFAA9020E4B78AB54FAB494276E335447FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329761, "uuid": "3c5943dd-7707-4ade-9320-5c255cb9a5d0", "value": "1536:ft0HJlmdZ8h5cAuxa6xBi39J79nwiMonmKmRvTlbVRe:IX6riv9wmnmNTlW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329761, "uuid": "124bbc62-f3f2-426f-bf98-301230b32d27", "value": 80660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329761, "uuid": "8ff3ca3f-3460-4381-b374-9f665f2f52a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329761, "uuid": "0afe4542-a27e-4998-807c-705d7aa0b585", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2910e1db-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347856, "uuid": "707d4713-f549-4b68-867f-b2e28f8c2e8f", "comment": "Malware payload (Mirai)", "value": "4c51b06b7938c482437b579457b98a85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347856, "uuid": "bd298e3d-191b-41ae-a100-f32aac68add8", "comment": "Malware payload (Mirai)", "value": "ec8cd19e9182f9700b5a6d5b1d4d62f7b004811c55e8b3a0bd5d317e846bf535", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347856, "uuid": "9e3c71ae-cd55-4134-89e4-310860d3ae61", "comment": "Malware payload (Mirai)", "value": "871d3868075accbf9e088e58ebe6b45a6cbf1880", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347856, "uuid": "0d02ab45-48f7-4d12-86aa-c1ec4d7e7318", "comment": "Malware payload (Mirai)", "value": "298f57990b2265b98ca3e53c7f6b8869a7a3c9f0f697e011801b48662358bba151d8c58f0f5bdea46d3d7fac056a88f8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347856, "uuid": "18c19b0a-f6c2-40c1-a0a1-6d9f05253b3d", "value": "T19283830E7E754F7DFFE9813D97B79E20920833A212A1C485D0ACFE824D64746B42BB56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347856, "uuid": "813116b4-89b6-418b-9f60-989204d2d9a6", "value": "1536:88kBfXZB5Rs7SVCFOuhJ5lnFzgxPm8DvcHkP7ZNyL:8BfH5Rs7kC5hJ5lnKxlDvcHkP7ZNyL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347856, "uuid": "a1d4176e-1aec-4181-b683-cf7740ea3be4", "value": 85464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347856, "uuid": "bc3ba3e0-a67d-48f5-bde1-46fe97a9e2a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347856, "uuid": "ff8c9029-3610-4ed9-9641-afca4fdc4cca", "value": "Fantazy.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8bb598a-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330085, "uuid": "ca107e56-2d20-4acd-b0e2-32714398c909", "comment": "Malware payload (Mirai)", "value": "647fcfc0dae3db7a340f67b608e61774", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330085, "uuid": "0892346e-5a65-4878-a0f9-5d43a876cffd", "comment": "Malware payload (Mirai)", "value": "ecea9f3af56147cb8c2aa5ec9c5069cad6fda563803f4418d779b471c568d268", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330085, "uuid": "88f10cff-7d90-498d-a5aa-1cf9c4b0b1f4", "comment": "Malware payload (Mirai)", "value": "b884ac47c67da3200dcde905355f9c490c84b925", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330085, "uuid": "332c541a-107e-4a67-b670-c3ec0a031ec3", "comment": "Malware payload (Mirai)", "value": "51f8b55145e0faf53f1176f305cb4d1b91e87974e8ad4e495ae23c44269f8cf168fa747a511f8738f659d24f6f3748a3", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330085, "uuid": "8bc3c481-34d0-4025-931c-d43066c00570", "value": "T13CF082AF102ADF63C18C4E2865A1B03B906046D92AA1079DAFD6405B988A600B3BCD21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330085, "uuid": "da75dc26-994b-4dd1-997f-942a117e6827", "value": "12:f3GLK6zXS1QwMaLaNghMVNIE62SvsHGZkDy/r:f3KK6zXAQwMaLaNgWVNILxsH1Dyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330085, "uuid": "b651e1f5-a540-4588-9b7b-e2b1317652b6", "value": 445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330085, "uuid": "8893bae8-247b-4156-a2fd-534ca82eb5f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330085, "uuid": "4d5ce72c-ebf5-4704-867f-c1ea2dff06a6", "value": "hell.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49274c25-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341468, "uuid": "8a49e659-5b5f-4b37-b4ac-1e0eac122d6d", "comment": "Malware payload", "value": "6cb5ef804172ed87435f0e4da32e2ee8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341468, "uuid": "8891b921-9774-49b6-910d-bfb769b405c8", "comment": "Malware payload", "value": "ed2fe12b2e7b6adf57a99baf100981c959b56cbb47c3d517b1d0e7625b578acd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341468, "uuid": "cd911520-8507-46c3-8312-3b6ee0e861a5", "comment": "Malware payload", "value": "2ad6c78fd01bf10e12a38a3427acbf23c2f69af9", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341468, "uuid": "f7810c1d-e064-4010-b76a-d8ac89be6e51", "comment": "Malware payload", "value": "53253192c00df92dfe715e9537fb17a6a9fe242b0e691991b9222c1213585cb632a810d5d44df5b4fc2e08567f8da372", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341468, "uuid": "b80a112d-b08a-45b6-bed2-d84c1f33da64", "value": "T1B4B533928EEE0756C52847B09540097ECF1E9D34DE3543CBC64FB14AEA83EABE29F544", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341468, "uuid": "39184451-50dd-4fb7-b262-8348aff6cf36", "value": "dc6b57a7282f87959d9942f26d5c0b74", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341468, "uuid": "8d716115-f1b5-4f2d-be08-05220c2c97d8", "value": "49152:d1PfVXSTOanwTJyow4AIUCPRfB5pAHHlbWk4niV5C0T6Oap12W:xSTO48JIw5rpWbWaCO6OaHL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341468, "uuid": "ceaaa255-93a8-4600-a4a4-db35a367a895", "value": 2390016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341468, "uuid": "a9e8bd4f-6d88-440b-a0b8-e5f01fc77f93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341468, "uuid": "f6de2d52-c15f-4f69-a00c-e4f3056c8f2f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ec7a659-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329773, "uuid": "6dec6f47-eaed-4bac-bc9b-d62a3e5b9e49", "comment": "Malware payload (Mirai)", "value": "c784b0f0739e426ca18ea6161a4586a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329773, "uuid": "ae184451-8f37-4a83-9147-1877c369d5d1", "comment": "Malware payload (Mirai)", "value": "ee7f15a7919dcdfd3dc0e5ca0aa1a5a3c19c6a4d4a797746d23f105ea1e6bbf8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329773, "uuid": "c49ead16-9f9f-466d-a809-e5bc8e831e58", "comment": "Malware payload (Mirai)", "value": "ce486d87e3166f2cce7ccb3a7e4757c5de053a60", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329773, "uuid": "e451fe13-2ce5-490d-98a5-ab425801144a", "comment": "Malware payload (Mirai)", "value": "8c284bab5a541d4f26164414e5c0076d04014cefda87cd20634cc04240eba5f444864c2d55d37e1628fedd45a60a9711", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329773, "uuid": "d888382d-7337-4427-b993-ae7138f36118", "value": "T1D693D60A6E259F6DF76CC63187B78E30D74973C22BE0C645D26CEA014E6074D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329773, "uuid": "2cd13d4e-9499-47a2-87b5-028e010e9858", "value": "1536:36lNf2+26+89RWiR3YtGGdMljRCePeeiYeeeqpW//R5Y7dkT3bVRR:Wf/26WGGdMlj5y/odkT3J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329773, "uuid": "29422844-0e01-4edf-be64-a13d1562d0ec", "value": 97080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329773, "uuid": "5c7563ea-3368-4184-a445-160a37552f91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329773, "uuid": "4e6ee6ae-3d95-4273-9bc0-f35ac5f3e479", "value": "nklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db12a96e-de13-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766283730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283730, "uuid": "d6d7f785-ab97-4e7b-aaed-2c6eb625b4c0", "comment": "Malware payload", "value": "1e70b764f914bf7b51c495fee460df43", "object_relation": "md5", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283730, "uuid": "21ed311d-d186-41af-9de5-b38760f2c993", "comment": "Malware payload", "value": "eec2f41de43920d9b4cc2b13c428be347b659378a202e683ec2d25a499aad8f3", "object_relation": "sha256", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283730, "uuid": "f84baf7e-3881-4eb7-8bba-97c216bf3cea", "comment": "Malware payload", "value": "44f11f33600e094e58b7c1876862cb255232619d", "object_relation": "sha1", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283730, "uuid": "3d2e81e5-af9b-4116-a90a-ee3ddc382625", "comment": "Malware payload", "value": "967fedf1700e29804e684dd1a25ec0e2f657e0467bafc5afbb2dd75556d019b453653a85f12ce017d57be05e6e7b101f", "object_relation": "sha3-384", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283730, "uuid": "c54a5889-f386-4e98-b031-acc052af4e8f", "value": "T1F4752356A7F49062F8F2A77656F11AC3A932FDB10F7186AF459060AD46336A0DC70B33", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283730, "uuid": "da745d22-86ec-4945-a15b-0abfb8aa7d97", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283730, "uuid": "c5c38dd9-8226-4246-8052-04e0f426b1d8", "value": "24576:xiLHBKHur+SbuiyzIdE3QpE+slI8yL7uOjCQ03rDSpZT8ywr:ILhKOr+fj0E3H+slQ7uO+Q0voZT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766283730, "uuid": "bd0b8d50-fa09-4bb4-b626-5dfb08a85c77", "value": 1611264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766283730, "uuid": "69bd97ab-e159-4e2c-8e6f-801d46a548ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283730, "uuid": "e19eb4c2-4bbf-414f-9af2-776f99e152d6", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9fb661-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295729, "uuid": "b0b3de0c-804b-4e3e-993a-8570ea9e5c03", "comment": "Malware payload (Mirai)", "value": "3cfc0629d1ba6ec304e9564ba927b9cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295729, "uuid": "26d3432e-6be5-44f2-a203-0942c1821f20", "comment": "Malware payload (Mirai)", "value": "eeca538eee34020faeaba910201e720d838c337f1efcdb6c0516e2a03544d546", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295729, "uuid": "9514af98-2622-4093-8260-100076238209", "comment": "Malware payload (Mirai)", "value": "0b9725249228d844c618bfd0c72f78dfac17e42b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295729, "uuid": "fe527d8b-b723-4eb1-968d-04dd4986870e", "comment": "Malware payload (Mirai)", "value": "1f15cb24af03fa3355712a396645c488b36d77a1e762e7f5b2c34e934aa921743e36ae7ab5027ca6cbd5efe630b3e587", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295729, "uuid": "c27e0e88-b41e-4365-a915-bf97110923c1", "value": "T12DB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E76C6A657968791CF8905F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295729, "uuid": "057f686f-f1a0-4a96-bfb9-5a06afccb508", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1s/LWy:c9sSyzz36YaWWgg1sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295729, "uuid": "6b6f153d-9148-498f-8b57-13abccc4eb9a", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295729, "uuid": "2c8bbe29-7c57-406f-b903-4698cf8053c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295729, "uuid": "c431793a-4583-4ff2-b7dd-69a011caf172", "value": "boatnet.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11c5d1be-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344381, "uuid": "ff69fb0f-1b02-4fb0-9aa1-0b87397f1c9e", "comment": "Malware payload (Mirai)", "value": "a193b2e3aa0a4317f7656bd73434c00a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344381, "uuid": "17f517d9-5d81-4d09-8391-6be085d05f7a", "comment": "Malware payload (Mirai)", "value": "eeeebb5aeb2e8e0f5ac9d5baed9ab50540357fab439fb30c9dbf5f2a3e67cedc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344381, "uuid": "2aab986f-0d3d-44e2-a90b-bc2c43730e07", "comment": "Malware payload (Mirai)", "value": "9ed1069360a526cb98d17f077e8860a7c3208a16", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344381, "uuid": "1aee6d7e-ff6e-442f-9aeb-e8173c4113e6", "comment": "Malware payload (Mirai)", "value": "5049fad55b25b71b2005f60ba5ebcd91dc77d4c89496226d47ef643b0a2a4225d38db297ea842bf1e846db9554b29038", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344381, "uuid": "9b721454-f97d-46ea-a35b-0dac5c053e43", "value": "T11B335B43322C0A57C4A61A70293F17E0D3FFBEA121E4B289650F5B5A45B5E371486FEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344381, "uuid": "f900a043-57a9-47ce-936b-a2bdef43f925", "value": "768:vpnWnlf0nY6+RuG9pJTyRh0OatgMfWvuDWZSvez6rkT+:+fBBvyRmRtbW9ZSvAzT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344381, "uuid": "fadaa611-0e53-43b7-9a7c-fc7372b6ca27", "value": 50460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344381, "uuid": "99689e49-6d4d-46cc-9513-fbbe1eb77581", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344381, "uuid": "5c950c82-9588-4770-bfc6-160561706686", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5ffdedf-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330027, "uuid": "ff495b03-1ee2-49c1-a911-7f5f0fe84941", "comment": "Malware payload (Mirai)", "value": "f950119a2fdb048434afae7c87ad1a52", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330027, "uuid": "b5de3a57-466c-4bc4-85a7-3383239c8296", "comment": "Malware payload (Mirai)", "value": "ef56344e1ce60aca2b9e9cffc09f1f79f8e54d0d6cd03119ba5f8cd34552a14f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330027, "uuid": "b59bf69e-eb3d-4b72-be8b-b16011e154d4", "comment": "Malware payload (Mirai)", "value": "34fd655254c4595923ce1ff80e86737a8f18a008", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330027, "uuid": "b705002c-0d86-4ea2-a1e5-33b5bcac9782", "comment": "Malware payload (Mirai)", "value": "bf8ad6972b2769140cdcaeea84d72812720e260b6388c9016e1ad2d42599777bf63b02508a70792dc7d74404d3353bb0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330027, "uuid": "8a5e60e2-06d4-4966-a8d8-720bc501d25f", "value": "T1B9D012DF10252A92E148AE512152B12E9E8586CA36610F9A9ACD1933BD8DA14FB88E31", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330027, "uuid": "15f1d302-6ddf-4862-9a5d-0fcddc5b1573", "value": "3:LgHKRwVZVb8NBzSa+ANja4qM4oq8Ui9WFKVgHKRwVZVCONBzSa5Ap99HM4oq8Ui9:LCfVbkPj5Zq7FgCfVxyvsZqC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330027, "uuid": "1133a22f-f1eb-49c8-8f7a-eed489c9aacb", "value": 208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330027, "uuid": "bd57c0a2-f79e-47ba-8e9d-05d68757aba6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330027, "uuid": "0f19ded6-5fc5-46fa-8edd-c48979b7a8e3", "value": "gig.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e7eb7e-deba-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766355476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355476, "uuid": "77ee9f7a-ef56-4483-8897-ddde4aa243f5", "comment": "Malware payload", "value": "a65d977c92c14ffce49bbac0b22de351", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355476, "uuid": "63280d37-603a-42e3-b683-ba51484980ff", "comment": "Malware payload", "value": "efc7c0cc3857f06101ebb8ab1259b8e2e9459260e2d55fef0a733bf085201cac", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355476, "uuid": "a85fa256-2216-4d33-8643-5cd4b9d1a5e4", "comment": "Malware payload", "value": "2afdc32d89d6afdb0c6a5965c767b3722d65d80f", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766355476, "uuid": "c48ee591-d9cb-44c1-9557-4eebe917c375", "comment": "Malware payload", "value": "bbd00a91abad434e743232d9be6d91229c1b583a83d4f33799ec2a8e5b962ece3a802953ad2f0e2c48401cb43c11eda5", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355476, "uuid": "d73cb7f8-277b-489b-962b-8043cb3ce210", "value": "T112C533EC75C7987CC8194AB1BB43149827859574991BC1CBAAEF367F0F7E2BD8B16002", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355476, "uuid": "c919dacb-ba2f-4418-8585-c444c4d21121", "value": "dc6b57a7282f87959d9942f26d5c0b74", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355476, "uuid": "26a53fe1-a5e8-47c9-a216-391a4b7c52bc", "value": "49152:ivvrmLGssJuu5QXrtwnvX8Lx3MVslXujUR:Svrpf5QXrSOMVKXujU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766355476, "uuid": "ad589652-f4e1-4385-98ef-6d0535b1af30", "value": 2606080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766355476, "uuid": "bc8d4ed7-6301-4265-9402-449a98037b95", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766355476, "uuid": "1e0238b7-7a8b-4a35-92c8-0b6d4f160bee", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77d280af-de9b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766341976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341976, "uuid": "6d1a7608-66a5-4026-976d-2f271721bf87", "comment": "Malware payload (Mirai)", "value": "f3c86c5b1acec8810cf424f429650492", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341976, "uuid": "fc9658b9-1688-4074-9d8f-8fde2b69fe45", "comment": "Malware payload (Mirai)", "value": "f08b7da6b28fe5dfeb532a72d10c42227ed63b035d7e24d80beeb2cd8e0c9ef8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341976, "uuid": "28e5275e-5f6c-4815-82c7-003521113c0f", "comment": "Malware payload (Mirai)", "value": "1098555ae2ac63dd13f33c3817101e51963f220e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341976, "uuid": "576be158-e98b-4e5c-a0ac-6eaba7daec26", "comment": "Malware payload (Mirai)", "value": "2cacec4c08a8cb77305af7268fd4a7b28d034db35334132c1ca218cd57a717ae31837493a733bdd76e4d0499de158cbc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341976, "uuid": "594aae56-8408-44df-be76-3f1e6781a38f", "value": "T161835C42B3180943E56319B0293F27E1D3EFA9A021F4B78A651FEF8A4675E331446EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341976, "uuid": "b8eb7c7d-4166-4550-a56d-61b99d322021", "value": "1536:CC5t5Mic/8+TX7pGLI9+MfI6qoWx9Ec7tCXGAsT2bVR+P:NG/Z+MA6Y9HweT2GP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341976, "uuid": "509c4b4e-c999-4f60-ae1c-b11def20c716", "value": 81292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341976, "uuid": "7afdc443-9a34-49b0-baed-928651814e96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341976, "uuid": "c510c4ca-6714-4c53-8fc7-b167de80ad2e", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f650757-de75-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766325721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766325721, "uuid": "1d890c01-53b7-451e-9493-9973c6f4637d", "comment": "Malware payload (Mirai)", "value": "5e7e3aae8d0ee8df0de0e251f268e448", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766325721, "uuid": "23eafc11-ff6a-4c60-b9e2-3b2dffcba663", "comment": "Malware payload (Mirai)", "value": "f09f5d5bfe4674b015fa934217fdc8d6bceca8324441671d8a4295ec8d46c852", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766325721, "uuid": "4b12a139-6b5d-40e7-a8f1-ef7df9108f8a", "comment": "Malware payload (Mirai)", "value": "0ac1899a32734b6010e8b9d3e8e0f7ace0f5a898", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766325721, "uuid": "7e13fdc8-5dd0-4ae1-9b49-4372969b10ec", "comment": "Malware payload (Mirai)", "value": "aa26b0d31723e858ac5993d8f8cbf06c6aae3b2eb2fa06afb65103c6e34eb34cd631d00d2d52dc46f4074111e2a9ff91", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766325721, "uuid": "483c8537-28d6-4184-8a90-edf36bbd4113", "value": "T1C1C3F807BF60ADFBC81ADD3349A9860528CCD54771947B3A3E34952CBA1B51E4EE38E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766325721, "uuid": "9a2b7553-6eff-4ef6-b3e8-62c5557bb4ed", "value": "1536:EXW8IqVUTF0Fh/Y2iIf229nJuvbm2KLDHdIql2FUT5CYzX0XoY06v9GsPg0+GIrD:ZXTGFJniIfT9JuvbmbDTgYzYj8hH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766325721, "uuid": "3657f7f7-973e-43ed-bb3b-949ed58059ab", "value": 120699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766325721, "uuid": "bad7d06b-ceba-4c1c-9ca0-953ddff9003e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766325721, "uuid": "5168c6c4-4187-4ae9-b197-97701fd07b42", "value": "n3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a91ea9fd-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330032, "uuid": "9f1564e6-1e9e-4907-8fb3-596a2c7587a0", "comment": "Malware payload (Mirai)", "value": "f07731b870001699ca8834e3963842a4", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330032, "uuid": "3ce1d4ea-5a4c-4bea-9cde-94530863a751", "comment": "Malware payload (Mirai)", "value": "f144c424ed9a4cfea0221b5b1e676f3f410398163de311a60861532cabef916d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330032, "uuid": "63ef7de3-da65-428d-b269-8af7cfc00d73", "comment": "Malware payload (Mirai)", "value": "007e0751aa90455ef96de36560f23138ce05b6c7", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330032, "uuid": "100f68c9-9ed3-457f-909e-a771eee679b6", "comment": "Malware payload (Mirai)", "value": "e67720640af6a03722f1b34bd19ee8ca1f57152192e8843ab5a68355de58884384f8020e265c8c0faf4a2bca3860b056", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330032, "uuid": "60856dba-8b9a-4184-bae2-6a1338452ddd", "value": "T1EBD086CE50105670618FAC5831715F4E6881578D31601F885CCF607BD5CCA25E35C630", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330032, "uuid": "2a1b7ca6-ade7-4f07-a9a4-ceb7adf77dc2", "value": "6:LyLCNwAK7Pi+BFKVyLAWJNwAbJ78Ji+BFKVyLmSaqA3LKf9A+62:OJAn+FK0zTwA2vFK0mSaqA3LKd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330032, "uuid": "77f24c59-68a6-4105-b5f8-ba486012b238", "value": 287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330032, "uuid": "63d35918-cf1f-4d56-b560-ec8f308bcf0c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330032, "uuid": "93cde3e6-01b6-4ae7-a72c-4337c2e5de15", "value": "plc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a7a445f-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309231, "uuid": "dec309af-edcf-4ba3-9acc-31eab626df21", "comment": "Malware payload (Gafgyt)", "value": "f093d4fac695942fbc6da64b11b8c21f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309231, "uuid": "65291bc6-199f-410f-8640-30ba54a95d42", "comment": "Malware payload (Gafgyt)", "value": "f1549634edc8e0cf1b39a73c43ef6966275f830c6168a515fbc541c4d58cb415", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309231, "uuid": "9801b174-5334-437a-be89-7a93eff8cc1a", "comment": "Malware payload (Gafgyt)", "value": "ee7c4fd49007f59beea0aefabb8bba5d375e9867", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309231, "uuid": "95ab91f7-2506-44b0-829a-4cceb56ff33d", "comment": "Malware payload (Gafgyt)", "value": "2bd7006f00dc00ad03adec2ed0f5b3fe6d7fda15769c9b553c6268f27d1f5d3f594068a57ee4902ba8fb65b9aa74e740", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309231, "uuid": "4620df28-b67b-4146-b92a-773916319358", "value": "T1A7C30A44F901475BC3E327BAE78E038C77355E6857DB33156A38BDB42BE1B982D29260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309231, "uuid": "2d231ea5-1de3-4cc1-af48-3a4c6c5c658a", "value": "3072:H63VpNeuWDGeQf8sRCNt3DxkS2YmyVUQuiXfQd6W:OSuWQEcCNt3ZmyVUQuiXfQd6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309231, "uuid": "4215d21d-523c-4eb3-864b-e9284a61d98f", "value": 127723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309231, "uuid": "1f4e30d1-f73e-4f81-9067-e02f10fc247b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309231, "uuid": "addd1662-e6b9-4066-a8e0-abe5c781ed08", "value": "dss", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fde7edf-de61-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766316890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316890, "uuid": "d3a2bd1b-2ba9-4400-95cf-8858cab6d0b2", "comment": "Malware payload (Mirai)", "value": "956ee7e110b567a21f7383e347f9b00e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316890, "uuid": "7cdc6614-e138-48e1-bcbd-8b5eef69e49b", "comment": "Malware payload (Mirai)", "value": "f17238e47046bc4a4b3fd7d9c9634bf5fb6112130a8a4a6d834d8066685b2a5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316890, "uuid": "186439eb-7fcc-4e56-ac61-9be0894315d8", "comment": "Malware payload (Mirai)", "value": "7dd0b04a6215a0ee1346c6c26cb31a6cda082f54", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766316890, "uuid": "0b92f80b-b513-4963-ae00-1ca24b295e10", "comment": "Malware payload (Mirai)", "value": "47d7129c091092ded4d792ecc3a570f4e97990ce050cc64d3780507dd5c95b8a440220d8957f82253ab0cebdeddef8e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316890, "uuid": "c3ea3fae-8ed1-4104-ab99-c27e6cd2cfc0", "value": "T196B3DA1E2A619BFDF559C23487B3CB7556D4229127E4C385E29CDA082E303CD6C4F7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316890, "uuid": "7e1f1f74-ff35-425b-b1c3-c959c5924432", "value": "1536:fYoxCjxZ78PIJXPAVOkszzJhMExdmUev7uzHPSK/9GsPgtOL7zM1q:Aox2xZcIJ/2chyUev7wyOLaq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766316890, "uuid": "8d423315-fc9a-4162-a184-7fbb5eeb7048", "value": 112092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766316890, "uuid": "259da36a-05f7-4e69-8b16-845077ca3db1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766316890, "uuid": "ebb1f6f3-00ba-4427-8e0a-4bb99d0f1002", "value": "n2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6034bdff-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340218, "uuid": "484e7c68-3f45-4c81-9deb-e1fc7d74f490", "comment": "Malware payload (Mirai)", "value": "9178beac74aead973833d6cdfbd4203f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340218, "uuid": "1df6e0a1-67c3-435a-a817-7055e8ea22b3", "comment": "Malware payload (Mirai)", "value": "f1de0a23ecc35460847304d1da696864c4f028d4ebc61aa4adf3c05c503515d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340218, "uuid": "fd30066c-c9c1-49f2-b44b-fb25084f65e2", "comment": "Malware payload (Mirai)", "value": "715e3e45edf41e3df1805367f6365c6f44c6d45f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340218, "uuid": "7e06a3ec-4178-4bbe-b4d7-cb157db37976", "comment": "Malware payload (Mirai)", "value": "34887546ed7311bf675adce0e518b40f95403703291c30281ef62a98565f92b5cea3f6622d1b510730adc147f46fabae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340218, "uuid": "10cb6a33-4040-40a1-b5f3-f12733155714", "value": "T165A30886BD819B21D5D522BEFE1E518D331357BCE3EE7212DD206B25378A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340218, "uuid": "11765858-ab38-4cd8-ae83-7c2a5854543b", "value": "3072:hckXjdEeuH12H7mY2u4SBJyCiYv87ExYSqT2l:hcyjdH7me4SBJyC3v87uYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340218, "uuid": "006b68aa-b529-4165-bbb2-123c03cb67f6", "value": 105120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340218, "uuid": "6495668c-e931-4852-ae0d-1f0742d4c960", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340218, "uuid": "6f9e8a27-0a82-4758-b9bc-2dd68897d99d", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7fb0729-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295724, "uuid": "46957b3e-d4c7-453d-bec6-7f278d9e5c66", "comment": "Malware payload (Mirai)", "value": "cbeb064285f82ae68ae946c1c05e9f27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295724, "uuid": "71d922ab-0f69-4fe7-87c5-f0885d7225c5", "comment": "Malware payload (Mirai)", "value": "f22694b03f0dc9650e5ff6b8a7daaf46341655253e80bdad8daa9b0a33d95f98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295724, "uuid": "ce9289f0-692c-432f-8300-ce5aaf1f5423", "comment": "Malware payload (Mirai)", "value": "a121b2900882757476a921c853b942ba4ce4787f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295724, "uuid": "80ba7348-8c3e-48e3-ad67-2cabc7cd1782", "comment": "Malware payload (Mirai)", "value": "781e5e68934eef1921d9e31100d5e9ffa074c271dd241d6b6544a908c3ad7d3d79962eea52db2b0ce7740fdfdd95743e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295724, "uuid": "46cb0fd4-4cb9-4010-a8fa-2a3a549e2911", "value": "T1C182D03061AB74F4DBE10431EAAECEC6576A0BF8D0FC36E216586F78C94150651F92CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295724, "uuid": "40d0981b-8505-46d0-8915-ad43dab8f34c", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMa76hymdGUop5h5lK:6GV0P6+kom0tVAoNvm+to176s3UoznlK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295724, "uuid": "94945120-426a-44de-af0e-7f30dde57755", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295724, "uuid": "cd7356c0-9460-403b-9a86-7ab589d44c94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295724, "uuid": "91dbf185-399e-437b-b845-fbc8a6f1f7b6", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dc6f85f-dea1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766344375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344375, "uuid": "ed03ec55-bef7-4f66-bbd9-2012b672444c", "comment": "Malware payload (Mirai)", "value": "a9ad771ba4f0b8ba5be343b988a0b2a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344375, "uuid": "eabaaf10-05df-49c2-8c79-5a81fd438aeb", "comment": "Malware payload (Mirai)", "value": "f319eeec62edf5f1d620c09370cee79f461345c98916778e219ed16155a55549", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344375, "uuid": "d1066d26-e206-4404-bfdf-ac01660e6512", "comment": "Malware payload (Mirai)", "value": "f3b3905bdc1740f74b1773ba4d64d76ac2de171f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766344375, "uuid": "f58181d7-e4a1-4d10-8efd-56d103c0fb0e", "comment": "Malware payload (Mirai)", "value": "28ed30b9feb71643b4f87b8250906603aacaa3a487ebc1aec3758c08d14dbce5cf2d310f7fa25fdbca0550118a0c0e43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344375, "uuid": "aff9c5c6-9c9d-46ef-a5d1-21d7a2607cb3", "value": "T199A3188AFC819B15D6D522FEFA1E518D331347B8E3EF72029D115B14778A92B0E7B602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344375, "uuid": "b066b07f-343f-4e8f-b5dc-2ce07fb3bd25", "value": "1536:e9nlCdZwyxYiTZMEOmQI/ChQ6FepCInj4Q9pfcw3sM9o5EO3630Nlu1iBc0027+7:bohRPInj4Cpfcw3sko5EO3+ah77+xWqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766344375, "uuid": "cd7d5ee9-6fba-4385-bcde-236c4f713466", "value": 98288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766344375, "uuid": "d8e11f00-34ec-42e3-b8ba-1524e0cabbcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766344375, "uuid": "313042cd-64f7-45bb-8eb7-09614632a6c9", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8a14c9f-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330058, "uuid": "56af7f35-c8a1-441c-96ec-3a20c0fc2aca", "comment": "Malware payload (Mirai)", "value": "45a3f5fe77526aab11ea46fc2525bae0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330058, "uuid": "2edfca47-b833-478d-a253-5467eb69ff14", "comment": "Malware payload (Mirai)", "value": "f31cc275d8b4afa06fffe571f2b2fd3b6cfff76ca2b827ba1ae885cae7d444e5", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330058, "uuid": "6b1183e8-4ba6-4325-b6c3-bff4bbd614c1", "comment": "Malware payload (Mirai)", "value": "ed04c6ca6a718f99687653c8307944a9ae2aa56f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330058, "uuid": "94be4b1e-edff-4619-a784-1134d827d048", "comment": "Malware payload (Mirai)", "value": "c5c2c358d1223a8cc96651d74a3d4abe6528541a0ea7c0fc2b7a19903e8a140366d4485c0979851c4677a00f3ad28bc6", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330058, "uuid": "d1d70166-0dec-444c-922f-2c2b7acdc399", "value": "T13EC08CDF20272641D408EE2021A1301AB281CEC336B00B0E9BC82033F8CE610BB4CE20", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330058, "uuid": "c53fb822-daeb-47ba-94b7-3ec6fc79bcfc", "value": "3:LxAjdVZVb8NBzSa+ANjaqzkDxAjdVZVCONBzSa5Ap91:L6VbkPjQD6Vxyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330058, "uuid": "1cda0850-cdab-4d9f-8088-d0cec070b308", "value": 152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330058, "uuid": "bef6187e-3433-4e91-ad75-e7abdad9ae7c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330058, "uuid": "78756b2b-826a-4746-ad58-7de4120c4f5f", "value": "usr.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4a35397-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330078, "uuid": "78e1b506-58fb-42e7-815e-f667fb32bf09", "comment": "Malware payload (Mirai)", "value": "ead2829efbb33e4d5c1a4b96eb06fed2", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330078, "uuid": "45eb7f33-ea47-4a87-80b5-bdd1e8c4c0f1", "comment": "Malware payload (Mirai)", "value": "f3791d002adb41bbdce66cacb7ed04487c5afe316260d1a6875c56ba98bbfc7c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330078, "uuid": "f5f2f055-4845-4921-bf7f-7c8e95ca2fc8", "comment": "Malware payload (Mirai)", "value": "33be29915f459fb1a208cefc516d7b0062e7a2ca", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330078, "uuid": "f3b07c6a-6fae-40d2-b1d0-cc7e4594ea74", "comment": "Malware payload (Mirai)", "value": "13663bca37d8e100160785cb16a4f71f1ee2ef4374f94fd2edbaba6732e8ea434052e6763a90fe0ab6dd0d683a9e4a54", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330078, "uuid": "f79e77d0-06df-43ed-8253-19ea51e6c4f8", "value": "T18DC08C8F4000F5A8600E39E831F0038BA2C28B0E38300E0ACC8020F388C0248770CA39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330078, "uuid": "e6f6a439-9fed-421e-a129-a55238b13724", "value": "3:GRFdVZvx8DBFSTAKUKjWVx0FdVZvoWJZ3FSTAbJTobJziLc:SdCeAKTjWcFdAWJeAbJTobJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330078, "uuid": "26d94e01-7862-4823-b42a-f38c5628754a", "value": 138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330078, "uuid": "5ccb85b3-d143-44cb-a3dc-d28c32fee046", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330078, "uuid": "53380c26-dca4-44bd-a954-97ff14e3930b", "value": "vowan.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a06f85-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347874, "uuid": "e7ef8383-cb69-4207-9af8-86f00f740e0a", "comment": "Malware payload (Mirai)", "value": "c040f4239913312443128b4ef265bec2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347874, "uuid": "53117d37-6e64-43d0-9407-d90a3718dd96", "comment": "Malware payload (Mirai)", "value": "f405c1db4df51106db3481ed5bb07c0f254a1cfc8571d4de1bddf67773fe5e69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347874, "uuid": "770e58bf-6b06-4706-9261-1b9c058d91ad", "comment": "Malware payload (Mirai)", "value": "dd238d30510c5b5e51ab343f526c533bf15e13ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347874, "uuid": "dedf27f1-ab1f-47f8-be0a-50d745485498", "comment": "Malware payload (Mirai)", "value": "b9b101b361ed2e39565f57250376f9c3e04e02eecd55ee781f64fc996d732a04adbdb9ab920f0df7018fafe5a43b8721", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347874, "uuid": "963560a9-f425-476d-9f5d-bd3996891907", "value": "T18ED3CF32E0082DA0DD2117B43476597C0340EEB40AD59243EFBEE5AE68B7DA57DEDB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347874, "uuid": "0b3c251c-f22f-4d35-87a1-3dee5b57e993", "value": "3072:EN+VVe2OAc3ISmTPm7fNeHVv3WDBmGRha0NZEC0ZfB:S+VIGPgYVv383LZNZzOfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347874, "uuid": "4ed20c58-aed2-4f1a-b6a3-23889fe6f533", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347874, "uuid": "8ee96b19-2969-4635-8934-e1b2c88f6cde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347874, "uuid": "fb5e8bb8-7a67-4bf9-855b-e0e2fb546293", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d49a4e15-de9e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766343420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343420, "uuid": "c418944f-084a-4e4b-adb6-66289a0e9fd5", "comment": "Malware payload", "value": "84a6c269b690b567aa465d52cc653959", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343420, "uuid": "2d3c8ea8-ff94-4ae2-9938-e6b994c78d8f", "comment": "Malware payload", "value": "f411482e1e187d0b85c4be62459159ef83874b6bb19d88de38e70e530c6178b6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343420, "uuid": "5b1185cf-16e5-4bc7-8374-544e865ef3bd", "comment": "Malware payload", "value": "3b60a47a4b7bf9ef01b172e18c336272118772b5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766343420, "uuid": "d3f62810-798c-4adb-b95d-4ae4c3bec07f", "comment": "Malware payload", "value": "87b2d5cd89379a23340ef1ee1ca7e73ed7feeb8945d722d5dddec3c12ae2afabdba686f90b222a7eeae6f017cbe9bf8b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UwUdisRAT", "colour": "#CF7D89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343420, "uuid": "7cdc3f1b-858d-4f6a-a7e0-78abafa6c04f", "value": "T16F07F95BFA7600C2E4BEC0399252E62BFD71349AC3B563DB96415A561F23BF09A3D340", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343420, "uuid": "fb01ab1e-3ed8-4a4f-af30-680ba5a52fd2", "value": "747399f499d5c61ce71fbbcae5a3d34d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343420, "uuid": "21c38324-4c3b-4c89-9b45-df230bda1b1e", "value": "98304:i/dOIUbFt9+y3Djrf/Css27BE+wXAKN9jjN+9wBPFHTe/+S4whZ:AdOnT9hnhs27BE+wXAKN9XsGBlq//4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766343420, "uuid": "94b82942-de2e-4eb3-b5e8-7d99609da747", "value": 17687040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766343420, "uuid": "da83d7bb-bdc3-4c36-b666-8584192d1870", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766343420, "uuid": "92fbeba8-5d2b-4401-9458-d01c7547a27a", "value": "f411482e1e187d0b85c4be62459159ef83874b6bb19d88de38e70e530c6178b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e12995c6-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309510, "uuid": "5268d1f9-1cc1-462a-b358-53d4771181e6", "comment": "Malware payload (Mirai)", "value": "32828fa40819458ab67090045fc5dac2", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309510, "uuid": "ea5d66e9-17af-417f-bdc7-4628dacd603d", "comment": "Malware payload (Mirai)", "value": "f4fd8959c0e558e9c56dbcf0cf3afdf685238aa24a4904bdf1436d8e81cffea4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309510, "uuid": "7c2b813f-b08a-4599-87c0-121dc3e498af", "comment": "Malware payload (Mirai)", "value": "1d9344c832e79635f5785ece34e6a472c89bdc94", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309510, "uuid": "f38b8b41-6120-4fb9-b5bd-00f84bd7dab7", "comment": "Malware payload (Mirai)", "value": "8898184080d14987d05f90ca82251051e687642d4cc64988c17328b338d2821845d8c9f5246a43e73190de6a3c65bb04", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309510, "uuid": "5544699e-a092-4247-bb24-d6d98cfb4342", "value": "T114012D8D41845B63A38C9C6FBBD3506E0660E2C911663B90B7D546A986C47C9B74C972", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309510, "uuid": "18bc42d5-4737-4323-add1-6c8394c9e813", "value": "12:KhI5W3CtI1/TbNn4BwBtnV1npLOhcnHF26npliAE/nUqlHWnioJi5nF3bQA:KOQyS1bbd4BsV1npLO6HFbpliAcUqlCU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309510, "uuid": "090b638e-f700-4d3d-a417-aca501883491", "value": 698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309510, "uuid": "c0d27cee-75fe-4ac4-bdd0-dad994d66a76", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309510, "uuid": "14d5950b-1451-4043-877a-49ccf0f613a5", "value": "curl.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9ecaac4-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295728, "uuid": "3664b0e1-888d-4b89-a5af-43626907509d", "comment": "Malware payload (Mirai)", "value": "5c403ac52a015cfbd24db36e78d4c77d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295728, "uuid": "2006901d-edd8-4abe-9070-f976f6e45fb6", "comment": "Malware payload (Mirai)", "value": "f51cd27214658f74f3a74c320f9dae85e6d570cbaf398e163968a68531b11b3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295728, "uuid": "2e1b2044-acad-4858-bc99-bbf11db5fc6b", "comment": "Malware payload (Mirai)", "value": "629ee63b4c9e8279a4b92bdcabceb65de97cc7ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295728, "uuid": "8b2bead1-6181-4e88-900f-e7bd0aa8891f", "comment": "Malware payload (Mirai)", "value": "42c1b2661ed8d45fd8e03290a4d2c98918e6d87a0a06444a09d35ae8364e7eebeea89fd6ec8f07ec76eb8c37db68a579", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295728, "uuid": "c415e7da-dfd8-4968-ad26-18c9f30f6b6b", "value": "T1B9A2E01472632D65E3ED1C3DC9AE8317F9670BFC80F632766D415524C94D20A3E39A4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295728, "uuid": "3ca37bf2-46f2-4eb2-bd9c-a46356331ff2", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjTxhymdGUop5hV:vvQn4j+ZO5fKAlx3xs3Uozf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295728, "uuid": "475cfad4-bd7d-4159-882a-2dba7673200f", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295728, "uuid": "61e52ab8-e457-4cc5-93d2-e6d7a115e4df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295728, "uuid": "aee23f92-bf3a-4b16-a1e5-2ee8c549a1e1", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47de167-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330051, "uuid": "a046e5d2-4511-42c3-b76e-2994998adfcb", "comment": "Malware payload (Mirai)", "value": "0b8cc9d602e98660a8e747bc5d58ee42", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330051, "uuid": "d3cf392d-85a7-444f-b964-9b6dd16a5973", "comment": "Malware payload (Mirai)", "value": "f5ddeaa87b80a1245ec2cfd2f695791bedc3a5c91df93efc09e2fc377b4238ed", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330051, "uuid": "0505d0b3-deef-45f0-88a2-9954ce2caf4a", "comment": "Malware payload (Mirai)", "value": "c2670e4f82d4199668832395b11da2fe574ccdcc", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330051, "uuid": "f932afc8-23e3-4334-80be-a0afcd9a0339", "comment": "Malware payload (Mirai)", "value": "aa56b4dc45b90bbf07f8557a668c7b131f63a65747aa2da0ad6fb5ed450dfc938b947850adaa6ff56484bbbad83197b6", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330051, "uuid": "f661ed96-2b17-4394-994d-c96b909b9100", "value": "T10B01ED8F4430BE7381BC1DA9B7A25455A6809B9538FA0B9CFFD9493B4AC1240335CFA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330051, "uuid": "bde47c27-d5e3-4472-983e-3911e95d89a8", "value": "12:6OE2vdtMSvG336X7MOB3hmF/O6jDJhMvh3S:6k1t8C7MY3hGjZh4hC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330051, "uuid": "b6dba2c9-08d0-4013-9c7b-5f2d99dc3717", "value": 779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330051, "uuid": "80895787-644f-4271-b42b-50cde677ec0f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330051, "uuid": "7de3998e-6a0e-4c44-8e05-24f3edf6042f", "value": "wert", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04cdbf36-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320737, "uuid": "35a67711-0bbb-4343-9982-14a77bc8abc9", "comment": "Malware payload (Mirai)", "value": "73b9938e4b0a5a6c9c141bfefd76d830", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320737, "uuid": "1ed315e2-ee1a-4760-b765-80ea3f1998d2", "comment": "Malware payload (Mirai)", "value": "f6e39e065375db19a513957b131892300c88fdf4e0cfbdbb94b9c443b4690e22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320737, "uuid": "305164c2-c54a-4a03-bcf5-688ccec53832", "comment": "Malware payload (Mirai)", "value": "e53a2d6b33e0ee415c55a0ea0d8df3c0564f3797", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320737, "uuid": "24fe11f3-b5bd-44b8-a125-e1a7c18c4f9d", "comment": "Malware payload (Mirai)", "value": "cb8897ff863fffec9af1877ae6fde4fc9a5f9141c6559934aae3288a4333cbc765d5ba13f0f49b5bbe33c7beae348ae7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320737, "uuid": "ce9e350e-d5b3-4d15-89c6-0b33769da8ef", "value": "T1B2530703395D4A5FDEE25A70182F07F087BEE2A045E0B9C6251F6A924371E76148BF9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320737, "uuid": "835f9d8f-eba5-469e-9b7b-539bd6a26155", "value": "1536:Fhqa4ACuX/XZ8b5EuReMGQyvyyl8/aN4JGq:FhDbHXU1fyaya/aN4j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320737, "uuid": "2509dd8f-1277-4111-8574-8bee154cf576", "value": 66476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320737, "uuid": "4eb72794-5293-4cb1-a677-4c210546856b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320737, "uuid": "31dfaca2-4c6a-4cc4-8615-57942d0e5802", "value": "shadow.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa89bddb-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345497, "uuid": "b2e7940d-2330-4d70-b9df-4b4b2dafddef", "comment": "Malware payload (Mirai)", "value": "7ef67fcd83a3b308c65ce3e4a55b9eaa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345497, "uuid": "bb08660f-fb97-4dbf-a566-012099d3d8bd", "comment": "Malware payload (Mirai)", "value": "f78fcfb3f8e4627f6dfac36db289c0ce329af7af06f16cbf0f01f49d5fc7208b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345497, "uuid": "390e92ee-5f70-449c-9c36-64e39d1f4397", "comment": "Malware payload (Mirai)", "value": "3a3d00b4747fd0382487c519080c43f61ce1ef36", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345497, "uuid": "e27a4616-4eb3-40fa-a670-03911c24e9a8", "comment": "Malware payload (Mirai)", "value": "3e1d34d044f0d636d9941ac4c28983f83c74dff0533e7853796df3d0990b8474c19b500b53c5f6e47c40ed348fb563eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345497, "uuid": "ad7e6b2e-0083-4db1-babf-f5afd9bb04c7", "value": "T1B0D35C0A78D274FCC687D170926E9F61E63A745C02183DBBA3C2AE711937ED05E15F62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345497, "uuid": "611a7953-15e8-41de-843c-1010b3865018", "value": "3072:lAF2acRfkY6z3xv+ErH4vk9954rlvLFZW8YYQG:yIRfe3xvvSrlvZZ7UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345497, "uuid": "a3737cb0-8af4-42f1-8361-1039081b3481", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345497, "uuid": "aa05443a-e55a-4c30-8a6e-fbc931c6d3d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345497, "uuid": "2386fdf4-51d0-4487-9a7c-5d1ef19d386d", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "959fefa1-dea6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766346750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346750, "uuid": "0becf4b1-e158-4306-bb7a-7dd4d1c2ef4f", "comment": "Malware payload (Mirai)", "value": "33932fefbeffd10c3ebbe5cd222296da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346750, "uuid": "6bcefdc9-f19e-43ee-b44b-523a808e5f3d", "comment": "Malware payload (Mirai)", "value": "f8e927e46b7848542bf8701926a8b33e0d8753e2a4b84726e43012a4d8822829", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346750, "uuid": "ccb28439-b607-4391-bee7-bf32411469f0", "comment": "Malware payload (Mirai)", "value": "12867ca1a15a7017a8857a5500b5bc6291d32d03", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766346750, "uuid": "b31dcbb3-760f-46aa-b4af-acbbb9fa7ed0", "comment": "Malware payload (Mirai)", "value": "a034456d5230a952aa2dfc731c30fe245cff5523c402e2854c0de2368972febd38fff77ebbfab109e756167977026b82", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346750, "uuid": "c92dc48a-bff7-4e83-8705-c320b4d6fde6", "value": "T18993C559E9829A02D4D812FBBB5F119D33572768F3EE3202CD205B24778AB1B0F77A51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346750, "uuid": "c2bb27ee-afdb-4b26-885f-ff064b68cdb6", "value": "1536:X5nFL0dkssS1TuVaH5Rrk17BzlIYeekHknja6gGPs5x/ZmlMyFTif8cxuoIY:gd+EDrk17Bzztja6gGPs5ui8sP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766346750, "uuid": "ee436b17-cd7d-471b-9c23-d6b323b53fd2", "value": 95440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766346750, "uuid": "7ac8ba57-6f98-438d-9b8d-2ba96656702f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766346750, "uuid": "89dea144-3ec8-425d-b279-11b338863d65", "value": "shadow.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e76ef78d-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766309521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309521, "uuid": "7e15da1e-2802-42de-be56-f3a8f5f5cd37", "comment": "Malware payload (Gafgyt)", "value": "76a8692adc72faff5890d2ae4825a61a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309521, "uuid": "f86f9527-3798-49e6-ac8f-63b8b03082df", "comment": "Malware payload (Gafgyt)", "value": "f8f764be289ad5884dd49dfeb42424265dab94b3647c9503639c4a3cee9213f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309521, "uuid": "93a78bcd-6609-4d3d-8042-ff3f4fd13f5f", "comment": "Malware payload (Gafgyt)", "value": "4625894f6a91f4df5a4aa99b5ea95b18b44c1062", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309521, "uuid": "cdc8455f-9cad-4c12-a8be-1346c95ce80c", "comment": "Malware payload (Gafgyt)", "value": "ab298d71e4f6820cb346154573f58204077ba43708597f60c0a74f5de4c0287a2bf8acd85178f81f35b2295f6a10d801", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309521, "uuid": "c0f9850e-1ca6-4a55-bde7-2862f5a5d403", "value": "T16DC39517BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309521, "uuid": "8a093f1c-d73e-45fd-8827-b99ba82797aa", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpW+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8Eg+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309521, "uuid": "0cae96aa-1563-429b-8ab6-2c7797f28640", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309521, "uuid": "251b565e-055f-4935-aac7-9bffb2a60392", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309521, "uuid": "b69a9a1e-cbde-4e17-8ead-c10f60d47bea", "value": "m-p.s-l.Sakura", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "927db4df-de7d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329135, "uuid": "c7f770a8-e536-4005-9082-f8d87507204c", "comment": "Malware payload (Mirai)", "value": "3bca4e823f7ef732c6afac79eb3aee0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329135, "uuid": "833d92d2-628a-4c8c-bd46-55e90ae023a3", "comment": "Malware payload (Mirai)", "value": "f90e1a41579de7210c570506f9b4f7267e7a473d8a2b213c4d8ba63c947af70a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329135, "uuid": "9b5bbfb4-7936-4015-ac3c-edf173a58770", "comment": "Malware payload (Mirai)", "value": "1cedc631344291b7844fde1c01d2c44eb56eddf9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329135, "uuid": "868fdfa4-a571-44cb-8c88-337d8d912387", "comment": "Malware payload (Mirai)", "value": "ca94bb89f4bc6504c98752a8fa40654b689857626c4e081ef4501a1ea4b9f0276a6e358583dce0a3bebc13716e722545", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329135, "uuid": "3e7d9d23-29f5-474d-9b88-71a5056a5fdf", "value": "T131A30886BC819B22C5D562BEFE1E518D331317B8E3EE7202DD146B25778A92B0F7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329135, "uuid": "bb883b31-5d15-4407-80b8-78d20eea3a54", "value": "3072:DWUnfQRo1K40LZvN+b9PtAJSy3M337Mm4RvTl:DWCfQRzLZV+RPtAJSy8337h4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329135, "uuid": "76e11a40-2b6e-4e72-9894-c48203e0c7b1", "value": 104456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329135, "uuid": "2fa2098d-6339-4094-a2a4-fa9761183cfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329135, "uuid": "13827eed-2f05-4d38-827f-1e7eaf06ae1c", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "401c2dcd-de4f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766309240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309240, "uuid": "8baa5cc1-7afb-40c0-9b61-2e9647d60665", "comment": "Malware payload (Mirai)", "value": "9adaad9ceace85b6338c647e81241f00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309240, "uuid": "69dc8e0f-6f67-46a4-b497-8fd7808e77d8", "comment": "Malware payload (Mirai)", "value": "f93537f29c2ce7f8ef2ed99a158985f74ef7f109b4d7add2dd81b621e5bccd5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309240, "uuid": "a74c3cfb-ab03-491c-943a-789c9d7ebd40", "comment": "Malware payload (Mirai)", "value": "1fdaee402211c7fefc8d8c4429f6f9a31c9305ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766309240, "uuid": "618e8f35-6fac-4f02-b292-1545385f9680", "comment": "Malware payload (Mirai)", "value": "c5149bc60670a71158f387df77528840eab194625403ecd31236f8e0f41a1a62568b6e55e9019cb23426f0be8cf76b16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309240, "uuid": "85343399-c466-40c1-a584-646071eb82cc", "value": "T125C44A59A8419795D1C02BBBFF1D934873131B38E3EEB1069D196F246BABC1B0F7A502", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309240, "uuid": "996fe5c4-0d31-4e0b-acb8-ffd72549fc6d", "value": "12288:OJjtBsFZritk/7ZVVlhHCp+srEMKURik/KnQtPpIqqOllZwa6TKqJ7rFliwUhW:OdQD7ZRhHCOBk/K5q6Lb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766309240, "uuid": "fc79ebc9-71d0-456d-b5a7-b25fc245ed68", "value": 566224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766309240, "uuid": "984ac5ec-916d-4dc4-910b-9425c37bbe31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766309240, "uuid": "bd2c02f4-3f80-4a1c-a9dc-0af2a79aa942", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "013835dc-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766329751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329751, "uuid": "7e08e6b3-958a-473f-97d9-92bea8e20c22", "comment": "Malware payload (Mirai)", "value": "737031701d4dbefee110bb6f1b6dfd85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329751, "uuid": "5d21e131-cb9e-4bef-af75-4baba9651c83", "comment": "Malware payload (Mirai)", "value": "f95187f0489f498c932ec698245e824170ca97d28405bf984fd89e9bb8488ff6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329751, "uuid": "334717ee-0ac0-4518-a7ed-366b7ae7929c", "comment": "Malware payload (Mirai)", "value": "1a55104682ac5980b475ece23f3a491875497dbf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329751, "uuid": "40d0fdbc-f830-4a6d-aa69-2202b7103200", "comment": "Malware payload (Mirai)", "value": "ea8785ade5e7b5c8a35c52f14a5d6701903adf27c8693373e3581d8e9474a5950f6a69584a3a12e059fcf5b64ddfef4d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329751, "uuid": "603cb571-fec4-4a42-80fa-d0f35db0c394", "value": "T1DC831A86B8819A16C6D462BBFB5E41DC332213B8D2EF7207DD256F25778682F0D3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329751, "uuid": "4cf52116-238a-4343-9ae9-0684e7f993eb", "value": "1536:OLFCBweNktv+N4fZICyL81G7kTrzyNiAVkRnqEi7cyT4dTlbVR:OL8G6qhIKresAVkZqb7cysdTl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329751, "uuid": "e0c1de50-b812-44a9-bf65-bf33dcba7e88", "value": 81164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329751, "uuid": "6fe7a26a-eaa2-4ff7-9c3a-215e653916e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329751, "uuid": "bb3f0b92-2293-4e88-a5a3-a258e73b4557", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0621082f-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320739, "uuid": "95800aa8-869d-4ec7-946d-f421d9e13d28", "comment": "Malware payload (Mirai)", "value": "efb0dedd75ef8b6a690568249169d1ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320739, "uuid": "ff2baf77-0679-4cd8-8e9f-e99a04b6c4ea", "comment": "Malware payload (Mirai)", "value": "fa5ca05265c4163c0bbb9d5f90ced72e8b5bb10e3251121584c4839c02733866", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320739, "uuid": "b7a128e2-30a9-4ba0-83b4-8299161ea3ca", "comment": "Malware payload (Mirai)", "value": "7965cf6611c8b67277ba7e9e40e1b0fedacb1d93", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320739, "uuid": "e7ae98d4-17f3-4f88-8d82-dbb1c772531e", "comment": "Malware payload (Mirai)", "value": "db8b547b62165d96fe84f28ece6caa9addc4f8aadba17a845403d83385f6dea760b0dea7cc7a08a90b2fb31c3db9b4eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320739, "uuid": "5826b1f1-7e05-4347-ba75-1ac9886f7abe", "value": "T14B633A5BB44945FDC448C23C0B6AB07BD536B4BE52BDB2BA27E4FB067883E105E6C415", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320739, "uuid": "6ed86e4b-27b3-4410-b8ab-26f05d277ae9", "value": "1536:6RSpnmfdQG0vyNm5AtV3eceRQ4ULXFlD5xkJZ5EBamg4xWzvKhF2lQ+q2QB9qlHw:VmFQG0vyNm5AtV3eceRnULXFl5xkJZ5E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320739, "uuid": "261f0caf-88fd-4688-922f-324bec0ea50e", "value": 70656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320739, "uuid": "eb883c31-e941-46e9-b813-bfdcd10dd880", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320739, "uuid": "4dc69259-4444-4eaa-a858-8fa5833dc3c7", "value": "shadow.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5b6635c-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295747, "uuid": "1c378aa9-e78a-4e55-93fd-4d1d2356035c", "comment": "Malware payload (Mirai)", "value": "bda282dcbdbaa0a131bd4e8892f903e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295747, "uuid": "c2e29df8-c1a8-4f9c-a4c5-e68a1fe44ebb", "comment": "Malware payload (Mirai)", "value": "fa722c2659aa378cfc814d7d7862c6f504a9b7e961e602272e4886495e649243", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295747, "uuid": "3ac34eab-f30c-44fd-b74c-bc792c2a6546", "comment": "Malware payload (Mirai)", "value": "93005bea5fd9b7d26e31b4c23d7444fba8e36634", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295747, "uuid": "c56b1cdb-0e0c-46cf-98df-3214ac8bab1b", "comment": "Malware payload (Mirai)", "value": "0009b539f7d7f2ebeb1ca006153c5fbcf197fd8ee65d705c38dbfc97625792a956b05b31bda6f7d3e898e0c7f03af708", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295747, "uuid": "1aec97b8-6fae-46a6-ba71-23d6ef59163c", "value": "T1E9431891B8819A23C5D4137AF56E56CD372423E8E2CF72179E214F613AC682F0C6AE95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295747, "uuid": "95c63f05-5f24-4973-8ada-1dc240cec735", "value": "768:raehM993TLSmRTIrL8Fvvhp9H0HrZQ8yoWXagcLVPWtuQ/C71mA2EDEy0eYjW9TF:/M99jmL8BZp9IFUoWKdYuvQ5KIqkypZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295747, "uuid": "91e0c5ff-26ec-412e-b53b-09f0af74cee3", "value": 56160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295747, "uuid": "b4b38d6d-6344-49f4-90b9-371ea879a8ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295747, "uuid": "1930b307-276c-47ee-99b0-ccf90ea87f5e", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3849a712-dea9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766347882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347882, "uuid": "4c048b60-9d3c-4a80-9f26-c17c59f524db", "comment": "Malware payload (Mirai)", "value": "d53620640f792ce67567796355ef8592", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347882, "uuid": "6378b698-7672-4919-8e53-07e3ad9c1a84", "comment": "Malware payload (Mirai)", "value": "fb3343b566845259ab43e1e67ac749ac2c2bf72338b53277c4d9a8e7429ada8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347882, "uuid": "a6c3befc-82d9-4920-92ca-bd2b45e2e298", "comment": "Malware payload (Mirai)", "value": "7b4cc4e1e03be9123083c7846a528590d047f6c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766347882, "uuid": "4aa88838-e725-4294-92e2-845bdd1de872", "comment": "Malware payload (Mirai)", "value": "b5e174e8252253fe5a7455e80a584db39c5fae90cffd02438dc9623ddc44b3bd902bc6d4d73977bd52b75dbc40a6d91a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347882, "uuid": "26600070-d05b-4582-bb0f-f4fba5d5c0c1", "value": "T149537E3EE1A894A0C0414B71B66A84B0C30A950496F67EB3CEC1DF65540FFBCB566BB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347882, "uuid": "d88b2e47-89bf-4f4a-b847-30692ff6cc57", "value": "1536:J/+mnSa+wtaTFxqDOnr0mJe+1ToiES1y:JWmSFLFgyHe+uPS1y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766347882, "uuid": "4146b0ce-e266-4a11-ab17-105514860496", "value": 62692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766347882, "uuid": "cda6b7ad-6e65-4d59-82b9-61a9e45af739", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766347882, "uuid": "3b5d6584-9867-4a91-8c25-ec17cdb9bbcf", "value": "Fantazy.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "624d5766-de97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340221, "uuid": "399bbb0b-ba8c-46d0-8667-df89ed9386f6", "comment": "Malware payload (Mirai)", "value": "b8bd320bc6cfafced5d35418a547875b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340221, "uuid": "3814b239-4876-43db-8a61-20208b582fa1", "comment": "Malware payload (Mirai)", "value": "fb961a1fa4a39b037ea4ea268bb554c17286531e783b784dd16472c9b515ada1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340221, "uuid": "cf5116e5-86c9-4ec8-b9b2-647894697caa", "comment": "Malware payload (Mirai)", "value": "42d80f3014331abdfa4a4b1ac59e0f6701ebe2bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340221, "uuid": "0b43569d-45b8-4c11-abc1-8bb8a5f75caf", "comment": "Malware payload (Mirai)", "value": "eaf170a0c5be7d4cb1aa29c0744b92f17c1542b6ca0591dbcd9027536bad4e07a239a6cd886ca4b18295b9010d397a68", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340221, "uuid": "694d7a76-f0af-4641-83c1-8ae1f1cee8fa", "value": "T1D9238E36C43DAD94C84C9270B470CAB91B53B401D65B2FFBAA8589748047EACFA1D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340221, "uuid": "bb4fac2d-e433-4b1b-80f2-55ed8de6c4e9", "value": "768:crSJAPwtDPxmg+gQ+13MuU/OHItzcuL8jUsCMouqp8CGhrT:crSJ5PYgZ8/GH2hcUsYZp8CGhrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340221, "uuid": "a3607388-fdb4-4ebf-b9a8-57317a002726", "value": 46372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340221, "uuid": "97392cd6-7289-4790-8e4b-e4fbe8beb418", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340221, "uuid": "5b62630c-5983-4c35-a824-47fbb48b683e", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b78f660e-de98-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766340794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340794, "uuid": "6e1497a3-49aa-41e6-94b1-79727ad5a137", "comment": "Malware payload (Mirai)", "value": "c84fce02ae9f127b99a83a034635362f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340794, "uuid": "4a03ac3b-c63e-4b06-b4cc-aa020189b8ed", "comment": "Malware payload (Mirai)", "value": "fb9f9fe26d5e965e4cf9a1cf5812ba3ce88c99e8e54669ea0cd8bb0f806fa075", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340794, "uuid": "985cdeec-07b5-45e0-89fa-7e700ef3b061", "comment": "Malware payload (Mirai)", "value": "b1517638c750f99d826ca1cf7052b6471589a526", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766340794, "uuid": "0e5f9c69-aab6-4506-a0ea-148d6c7c7079", "comment": "Malware payload (Mirai)", "value": "bd3aa7755220f8a90479a78ddd7cfaa2566fc1b8080f58208eebf6a020811550b07c2cadb065fec0250f71fd9db6d95e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340794, "uuid": "ffa31438-7cf9-4ea4-930d-569fb9159c9b", "value": "T1E273F64AFC815B15C5E522BEFA1E118D336357B8E3EFB212DD101B25778A92B0E77902", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340794, "uuid": "887bc40e-8b93-4a5c-adb0-44579b6a9f6e", "value": "1536:NBn8ovB+2jKNUwv27z7hs3OHYcSAE8bhQcdAfqu8glp99ltvienwpnP9cTG:shTzW1QcdAfqu8gLfnSnVcTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766340794, "uuid": "acc0a763-e52e-4b9c-ad9b-c5bbe23fc49f", "value": 73888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766340794, "uuid": "a28ed5d9-88eb-4583-b83f-a7213710f58c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766340794, "uuid": "d8a88e06-f5e3-4617-b93a-59ad89373f82", "value": "zerarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2d44638-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345484, "uuid": "7507f207-cc90-481f-a0aa-fabd1b21c01b", "comment": "Malware payload (Mirai)", "value": "5e034c1f2be919dd2543ce0247aca585", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345484, "uuid": "b5b06973-8aed-4820-9351-1f9b823a3fe3", "comment": "Malware payload (Mirai)", "value": "fbc84cf5060474c14ee55f12848cf126ad6496cad25a4eb663564ea0e49a3a53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345484, "uuid": "d951f923-05c7-454d-9748-e6be24a17df3", "comment": "Malware payload (Mirai)", "value": "0d610486b7dbf56109466402afa6e12fc2f4638f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345484, "uuid": "2d1a34f2-3ec6-4e70-8528-75fb55d40b95", "comment": "Malware payload (Mirai)", "value": "388a5b33e12625a97fd6a98f17c9092af03bb8330cba129e3a2a61a606785406e04162a83bfc97308d0c8913124ab096", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345484, "uuid": "368ea73d-2889-4fcb-9dda-60acc46f50dd", "value": "T1E6C35B82E6A2D0F1E68701B00557F3E68935EA305416CEC6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345484, "uuid": "747b5576-da62-4986-b6a1-e3622dc459d4", "value": "3072:3atpsoRNjmj1VGCr75MoS9SrPwVrx5tiyRw:VoRNjmj1VGFVrRiye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345484, "uuid": "6452b607-83b6-48e8-9e28-b616487051a6", "value": 123472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345484, "uuid": "5d81d3a3-f0f6-48d5-baee-75697f697a01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345484, "uuid": "48735502-3f85-4aa0-b067-23e213af35e1", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9471ddc9-de9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766342453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342453, "uuid": "ed54839a-72db-45f2-a4e0-e42b4dea7129", "comment": "Malware payload (Mirai)", "value": "17c5ef1d6738e27adb3ffe8223a21862", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342453, "uuid": "e87cfa8b-fc24-4d5e-b6db-8869d1659e24", "comment": "Malware payload (Mirai)", "value": "fbe768faf78bf7eed83bc643a7954e0199d57a593955601150ec54883dbb541e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342453, "uuid": "f1f85cf6-5dc6-498d-a807-662ab6a58a20", "comment": "Malware payload (Mirai)", "value": "78692de69d055bb88e47f534e0e6870c9b218004", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766342453, "uuid": "2408406c-bf3b-452e-ad96-228c23552014", "comment": "Malware payload (Mirai)", "value": "1c22414f9916f7f8425aac393509c209ee33514379fe4a6fe1f3931a5faecca3bc09b6d95a4e7105eebf8b754caf52c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342453, "uuid": "46290cbd-6a20-4681-80ee-6e947779a62c", "value": "T157E31B56F8818B12D5C111BAFE1D128E37131BB8E2DE73129D246F707B8A97B0E3B915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342453, "uuid": "a89277cd-fa88-46eb-8fd8-39f93b2dc7c3", "value": "3072:W2iwJPhO0KyZdUQKIYlXlIaD0e16etzT/V1iXYBbx:W2iwF7dDQlXyaD316K1iIBbx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766342453, "uuid": "8833c643-a93f-4137-982b-bebbc1389afa", "value": 145468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766342453, "uuid": "6443cdc2-1123-4727-b6e1-888940da1df1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766342453, "uuid": "fa2d8740-8c86-492b-865b-5b2c800af5f5", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3cea4f0-deab-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766349029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349029, "uuid": "21cd0235-dcc9-457e-8bd0-90e9f386adc6", "comment": "Malware payload", "value": "6488f4d1568ad3cfcd94fcb89d9257f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349029, "uuid": "c59390f5-f383-4c3e-acc3-f3361e9504b3", "comment": "Malware payload", "value": "fc04b46da1f2e1bf8e0e3a5940118b976f9688901ab4f3fe191bc1b17f5fcb57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349029, "uuid": "2e6e2f31-c250-4f4d-b2ef-3e6cff9a40a7", "comment": "Malware payload", "value": "ea579e90b2a92953d56045c86cf2d5075d033c22", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766349029, "uuid": "9214a417-67af-4b61-8a75-dfd639b2c105", "comment": "Malware payload", "value": "baf177b44a681285e66027e0390f7d1cc85da82d15354ff2a61499a00935d43b9d841d93400ece36f1b9d50b7d4d947a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349029, "uuid": "0f809a7f-d4d5-465b-981e-37002a56afa7", "value": "T16BC3EC193A91ABFDF15A833447B38B30A6D4239117F4D785E29CDA1C2E703CA984F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349029, "uuid": "8f3980b0-ac9b-49c2-be50-f0e8a4158087", "value": "1536:9o76jw/K6GVreJX6plOEHc/DwLdee5mx5xvP3HSy+yUKz9GsPgsih+XcS8N+hH:9o7+w/uZeJqbWwkz5p3qJacSlhH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766349029, "uuid": "0a21a6f9-f0e2-4186-8f61-66437bb0263f", "value": 120651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766349029, "uuid": "847d9520-778b-459e-ad9e-63f3ac9ac60f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766349029, "uuid": "c42e39e4-986b-47c2-9cf9-53171d69d1ea", "value": "n2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0575a591-de6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766320738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320738, "uuid": "211644ae-ee7d-4dd0-b777-4ed05501eacb", "comment": "Malware payload (Mirai)", "value": "4227efa1f56f9fc356d05a680d9e9ba3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320738, "uuid": "54ef0c7a-1e37-4f1f-b287-e06ccfb529b8", "comment": "Malware payload (Mirai)", "value": "fc20dc48a3bbd0ae4736e127f4af8ebe93991a553c60a3b13146bfe1923c9552", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320738, "uuid": "2ec8d375-3970-4752-bc73-3afc0212461e", "comment": "Malware payload (Mirai)", "value": "94ca8216d61c006f2b664bdad01cd6c56f22b42c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766320738, "uuid": "9ccd69ba-e349-4e2f-8a63-1cca6d4c68f1", "comment": "Malware payload (Mirai)", "value": "4e5dcb4cd3d4618f76b5f636cc39d0a18cb682d87b7c48ec20f2720115e86573d768abf0d33684fc00a07b7469f42d59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320738, "uuid": "e3fe8825-c2a3-44ff-8416-14f8bc6f9c89", "value": "T11363F591B442CC7CFA4FE679C565051ABA2CB35091530F6F527BFCA3AC321681E6BC92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320738, "uuid": "24757c6c-9c71-42a7-aeb2-213381d92b27", "value": "1536:tyx3UqzT5TKgXRbFii1Avuwc8gc9ZiKMX8DZ:tK3Uq/tK6aS2xtZil6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766320738, "uuid": "08a5f915-f425-4d13-83d9-9db5550f879b", "value": 67772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766320738, "uuid": "a8ab3225-1559-4c12-a8ff-523d7a67529d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766320738, "uuid": "f5576a5b-70fd-42cc-9902-c810d0068f58", "value": "shadow.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5331b838-de7e-11f0-a129-42010a9c0007", "comment": "Malware payload (MicroStealer)", "timestamp": 1766329459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329459, "uuid": "d74e0c0b-94b9-4a04-8bcb-7f03d425c744", "comment": "Malware payload (MicroStealer)", "value": "bc1063feb571b4aaab556706f55fd652", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "MicroStealer", "colour": "#E85CC2", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329459, "uuid": "bfe3f6fa-ee7e-441d-8d83-d00c7288ed33", "comment": "Malware payload (MicroStealer)", "value": "fcb9ccc93559ad0f061e26a4c50759e072c2234728c62416a6e3ea8e4046b0b3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "MicroStealer", "colour": "#E85CC2", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329459, "uuid": "1c7d76b6-4280-4fd3-81dc-49d06b73f31b", "comment": "Malware payload (MicroStealer)", "value": "73cfbddfe387163dc14c57a9e6658f68cd44dbb9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "MicroStealer", "colour": "#E85CC2", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766329459, "uuid": "db35ce25-f81a-4280-b1e0-287e90a1f4a9", "comment": "Malware payload (MicroStealer)", "value": "1e31a613453a9c57cd42f4212589737369b03c91461e455f03ca2a06b907cab152f7244caf12ee48f6c6aa3d4bea6843", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "MicroStealer", "colour": "#E85CC2", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#151912", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329459, "uuid": "2fde4ae9-6646-4380-95e4-286bc113b398", "value": "T1930385CF2F4A7570836D043653672B2B7A1CBA123C582B7E323265E87E64DD5F36A610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329459, "uuid": "8f33092c-93c7-426e-9596-aa4d0d13b428", "value": "768:vBgN+iWdSMBWihC8LWnsf9esrlr6fjpuBLsVvwyvcmwQmnXTqL6NuOq0ZKZBGXRF:iN+CWfmj56Qm/lto2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766329459, "uuid": "146aecd5-f7d8-4cd3-bb11-16b289e8c0f1", "value": 39613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766329459, "uuid": "1960bcbd-6e47-4b9a-b4b7-cb4ab47fdd7d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766329459, "uuid": "5a4ce46f-fa09-4ab4-8b68-48e881749755", "value": "saksoy.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57c775a9-dea3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766345358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345358, "uuid": "af14f294-5fac-4b56-89fc-498aeb18fb2a", "comment": "Malware payload (Mirai)", "value": "2f52f0cb3b00894aab125f5fa4255810", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345358, "uuid": "5adb3603-3f23-4e74-bbaf-088adb008405", "comment": "Malware payload (Mirai)", "value": "fd6895db1acb371f1294f975241aef7ec453c9b885b4f9e3fa4d7d2ecda9016f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345358, "uuid": "6f2ad81c-d644-4465-9659-ed94b8e1061c", "comment": "Malware payload (Mirai)", "value": "558b3d2f2e347dac69e4b9cf6d2563024f993084", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766345358, "uuid": "e4230382-926c-4709-90e7-cbf8bab13b32", "comment": "Malware payload (Mirai)", "value": "21628da8f2e351a7ff213abc969f542af805ce594bd9bc1ad3320772bbe9e110c08fc05216c564a7884f9ea3b6187335", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345358, "uuid": "f085b54f-56c6-4d80-8302-d0ffbeeb14b3", "value": "T157835C42B3180943E56319B0293F27E1D3EFA9A021F4B78A651FEF8A4675E331446EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345358, "uuid": "fcf12332-da23-4bb7-b572-cdcc8bb03483", "value": "1536:CC5t5Mic/8+TX7pGLI9+af46qoWx9Ec7tCXGAsT2bVR+P:NG/Z+aw6Y9HweT2GP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766345358, "uuid": "1783789b-696f-4c7d-af2f-65d58a6cd194", "value": 81292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766345358, "uuid": "911a5411-7914-4484-9264-63bdede7864f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766345358, "uuid": "cfeb4d2c-dfa8-4249-a7f1-a29e0bbf1dcb", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59b59ee9-de9a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766341495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341495, "uuid": "7ede4989-a026-43b9-a01d-6b0d2e6a586f", "comment": "Malware payload", "value": "f171940edd4c2617ff933c0df1bbae78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341495, "uuid": "a07fa2bb-4760-44a8-aae8-47b4d915d026", "comment": "Malware payload", "value": "fe818efe30af00d43610eb15e3af8fcf1bd1fed211373e5d83b4dae11660fbb3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341495, "uuid": "241eedc0-a80f-45b2-b54a-f50ce6e9e057", "comment": "Malware payload", "value": "733ce68f1009dc95e7b11b878bd9f57f3237cdbd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766341495, "uuid": "ec42b948-e9b4-406f-bc05-2525a1a7d429", "comment": "Malware payload", "value": "7aa47f5e7bcd5578a6d98bc9752c0ae799db0a38ccf730515dd06de15b47d208efb6e11ab8e2f50e8b2487520d82b97c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341495, "uuid": "3350dfa7-edb3-4f05-854a-360c7869e2e2", "value": "T199E12382BED6CE3BCCA9627A1673C6203372C551AB439B17210C48753D83AAC6D76B95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341495, "uuid": "a5cd9684-0156-42c6-abdb-cd2117f26f0a", "value": "96:8xJFWLccScsFLmg/vdpklpqxMYc3O9Ff721a5BI31HBgVcgOu8+TiImDW:tccSvwg/F+QGO9FfN+1H6VcggDW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766341495, "uuid": "7ed23173-d71d-4423-b1a2-b6c6eb1abbcb", "value": 7316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766341495, "uuid": "2c167030-78c1-4145-8280-b30bef4198ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766341495, "uuid": "502fa001-b454-4b8c-a519-61a31550e1f4", "value": "linux_arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ae4fd6-de2f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766295722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295722, "uuid": "b2c83dd5-fbdd-4e6f-a25d-09c014cc0864", "comment": "Malware payload (Mirai)", "value": "404929948dd836e8157617d2a449a5bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295722, "uuid": "8c043cc1-8b27-45b1-88ff-6a5a15e465eb", "comment": "Malware payload (Mirai)", "value": "ff083d3a7d4df9aa969d3198366cef237dacfbcdc4381945ebb5101dc1abb58f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295722, "uuid": "cdaee289-4f79-4bc4-9576-80cc1ddf11d0", "comment": "Malware payload (Mirai)", "value": "db3583aa8b9e430d6175ddc509ab62f4e58d4344", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766295722, "uuid": "941440f1-d794-4dba-bdd0-263508bfa864", "comment": "Malware payload (Mirai)", "value": "cf26fe5c7df5d5d59ad78b27a0640aeb37944cd5e418fe3c774adb5105ce1e6073a3ca26c1bff277c00c7aff0dd41412", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295722, "uuid": "7cae3dfc-841f-4cc2-9f1f-edda888c963c", "value": "T17EA2D025D349AEF4DFEF9C9093C1C2C2BBE546C72786C8E240FEAF016506056BB88D59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295722, "uuid": "828628d3-8383-435e-8de7-ed3a06e39741", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C59WM4uVcqgw05VxJ7:9RxsSVsMD6xiJJE5zRWNx4uVcqgw09Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766295722, "uuid": "0a67a5bd-3736-47a9-94bc-1d0af41cdcb9", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766295722, "uuid": "8886d889-efea-48d1-a415-94bb7ed4c4cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766295722, "uuid": "1dcc0548-deac-4d3a-9b98-480b974d7e9f", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e585befb-de8b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766335288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335288, "uuid": "272cb732-deec-44fe-b8de-2188a762aaa6", "comment": "Malware payload (Mirai)", "value": "cfab3ad7ceeba14c2e7387c376a22e06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335288, "uuid": "dfcf88bd-cc44-4a84-84b4-4486f3eefcc7", "comment": "Malware payload (Mirai)", "value": "ff5107baf197989f245cd9ec21350d9bfbc79b80e0afe9513efdf1bc5d17bbb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335288, "uuid": "dbc13b6a-850f-4a3b-94a6-e6e3a2c1b519", "comment": "Malware payload (Mirai)", "value": "71b46f096b778bc82d1dd9e027a935df27b7bf9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766335288, "uuid": "35443e2b-2652-4e88-b1e5-6f495e98f7b4", "comment": "Malware payload (Mirai)", "value": "af488239a6d203a83f0429a46f4d823bc3874a2d352762836e83733282068a6c2f40149b913d359dbcaf991a47f9795d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335288, "uuid": "489f85ae-9d29-41a1-bf02-d51852a9d21d", "value": "T17F63961A3E219FBEFBAC863847B74A219658339622F1C5C4E15CEE015E7034E745FB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335288, "uuid": "92719c5e-b8ca-4566-b4aa-c447b95c9202", "value": "1536:AHNFnXDuPq/SyZBp9tSI0v6bqfg/Kkz73o2x8FW:gNFXDKGr4I0SWYz73o2OQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766335288, "uuid": "aef94d8e-cee0-4575-bfbf-24f1fdbd4ef0", "value": 69080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766335288, "uuid": "feeafc08-242c-4a7c-9e80-5c41c3816aef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766335288, "uuid": "bdc52679-5d09-435f-89f5-d94b257dc5a1", "value": "Josho.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0588dd8b-de14-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766283802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283802, "uuid": "6c63978e-d02b-412c-be14-8b8db12fb923", "comment": "Malware payload (Mirai)", "value": "824615a653b714292cc441b4f3944646", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283802, "uuid": "e374e8bc-4c91-44db-92e3-973cfb221304", "comment": "Malware payload (Mirai)", "value": "ff86b365045d30bad56d386f863d9aaf133f19b6653b9f5a16a3a41c323653ac", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283802, "uuid": "4a641df8-03a8-45b4-854c-af31cc1685c3", "comment": "Malware payload (Mirai)", "value": "237aecd0e986d5b645aa42c6f43679ba75810349", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766283802, "uuid": "f98dd559-b24c-4ccb-9fcd-022b84c7ca2b", "comment": "Malware payload (Mirai)", "value": "645196d796ec56c59710a3b4476463857488c8c38b3c9834e898eb0bbe3102419a7e68df30f03492e40b987be0dcde91", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283802, "uuid": "42a775a1-93ea-4385-bcbc-4a4c5bb61805", "value": "T1F82178CE22509226C90CDF883F5D653CA558ABE4E5A08F289CDD487DAB9CA187167F09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283802, "uuid": "83c6cf1e-1081-4632-848d-2e239c4424c3", "value": "24:TObLzjIXOzxNI5nXz1rKDgzUp5zd+4zfsp5zBCq5ztuklzcxxzyvYgzTMuHA:TeLzoOzAXzxygzk5zM4zfM5zIq5zQklA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766283802, "uuid": "aac9b1bc-a356-4232-83a5-6f98b0af7ad0", "value": 1140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766283802, "uuid": "3a80104d-1ed8-4644-bf74-4a984907841e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766283802, "uuid": "4fd28cb6-1adb-4ea7-b689-efdc5a559812", "value": "w.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd2d2a93-de7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766330066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330066, "uuid": "d63a71ff-cb07-4fd5-999f-65c94d5b3ac3", "comment": "Malware payload (Mirai)", "value": "bce6a03fbf1df4ca16ed16ac4194027c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330066, "uuid": "43f1981b-243b-4bed-9542-e3f830432a48", "comment": "Malware payload (Mirai)", "value": "ffa57ddb14caab5310a5eb9f74610596f71e9eeb13483c31b866e532d002764f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330066, "uuid": "a5ed2e4b-461c-435b-9931-8626d674fff5", "comment": "Malware payload (Mirai)", "value": "9e452a49f5134250b66b8957a9f9e45e0093c3ad", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766330066, "uuid": "4858dbef-c7d5-4315-a4c0-c959063e3405", "comment": "Malware payload (Mirai)", "value": "fd50742e47c10180addf0169818591ab09e355b49ef0d4e2abac257eacdd5f5e5b72f07d0667396c78eaa7af5671a13c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330066, "uuid": "afab1112-e1d5-4881-832c-0a3340b5fcfd", "value": "T1E711635F6420BE00812C1E75F1B74557625086DB39BA466CEEDB413E86CAA80A708F76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330066, "uuid": "f17ea14b-2d9d-42aa-b2cd-75e93d716e5c", "value": "12:eOebv9bMab362bMOBtbmsb/2UbjDzbMab3DRT:eFhhFMYJV9HVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766330066, "uuid": "5392e827-4c03-47a7-be1a-f5d3b83a6230", "value": 900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766330066, "uuid": "35dc426a-917d-4120-8cfd-ddf6a5fc0edf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766330066, "uuid": "282500d8-2271-4532-82c1-3d9cc6b27517", "value": "k.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }