{ "Event": { "published": true, "date": "2024-03-10", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2024-03-10", "timestamp": 1710115381, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "48019adc-687b-434a-8042-05469a6d95d0", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fbdea17-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092386, "uuid": "8b7e212a-c048-4955-a571-ad56ccfe7c74", "comment": "Malware payload (Mirai)", "value": "c19c50734d303ad8285a1589c565a2c2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092386, "uuid": "366c6262-9e6c-4ec2-9809-7447da0a930c", "comment": "Malware payload (Mirai)", "value": "00ad95841836cc8a779495c20751554a9929354f0b99284bf4850ff3f8d8766b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092386, "uuid": "7156b47a-478b-40a8-ae85-55697ea691e7", "comment": "Malware payload (Mirai)", "value": "328ccad1bf8ca0d650825ed813053bd0f65cccf5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092386, "uuid": "7caf6959-e54e-464e-9110-372eb2e10eb9", "comment": "Malware payload (Mirai)", "value": "cce5391b83d72560d789864972ad83d503f7b653cf6811e7f33bd450e4f82c25d86ec2c7e8c83ed592769aace13aaacf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092386, "uuid": "091be765-1815-4737-9317-eacbf2ecf993", "value": "T1ED336B36E029DED0C5960234A4E88F751F13F1C893532EBB2AE546B26453D68FA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092386, "uuid": "a9d15bfc-4fca-4deb-87b5-45ae3260e2bb", "value": "768:ea2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+jNhXCZQoVbXrmCozw:ea4U7G7SvT6ftBTjNdKVvmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092386, "uuid": "992f6d65-9f03-4737-bfcf-912450900796", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092386, "uuid": "b962933d-744c-49a0-b237-2d5e2f86fa2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092386, "uuid": "2b53c192-8b6e-4112-956f-da97824d06df", "value": "c19c50734d303ad8285a1589c565a2c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "473c3233-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077393, "uuid": "b5e8284f-0461-4286-b5ed-56a1508b185d", "comment": "Malware payload", "value": "7b12a0c03b467c82911a1fe89bbca5f6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077393, "uuid": "658e2f7c-7488-454b-9f0b-d04ff04a5285", "comment": "Malware payload", "value": "011a9a49c4c3e8926a74de470234f64c9fa0b796b0f7936cd399cfd5ce9634a1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077393, "uuid": "af539c07-a12a-41a6-bca4-9201382ca76c", "comment": "Malware payload", "value": "18948a647a309079e3f617ce2ac8ada76c58490d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077393, "uuid": "76ebf752-74ca-4019-b5e2-9a3cb4e130a2", "comment": "Malware payload", "value": "a1f721f54596c7184cd3a3a5250aac1ad88412c4664f026e74751470da7abb3ebaf440d9aa2021b97a3fbb5e1f2e5e30", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077393, "uuid": "4ae02896-5ffd-4d73-ac7b-a22ddd921a00", "value": "T198358C45FAC380F2D360207044A763369A7ADA8B5B34EBEF6679DF584E37D805C36261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077393, "uuid": "1f6969ed-2031-49a5-af5b-11288c5db95d", "value": "12288:FKzCVp0aDsR0gLiKX5iIlWKAXY9OrLUuDNJw4x57nB:FtnD20cX5zbgrtDNJw41", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077393, "uuid": "46f1ac73-a514-43b1-99b2-bb24f251f94d", "value": 1159168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077393, "uuid": "19cdb846-99d1-49f2-886a-e8f32a8b7bca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077393, "uuid": "01794602-9622-4ea5-90d9-01a2c036842c", "value": "SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.23464.3557", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e26fbf79-debf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (CoinMiner)", "timestamp": 1710062621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062621, "uuid": "a58196fa-e16b-4542-bd52-5474f3fe1784", "comment": "Malware payload (CoinMiner)", "value": "3db38f31d9515851088e50fae9bf290a", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062621, "uuid": "da3297e2-5085-44cf-881b-a4c48b3b290a", "comment": "Malware payload (CoinMiner)", "value": "035934695ed3d9540c5c7cfcdf984d2f0f13106c6563ba2dc68995e53d3902cf", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062621, "uuid": "790404f4-c3ea-4c3b-9758-7d78a7e9280f", "comment": "Malware payload (CoinMiner)", "value": "5768b6d71d464f87cc7215f7235c82547e4cf5a5", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062621, "uuid": "1136c192-e728-4171-9fd2-8b3835fdeec9", "comment": "Malware payload (CoinMiner)", "value": "022fba28f95e5331092429d0e17fbe28cb88f8f781a1f05f82511e534419ef8169d59cf603a6899cd98fdb3bb8cab912", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062621, "uuid": "97c9c4ce-a30a-4ffd-b024-a3334c19c95f", "value": "T1C2262300BBCE4733D4BE7B79A0A119E483B6C21667CFDB1D1D5464FB9E0BF12550A22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062621, "uuid": "f196d3bf-af6c-4578-8c10-0f550c3d217d", "value": "98304:MBom2maD1Q+yqbw4/8MyYE477h70I/+s209X05csGV4BQ:Mv2pBKqbwG4G7790I/QGX0I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710062621, "uuid": "5918e949-ef90-4f2d-81fd-39c2f390f58d", "value": 4761600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710062621, "uuid": "802e813a-4db9-4f28-914e-4ad6c15f861f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062621, "uuid": "e79cb198-cadf-4ef8-b6f7-27acc44da4d8", "value": "SecuriteInfo.com.Win64.TrojanX-gen.27837.22565", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cb0ec6b-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094985, "uuid": "205c803b-668f-4572-ae90-427b73735a3c", "comment": "Malware payload", "value": "3c013bcce17b4b49a4544c23aeea9603", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094985, "uuid": "cb88b444-b9fb-4167-b62d-93c992271771", "comment": "Malware payload", "value": "03999b4b9e631f26af3bef48dfb488f20f2f9d1078c5756836b600fdac47b91b", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094985, "uuid": "ca08e581-4b77-416e-83a1-5fe137e39c70", "comment": "Malware payload", "value": "db815eb6e785b622231bb154d4061612b803be63", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094985, "uuid": "885b5ab5-10f1-4754-b511-6e8111242af7", "comment": "Malware payload", "value": "98bf7a056e0da23cc662d171a015349cb0fdac777f7ef4677d7a9832d7ec199c2613fd6159e14ba5fbcd75b240518a35", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094985, "uuid": "b9c4f521-5f20-4a52-b08e-dab00a6f063e", "value": "T1CD8172977A26C623E4642834EE15C638521AED83FE00DA07355533AE4BBEFC35E68242", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094985, "uuid": "74aadc65-dc6f-4a26-bea0-13b401c3cddd", "value": "48:reHdRoV3en2SOcVjE0JCDAFP5KruyxpkVqtq8iu9n:CCOnBFFIkd5KtpkJ8pn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094985, "uuid": "af6d73e4-40a7-466e-bafa-ce5635ae4476", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094985, "uuid": "25dc26d4-7f3b-4042-89e1-1d3642032b09", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094985, "uuid": "e3443279-83e4-4cd7-a567-d97ff14ffcb5", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.17334.4522", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00900ff2-dec5-11ee-b7ea-42010a9c0006", "comment": "Malware payload (njrat)", "timestamp": 1710064819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710064819, "uuid": "23e132ce-f309-4944-9c81-a4eca61f1e69", "comment": "Malware payload (njrat)", "value": "1545b94542a0b65b918eea8ae863a9ce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710064819, "uuid": "ee88a7b2-5fdb-4322-9e18-4d94e6808ede", "comment": "Malware payload (njrat)", "value": "04845d6cc0bbf455e85fdecbc9db2766ac76549871cb1e0d27818c8251bf664c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710064819, "uuid": "fe70565e-1a01-4b84-a351-e0d10b9a36fb", "comment": "Malware payload (njrat)", "value": "9b084aa69f9a80147565928fca70949e2ed454a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710064819, "uuid": "e5b07196-82d2-4880-8ad3-cb64a2f45879", "comment": "Malware payload (njrat)", "value": "b1058f7647e732126cd240d8752e81d121b299a6b1c20ba0cc71c67fbddd42c2ec5986b19781d0fcd1628a76cb3a461e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710064819, "uuid": "7dd93231-2804-4b99-a547-3947594aec32", "value": "T1A493C64977E96524E0BF56F75471F2005F34B44B1602E39E58F219AA0B33AC44F89FEA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710064819, "uuid": "7f747331-49c2-4a0b-9948-ef99402dee6d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710064819, "uuid": "27c70756-bbf3-4301-a0d6-38f0a8c424e6", "value": "768:jY3FUAEX74tXUIM5YT8/GED60m9ZX7ZVXXtSNOXxrjEtCdnl2pi1Rz4Rk3gsGdp/:4UAo4dT8eOvm/PtFjEwzGi1dDYDfgS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710064819, "uuid": "b3d266ea-91a2-4f37-a1d2-21d64f2d29e4", "value": 95232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710064819, "uuid": "f2f3e03b-1332-4ee1-bc81-b7304b5d4c93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710064819, "uuid": "3374928e-b4c1-439a-b094-666b874d6fa4", "value": "1545b94542a0b65b918eea8ae863a9ce.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be9e41b4-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091337, "uuid": "6d0e7aa9-c46a-45b0-97bb-416955e12d42", "comment": "Malware payload (Mirai)", "value": "f150541f0b605488f47cca50fc0ccf39", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091337, "uuid": "20a58f9e-7352-4af3-8a45-bc87023fe35c", "comment": "Malware payload (Mirai)", "value": "065142fda6a8fe1845fbbee8366ff17ecd40c8f57ce940e66f7432ef8fe9f49c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091337, "uuid": "11bc92a6-0879-487d-83da-f3ee1180c6de", "comment": "Malware payload (Mirai)", "value": "5c62ab5ab0abdd9314ff64dbf8ac65d0fb83effa", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091337, "uuid": "88260f2f-5b17-402d-ae20-b6f134284ef0", "comment": "Malware payload (Mirai)", "value": "d80913caa4e4b3eaab4448549dcb268b432eee3449f02422f007fea1f415645f38375e0ace69317a6031a512cc61656d", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091337, "uuid": "9d4fd80a-5019-444d-8ffa-0208de323d01", "value": "T135B2C06A5B040BE8CF1AC4BC43D61F502D741F625A43DC466621FED79F4F8A47882BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091337, "uuid": "3ade9902-764a-4072-b83b-271c7c9bcf92", "value": "384:NeD8ZSH2LLZUYyGZbsOiTrowSXH7+JWJryngV9M5Us+X/l9W+gmdLJgGlzDpH7uE:NeD8ZSWvZHZbs1rowOH7+4rzV++vlMit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091337, "uuid": "f027c99d-764d-437e-8e10-35630c2bf7f8", "value": 23800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091337, "uuid": "dc9b714d-4197-44bb-9433-bb7ffd1ed932", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091337, "uuid": "53f7fe1b-86dc-4cee-ad56-876b9e1611be", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6879ebef-debf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (CobaltStrike)", "timestamp": 1710062416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062416, "uuid": "2b5538ef-e9d9-45ef-b9aa-78857e5d08c0", "comment": "Malware payload (CobaltStrike)", "value": "0a075344e1ec3cd937f155d48e1f5654", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062416, "uuid": "fd6ddbed-fa38-4725-abbf-3882c9b94681", "comment": "Malware payload (CobaltStrike)", "value": "0659b9585b4370a808643d38cd9bec20440b49e32ba7cb5436eaf59635587373", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062416, "uuid": "fa5c8e42-ee0b-47a0-986c-e58375db373e", "comment": "Malware payload (CobaltStrike)", "value": "a09464c945b4649bfd240f39aaa464f9d58af13a", "object_relation": "sha1", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062416, "uuid": "8d9bd9da-bc51-46e6-921d-6a348a310e4d", "comment": "Malware payload (CobaltStrike)", "value": "f3e2c71f6bcfaa72f7166445eb6e567c8f73cac39a5d6485954a0f7afde4ea4f93ab79fa06b572cd749ed5b297a3459b", "object_relation": "sha3-384", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062416, "uuid": "a01c5c1e-3266-4ea7-9228-ce7212298fe3", "value": "T1DF92D93FE71368E9C106D57845FF2732DCB53CB385E6A31E2724D2B42E106A46E6AA14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062416, "uuid": "ddf62c93-fbd6-4b41-8bf2-aade9368e82e", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062416, "uuid": "02f8f23a-e6ab-45e3-9343-eb5a39bc2c75", "value": "192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2ZuS1WF8qa1Dojjgi:aqaCF31cix+Dc4zjpFF46gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710062416, "uuid": "88ff38d5-a0b6-44ab-95f5-24324d02a9f8", "value": 19456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710062416, "uuid": "7405d80b-8e83-4aee-9875-12824a6a8b5c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062416, "uuid": "df6bc2b6-1ed1-4970-bdb1-44d3c2967c14", "value": "0a075344e1ec3cd937f155d48e1f5654.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35cac75b-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092396, "uuid": "635fd77d-4531-48b9-8c38-f416ac7cbf68", "comment": "Malware payload (Mirai)", "value": "353aa1b53f02737f6c933bc24d03baf2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092396, "uuid": "938377a0-e971-41d1-8df2-bd961b18c1f2", "comment": "Malware payload (Mirai)", "value": "07a66714c536091dc0fdf0ccd95e009b1dd3df53202c24e749c01a23d36fa796", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092396, "uuid": "ed4fef40-2b88-4c3c-8738-7bf1190deb28", "comment": "Malware payload (Mirai)", "value": "009ee279a03a174c8b3cd71a37dd67582de69bc0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092396, "uuid": "caf5c00b-d357-443a-bcd1-0904e75f2440", "comment": "Malware payload (Mirai)", "value": "5a6730d2a24c944f2e7bb52104ff34b3200e092328ec87282317d26ef50accef75715dde93a91732179aa90496111e19", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092396, "uuid": "05ed7f5d-7df7-447a-a694-3965e4e67c59", "value": "T171633AC0A593ECF4DD1607B43077EB374A77F136512AE9C7D3A8A923BC82A41950B29D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092396, "uuid": "628bb52e-7558-44c5-baea-cd198205a4ff", "value": "1536:h4uwwSB8qv117K/Mn9O/Eb/vRkWNZLF/EfNatGSk3Ja86t3zzcS5KfXQE:hBxEV3Db/vRkWNZLF/EVatGS8aBlcSQA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092396, "uuid": "b3d4ca75-08de-4983-b6a9-122a039da0bd", "value": 70672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092396, "uuid": "bda3adb8-46fc-4764-9ec0-3add014955ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092396, "uuid": "afbbc9bf-3f1f-4fd2-bfd7-b6aec23514a4", "value": "353aa1b53f02737f6c933bc24d03baf2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b801a6af-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091326, "uuid": "f83bc609-816e-4b4f-a414-58c926fa6c06", "comment": "Malware payload (Mirai)", "value": "9e97cabed2791621daedd18dd5f22780", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091326, "uuid": "6f084ccb-cf9c-4873-a562-2805483216cf", "comment": "Malware payload (Mirai)", "value": "0d2a01f2166970852dab438ab3a3de4196f10b539cfe681409220c36377d4a5d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091326, "uuid": "e6d0a6d7-99c5-4367-b131-25ffa438913f", "comment": "Malware payload (Mirai)", "value": "ee587516f0de395fe3c16c786beb189fc4251ae7", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091326, "uuid": "b46369cf-163e-4bb0-8f0b-2d45b7b302f6", "comment": "Malware payload (Mirai)", "value": "0f4d2deb4db382b1878ddfe476ff7ca1ccacb80d458c65589dff01c07c2c0cca3b518adbb9c02951a60cc21f3d41caaa", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091326, "uuid": "7cacf589-a130-465a-af24-13cb3d97d480", "value": "T1ACA2D030B70CEB91C760ACB4EB35BAC23FC95FB481F3B4332D6405946A8585725A8BC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091326, "uuid": "83537cd4-f23f-468a-9de2-4c9963831228", "value": "384:WeqeJrIltQH5uFR/Narv6uQKJneeQrO4u/Lox3Er/1kKNzYpWhymdGUop5hP:WE5I7g5u7sHQKJnNYDXxc/bNspWs3Uo5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091326, "uuid": "15f0b9fa-5347-443d-a884-53e3793911c8", "value": 22184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091326, "uuid": "6db5d140-680e-49b9-9277-2731e261d0cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091326, "uuid": "45cbef3e-3c8a-4a0c-924b-37c59c10508c", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2833eece-def5-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710085501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085501, "uuid": "382ac423-a089-48f0-959b-f3674b942414", "comment": "Malware payload (RiseProStealer)", "value": "8c805b49b02a08e880cdfb6bf2cb2527", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085501, "uuid": "32e2d1c9-8a7b-4898-b1e5-1b5fce11f836", "comment": "Malware payload (RiseProStealer)", "value": "0e1e44ffcc352de6e9f24fdbf9a8a818b574a9413a7f4c044742f46718fb5658", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085501, "uuid": "4f2ad755-f630-4bf1-bebd-b528c8938812", "comment": "Malware payload (RiseProStealer)", "value": "9562f777f445ca9b746d37a1321cddd6bbbed03d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085501, "uuid": "9391ee48-984a-4bbe-97a9-23f6b9f9d181", "comment": "Malware payload (RiseProStealer)", "value": "29c18144544215d92bc6dc6842802987d2f40cfbb6332089cfad1005fabb78678bedcbdca77aafea7f6b1c40dc19a56a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085501, "uuid": "0f6e1ab7-e421-4fdd-b0d0-8d4dc10fa448", "value": "T11AE55CD2B90672CBD49E17F44D67CD427A6D06F94B2048D3A82C68BABE73DC121B6D34", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085501, "uuid": "b5190518-66bc-4a13-80ff-af2cc22f3e78", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085501, "uuid": "af193ce1-395b-4b01-b9a9-2e54b11b0ea2", "value": "49152:ddCBSnoPIiLkrC5pFkeXTrqUaB72chMC2a0XuMFlv3x45Df:TCBSoPIqk25pFkeXTrqUa8c1pZ6lv3iN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710085501, "uuid": "e81ddb6a-489e-4b4a-9e69-242c08f28206", "value": 3115008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710085501, "uuid": "be2220d4-8c05-4215-9337-5c0d1609a10e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085501, "uuid": "99a2e351-adab-442f-b906-70ff133a289a", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1afbba9-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091315, "uuid": "cb9b8831-f131-4d84-8297-f1a3682f1424", "comment": "Malware payload (Mirai)", "value": "554e4c0e84ae76bb492fcd30f9fe8cbd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091315, "uuid": "ee281d81-b0d1-496c-a892-3a48b7c8d83e", "comment": "Malware payload (Mirai)", "value": "12df8690863a6d5767a687d5c9854aad44aceed4be7c3bb161d79bd0c80483e1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091315, "uuid": "76f44c6e-b0fe-46e2-8c8f-542c6b8dd0ae", "comment": "Malware payload (Mirai)", "value": "026812057bfea3737fd77e1eb79c2db7d2c4bafb", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091315, "uuid": "0a2ba8fa-0a89-43e3-9212-7b41233dc02d", "comment": "Malware payload (Mirai)", "value": "6c0e7c1815450f754325259a040757d849fef13b3a9f91a9981f610c26314a767981ab2b6ae394f7a82f8281a09a9f63", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091315, "uuid": "d62511bd-3874-4383-a60f-10d8462da627", "value": "T1B882C0312066ACB0E1B04131EEBA8A8662EF9339F2F171B65D1041B4FB861A665F47C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091315, "uuid": "bee074f8-0be6-47a0-8f61-fdaf7d70eab9", "value": "384:XfNj/tDtPlPwr2CmOoHjFaurN3OJo0hymdGUop5h56I:JVMrBmTHwuxH0s3Uoznn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091315, "uuid": "ecdbda3f-3929-4c2c-8051-9a3c2599f750", "value": 18504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091315, "uuid": "3fbe8b8d-9d6b-477c-a61e-389f76679b2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091315, "uuid": "4cf72c70-1667-476a-90d6-301dc3487db4", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edbbb72f-df24-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710106019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106019, "uuid": "d9d46454-8143-4178-a648-8936895717b8", "comment": "Malware payload", "value": "f53938373434c1b46ab8333b99b5025e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106019, "uuid": "e19b49d8-3716-4847-8bcf-877d916a0823", "comment": "Malware payload", "value": "1332bb84dff1a55902b5eb2c76988f94a9edf4727d2c79871c47858b270f0856", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106019, "uuid": "7d326363-2ef9-4c3a-a190-e9543c5776d4", "comment": "Malware payload", "value": "1f3ae2bda22c8c30a84563094ff2c30d1265fa91", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106019, "uuid": "086fea6e-06e4-41cd-a429-8a547fb8266c", "comment": "Malware payload", "value": "9c94e4a64bda5fe9b2b3d98080741cd6b7b54dc337100fbcbd085e65bdec07c334ac300f414ead9d5ab561db8211759a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106019, "uuid": "24241f9c-1405-4661-ac02-c7142d24cba9", "value": "T1D2E52387ED57EE9DCFFE20301709AB173E4352B7D26A7200C6B4483AFA321115A9956F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106019, "uuid": "73d2beee-e650-42af-83ca-3d1328ecf97a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106019, "uuid": "3fdb29ff-173b-46f2-978b-0bd0162fdcf6", "value": "49152:paFWfGWVGvidJg/yfFF9mkQiCrIw20BWBvM0cPV9GadnnCQ/J4CWJl/dTTKXcG:paFCTW/sUni+w0CvA9GtllTTKMG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710106019, "uuid": "493633d0-381b-4aba-8a60-26e9fce643e5", "value": 3303424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710106019, "uuid": "891d8b4a-d558-4d4d-a8cc-da2dac7e807b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106019, "uuid": "dea6d150-0d45-4c7c-b680-a92098f0efd8", "value": "SecuriteInfo.com.Variant.Lazy.491971.13845.291", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3857511f-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077368, "uuid": "53fa006e-b20b-4063-8fcf-6965ac75873c", "comment": "Malware payload", "value": "b182ec7a917f679f3a909e1e59360a98", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077368, "uuid": "22d05314-9b58-4eb6-a931-bd8eb51e82db", "comment": "Malware payload", "value": "133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077368, "uuid": "f75e7bc9-58ca-46db-9687-12f6bb49c582", "comment": "Malware payload", "value": "f2444c1dfc9776d6fa3d506f1d4a6f5ac73aec97", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077368, "uuid": "ea5c3b8b-0f8a-437c-a667-51399058791e", "comment": "Malware payload", "value": "562dd0076b6aaa78a1bffbaed73949686589638eaf3f87f4b2d4e449f6cd34554af6f54c6284d661785fc23572766e64", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077368, "uuid": "f7531239-6c0b-465e-a81c-b6b4bf4a01b2", "value": "T19FB58E23B2915833C1331E399D2B97A8A935BD112E38A94B37F52D4C6F367817C292D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077368, "uuid": "6de0bdc3-039d-4d77-b80d-1e74a0e733cd", "value": "5a2d4bd91ea2e0b6acd543b334e88e02", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077368, "uuid": "8094bd47-5bb2-4867-818c-47715811233d", "value": "49152:j6QdB/KwPYzNOrOszEbjzgpg7SVdXbgcBYBi:j6QdB/KwyA3q7K0cBYBi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077368, "uuid": "41cba8a6-018a-4cf8-add9-6309fc9bdaaa", "value": 2474496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077368, "uuid": "bc30eff4-d0c2-439f-b45f-6b206f5c97e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077368, "uuid": "1ffe35bc-f4c9-4415-bf31-246734363ad8", "value": "SecuriteInfo.com.MalwareScope.Trojan-PSW.Game.7.7959.28094", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee698659-df24-11ee-b7ea-42010a9c0006", "comment": "Malware payload (QuasarRAT)", "timestamp": 1710106020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106020, "uuid": "ea4002b3-82aa-4adc-91b4-48aeea26e0c1", "comment": "Malware payload (QuasarRAT)", "value": "d8cec9abef1a3d395031b4528a39203f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106020, "uuid": "be2b4a94-c274-4df1-83f3-9797bed1b34e", "comment": "Malware payload (QuasarRAT)", "value": "14b67f3273192e061b04c05bb81aea8794f58a856b762006fb2359f55230327c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106020, "uuid": "77ae1deb-4d33-4d87-af96-5d53f0db27d0", "comment": "Malware payload (QuasarRAT)", "value": "4a0603a98dd87ea78acb3b90613f1b9cc7c5e7f3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710106020, "uuid": "e0683016-4c62-45e7-9fda-d69f96af784c", "comment": "Malware payload (QuasarRAT)", "value": "da2c8dffc09721041f0ed9fb8693a6d8600fccad87b5452165b4d929be238fd7fae84da2824d2d80fa5973ebd0b14eb8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106020, "uuid": "26ba43d8-7d2b-4eee-b1f6-fc216809d1cb", "value": "T125E4237222C24337EBCFAA3560720A344FB5D562008AD317FFCA2B75D52BAF59449B52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106020, "uuid": "d23d74c0-eb80-4681-aeb5-bf82e7073603", "value": "12288:OPjMEqtt7uY2R7e9Q6bfCo8VZAr671FAAb7qNf72wkfuXdwuKhS5Ec7sTxKR9gVq:yqtt7zRpbfCo8VZK671FAOqNf725futL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710106020, "uuid": "e3a46aae-2474-4e52-8e5b-61fd49c56d3b", "value": 681984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710106020, "uuid": "fb81e0fd-676a-4604-9ccc-6ea0fbd85bda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710106020, "uuid": "93d9b0b7-b727-4cd7-adbd-9aa8648d6f50", "value": "SecuriteInfo.com.IL.Trojan.MSILZilla.35146.9856.2573", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a681412e-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091297, "uuid": "25fbe5f0-b2ee-4f41-91d5-b4a922e840bc", "comment": "Malware payload (Mirai)", "value": "d5090bfb4c171c6aa9cd433283274b6d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091297, "uuid": "3eb96e34-61e1-4074-80c0-06d5e18f4ac7", "comment": "Malware payload (Mirai)", "value": "159acf9dac405bc4087753c001694f143b2167e10880c10749eaa2b90f293a1e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091297, "uuid": "4a225d37-cebd-4250-9d0d-e5089f947180", "comment": "Malware payload (Mirai)", "value": "f1a838c25a5ce0eb4f2eddaae477abb0b09411a5", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091297, "uuid": "0730ee72-0107-467b-9876-475beec04d39", "comment": "Malware payload (Mirai)", "value": "6e5c9fef81984efd21a07f7935818a61106866ee777f29fd2e499ca8ed52f3c944a3866ed3082d118ac1d57fab72e11c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091297, "uuid": "9c0fe232-a490-4ba4-8a64-6170bd696bee", "value": "T194A2E120BE6946EBC836243846D4F8D622D3DD6AE3FD994417ECC047BCE32899435D83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091297, "uuid": "e6c0d8e5-65ec-4840-a897-1326b676b21d", "value": "384:MgnLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadEg6LFUamvF0jsyV3bh/mGWxdxSo:J98o08kxofBE+ZkXauk1KxlmGWxdf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091297, "uuid": "75031339-a2cc-44ba-bc2e-39dcdd56b53e", "value": 21508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091297, "uuid": "1e69cec9-d625-4023-8f33-5d3371c07251", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091297, "uuid": "347adf4b-1089-4d96-8646-8513511b7c45", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b1c8ea-dec8-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710066282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066282, "uuid": "fd8fe6c4-809e-4bea-b71e-9a57f1da30ae", "comment": "Malware payload", "value": "1e014a78b5dc663933ee0d88d9132cd7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066282, "uuid": "c0edc868-5db9-4b1e-afbb-ed9b790d0a70", "comment": "Malware payload", "value": "19cd6b1c0044b898548ee0b19f7122f3ef305a4ca2d1e1ecec0e870d7e27ea69", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066282, "uuid": "786014bd-55b9-4312-ba0d-3735b16c1baa", "comment": "Malware payload", "value": "dfc798a2ee7c76e87e21828acdeae6e8fae824ea", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066282, "uuid": "ebd1370b-8be2-4105-9552-c4e6ac804631", "comment": "Malware payload", "value": "a5b686cffa36e5e4d356833804659f237f6b3b4901ceb7a39d4bd689c21fc5cbaf128724fc001680047e74fc2d6e174d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066282, "uuid": "57ffb51e-2e07-4238-9411-029ae20a02e9", "value": "T140F1971E2EE9BC44C80C34FD7FAB6EF536A6454089B9E6C980146A3D570CE02C512B23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066282, "uuid": "248f7b6b-f903-4612-987f-3b906342dd9a", "value": "96:YStABWnW5Dfv+dBjDDj8b35bzy3fcgtWW:buBWWZ+fDGl4D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710066282, "uuid": "f0568410-5551-4061-96aa-0791e2631c52", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710066282, "uuid": "7d54ab9f-b702-4a80-81ed-445599e15c7d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066282, "uuid": "798b9f9a-8f58-4a64-84e7-5dac6527b907", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afdf4ad7-df0c-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710095607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095607, "uuid": "f45f8098-3b63-43a6-b3dd-0962aa224c1c", "comment": "Malware payload", "value": "144f1e3e85bd2eeb576210c9f9423fb4", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095607, "uuid": "36814ccd-f58f-49eb-ac92-42cd984d5c9d", "comment": "Malware payload", "value": "1bba973ea1c77c0cf380eb7f117960945a4519b52d089e23742bd05fd29b33aa", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095607, "uuid": "d57385c2-3fe9-4d55-8c5a-e65190342bfa", "comment": "Malware payload", "value": "b32ac805a2d5c308fc1a7529f3708a096d88b8d9", "object_relation": "sha1", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095607, "uuid": "7fc5d577-6aa5-414f-82a5-90efe70a337d", "comment": "Malware payload", "value": "8548a15a58f4c0d3fc3716a6e8ff68d2326f81d55d9ff12d1d3039add9b20a9083454e5bd7d2f48aab8fd815a5f86c49", "object_relation": "sha3-384", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095607, "uuid": "27ca96e1-75a0-4bca-b7d6-ff0b54ab6816", "value": "T194A78C0673E60198E1B7D1388AA79507E7B3B8161730D7DF329C02692F77AE09D7A721", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095607, "uuid": "4cfddf7c-52e1-4c57-9b44-de6ba087d989", "value": "60119ed42f111b2c92d08284871fdfb1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095607, "uuid": "c00e137e-1e22-4cfd-874d-91fafcd25d75", "value": "393216:VyT3YGojrsBEnP4XrqSFM+FcrONRtgZJ93AEMQu58EISEhoIaE2FShMzTVA+BDEU:VWeBZ6QxhUDE5mO26rsxc/u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710095607, "uuid": "72ddbc78-6dee-411d-bbe5-e66204bfbbdf", "value": 44395973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710095607, "uuid": "4a32bcb5-0d86-4538-a62a-b8c3633c11d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095607, "uuid": "197e6c9c-eaf1-4c65-b2b1-05afc73c823a", "value": "Mauqes_Beta.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00e593b5-df13-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Gafgyt)", "timestamp": 1710098320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098320, "uuid": "6d2f2b2c-0b08-4fa3-b3c1-69551f376ce4", "comment": "Malware payload (Gafgyt)", "value": "7238ec7e3f6b7b4b479103f54d6b1b4a", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098320, "uuid": "89566835-f8f0-4df9-921e-46bca26a2071", "comment": "Malware payload (Gafgyt)", "value": "1bd0f72d61cd4df36243fc4b6031936ad8fc5235ac38c8817f4d6f061bdec65d", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098320, "uuid": "fc61e77f-4006-4e9b-8e91-0e0a01885ffc", "comment": "Malware payload (Gafgyt)", "value": "b349d297f2eb61fa5a3f4004e91feda439117395", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098320, "uuid": "cbf4689d-6e9e-47c2-8012-729751812683", "comment": "Malware payload (Gafgyt)", "value": "2141a753f30d885fba9480a1624691892b44e7892e70e2a3dbd01ebf347ffa89a6f5e81f190d18cacf4c6170b4ea98f0", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098320, "uuid": "d368362d-af5c-4bfd-87f8-6d81d3fee770", "value": "T127A33A33A753D6BAC09322F417DB9675A823B47C0B32322B33D86DE56B05DE91E5A701", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098320, "uuid": "79cb23a1-7581-4e8d-a300-685e3383a919", "value": "3072:2K5ejA4jB4h89HOPQzM9FqVyi9W9vmrYuOHy+ZNzX:sHjBzuPQQUk9vmrYuOHy+ZNzX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098320, "uuid": "52b0bde9-7d61-46e9-870c-640001ca6115", "value": 99332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098320, "uuid": "3720c861-486d-42e4-83aa-ef775938efde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098320, "uuid": "dcfb6716-decd-41be-9875-b1a56181c599", "value": "7238ec7e3f6b7b4b479103f54d6b1b4a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42eb5b63-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077386, "uuid": "8c4ac68c-227d-487e-8879-5fd76b86571d", "comment": "Malware payload", "value": "807141111bf84f3607f21dc46d5a7781", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077386, "uuid": "aff247c0-e7aa-4494-9b50-dab691c204f6", "comment": "Malware payload", "value": "1d593dcf5837748c027bc7012e20d1fd3b407e3f6838962ce07413118d1f9081", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077386, "uuid": "fd9a80a2-6981-4187-a58f-ade49bfdfbfd", "comment": "Malware payload", "value": "dd59303fd192b5513c461b7071f68d1c3eb2cbee", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077386, "uuid": "0206d293-5c3d-4b47-af14-16908711634a", "comment": "Malware payload", "value": "e2f0a91d5f09b4c2f5943793994850c5419765fe4c62ce4b2dd3e8ef91dca97c226580a602e1f10706bf51db0782d936", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077386, "uuid": "0c792976-63d5-4d62-8253-a76b5d96eedd", "value": "T190655B23B691C4B6F215013105BB27746A39A7760F218B9FF7E1DDF81E732618AA721C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077386, "uuid": "18b8637d-d9d8-456c-bb28-e063542cbbea", "value": "24576:75ngeZRg0mV38dVIcZgpg8FhVL/EliPMy6v07mIxBDOs:7H0J/Enyi+DxYs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077386, "uuid": "b0e5d29a-d37e-41a3-80be-fcb0c63be690", "value": 1455104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077386, "uuid": "e23e9651-ca6f-4545-8cb9-822250d8013b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077386, "uuid": "ace96a9e-ca6b-45a9-8298-1313a4305303", "value": "SecuriteInfo.com.Win32.Trojan.PSE.RT6271.30424.25326", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c90f59c-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092381, "uuid": "fee928f2-8699-4777-80cd-599443a92711", "comment": "Malware payload (Mirai)", "value": "84a31d60f1aa2acfb01d82908c8753cc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092381, "uuid": "b4063c64-9c2a-4127-aea1-b08b8cb463a9", "comment": "Malware payload (Mirai)", "value": "1ddc5873bb648d430fb5f50099d83ac757652dd046fdaa1fafeb4adc8ca2a1fe", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092381, "uuid": "a8be7682-dc0f-4352-8ea6-2f0032205a26", "comment": "Malware payload (Mirai)", "value": "c98b1f5c26dbd5284a91e8956c1a91a366b87421", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092381, "uuid": "c5332826-edb2-4343-86a4-526701fac2cd", "comment": "Malware payload (Mirai)", "value": "0966691787bbb90eb9b9ec7937acfee9223825dec29b41c9d1e4184fce6f1332dfa5f91ed10ed4bf69b88cf01a097f1b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092381, "uuid": "3ac6812e-6c11-4c0c-99a7-ccdd84535cb7", "value": "T1E0431921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11640A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092381, "uuid": "9645e6fe-ce7f-4f25-bef9-751fe947851b", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKJg/2SdqshxO+KpAwH:RqtmZPuutfbltZFBSJsBcfDSTFIJPBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092381, "uuid": "2d853d6a-87d8-4066-9d73-d2c9f8095367", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092381, "uuid": "5c953919-2657-49d6-9fff-77a098c1a810", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092381, "uuid": "c7fec6be-fd32-47c2-809d-40b20ec1f335", "value": "84a31d60f1aa2acfb01d82908c8753cc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9403d5a-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092724, "uuid": "594f4007-d2ac-461b-b06d-b60ed9c3de82", "comment": "Malware payload (Mirai)", "value": "30d702e10513dc9d88e1a4cf00381484", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092724, "uuid": "f34f7ca5-1691-46f1-a59f-dfd4a989aa7a", "comment": "Malware payload (Mirai)", "value": "2052242a8542ae8611833ce163e33773ea038daf42b4c8a82296b391df3efd5d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092724, "uuid": "78f85fc0-83fc-44e3-8d9a-27d6e2a91efd", "comment": "Malware payload (Mirai)", "value": "c1f5891ba6b9da40eddec3cc3e48c38db3b26440", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092724, "uuid": "b7488d6e-9def-4872-a858-5c35b831bb7b", "comment": "Malware payload (Mirai)", "value": "e6b5ad3109ef25a05cb5353a24e3717ce5de312ab964362c9ae19a4cae57ecb36d7df2217c2ef376d3702105b1f0e4c4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092724, "uuid": "5260e8c3-1344-4400-9359-ba028da2a27a", "value": "T116638D66D419AC94C4844334D4E28B792BA3B808C3771EB6AED585BA4047EFCF9193F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092724, "uuid": "75ca9490-b64f-4fea-8f65-539c007b13cb", "value": "1536:2a53jIp+aFCZZl7wtkjeYUVawK/NMPZIGZ/j72CLK:2gUcaEZZl7EgeI8/j72", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092724, "uuid": "2f3d9833-969e-4312-b463-5390e4c1a2fb", "value": 72264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092724, "uuid": "1f9a5ffb-c522-49a8-969a-dd3486e3b80c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092724, "uuid": "706ffa79-33b8-46f8-bd3c-886f18d5c11b", "value": "30d702e10513dc9d88e1a4cf00381484", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c8a8ab-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055536, "uuid": "53ad2b63-f611-4efa-bb22-25e1e9e51c08", "comment": "Malware payload (Mirai)", "value": "ac62aaac0ebbcee71a5bc7aa06dd45b4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055536, "uuid": "69c088ae-5f8b-46ee-ad89-9a84d4ee099c", "comment": "Malware payload (Mirai)", "value": "2179b2b44eebdbb699987f87ab0eede4d6b96475fc101d992c960dcf965b068e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055536, "uuid": "5ee88be2-d98c-4fd2-a277-96e733c7ff41", "comment": "Malware payload (Mirai)", "value": "d17faffdf5f9d2dee3716db737ace89f51bfdfc1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055536, "uuid": "8c80d856-f3b1-4a69-922a-f6e1173d5755", "comment": "Malware payload (Mirai)", "value": "592660e6deeee230719f1693d2c0a8066a7f2afe6265a811b026b1a9eecae8a539607eeb02df4113f6e17aecce1397da", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055536, "uuid": "0e95a729-8ce8-4203-8408-ee92df0f8b9f", "value": "T196B2D011EC68AAF2E9B10CB6FD678C8756594776D6E8B067039899E4B5D248333BC0C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055536, "uuid": "bb3270e6-3837-4628-9199-8470d66100bc", "value": "768:muLiOewypPar4df7HADWErLtZgB3y9q3UELQl:0wy64dfUrLnonLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055536, "uuid": "5ebade4f-4858-4bd0-a01a-21a8e0db1cc6", "value": 24936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055536, "uuid": "5e9570d3-bd50-4e34-9bd8-cadeb23dbe02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055536, "uuid": "001cd31f-9d63-48b8-bec8-eeb2a3a08581", "value": "ac62aaac0ebbcee71a5bc7aa06dd45b4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d728678-dec9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (AgentTesla)", "timestamp": 1710066773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066773, "uuid": "0248ce3b-c6f5-45ee-aff9-0ed0df26447d", "comment": "Malware payload (AgentTesla)", "value": "86e86fd7a5992c78b08f95c5a10a124d", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066773, "uuid": "f6e347a0-edf8-40b8-aad2-36cf8487d892", "comment": "Malware payload (AgentTesla)", "value": "2250069ffb7d98ba5d230a12bdd1e0e5266d9b295affde98d01f558d0c726b39", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066773, "uuid": "c92a9f34-be59-48d2-b76b-120235b563c1", "comment": "Malware payload (AgentTesla)", "value": "6dcae1bc5d83e3dab339dfa80352611b1a67e1bd", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066773, "uuid": "7057123f-93af-467e-b1ce-f852acdd1c4b", "comment": "Malware payload (AgentTesla)", "value": "ab0684b5884cc42b62f249822664cd402d1340a418215609546d6104f3a8c7fcc85e8b22daba8e83418efa6b8507bfbd", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066773, "uuid": "cf9ad847-b796-4d2a-b811-dcb5446e4601", "value": "T1EEF4332519C03EDD0FBCA509241CE6135CB1A19A8C6E7B214AD022A7FF76CC4E4F7E99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066773, "uuid": "531fe0ac-d5e7-46ce-90fb-59ac12cc67e3", "value": "12288:tAO0C2N+QZLWFBaIoIdZ1a9oa9UXoY3ftKnIhMiLNnaM/8gYRfIgG79NZ8dNGkei:tMLNWFBo+ooaS4YvoY/LYM/8N2RL9kei", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710066773, "uuid": "499490e9-7796-4116-8ccb-c7e4facbc756", "value": 763951, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710066773, "uuid": "344a1411-e0eb-44d2-989c-8db0047572ac", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066773, "uuid": "505eb298-5790-4944-b214-2e8135164cdb", "value": "Payment Details.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a0c2152-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094980, "uuid": "69c9d210-86df-4d31-b5ce-3487fa214263", "comment": "Malware payload", "value": "fba9ad6490b1a0407250ec011227fae0", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094980, "uuid": "c91440cc-1d81-44ce-91f5-c27cd1cff6c3", "comment": "Malware payload", "value": "239b291da38dbfb4f53bc20fe8e08414f502e7dbcf12fe2c9e322750bc8e9738", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094980, "uuid": "141a8845-44dc-42ee-88d5-0b4587366eed", "comment": "Malware payload", "value": "2d1dcc19adcfd0059b3c4bd545bebbc3d0ffc155", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094980, "uuid": "90bdf2b2-fbb3-4639-aec8-39d6beaad135", "comment": "Malware payload", "value": "ddbc49cbfe188edede08841be18c1eaaa03c3a7d73fbd0cb5a294cb19c9fcf8ee903ed78c41b4b1f9856852f48542810", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094980, "uuid": "532fc3da-1c0a-4324-b193-cfa20360218d", "value": "T1D281A7C7B728C526C2138572EEADA41A2131FC43FF458502B385B3AE6DFA795B48158B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094980, "uuid": "58d5ae74-d7b7-423b-a78d-d5fd152c775e", "value": "24:rSl08cATAJJ3ko4tEV9zeLz/b3BK/VHFkUXtSUbB7/+88j1MtJkTMrXDdjSiIsi3:rSl6Jb4tX/rBK/fdoUbB7ldOkdelA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094980, "uuid": "3f972d69-395a-4153-855f-05952723336f", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094980, "uuid": "e0b3a46c-558f-4dc9-a6de-02ab6ebe5de2", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094980, "uuid": "309301a6-677a-4de1-aaf1-db5db251b73a", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.10973.12076", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6814bade-dec8-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710066281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066281, "uuid": "299c6c53-60e7-4977-a025-ce7bd6183147", "comment": "Malware payload", "value": "02eb693dcfb90a696d191badbcf314ce", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066281, "uuid": "5ad1aece-97ac-436b-a69e-b24bed682d86", "comment": "Malware payload", "value": "246457363396dcea4cc3d19ce2a431897bac948ae1694d3e87cc0ebaf2ea39f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066281, "uuid": "43c59cd0-5f9b-40ad-a6ad-6c14845e135a", "comment": "Malware payload", "value": "b1d0352c35d7da251e2fa19ecbe8c1e5286f898f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066281, "uuid": "1fc33297-bfab-4306-a6d1-e8c440184fba", "comment": "Malware payload", "value": "194e1a01f2cf30139444f9a60addee7cf7ec8549ad53fbee115990520c99ee6e7ddcfe522c1604bbc8013064e20f9d55", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066281, "uuid": "4a9a3c16-205e-4293-83dd-0063b3349363", "value": "T1F916013FB268653EC4AA0B3245B3D260997BBE62B41B8C1E07F0581DDF665701E3FA15", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066281, "uuid": "2679391d-c9ad-4d8e-a623-556deb8a8a12", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066281, "uuid": "8c3856a8-aeb0-4c14-a366-706d2fc026a0", "value": "98304:HEagQkFrdGj3mx1Ijxkp3U3aVTISLUHBrIC0:9gQktdGCxmjY3U3aVTnIH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710066281, "uuid": "2d859206-6867-4e3a-a2d2-01b2cab19883", "value": 4268933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710066281, "uuid": "6305d7fd-8980-42b3-9ecc-bfd72e839b5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066281, "uuid": "760a65f4-a2fd-4728-90f4-293076c50f31", "value": "SecuriteInfo.com.W32.PossibleThreat.703.19569", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec49d711-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Loki)", "timestamp": 1710109882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109882, "uuid": "4c2a21ed-933f-463a-8a73-15695f8bf353", "comment": "Malware payload (Loki)", "value": "832b330b974c4f89a4de8a78259a83a6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109882, "uuid": "af2a41fe-1d32-4228-87f5-af71352c3af4", "comment": "Malware payload (Loki)", "value": "253da717bf5b35fe418be01ce5b012d6883f9ae70b4a44d58f03c39657e4460a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109882, "uuid": "1edb2fc8-53a9-4f96-99f1-21ad17b957b5", "comment": "Malware payload (Loki)", "value": "66567e52e22592c51f9e7861b1ebc62ebf0d575f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109882, "uuid": "26d915af-23ff-4c40-9b67-21fb73201206", "comment": "Malware payload (Loki)", "value": "d35fe5cd87d6d1ba2ee357642ca54e4c07f31f21e62b64d3b65a5fda9c76f8f5f8ce847a4a2234809c434223991b9f2d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109882, "uuid": "ac4b0ef3-5984-4cdd-abe7-60477970a4dd", "value": "T194C3F1403B88AC25D8357AF058ADEBD75FB2C7CD2803855939AE94362D927CD6380FD9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109882, "uuid": "87e1339b-0752-4d62-af44-c4228510a36b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109882, "uuid": "c144e498-3c0b-41b2-aab3-88a7ef0481ca", "value": "3072:1cgiS0h0CTXYmvFMQ4b1Lf4s/qMiShFq8ucyZ07Vr7+7:16S0hYmuQ4pfPSMiShs6yy71y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109882, "uuid": "63a069f0-761e-4517-acba-7ee9fd13d197", "value": 125696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109882, "uuid": "d451332a-ba51-4cc9-9ae9-e1281a50adcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109882, "uuid": "96562d50-a683-4459-bc47-1c8a7079dff1", "value": "SecuriteInfo.com.Trojan.KillProc2.16811.26778.27406", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e8ca138-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098021, "uuid": "977f54ed-9688-42b4-830c-038b1e713ba3", "comment": "Malware payload", "value": "8a38abd82682de122c82d521624a2372", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098021, "uuid": "2cec49fd-836a-4bdb-a117-dd7b4cf5b09b", "comment": "Malware payload", "value": "2711daf3b6b576a61df41b4b41ba3ae4f65dc8b678321a791e490c9b4e1a8090", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098021, "uuid": "75fa5c1e-7645-441b-8b6a-71a0e1d1631d", "comment": "Malware payload", "value": "a9010af20825479d255a065b681b28ebcc567298", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098021, "uuid": "8bab981c-ab47-4d30-930b-55c862150af7", "comment": "Malware payload", "value": "58c74bcbaffe4590e78e7382161976a57aadd5ec43e1bfe434d6f670d3977403a77b352a02be9eaca6e978d95409918f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098021, "uuid": "c9deceb1-4503-4494-bc8e-094d1c472ae1", "value": "T1BBA30892F800DFA6F40AEB7604D74B24B270FB650F535626731739A7AE762D42823F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098021, "uuid": "5ec0e220-b1af-4d1e-8da8-fbe73beda5a2", "value": "3072:NwLpPuaGNnLtsmTrtAfC1ym/9khfmU9VqFyOfk/X:NyPu1NnLtZTxymWhfmU9VqFyOfk/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098021, "uuid": "47093f0a-fe8e-4b46-938c-65a1527ebad4", "value": 101822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098021, "uuid": "613d3815-93a6-4412-8c70-c558c89e8774", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098021, "uuid": "e2b1c7f7-2596-446e-9e55-ff6001ab5a68", "value": "8a38abd82682de122c82d521624a2372", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43760ced-defb-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710088124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088124, "uuid": "7f740b43-14c1-491f-aa9d-44f8cfc93e9d", "comment": "Malware payload", "value": "d406ce5200488ab3fb725bbd16324864", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088124, "uuid": "15008101-dd27-4c12-a69f-ca274a128b25", "comment": "Malware payload", "value": "28050c06cb9377a1f54773370b24723e0d2849b5b71899bed40b9da7837f2974", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088124, "uuid": "6794f0f2-6124-429b-9937-a70da394e971", "comment": "Malware payload", "value": "f7f619307ec9b463abfc7ede001274d12cdc447e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088124, "uuid": "0c68ebea-9268-4339-973e-cb311cade35a", "comment": "Malware payload", "value": "adc07889a98dcf0305df8472b3cc275c9591ce3f5bc0bd3f44fec5d82030f6a873f57328f863cf0a91ecb3d6a80f4a7f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088124, "uuid": "5b2298d6-486a-4b67-9b9f-f67adfc5a32a", "value": "T1A313D073CF644115FE6B8F3FE9CAA22125F6F7431D8C8F6A50C450494E15B112B43EAA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088124, "uuid": "2cae746c-7479-4a72-828f-f89eb789798d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088124, "uuid": "e64aea6b-291d-4953-b935-68ef869d1164", "value": "768:XIeRwUuo7jHzx2ET1RVfyCSUz2rx2ET1RVfyCSUzcA20I2BDWNAMxkEQp:1RTuCxH1RAO2rxH1RAOcAsCWFx6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710088124, "uuid": "8db8d9bb-a40a-43ab-85ad-f15ab7c5b78f", "value": 44488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710088124, "uuid": "d48a5ff3-5de4-4749-92e6-72d6f7536428", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088124, "uuid": "6beaf995-ce8c-43b6-a502-16b9013f1fa8", "value": "SecuriteInfo.com.Program.Unwanted.5510.17823.1529", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "728d5329-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055561, "uuid": "a9d97d1f-cac5-4cd3-b162-55160da162f9", "comment": "Malware payload (Mirai)", "value": "049c9c32bfc6ac376977c3d9b6e796c3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055561, "uuid": "9bdca98a-35f1-49e9-a77d-588a9303b7ef", "comment": "Malware payload (Mirai)", "value": "28b83a4c82b9ff28edd00ed283f45a6edcce28813cb15963ef4da57ad75e65dd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055561, "uuid": "28149ca0-8059-42f9-96c8-2f75e58e3c57", "comment": "Malware payload (Mirai)", "value": "26517a9bcdb2fbc844181ee062534cf6e4be8816", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055561, "uuid": "d87d3c5a-8f64-4a25-83d0-6fa1a0beeec5", "comment": "Malware payload (Mirai)", "value": "8300f6a36495ef6fab1605437efd2733e04b00cbc9415ed397e5f55e1c0ad6e7f06f66dd4aafb8d81dc7fda7342dc790", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055561, "uuid": "c998cadf-8258-4e73-9910-7fb5d0ad0371", "value": "T127A2D15DF46524DACAED3CBD11AE06229999F08073EF1F8543778D88FAA225F388C065", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055561, "uuid": "a0d0c3af-d0fa-4fd6-baa5-8471abc0a925", "value": "384:sRMfb9wV4m/UqWbHOQfFnLpSdgiIqbSslxnH6IJ1nnLoYgeRWGVCz0Nv0:IMfBcc/xNE+iITsllHp1ncYvWd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055561, "uuid": "837afacc-5a57-4006-ba44-d3c3ffe51c9e", "value": 22628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055561, "uuid": "840fdca2-f20f-415b-901b-4ad62dd37f09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055561, "uuid": "8a586378-b558-4382-91e8-404ec0133eb6", "value": "049c9c32bfc6ac376977c3d9b6e796c3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc0625a4-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092729, "uuid": "57318b64-060e-41e2-8d7d-e8ab83dc16ab", "comment": "Malware payload (Mirai)", "value": "b0efe508320e7dd4fe34f75e51ab015b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092729, "uuid": "4074463b-bf3a-4940-a0c0-e9da78ea44ec", "comment": "Malware payload (Mirai)", "value": "293fd5d09bcbea1afde9368df76f9afb3f5a9ca9a71b5749cdff41c4412eaeeb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092729, "uuid": "820a2dff-c986-4ebe-9c4b-9eda67c6b036", "comment": "Malware payload (Mirai)", "value": "aded0f7b76361402ff3f0b7d33fac01a9d895b14", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092729, "uuid": "1a372cf4-2342-4394-bd17-ce23eb861288", "comment": "Malware payload (Mirai)", "value": "9143a23e0ea6d091741659056e50b9ec60b08e98e96255981a085725ae90878940a8f53dcb15f71d89784c248b705538", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092729, "uuid": "8087bb5c-d365-4fcc-a6ca-bcc57c37a498", "value": "T150A3B516BF310FF7E8ABCC3719A51705198C650A22F97B35BA34D818F64B25F1AE3960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092729, "uuid": "070f2c9e-9fbf-41be-b3bf-19eb07a390df", "value": "1536:RvMKs9oRHbfZT7EQYEWiGlCvaGe1Cs2ooKfALVZPpzKAz:RvMKs9oRHbfJ7fW5lsarVILV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092729, "uuid": "4bbaff62-84ab-4cd1-813f-e5602c7098b8", "value": 105116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092729, "uuid": "2a42ce18-4ac3-4f97-a457-4ea04bad9b26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092729, "uuid": "81b1eb19-1aff-4fcd-9265-e90c6ca59977", "value": "b0efe508320e7dd4fe34f75e51ab015b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "682bf6f4-deda-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1710074012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710074012, "uuid": "bee087ba-20b3-4050-b5e4-eb32facf43e9", "comment": "Malware payload (Socks5Systemz)", "value": "b11c3fad2e48022f58635df7368d6441", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710074012, "uuid": "20d3dab2-2097-408c-8ab2-b89cfa1555d6", "comment": "Malware payload (Socks5Systemz)", "value": "2a362d6d3bceaf1159bc245499a778f1ab9c229c3cbd4be4c63a582a716a4c80", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710074012, "uuid": "ee9602e5-962a-4f01-b76d-26151402a6fd", "comment": "Malware payload (Socks5Systemz)", "value": "63883fee892ac1e0d44f568913931c0d59b343d1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710074012, "uuid": "762a5431-4857-4601-b5ce-fb9188b4eb6f", "comment": "Malware payload (Socks5Systemz)", "value": "c8eb3ede7b18fc593a83789849613d2f97d1279a5372804b30708c70e8abd666fdc92fc219ef44edd3d684bb62e12d3a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710074012, "uuid": "bbdcfab4-5390-4e5d-85d8-b1e736039b47", "value": "T170B59D04F3B842D8F6FECA38C959C732EAB1F51A0731568B1915E3135E77A968FAB110", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710074012, "uuid": "866b1a15-5ca6-4b36-be25-bdcd3505ffd6", "value": "11023cc1693a4d95675efe5a86e50f50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710074012, "uuid": "33bb9235-7a99-4b1e-a746-c96b736d8c06", "value": "49152:jCqqfqaaK++EFUw2PsQMIZnLzn8FGaqxMBeVBBzKl:jONGXqGY1y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710074012, "uuid": "a646f7e2-68af-4194-a554-ccfd98832f9b", "value": 2464480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710074012, "uuid": "b4a27b75-f909-4536-a726-b21d781c1f66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710074012, "uuid": "67f14c8f-88a6-42c1-91e5-3c8bab415f19", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2313f43f-df18-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RecordBreaker)", "timestamp": 1710100525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100525, "uuid": "27db8ec9-e0b2-4aa6-bc0f-a4408aef8809", "comment": "Malware payload (RecordBreaker)", "value": "2856a877de2db673a2bba91be84fcf4d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100525, "uuid": "47efea53-deab-4c8a-b78a-1bc0dcec5516", "comment": "Malware payload (RecordBreaker)", "value": "2a895eed42d2900a9f8d4cfc29383c5137b142c791f6873b0118c633f23ef6a5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100525, "uuid": "a47218e3-8865-4912-a78e-9f9a8570829a", "comment": "Malware payload (RecordBreaker)", "value": "64c90211ec0e306e43928afb8343407bca115a20", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100525, "uuid": "d5b3d191-e453-41ce-98e0-3aba3a6d027f", "comment": "Malware payload (RecordBreaker)", "value": "9c2cf6ca0fb07db265be3324baf2e0893877d8ce3529e9ef4749d0827d508d7bf7cd20953cf3f1b224c88039963d6c6c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100525, "uuid": "138579ff-04fe-4944-a9c5-d0ab13bc90e7", "value": "T13C07239638CB80F9E4C11870C61B32EB03F67D7A89C589247BC5798AD571E72B07AC67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100525, "uuid": "51b75cd0-9398-486c-8bcf-fe50f7ba01ec", "value": "aa6e964c1781a95ce30f963bf4c4ec2a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100525, "uuid": "fe1c47be-ee9c-4c13-9b3a-6f9942007bc9", "value": "393216:UtVQiO5y4LqyLjSffL/U5F+Jw6es/33V5dL2oAKEa7V0q2xo:Ut1OgoOffLy+C6Z3LdL2thYV0qv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710100525, "uuid": "ccb2f3df-bd38-4096-b334-5bc56c3d9b39", "value": 18023936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710100525, "uuid": "3cd5a4b3-a2ae-42b9-b6e9-ee149a0d6f2b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100525, "uuid": "fd4c655c-7a55-4008-90f5-add9684d480c", "value": "2856A877DE2DB673A2BBA91BE84FCF4D.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4504e8f2-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077389, "uuid": "9ccfecd9-99a9-43b0-85a0-45645f2dec1e", "comment": "Malware payload", "value": "ba8148e949a87d0e6db12c189d59b06e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077389, "uuid": "486784ca-719a-4a45-9af8-1b0c8c06ee4e", "comment": "Malware payload", "value": "2ad303d4cdc2b70fbc403e146236e0dcf72b0eed2cce5c3c92212c0f0b7dbb49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077389, "uuid": "3f4f92d8-c380-4a6c-a69a-7c8b5df62a97", "comment": "Malware payload", "value": "945bb60671994ac826037881522b41f4fb7b9b08", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077389, "uuid": "2529c975-7fb2-4e77-b885-be128ad83526", "comment": "Malware payload", "value": "0b850b5c02f2b4464021614bddf7e3ea5017150d890b6fbf1c623ac8821bdd9639b413584e2e8e269033694acaff2def", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077389, "uuid": "cf5d52c7-78e3-4bd5-ad19-06f5721a69a4", "value": "T111447B71D6837D06F016E470610AFEF081D5FF055E2BE09A425DBFB658AAEE366B2700", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077389, "uuid": "915d500d-6f25-4235-a3be-1b94d72c26cd", "value": "b5bbea82dd1069a7d4b79392309c2e45", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077389, "uuid": "6136c18d-4640-4679-a155-390e6e3bad22", "value": "6144:026tYVEMKdCxlaHxv/Y+FTZe+pxSbGqJ:36WVEMKYxlGQ+FE+LS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077389, "uuid": "559408e2-8c65-40f3-95ad-aea88bddffeb", "value": 269824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077389, "uuid": "f9011fc0-d842-46e0-96e9-d556840863f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077389, "uuid": "0f20c101-6526-471a-b3c6-0e7531a250a3", "value": "SecuriteInfo.com.Win32.Kryptik-NKC.6134.18660", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b58882c5-df18-11ee-b7ea-42010a9c0006", "comment": "Malware payload (GCleaner)", "timestamp": 1710100771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100771, "uuid": "d590b7e7-2fcc-449e-b4fe-2e75734ce2bc", "comment": "Malware payload (GCleaner)", "value": "679f8f09e36c8e01467d665b3cc125c2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100771, "uuid": "9bc1434f-cfe1-4d96-8ea7-0ebfee268448", "comment": "Malware payload (GCleaner)", "value": "2b73cf1162139d6cebbe64dece8976de44ab908cbb7185596ad9c6dd9903061a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100771, "uuid": "ee2b3cf4-efa4-4625-a4ce-ec4cfae999d1", "comment": "Malware payload (GCleaner)", "value": "936b70906d011f4888e249a52f0544e8836f9a70", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710100771, "uuid": "c2f1c4c8-3da8-4512-9116-a5c0b78a0645", "comment": "Malware payload (GCleaner)", "value": "7a58eb7d52a3cf7a5059575e4cee52953c8230953fc93ab9fdbf0e47a81e6bd6362af601844ca85ed87781107c5f24cb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100771, "uuid": "b319c37c-37c5-4bb3-bbba-93a15dd83261", "value": "T11324E0903AE08475E4A31A344474DAA55A7A7C92977006AF33BF373E4F357C08E753AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100771, "uuid": "a4e6dacb-d7b8-4ad1-aa70-fb10fdcdcce5", "value": "ea7aba1287be4e37d15aa590ab1d2eb7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100771, "uuid": "dbce203a-820b-4a6a-88f6-79de9cc1aaf2", "value": "3072:1i3bLVyBgwKUEf+5AR/rH9pPay1Dfuw5j6A3hxq9PsDPxt2tpRa:g/pUEW5y5pl1Th5di9PE5t2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710100771, "uuid": "8968ba24-bf6b-4fa7-be8c-b67c4d8a31b6", "value": 227840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710100771, "uuid": "f7df0f18-3eab-4cb8-922a-d018ba9dcf6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710100771, "uuid": "b0e8a95b-a5b5-4d7b-9bc9-3904845dae09", "value": "679f8f09e36c8e01467d665b3cc125c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c5aa3b-defb-11ee-b7ea-42010a9c0006", "comment": "Malware payload (XWorm)", "timestamp": 1710088128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088128, "uuid": "76aba6b8-0198-445c-952a-685d5c1e9cdc", "comment": "Malware payload (XWorm)", "value": "f24a4d5b6036a3de2eba88868bd771f2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088128, "uuid": "d72f6333-d4ee-4fed-9a82-8006fe3093d6", "comment": "Malware payload (XWorm)", "value": "2c2f38b6679224281d1f9a0bee4ac5db26f845e0d0eb74c0caa2d994411ee7e2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088128, "uuid": "3815b1cd-dae4-4dc1-a629-3e8828e10ed6", "comment": "Malware payload (XWorm)", "value": "3048d822d2b80d66284d1446052da0ba2be27d9e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088128, "uuid": "5236008c-22ac-4443-a6c9-b7a8720820bc", "comment": "Malware payload (XWorm)", "value": "6a2d463bf4a7a74a30b1ddbb31b1c623300098bb8474dfa5fb199882c91667c8814a6d365354ea04cb68651cefb924e9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088128, "uuid": "12317319-e685-434d-b228-5c8ae4f1eee4", "value": "T105F5230FFB8A89E1D2846B31C5EB593093B4E6817397CB4A358E53E518433A6FD5920F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088128, "uuid": "d424812f-7cf0-4934-b0db-e38dbc49168a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088128, "uuid": "1326a157-b022-4b2a-af57-b5a57fd346ed", "value": "49152:rbAa/I9L1n4OjdXalpe85gqWa4CRFaMQRh/7hK+OWp7W+qYp9foZWHyeHxYMp5FN:ga/K1Fa71qrMFO3DgCjqWQZWSmeMTPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710088128, "uuid": "065cae0c-1791-44fb-bfb4-0ca348e89ffa", "value": 3511296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710088128, "uuid": "f0e65b97-70f3-4509-a75e-da394ca0a6f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088128, "uuid": "6b0e2744-d7ec-49dd-b87c-02e8c8c19d5f", "value": "SecuriteInfo.com.Win32.CrypterX-gen.12642.14495", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0e2e4ad-de74-11ee-b7ea-42010a9c0006", "comment": "Malware payload (njrat)", "timestamp": 1710030326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030326, "uuid": "81d3435f-b349-4117-8ebd-446e98da404c", "comment": "Malware payload (njrat)", "value": "d2757b330d54c398df746d49ae2eb0e7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030326, "uuid": "c8a0f41b-e003-44ba-be16-e8b4716fc632", "comment": "Malware payload (njrat)", "value": "304c149e98b921ed033de25719854d6e6e49b7649a53ee7374da0af1beb0a9a9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030326, "uuid": "2e0fc217-8466-46a5-837f-7d6ee7540d88", "comment": "Malware payload (njrat)", "value": "c8d21566b8fbdb0ea2172fae3adc92797e9394b8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030326, "uuid": "2cdb51dc-acb8-41de-b0bc-c58bdee4f7e7", "comment": "Malware payload (njrat)", "value": "2764c42b3dd08c8000815528be8e34c558956b9e74afd9e30d30a2f2009f00eef71b19704ac25d908056df43626a615d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030326, "uuid": "a5c1e56a-6ba8-4c4d-945b-82c65c0f72f5", "value": "T1AF552382B980D2F6D9600937D11BEDF01F22BEEEDB5A180B3585BF463977141AD13B1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030326, "uuid": "6d1ca890-9e54-4ac9-9c7a-8d1bbf2a644a", "value": "2e5467cba76f44a088d39f78c5e807b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030326, "uuid": "0d93c554-5a34-4087-b0f2-70d0db4ae601", "value": "24576:PL0LBYZ8n7n4VoldSFldFzBUfW2lH5Aui7Ncj7F2KUbxv1SBq:ycW4yeFnpCzlH2Fej52FvJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710030326, "uuid": "04ef4ffc-1097-433b-8e9a-2dbde7a5c8e0", "value": 1299968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710030326, "uuid": "1dd25650-ad5c-4abb-8ecb-e3ebd456e7ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030326, "uuid": "cfeb059b-1e93-4dd0-b3f4-9170b4998627", "value": "D2757B330D54C398DF746D49AE2EB0E7.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "345f944f-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710091105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091105, "uuid": "2953c1ee-c767-4e7c-b22b-1b1109197273", "comment": "Malware payload", "value": "4d95a998f67ff4c580aa190fa5893396", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091105, "uuid": "4ede7b4f-fb6a-41c8-a489-e72e6d98fb41", "comment": "Malware payload", "value": "32203a8beb112105aeb97a8ac87a25bc11b2299230ff4eb20c9badce9666380b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091105, "uuid": "3ea7a623-816c-4afa-a824-b9be5d46969a", "comment": "Malware payload", "value": "68d4cc533b5a2ae62829bf7c3b876fa497a14367", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091105, "uuid": "9549dcdf-fa86-429a-a217-2abd1ba357c3", "comment": "Malware payload", "value": "a4b4cb13a359b439850b61463950763dcb96b414ee5f693bc6b2ba568a93c54757008e6eba7d5834da43bbb3889401d2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091105, "uuid": "333668d6-dce0-43ec-a4fd-498d6f7922dd", "value": "T163E4B062BEC180F3E6A2017554F69B361E3DB529072499D7D3D41AB98D202D0AE3F3DE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091105, "uuid": "c014fa2f-059e-4991-98c8-4916f7bfbea1", "value": "8d42dc75ca400c110899cd420e2415df", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091105, "uuid": "e0e15f01-cdca-44d9-9742-0558f3c09c94", "value": "12288:zIaMKi4VInQacKZqkTDrsgWwzedC3ax9OjtjAHqmc6IAwveNw9UWy02XoWRcgGHG:zMSKZ5DwafjtOqmc6Ey02XoWRqGCjJWc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091105, "uuid": "edb7ebf8-1cfe-4224-83d0-b12067edcf83", "value": 718336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091105, "uuid": "7354a437-6123-4dc5-a3c2-e5281e1ac260", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091105, "uuid": "b1f19fbb-10b9-44a3-b544-db9e9ae738b7", "value": "SecuriteInfo.com.Variant.Jaik.52393.17592.31202", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48db55f0-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077396, "uuid": "1c9cb6ec-d490-4b6c-92de-c54e7c8403cf", "comment": "Malware payload", "value": "c70e4ca4e64542d09b6d62dfa02bc8f6", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077396, "uuid": "8eabe181-f428-4242-bb19-c95e86db2f56", "comment": "Malware payload", "value": "3bd6a3eab17776d798914978edfb5d647810a3b4977aabaa518c187cdb1d5328", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077396, "uuid": "b70f4b0f-c203-45ac-91f7-9722da4c0b64", "comment": "Malware payload", "value": "d996a50972088467e0100bddb8d5971909ce07be", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077396, "uuid": "b2abced6-c124-4550-ad53-cafa37c2e364", "comment": "Malware payload", "value": "a0e66ee220fb0e759616155e626edcad64c6d09d222aafc26726271e974ba4930eb64dd0bf98d5af3b5da8d2524e23f9", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077396, "uuid": "7208752c-f595-4362-aef4-81968b3adf57", "value": "T1D7057C517597D2FAF20D063029DA777AAB799F414E10CB87E7A0DE6D2C332C4BC26216", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077396, "uuid": "c2c8a0a3-eaff-45ff-a269-cfb662e92af5", "value": "2adcb03f92a5dc2a6a6bb982bc592543", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077396, "uuid": "329bc357-b5a7-478e-8506-d86ee28bfa96", "value": "6144:4f4Upwe50SuNJwho3sHn+TjwPy4PYKx4+WcPGm38F9E7oeTPt9zwqOuj+nbeQ6MC:4f4HepU2C3sHnUoYUy9E7Xjpou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077396, "uuid": "e6868811-ea1c-4a96-b2f7-9b6fd67da881", "value": 852054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077396, "uuid": "98e3065e-d17b-4d3a-9897-0b44ffb91860", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077396, "uuid": "0b73da7b-f8ee-4915-98eb-bda984a90d02", "value": "SecuriteInfo.com.Variant.Mikey.109501.21065.12836", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c83dcaa5-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Glupteba)", "timestamp": 1710077609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077609, "uuid": "f6931a10-0f69-415c-8c81-386d66fb24c7", "comment": "Malware payload (Glupteba)", "value": "71273fd0b95c471aa262d35ff8b42143", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Glupteba", "colour": "#9BA385", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077609, "uuid": "b0e46d6c-d4f6-4bc8-8ff3-999e60ca682c", "comment": "Malware payload (Glupteba)", "value": "3d5704231952d0924f21dfd32c9459ecd2ebe553c71cc6e39415eb23c5c6ff9e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Glupteba", "colour": "#9BA385", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077609, "uuid": "66df925a-0e9e-498c-985a-2ef4bcd66a1c", "comment": "Malware payload (Glupteba)", "value": "ec72d0e2d9fa182f0712360a5134018b6a9515dc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Glupteba", "colour": "#9BA385", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077609, "uuid": "41339975-0027-4454-8e68-cec7f0502eac", "comment": "Malware payload (Glupteba)", "value": "e08046ef5c18289e95ce759b65fb72d7493c022836150d8a9f92a5a62c678df4644254fe04d2c023702a84ebeb1063fe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Glupteba", "colour": "#9BA385", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077609, "uuid": "e9d6d0d8-1ae2-4bc6-ac39-065b73c0bfbf", "value": "T1B0B59E08F3A816D4E6EBCA34CA868B32FBF1B406073155CB095AD2571E73AA75F6F510", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077609, "uuid": "330a45f2-73da-4e4f-9dcc-89d22fa1895b", "value": "11023cc1693a4d95675efe5a86e50f50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077609, "uuid": "645297fb-e165-4128-87db-5a8935946c78", "value": "49152:b6Zqqfqaao8Kf1cVgfwN7NwpPFSUztBp2/uswlxX5xBbzKi:b6j2Wy/uswlxJzh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077609, "uuid": "e37ec2ea-d21f-4559-b1e5-7ab49f8d57ee", "value": 2464992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077609, "uuid": "a125c384-598f-4fc9-9a73-bf185dfa7b0e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077609, "uuid": "71f2444e-63d4-4947-bc9f-abd5c9a57893", "value": "71273fd0b95c471aa262d35ff8b42143.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f7c60f6-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077380, "uuid": "61910d61-5ee7-42b0-b9e7-e1cfa7625b8a", "comment": "Malware payload", "value": "e7e56a10878150b4208b4c2b95f6fa41", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077380, "uuid": "8b88e351-9611-45e4-bc48-625216ba8d77", "comment": "Malware payload", "value": "3d70a211fcb73cd428aead5966081625502370c48bddbf7fe168c99ab2d45192", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077380, "uuid": "83181e50-8237-4670-9edb-7cf598480f7d", "comment": "Malware payload", "value": "79e9dd4973add37bb785c8686a701892bbdc1180", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077380, "uuid": "be3bd95c-bf78-423d-9a0d-fe0df205c4c2", "comment": "Malware payload", "value": "03915d3559ff72461fe46373ce9349381144fb2e615f8b98eece426faf8955bea38576763922caf93e32b45a9f8beda8", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077380, "uuid": "476dc2db-11a7-4690-95b5-d40a8bf7faa4", "value": "T145945A0677A284B1D52D1D36B87B3738EB209D964F2AC65737A4EF8D2C323519D23263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077380, "uuid": "4c721c3d-6d66-416b-9e28-c51e5e5c044c", "value": "d384bd976ca952add3e058d10c3d24ef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077380, "uuid": "448dcdad-9350-4b40-b7c0-426695ee2fe1", "value": "6144:XqMmee6ICfPQAX5/6HVtDA6ZZ61S5ukxLn/ZqhW8xXrSZ9tAa:6MSbCfIHkUs1SFxL/gcX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077380, "uuid": "87e7a2ea-bf2c-47a1-9d69-1e798bbb4321", "value": 419684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077380, "uuid": "a0c5bb50-3ffe-48ca-8106-ee81abd12a86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077380, "uuid": "4f0bd51c-31de-4788-bfa9-59be1623ed31", "value": "SecuriteInfo.com.Trojan.Crypt.11407.22108", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebaeb127-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710109881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109881, "uuid": "efee80d0-b442-425a-a834-9476d1009c12", "comment": "Malware payload", "value": "ced2a2b65c17ea7446fc38db55c136f2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109881, "uuid": "ad1b5b11-51f2-44c3-ae67-5f989556f6df", "comment": "Malware payload", "value": "3d77ce08aae982d05bbf4bda58be1fb848225e8ff499e82ee5f8219bc06f6797", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109881, "uuid": "e2ad9c82-ba59-4172-8327-a4ff2b77ebd7", "comment": "Malware payload", "value": "37a09e0adfd6c694837fd3818dd649877c6763c1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109881, "uuid": "470a3a90-2695-4aca-bc56-afbb439a2ffd", "comment": "Malware payload", "value": "7d88c4cc21cfc2f98b38c8014fb88b63535f33b923fc6f152c96b6b5a29d7abc5aa05c5f4352eef46f2ad56d129f0d02", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109881, "uuid": "a17f7809-22d6-400f-84e4-081343a650f4", "value": "T133D5726D87BC0476E512F97ECF92A922D133B52EE16D51A605538F232E8F392D138F24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109881, "uuid": "b800e404-0aed-4c7a-a674-2cef2de95967", "value": "fd63bea46a49f552449d130fbfca715a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109881, "uuid": "b64f442a-21a7-4e9d-8061-fb1927661004", "value": "49152:BeI/nFaNjfSVzHKsRXmPOpFasLsIt89QC7wlf6C/Zu4E3k:wsIlu56+E3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109881, "uuid": "4f0d4af3-b10b-4e47-92a4-f0efc0e5a70f", "value": 2973696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109881, "uuid": "89b10a13-cdfc-4701-b445-a1fc93262bfb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109881, "uuid": "b853a5f9-91bc-4414-a15f-17d73a26ed50", "value": "SecuriteInfo.com.Win64.MalwareX-gen.31381.20021", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3784bd90-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077367, "uuid": "ccd7543d-ab4a-4331-8c3d-8807bbca8754", "comment": "Malware payload", "value": "c386ff75c2775321bd4c12c56ce10ad0", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077367, "uuid": "bfca3c2e-2f95-43b7-8b66-6e5536716b38", "comment": "Malware payload", "value": "4338eabfdf75fee49848e318bbb34ac3073d8e445807b09376317f026a7ab9ec", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077367, "uuid": "d47a7713-2a2c-4064-bca7-e12c2d3ec617", "comment": "Malware payload", "value": "8c6592883d50176225d2c42fd35eb92e40a9db34", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077367, "uuid": "5de5b18e-cf6f-4470-8241-0a503aa1979b", "comment": "Malware payload", "value": "427b23d407c9e12105acbe2203c9c56899b09baab795934cd47763d67d5e6e32f1fa766d63ddc3900e34c2454ed226c6", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077367, "uuid": "b8e6cdf6-7e12-45b8-836e-d9c63d60704a", "value": "T1A5B4AE9D3AB3C562E014083008BEDAE1D565AC306C53CFE7ABD45AFD2C73C7259919BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077367, "uuid": "09b392bf-7639-42a6-87cc-0737100520be", "value": "babdaf880192de0bbb5e210bc32b9f7e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077367, "uuid": "230b4168-8c7d-40de-b818-2d9b10bfe766", "value": "6144:RhHs0K7ZFNswOU9YVOVkKyt2Fdqd6+TKiWbNba30dE1zhhnehTF9v0tKA:DGswOUsBt2Fwd6+peNbJqIF8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077367, "uuid": "0d1f9685-a924-4b2d-a02e-e590f6208449", "value": 505533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077367, "uuid": "650e58fb-c6c2-424b-aaae-46d5ed2cf1d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077367, "uuid": "b9909e30-74d8-4930-9180-df03a2386220", "value": "SecuriteInfo.com.Win32.TrojanX-gen.31341.14615", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f37322-def2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710084147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084147, "uuid": "02d78993-876c-495d-ad03-eb57bc166e6a", "comment": "Malware payload", "value": "aed0d6aaf7f3de829995768a51ff8dec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084147, "uuid": "f62b5ad6-ef1e-4084-a414-a14c2732d031", "comment": "Malware payload", "value": "46c275ca19146422dcb78aaf8a8db3dcd2433dd6096f459cf93b7358909eed78", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084147, "uuid": "62fba3e4-3602-4611-b939-c9de89559c08", "comment": "Malware payload", "value": "78ea0b64493eb1095958e2fce7ce8048fa34d84f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084147, "uuid": "0263fe6a-beb3-4c2c-9b84-fe304313c5fb", "comment": "Malware payload", "value": "4546eb1af16af4d4d7e772ef345219b0f26066c1450fae1246095bd11d9030922c756b206f016c4ff3a89e10d2515a12", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084147, "uuid": "7f34b0c4-8215-4dcd-ab73-ec44b634cf2e", "value": "T1FDC52316FBA990E8E11F91B849BB0945F733B8A9130103CF27E593227E679D36C7E611", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084147, "uuid": "bda4a811-cfb9-4148-9f77-a880cc3ef4a1", "value": "f719e3f0518642b1f9b02b33b6f2d027", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084147, "uuid": "232a1381-c5cc-485f-a88f-89ac8aaf2d25", "value": "49152:LDOAn5QHqz6K5Q/QLpMIYVISKYXUKg0/Z2zjMRvDYyn6itZRaeM5KC:L75QH06KqmYVHXlVh2zYZEbitGeMUC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084147, "uuid": "4284e31b-fffe-401f-ac7d-5539159ec94d", "value": 2635085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084147, "uuid": "6f770293-c0ec-4540-9649-947134ce001d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084147, "uuid": "ad0f99af-8bef-454b-9a7e-4e0309a15a16", "value": "SecuriteInfo.com.Win64.TrojanX-gen.17769.2791", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "483656b7-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077395, "uuid": "a0106120-53c3-4b48-8a6b-9a8129e2e07d", "comment": "Malware payload", "value": "da5e22f3b6fc047d26ddd2c30797deeb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077395, "uuid": "db060f88-6d2a-4180-8d3b-bde859696098", "comment": "Malware payload", "value": "49be208ddb7c2d4f96416a4ece75a5de7c8cd4d8f6baaec39b74bcfa04a0bfdf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077395, "uuid": "8c9147b1-408e-4254-bb18-cfeb5016c93b", "comment": "Malware payload", "value": "8b5442a636d2c569afe1a959a68d885b51a097a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077395, "uuid": "e1766fa1-4689-4244-8be7-41c0927ba6ff", "comment": "Malware payload", "value": "e892b230c566e58f662322561bb0b182edd42e00defa24f10a04d9625123acf0e36c3734b7b5856ec8ca9ad7a5fb6036", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077395, "uuid": "95fca884-a00a-4e6a-ae76-e104cf5be89b", "value": "T183366D9272CD513AD0771B364C3F8A85A93FB9213A15D9077AAD2E0C4F3A640AD35E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077395, "uuid": "cfd150ab-4aef-4d84-9ca8-5dc125c0289c", "value": "49152:Hx8kN3eSZjt69YWhW/62THTSEFWDnQmmFrfgUT3TTnUkcNVuV9zwu1uqOtiuqOtM:u7hW/62CqrgGubiuboub4ub", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077395, "uuid": "a01a763b-4131-4c7d-8b1b-707b87fb673a", "value": 5296128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077395, "uuid": "9c64b043-65dd-4c8e-9faa-72d441538124", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077395, "uuid": "c3c53092-c1bd-4aeb-b369-a94092db4ed8", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.12933.6191", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6801da0-de7a-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710032885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032885, "uuid": "3346aabd-3d9e-4c47-8235-4a3e9f56d92f", "comment": "Malware payload", "value": "f134475ebee920480ccdd56cc41c84cc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032885, "uuid": "8e963248-6ab5-41fe-a0d6-00ef85baa7c6", "comment": "Malware payload", "value": "4ac269a19fbe26769c846742af30aec4de81abd75bb3bc546410fc83917c98ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032885, "uuid": "7f04751e-f46b-4524-982e-b124a2924afb", "comment": "Malware payload", "value": "85d8595940e98556246a27d2ea376636fa57238c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032885, "uuid": "5a16409c-015c-4100-87dc-1d53da99c6b7", "comment": "Malware payload", "value": "5718ac78a474a3eef74a98be78ed88d39882f8e4662dd00a17002ded4af610943cd142483d726a57b7d0645fef4880f9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032885, "uuid": "425af6c6-a1dd-4b98-8c5b-5fd25a50cd94", "value": "T112D623005E9ADF41FD47C57C726F8EAB22B58A110250DD29A3AA3DCFBB0FB463865503", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032885, "uuid": "002e57be-90e1-4849-b084-da8b6b499fc2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032885, "uuid": "6980624f-96d5-467c-8065-19471974cf5a", "value": "393216:tb0luzfV0luzfNEWpRRVQta1aCdPGdNd:lLfVLfiWpWSaQ+dNd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710032885, "uuid": "f7fde90c-50fc-4e57-905c-733af9837a06", "value": 13166080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710032885, "uuid": "5e1ec2d1-c2d6-46d2-9eb8-d9a17274e0de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032885, "uuid": "dfbffb49-2e2a-4a4a-9694-464d8923fd61", "value": "SecuriteInfo.com.Win32.TrojanX-gen.4983.29177", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70062803-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055557, "uuid": "d73d0eb0-b118-4b94-a575-78b41c54a868", "comment": "Malware payload (Mirai)", "value": "c5db62eef27a1e41771818ca267e1a9b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055557, "uuid": "d4225898-05d3-4ffe-a4e1-3c484f9cb44b", "comment": "Malware payload (Mirai)", "value": "4ac3d48f31ad438533b7129addff7bbb05bd9071be99fbc7ceaf48fc02fa1ae7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055557, "uuid": "8a6db6c7-f5b0-495c-865b-35ec7f17fdb6", "comment": "Malware payload (Mirai)", "value": "43574e23164824e8d2d39ebf04bf69dfef537fa5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055557, "uuid": "7a2ef51c-29b2-4efb-a485-1913d93b235a", "comment": "Malware payload (Mirai)", "value": "640c4fb23390f61dcd26806c507a76bcbf41f114848f31f5d8dbcbe6193a4a433ff7942c70d91d285b09d50e59564052", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055557, "uuid": "66e7dfc4-2d55-4bf1-bc4a-cf45e22895ff", "value": "T190037C97C5362E99C2184DF02422DF39136BA415E4971FFA0276CB664487DCEB22E3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055557, "uuid": "543d24b4-ccd7-4d7b-a49e-c25566da27c8", "value": "768:HVRNgs1NNgHJtbUHw6IyxCOJ1l/9Cso4JmhJmCSr+6:Dj8r4vJ1TCr48rmCSr+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055557, "uuid": "7844ac74-109a-4e0e-b101-7a07f0588a91", "value": 37872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055557, "uuid": "48304ee0-ea3a-4575-818e-568e4a238afe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055557, "uuid": "620c88e1-cf60-4819-98c6-823dc6db801e", "value": "c5db62eef27a1e41771818ca267e1a9b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bb21c27-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098016, "uuid": "24dba630-d9e6-4a2c-93df-5991e7799181", "comment": "Malware payload", "value": "080f4e012787d1e1c25af3517d4eb0c3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098016, "uuid": "0c00f2fc-84d0-4bb3-a3eb-360c92203e6b", "comment": "Malware payload", "value": "4b5a7de7efa72f5631cb9897502475454a9adce9ac81ce8d94e63f92004be4f6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098016, "uuid": "fb7debcb-4fba-4818-8e7b-c65491dc9188", "comment": "Malware payload", "value": "dda96860fa80d5f020b416ef8e7ec3d001618840", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098016, "uuid": "9a8af69b-0ebc-445c-bcb3-4715789d2a81", "comment": "Malware payload", "value": "7994250a26468fbb22b0501d45d45b9fb4c65727125e0e8de9079c19b9f9572a94dd586ea4b19c9179c76387cb6d5e5e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098016, "uuid": "1b7502e0-c704-4745-a151-17b7900e7721", "value": "T19EC32905E8918767C2E2177AB79A425D33332B6893CB33255938AFB41BC1B9D1E79131", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098016, "uuid": "f0a665dc-5356-446c-bf89-f7c06288c6c6", "value": "3072:KdB2qwap6KVXPi4jv8x+MMDkmDhZmTQOIsXAqE:aRwap6Kt6+MMDHZmTQOICAqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098016, "uuid": "56b6018a-02d6-46c2-9678-32e8e4733efc", "value": 127529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098016, "uuid": "a9b8e51c-56cd-45e1-84f7-05e8cb8bd9dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098016, "uuid": "3e8ff511-7106-4948-bd3b-fa6dfef358fc", "value": "080f4e012787d1e1c25af3517d4eb0c3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d95cf13-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077377, "uuid": "f42a0d32-1040-48a0-af94-add0d514fa77", "comment": "Malware payload", "value": "d04dcb257b6860e360313ed874086bd3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077377, "uuid": "b531c4f0-d2c2-456f-851a-c03a79c19d99", "comment": "Malware payload", "value": "4c72080186d3823d8bb3761b19bf38960cc73ac08f5e194c80b18ee1be0c4a64", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077377, "uuid": "dbf05a75-cbb0-4cd0-9a43-97efcd77cc6b", "comment": "Malware payload", "value": "b6b3a838f1568d011b8d438aef0dd106d6ab3bc6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077377, "uuid": "dd454a95-88c4-46a2-9b15-cd2f276619c3", "comment": "Malware payload", "value": "997ac75c59d2516cc48a888532270701d77e0d0092177b1437dcd13ceb893bfadf3190e970126be75c86c0e38b8aa64b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077377, "uuid": "45297bbd-b6ac-4b21-97fc-55fa64ec8fd9", "value": "T110157C2BF38200DAC655193208EB1339DE7A9E564B22CBC3555ADE7C0D626B16E7B331", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077377, "uuid": "c96005a2-ecc8-4b4d-a9fd-1dbc4650ae32", "value": "6144:hcDGLFHnrMUj6SkvUF4aw4A0HxmSdiATmAXAgHSOxo9RBbLq52Y/Qg5ViG5WFNgs:hcyLF4LSkvUqaw4ELCXAZbLi55KK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077377, "uuid": "a1329356-01dc-4131-9688-019aac1b34dc", "value": 921600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077377, "uuid": "13d77945-4d83-4f2a-b3c6-dfc535418601", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077377, "uuid": "705dfbb5-d14b-442c-8dc7-6221b35d5521", "value": "SecuriteInfo.com.Variant.Babar.74655.9779.15873", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51b614e8-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098026, "uuid": "7447e8de-4721-45f3-a824-311c3eb0df66", "comment": "Malware payload", "value": "0d007559e50eed29a0bf4c4ee924e2ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098026, "uuid": "09072cf1-a696-423e-b1fa-0bbdfd503e5b", "comment": "Malware payload", "value": "54a95cfb297d094e15c6b7afd1dda7cce155b537e99ec5a7d48ea87c4c0d4c76", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098026, "uuid": "446a228a-c2db-4e4b-8c29-c5117c6842f1", "comment": "Malware payload", "value": "35fe9d62e81b8f15e8ad3e680e6d234342d358de", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098026, "uuid": "965047dd-7551-4ae4-a60b-98595b026701", "comment": "Malware payload", "value": "881deb466bf90a1b3b0506d9e195e33e7c3b7b9543de08c562a0391abc4923c01b30ddf07583c011976fe44eabbdaa80", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098026, "uuid": "0036ea3d-5d1e-4ca4-8ec2-caa236e11804", "value": "T18F933A0799A59F77C0C7EAB919EB59300326A9520B2F1F5961386BF4438F9CC740FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098026, "uuid": "f21bd3f3-5ebc-4d3e-aada-704bd6c11e9d", "value": "1536:fI7+hcIM9naHAAGtKhmA+J/FosGvJtKqCgDQtmW49VquLeefkcX:YNIMZoAAG0hS/FoHKq/Ym79VquqefkcX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098026, "uuid": "e50ea4e3-ccb0-479c-9a9b-3d73a3b2c6e3", "value": 94356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098026, "uuid": "350bddea-2731-44f9-8079-c34c24fe7c98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098026, "uuid": "ba24b942-6b63-4aff-b096-c2cd325f84ed", "value": "0d007559e50eed29a0bf4c4ee924e2ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13a693d9-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092339, "uuid": "96d03965-ba02-423e-b1f8-43d69421aa72", "comment": "Malware payload (Mirai)", "value": "436dd7b625c8c8a50bf755788e5a768e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092339, "uuid": "601edfa0-8be6-410d-8560-591918c7b19d", "comment": "Malware payload (Mirai)", "value": "583a882e3ef49da2c3bfea60740ee7d8886a557c6288726c260a873d365e6d6b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092339, "uuid": "a7c878b3-9c3c-4062-9cfc-313c5b560eb9", "comment": "Malware payload (Mirai)", "value": "a27a95a9036980a9269fa2b8bc2df4c8cfd4c166", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092339, "uuid": "918e9a22-948d-4d66-ba97-5fad211332af", "comment": "Malware payload (Mirai)", "value": "9de331dc1001e105d32bbf66fd187443be5e49096f7919c30cbff154f4f86a0bcabc839c392be924cfee219c0638bbf2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092339, "uuid": "dc880dde-4220-4151-a4a3-c947b5c3a2ee", "value": "T13983F79278C29A16C6E423BBFA7E018D332567A8D2DF32179C212F1577C981F0DB7691", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092339, "uuid": "09fb16b0-363a-4286-add8-35086e55768c", "value": "1536:8sCvlPf6NDyL9Jb0+pHXlzPhha0xT45wn6ahWNr/xKW5XnHM35PrC:8sCvlPCuTxCwn1higWm3l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092339, "uuid": "4680ddae-63b8-4350-9ed5-4fd1481834ae", "value": 82940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092339, "uuid": "3622686a-e1b7-4ec2-9488-7f0602667da9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092339, "uuid": "47792e14-da11-46ac-835b-0db014cff7ee", "value": "436dd7b625c8c8a50bf755788e5a768e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56434a3f-df1c-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Cybergate)", "timestamp": 1710102329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102329, "uuid": "19871f71-480f-45f2-90d6-8284f3250e03", "comment": "Malware payload (Cybergate)", "value": "294ebe26474cc3cbbc9fa4dc6c4eb911", "object_relation": "md5", "Tag": [ { "name": "CyberGate", "colour": "#7058BE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102329, "uuid": "b7dcda27-a28d-44eb-a37b-0a836ce381ae", "comment": "Malware payload (Cybergate)", "value": "5b5bbe7f7109147300bad73c48e8dbfd9b187399e9951d2555155c53cc32c651", "object_relation": "sha256", "Tag": [ { "name": "CyberGate", "colour": "#7058BE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102329, "uuid": "6c78fe21-158f-4922-98e1-a315231f484c", "comment": "Malware payload (Cybergate)", "value": "10c1c03b794d3f474c129d9a1fa42822ecb39a33", "object_relation": "sha1", "Tag": [ { "name": "CyberGate", "colour": "#7058BE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102329, "uuid": "24ec3bdc-8570-49a6-bc4a-74f477fc3048", "comment": "Malware payload (Cybergate)", "value": "47d7cec350d27b1b83c38475e4178a6152e18a0e0a9bb57958ba05f70c703f4ebe4923aab3e34586ed4f869fb5f7eaec", "object_relation": "sha3-384", "Tag": [ { "name": "CyberGate", "colour": "#7058BE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102329, "uuid": "d310b14c-9d6c-463d-b75b-4f3a27ef3a90", "value": "T16D9412A6F4555C73DBA18AFD1D2CE6C4EB7D3E222C27509399ED3F88C71C262160D1A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102329, "uuid": "f4db2081-3f9a-4c30-8bb1-f2682abeebac", "value": "a1ca9f77a798c9b4f0e454a9da75459d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102329, "uuid": "3e00f4ec-57d9-4a36-bfcc-1eb8748130a5", "value": "12288:xuMwSBi8vvrHxVPKyv2m77sZB07FxObO32h:xHwr8vrx52t07FQao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710102329, "uuid": "026ee379-479e-4217-b955-04d6ebca5700", "value": 438272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710102329, "uuid": "7723fb8e-abda-46a5-bc58-c4788f616fbc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102329, "uuid": "a7d629ad-e80a-4146-9c97-d791448daddf", "value": "294EBE26474CC3CBBC9FA4DC6C4EB911.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a8be758-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "29c071da-0324-4e6f-b34e-a81d43d2bedf", "comment": "Malware payload", "value": "f4c716cc3341373c864cc8c6c0cd8d64", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false }, { "name": "zipx", "colour": "#5F0CD6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "267218e8-67a9-40a1-8ede-3100170e4ff3", "comment": "Malware payload", "value": "5ca57694193f1b14485c4e263c4c4fcccb4372646b12c8f03791d0687cfe15cd", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false }, { "name": "zipx", "colour": "#5F0CD6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "937ec039-9968-4f93-8579-47cd4bc98a24", "comment": "Malware payload", "value": "df48f6976a32e306ed03b8934cd3ba226b8b5625", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false }, { "name": "zipx", "colour": "#5F0CD6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "0448dc07-3431-4cb9-bac6-76aa8dd8d252", "comment": "Malware payload", "value": "391b1c9579b62d1a92bf2677dcb86c74a0f087de89de30e73f00260c96898fc5aca3c19ddcc5fc4cdd99eca998142dbf", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false }, { "name": "zipx", "colour": "#5F0CD6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "8be57df3-eb01-401e-919a-072be820674b", "value": "T101B73303743467F08115F509E252A724DD79FB6B6D22C5722B29F0A84EA20F71FAACDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "ae0ca947-60c0-45ef-b01e-e3e086770dd4", "value": "786432:MVcb6Ly/2I/yaSHQtc0CTfykOMqORHnAUAVBvwFmwcd9W0nQiS4AGh55k+mHETz7:MV/LM3/bSwaNVPqORHAAFmbs0+GYHEn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094981, "uuid": "2af4bb6a-56e5-4bff-bf54-3f1fffae48a8", "value": 48678012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094981, "uuid": "77c41285-7db3-4157-8fe9-b35ee18e6c94", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "655a4fee-a3fe-42d5-ab7c-e9115a0fdeb6", "value": "VoiceAI.zipx", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44a52c55-defb-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710088126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088126, "uuid": "a520cec4-06e0-425b-8c29-4859d2a4f550", "comment": "Malware payload", "value": "a2704053448ce9d7351e46b01998400c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088126, "uuid": "b1ae9caf-a492-48a8-93ab-d9cc94e8e0b9", "comment": "Malware payload", "value": "5e00c5625ff7bbd39b500a8b6eba2506d5ce1c96953fa6c9016b8aa056f66d78", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088126, "uuid": "8b7973a4-248c-44c8-b518-d2ac548789aa", "comment": "Malware payload", "value": "34039635dee93e9b3c29d66896a12f0da968015b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710088126, "uuid": "8fc67345-0c84-4348-86b8-26f208ba546d", "comment": "Malware payload", "value": "04df09a784fddc658ba2a7655112e8d3498e9a77d5287640d019e9ddca0abf89a9ef2db1e0f4bca573270c5167f79ea0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088126, "uuid": "e6660f64-4443-4610-b272-f7acca5322b9", "value": "T15986038CDC37EF20F9E4307C19592F883A58CBE8548D271AF45ABE20A64E95D127E7D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088126, "uuid": "30c44d21-01a9-44ca-bf7b-f76bb8b63ce2", "value": "c86c9ea809be8440a20d30e6521fec46", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088126, "uuid": "f3ce899b-e0d5-4c24-b354-492334622be1", "value": "196608:fbRbw8/NdMqb/BZJC/szJP7+4VUMXdEUKYTp0kEkjSYca6:fBnPJZJC4J64xNEUdSyjVca6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710088126, "uuid": "36501154-c2e5-4ba3-9df7-960d8bb177e1", "value": 8419765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710088126, "uuid": "c26ba434-9571-4e87-b536-1644b23f68ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710088126, "uuid": "31b9f19d-888e-4daf-b6b8-9793ff39080d", "value": "SecuriteInfo.com.Trojan.SMSSend.4371.24589.16568", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dabcc823-df33-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710112430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112430, "uuid": "1e4b4a0b-02c2-4f14-a508-d43ec11ebfc1", "comment": "Malware payload (Mirai)", "value": "5b262c0b4c0c6ee70c728ea8248e2cd7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112430, "uuid": "99905cc8-4e69-450c-a777-712f103279d2", "comment": "Malware payload (Mirai)", "value": "64938f4a94cde41e1b90788cd7217a59fff4aa54c106cd99809663f919ae5974", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112430, "uuid": "591ffa54-1dd4-49e5-92ea-94283071fb39", "comment": "Malware payload (Mirai)", "value": "18643a0a48fcbd355acd4368b2c7f6b45c683b01", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112430, "uuid": "678d0893-c2aa-4334-83e3-f2b562f5f80e", "comment": "Malware payload (Mirai)", "value": "ec48689b19880bdc38a5756bba7b592b958405a4133e8ce14a8766c48bc3bda91f2da913108b8b42850b5da9b17a639b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112430, "uuid": "73fb3f8e-b56a-43f5-a592-e3d4e28e7380", "value": "T160D32A05B30C0A47D2A32EF03A3F67E093EF9AC121E4F644355FAA8A9171D365586EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112430, "uuid": "54cfba15-4b1a-4a4f-87e5-6a401658239c", "value": "1536:0SoKCvwn4aoOHo8oXFhbxpHvdR+FDZPvTX4W6rvDvAHWhtZA7+2cqUP54gF7X+:0uZRo1hbxx1a5TX4rsHhgF7X+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710112430, "uuid": "64433121-932d-440f-9e59-cb0e28388c52", "value": 132472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710112430, "uuid": "20b72ad0-d60b-49de-841e-fe1e7454e5db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112430, "uuid": "08987e10-46af-45cc-85ae-0fe57fb5393a", "value": "5b262c0b4c0c6ee70c728ea8248e2cd7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07f28026-df06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092749, "uuid": "245deebb-14ef-4eae-b22b-b4d530498610", "comment": "Malware payload (Mirai)", "value": "eb7e0fc990bbd6a46d022ee2d2ae4c11", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092749, "uuid": "5950a028-b470-4bc4-aba8-d62f4be7ffe9", "comment": "Malware payload (Mirai)", "value": "65e25cf9a52779ad9af68dbe15bcfc0ef81c7fa167dccfad19bb7cc778b79b50", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092749, "uuid": "73b3b2fb-4c30-438f-9248-7e1d82664734", "comment": "Malware payload (Mirai)", "value": "e3e199409b2ad9a92f3b1b4d5e9c6fbea484790b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092749, "uuid": "e4ffb4b0-249a-4f35-8566-f23bb12706a6", "comment": "Malware payload (Mirai)", "value": "4dd3e7e0f0eddea51c8762f596badebf1d836ce7b74dab2f8d91fcf79a1419ed26439fd6f2f2b1a1bab95d9f923f8269", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092749, "uuid": "9eeeee47-7b94-4007-a22e-32b188a61f90", "value": "T1E393E896B8C28E15C5D423BBF92E00CD331667A8E2DF72129D106F2477CA92F0E7B955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092749, "uuid": "039767dc-e894-46dd-9ff4-e92e8a00bef4", "value": "1536:lwNn21vn1P0YAvT7C+P7V2o6Ahb0rkHP8UWj6XLw6M1HxCwU85u//5CFYcpIziIy:lFP1sYu7JPZ2oP0r+0UWj6bXMFHHq5Cv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092749, "uuid": "976c29d0-2a7f-407a-9d49-a0445c3b3417", "value": 91440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092749, "uuid": "896e85b6-1350-4d35-9556-f4e0a18153b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092749, "uuid": "c899af41-099a-444c-8b32-00f5e79666e0", "value": "eb7e0fc990bbd6a46d022ee2d2ae4c11", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2af68820-ded2-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1710070474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710070474, "uuid": "7ee03cf7-3d62-4bed-8c35-21ca32821ebc", "comment": "Malware payload (IRATA)", "value": "4147904fb544e009e685e4287f07c1cc", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710070474, "uuid": "cbb6dbf3-9641-4476-98c0-e7c2f76734f2", "comment": "Malware payload (IRATA)", "value": "674311b16307f337b352940bbaa796db58638dd402cb27c42569cc7ebb79a0df", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710070474, "uuid": "ca9b6ef1-ebda-4c43-8dfb-63fa4099b176", "comment": "Malware payload (IRATA)", "value": "bcd73656e0cd57207350c7f760e2d12be2e0ed9f", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710070474, "uuid": "e2d03011-ae30-4787-bd35-3a65d7d9dd22", "comment": "Malware payload (IRATA)", "value": "bf3bebbb58c75afd704477c19b1692bc06be42a52f69f6109b89542c09087babcf2e56070e23b4a2fcb2429206289c3f", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710070474, "uuid": "3d292f73-e74c-4fad-a4c1-ea71c9a8482a", "value": "T199951243F7A6A81BC8FAD3372174523650774D288B03E65B2919B7FD28B79EC4B991C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710070474, "uuid": "044070b0-59d6-4830-996c-e923580d0c85", "value": "49152:k/NO7Sk5k6/Pcp7zDsvWF/EpopXanlGpdWvtbB/Wx9PgR:yI+z6chzQvq/EehaMOvr/WnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710070474, "uuid": "3fa57774-27b3-4baa-a12b-7ff36d08e7b4", "value": 1999598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710070474, "uuid": "39c96df4-db98-4825-b39e-d392f1ecbd3d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710070474, "uuid": "34a7fdf2-c019-4dba-bd85-1f5e64596054", "value": "app.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b7c86ce-deea-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710080782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710080782, "uuid": "3598da1c-25e5-459e-805d-ec39eccf172f", "comment": "Malware payload", "value": "cd2747fbc6e7c4caf42d4d863a69792f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710080782, "uuid": "712f9b55-7a78-4196-978a-dae2594c7fd7", "comment": "Malware payload", "value": "69d1e288d7a88cca768aaec4cfd0b05d2319c910e1d8a872b40148656d042969", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710080782, "uuid": "136c8280-8f00-4250-8852-473d0864f6f7", "comment": "Malware payload", "value": "ff4aa4aa60373f808b62de5fa2bac4deac817644", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710080782, "uuid": "f126afcf-a625-42b0-8387-526a3b711322", "comment": "Malware payload", "value": "08775795ff3e7fa76418fa8b24c27bbdb8f791cce60466683654bc7f5ccdb15462060d3fe9c336fd273bd98fe64a2cfe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710080782, "uuid": "b8504e73-a7e7-49df-bf2f-eea28eb5629f", "value": "T11D056C1523FC8B26D69EAB7CB470891587F5F456D762EB8F1A00D8F52C93B818C127A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710080782, "uuid": "1f81c2b4-2519-444b-bc4c-a47be0343d16", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710080782, "uuid": "46442c63-8e45-42c4-9967-58b635d58505", "value": "12288:yN9d1yTGrYZ9bZAMa504xdrDZKb8ZZvzedCRKd/BadIS67pWfir:cPrYZ9A504xdrDZKb8ZZvzeIQ5BadOh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710080782, "uuid": "712f9e85-48c3-4f35-923a-1af649e21e50", "value": 850944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710080782, "uuid": "9d9cd2df-e346-4fa0-bac2-840c1d13a343", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710080782, "uuid": "ca17215c-0ef7-4cfd-991b-06ee23fa5e35", "value": "SecuriteInfo.com.Win32.TrojanX-gen.6000.9169", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc4fcc86-def9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (LummaStealer)", "timestamp": 1710087575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710087575, "uuid": "1ac3f2e8-8f44-459e-a331-05656416892d", "comment": "Malware payload (LummaStealer)", "value": "756931963ef47d8261e3090770710355", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710087575, "uuid": "4faacf91-0814-401f-b48f-1c6ab8345ddc", "comment": "Malware payload (LummaStealer)", "value": "6a103e31e7c1990a5f21e6ad483805b01fdbabe9fd9454f42aab0eda9b5d67cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710087575, "uuid": "6b48a4dd-557b-4d66-8a97-fda945c619ca", "comment": "Malware payload (LummaStealer)", "value": "074e49a53dc0dea819a2ce9b487982f0ac114d86", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710087575, "uuid": "56cee6d2-3e30-45f7-af70-24c45e6fa357", "comment": "Malware payload (LummaStealer)", "value": "2fe0a29bcd49ea2edce9cc0b33c52a07e21d8cc983f821f950ae27e11c5f8eca06825fde966ecb4d451e83fb111b4332", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710087575, "uuid": "1c4d5b8b-5813-4b0a-84be-7e36a951cbed", "value": "T1ACB4AF67B29A8E22C14D1637D0D34900A3F955D7B027EB0AB49823D60D473BAFD4A7DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710087575, "uuid": "c147109f-2b35-4fc4-8aa4-98365db7cfa9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710087575, "uuid": "cd93a3e4-cf5e-446d-b0ff-a976089c2a4c", "value": "12288:6L8s73bmtO4RH1ROUguWO3t0u6ZwevUDRHuGN19v/BQa/muUiq9uxzrwy/ZW+Ln7:6gqDdPofMR/TWOSKY0Emo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710087575, "uuid": "242bf84e-cde6-40b5-9cf3-14e5f382799a", "value": 542856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710087575, "uuid": "9550be4b-d0ec-4714-a476-9bb2e8a73ffa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710087575, "uuid": "43e51c0e-d0d5-4c3c-96f8-68c2d3e64d7d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1307b45b-df08-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710093626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710093626, "uuid": "7c8d7bf1-49bc-4c22-aedf-e5a5e849695a", "comment": "Malware payload (Stealc)", "value": "29317554bc596ed20d4bb755809729dc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710093626, "uuid": "4418cfa5-1c92-4e4d-aaca-588d73cccd82", "comment": "Malware payload (Stealc)", "value": "6a9dd15e8c6b7a7399660de536643430c0fdfee0faadfe97ce721a8bb2d893f0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710093626, "uuid": "07e21092-516a-453b-967e-5dd51364d31f", "comment": "Malware payload (Stealc)", "value": "0f635a2651f844b48dda7f64a1a73764aa4b4c1c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710093626, "uuid": "500a7b77-2932-425d-8341-3ef35e36d157", "comment": "Malware payload (Stealc)", "value": "8db49822eacd02dd07ec6216da90a77be06d5e534ec674ef54ca683dee24e2ae6477dc7992ff0cc50df3f9c5221065e9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710093626, "uuid": "b3c7743f-88fe-4677-8281-5f8bd9c0514f", "value": "T11314DF0071E18075D1AB16B359B29670E97BBC52F330008FE7983A2E7E716D44AF6B67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710093626, "uuid": "b7a6520a-0a4c-4f2c-b0ae-16ca4bc6482e", "value": "bcb153adf71ebbd76c3525e318412fe5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710093626, "uuid": "38df9f4d-60f1-4a17-bb81-b881885576b1", "value": "3072:Kknc6/qwFdaCHYE+KMLjktyWIlFhwSuexMXcn7i+85Odddhr:fnVSwaC5mk3IttucMXcnR8mddh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710093626, "uuid": "8ae24491-390c-47ed-b721-29408d4368db", "value": 205312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710093626, "uuid": "2cc5a808-cfdb-46f3-b7a2-75f6e35da641", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710093626, "uuid": "8ee87da0-bfb2-45fd-b032-48bc1a37dd47", "value": "29317554bc596ed20d4bb755809729dc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14fa84ee-df01-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Tofsee)", "timestamp": 1710090623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710090623, "uuid": "8b53f400-86a2-4e26-bd48-458b6d48516b", "comment": "Malware payload (Tofsee)", "value": "20ed8b8eb556fa3cbc88b83882a6f1b0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710090623, "uuid": "0b69fa17-3f7e-455f-9b54-56bcc20c99cc", "comment": "Malware payload (Tofsee)", "value": "6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710090623, "uuid": "6e5c364d-cd46-4eff-86ff-93bc64b1a7da", "comment": "Malware payload (Tofsee)", "value": "cd7ce6fc0068b6ef9c37d5dafec1319a39b88709", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710090623, "uuid": "c8d4988b-6320-4a8d-b328-e444bbca6142", "comment": "Malware payload (Tofsee)", "value": "93e180183e1cd4593e8b6b31730e84d09a7897fe8ea60f8d6bd4a6ef3ec3b43d6d6dd1ee41957c32d7f1389edc92f01d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710090623, "uuid": "b3f2338d-40a3-4ac7-a2ae-f3d251ddb023", "value": "T1E22623A7347727F9C046C378A5865D2E7C39BB2588EC4B1296C8290CDEB27246F35739", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710090623, "uuid": "3e31b11f-2a34-402d-ab79-7700187d8809", "value": "78c55915f8ede852a41ddcfd991a23b4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710090623, "uuid": "3cf4e62b-4f59-4b42-9277-ee3f619c80ee", "value": "98304:in1GhDYSAEbWAtdt7Eea0+JJHOBMT6yCltq5CFvxWof8e45D4UO38cYd5:0gYfux7EF0CHqI6Xg5CFvxW2Pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710090623, "uuid": "0119c8b4-28b3-442d-a5fc-5a23b969e39f", "value": 4683776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710090623, "uuid": "77177416-81c7-440f-9541-2dbc4e850e4f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710090623, "uuid": "1932a9c6-39d7-4a7a-aeef-3145507af253", "value": "6BE4950D9A919F5D0150D19552B340E9B5EF1959A18FD.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cada1ff-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092354, "uuid": "cc48b21c-b944-4c3d-87d7-d5c3fb3c09cd", "comment": "Malware payload (Mirai)", "value": "d651fd0ff824f887925ef130ab60594c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092354, "uuid": "ecd2fac0-cc30-4bbc-932e-99a8b8a31547", "comment": "Malware payload (Mirai)", "value": "6bf017db1c5610ef9e547b33e815ff571f6f6575540e9d28d4efad16297d0e37", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092354, "uuid": "a64d4d37-7a89-435b-bed9-f46d1338d4fc", "comment": "Malware payload (Mirai)", "value": "0557913babe1b1b427b58be4fd4aaa81ee3f969e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092354, "uuid": "609266c7-7119-4bb4-b9ed-18d19b327541", "comment": "Malware payload (Mirai)", "value": "d10a176aaae480a92bb20b43658aa4e376e9bf0ef70e5d6c9346d5236a764faf2e3f7e0dffe17c6550a63117604fca6f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092354, "uuid": "222cc728-73d1-45e8-ae1b-30cf12954eeb", "value": "T192B39CEBF2470160C8624AF007CB4BED3E2723815F27C5E76C6A257969791CF8906F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092354, "uuid": "2b142290-6ddd-4897-bb1c-20e7165696c0", "value": "1536:Nu27gBYySSpfPDXKf9wSGBny2Wwg1Bs/LWq:E9lSyHrRSIy2Wwg1Bsq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092354, "uuid": "036bdc1f-9451-4638-a6ef-0a0bfdf6c264", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092354, "uuid": "83ce3d32-e007-443f-88d4-96511ff9354f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092354, "uuid": "7f685113-f555-42ac-9cea-2b9d92594031", "value": "d651fd0ff824f887925ef130ab60594c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1ac0f06-dede-11ee-b7ea-42010a9c0006", "comment": "Malware payload (PureLogStealer)", "timestamp": 1710075907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075907, "uuid": "b2b6f333-9c7f-4522-a58c-4abe749f2618", "comment": "Malware payload (PureLogStealer)", "value": "c45914bb84b2703e5bebe5a16945b168", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075907, "uuid": "6221f233-50d2-47ba-89c3-a9f2164208ff", "comment": "Malware payload (PureLogStealer)", "value": "6d0b474f71319576e3781210487157ee50753f09e2bbe584a65c0b438971c984", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075907, "uuid": "2d997744-f2ee-4e4c-acd4-60fc8bff075b", "comment": "Malware payload (PureLogStealer)", "value": "0647b49184a37099e39c43556e8d0244909edef3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075907, "uuid": "3ea36e9b-229b-41ad-adb6-5cf3f6d76622", "comment": "Malware payload (PureLogStealer)", "value": "c104cf7aaf1069f27d57bfd269dfc34a033298c7b8d473e6016a8d7b55c2c6d5f52e60b86769ecfe794ef1cacce4fd49", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075907, "uuid": "aece5342-166c-41ed-af26-8e146f824f30", "value": "T1A6D57C87BCA044F4C0AE933189A295967A71BC440F3527D72A90FFB82F72BD0AE75754", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075907, "uuid": "cef37a40-01cb-4358-8847-236fa5f79ed8", "value": "5929190c8765f5bc37b052ab5c6c53e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075907, "uuid": "57905153-c831-4541-85b0-043ba0d46de3", "value": "24576:p2oQPs1XwWHYdSA9CMjBALuxY4OPsW7LQ3IA/6oYESBJ+YavIz+q/pGzxLoO9uWQ:/2sihLjqqY4LWY3ITd9BJ+YaPcNO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710075907, "uuid": "2ac95320-8abf-4b3e-8df8-6002462218dd", "value": 2829824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710075907, "uuid": "d899585f-b592-4b11-9ebd-4ebb8a897df0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075907, "uuid": "33ee39af-bcc8-4963-a35d-1b37e93f4641", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38ff5c06-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077369, "uuid": "160ac55a-c7e1-4e59-8eec-4733891d92a8", "comment": "Malware payload", "value": "ba107a29898388063bb14887df7ce59d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077369, "uuid": "c58715e9-c487-4296-bedc-0a19c263f230", "comment": "Malware payload", "value": "6f5a32b51718b194c6b6825ebcf2e69e4d7c795905e0dff979fad943d1a8fdbc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077369, "uuid": "225157c2-ef79-4a5a-af92-1474328cd117", "comment": "Malware payload", "value": "f4ef11a98d6ea39d993fe0aedca66081329388f3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077369, "uuid": "b4151c30-b5b1-43d1-b8d8-a42891ac4e94", "comment": "Malware payload", "value": "9668e88bbb88c36774f10b278ce5cb938e954e2ca836f5ac72b741807b107252cae15f698fb228bf982747aacd136043", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077369, "uuid": "7d464f1e-0253-4454-b436-96cf08c78b31", "value": "T16A253913A281143BC0761A3A1CE793E4D83F7A252BD6B84F5EE41F4E0E795812D3EB56", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077369, "uuid": "50971d00-0e4b-4ff5-af1f-024d9a3fe2f4", "value": "c3eea3acadb091c6530395e4aa2c6500", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077369, "uuid": "e7629a0c-b44f-4f7d-be6b-c5774981b845", "value": "24576:ZPYEcNNG9gsnnxLy8C0+pyhBlS/NCsnPM5O2c:vxLy8WkPS5PM5Fc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077369, "uuid": "ce6ed9e3-70f4-4dd7-ab08-7a60d4194310", "value": 963072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077369, "uuid": "eda186a8-c495-45f2-9b8d-6bcba06edfdd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077369, "uuid": "dca2b570-bb75-447e-8b5a-034b3cd0df91", "value": "SecuriteInfo.com.Trojan.Scar.16465.16497", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e642848-df1f-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Tofsee)", "timestamp": 1710103658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103658, "uuid": "7c4ab2b4-64d8-433a-9741-08e9468b410e", "comment": "Malware payload (Tofsee)", "value": "f5fd4237e550503a8eab51ae35f147b6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103658, "uuid": "a49896a2-77c4-4a40-8752-5998b4ca0f73", "comment": "Malware payload (Tofsee)", "value": "6fb0201dac82a2b6f3c409d74005eb50aab93abd7508f513636be051db86eefd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103658, "uuid": "98bf3774-a6cd-42c7-baae-d860e86eae50", "comment": "Malware payload (Tofsee)", "value": "869d44d58fb734b3692500dae1f42f0d6e3b3434", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103658, "uuid": "bf961e58-7a69-4a18-8344-345fce54d12b", "comment": "Malware payload (Tofsee)", "value": "e3fd3290505156c033c4e5c7148fb34bf3377622268224f0b57cb362aec721459d70c4b9c3b3604a8b1c88d532f15583", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103658, "uuid": "7a05f8b5-01ab-4aae-aa56-a159b387ba73", "value": "T1ED04AD2131E183FDD5A7163079B4DBA71A6A7C4E6730054F3798262E3E7C6C04A74FAA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103658, "uuid": "edf40e70-89da-42dc-ac13-35ab5f5e6c96", "value": "4f55e2a30ec0c2d3680e7e87f2ea376a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103658, "uuid": "958e4d2e-91c9-4b6a-bca7-888472568b80", "value": "1536:Js5KSNeteSXSI4nZ7OyP8p7+C1xIhQ6M3dfUMJn325pDedDT50ZXXKVXRKX:e5ScSHCO1p7hiO4AI1edHK56lR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710103658, "uuid": "17badc4b-c121-4d5b-9aeb-2dcb88a53017", "value": 174080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710103658, "uuid": "be7ae780-9354-4bc4-9777-0795980caaee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103658, "uuid": "3ba190fa-2353-45e9-b29c-308a296f643b", "value": "f5fd4237e550503a8eab51ae35f147b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72bb9a56-df1f-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710103665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103665, "uuid": "e2ebcd56-58bc-45d6-9740-9e7b611095ad", "comment": "Malware payload", "value": "907e21e5c122b5a3126a86d7d02df4f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103665, "uuid": "db552016-a666-4bd0-9a60-41624895918a", "comment": "Malware payload", "value": "6fb2bda81d9edf6955e7d6bd5d9dfb5a0f3d7695eacd2a0e4f3988812ebf41cd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103665, "uuid": "2380cf1f-c5b5-4042-9d08-81644ebd09d6", "comment": "Malware payload", "value": "031db700719b48c691116f5027d5609efc7c210f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103665, "uuid": "0fec9c4f-15fc-4307-831a-5dc4be8556c6", "comment": "Malware payload", "value": "655a25965964fdd67d5f270b0fa084446624b3e754ec3dd30382e069abb803ae9f606a594e6ec319a31422b790ef2c1b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103665, "uuid": "3f92c395-1b9b-4f22-9b6a-f4e656585541", "value": "T121431819767A6B26DA3883F30547544017FD582FA4A2F70A8CC7E0E67128F8BE502F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103665, "uuid": "b4b16054-5df4-4cb7-8b17-1aeb23e6aca5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103665, "uuid": "8d599bce-56cc-43f0-a778-40f85b8775a1", "value": "768:+pMsRVqvTtICYY5xbjVz6GPt5ToMHTuGeeU/OgUO90THf8CyTHf8C0mbt:GRVqv16eXTpHTuGj0Jx90T8HT8lmp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710103665, "uuid": "b9e1695b-90b8-4f14-8414-3969e378b51f", "value": 55808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710103665, "uuid": "82816f10-8ff7-4dd4-b585-c6fc0b1f10e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103665, "uuid": "f233bbe3-c1c8-4195-867f-858b320672b1", "value": "907e21e5c122b5a3126a86d7d02df4f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04dc54c3-df06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092743, "uuid": "971861eb-fcd8-471d-9f6b-f564e22a35c5", "comment": "Malware payload (Mirai)", "value": "b6da59abf7d2e6cd9063a293fe8675aa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092743, "uuid": "d47be74c-41bc-4403-8653-c15719b3f40f", "comment": "Malware payload (Mirai)", "value": "6fe08fbb1fdc3af2b13eef7e9f412333b6ed435979301f25ebdaacf96db9b24f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092743, "uuid": "fc1c5768-560f-45f6-947f-8d9cd02e6f2c", "comment": "Malware payload (Mirai)", "value": "df6bdbd1504976193833e9e0114b880f8f17405d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092743, "uuid": "1b108f6f-3dea-4b54-aff2-d794a16d05d3", "comment": "Malware payload (Mirai)", "value": "dab7a79d128b6a69a6351f2fddc011c1b0c76f5980afc5fad5a15e258ca18de0a545ca4ace7dd9ecc6bc9763a19c2d2d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092743, "uuid": "e742fb1a-f705-4041-90bc-79d900a51c2b", "value": "T11933098AB8029D3CFD1BE6BE54164E0DBA3177C15283072767BBFD936C721A45E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092743, "uuid": "3ccaea0e-3596-4ddf-96ad-db69a0cb9d85", "value": "768:YpKPlpr7ocuR8qOCjugHcF6ee+TO806MsS/zMngXO/DOBqAG/:znJq6g26eeqO806MtMngXuDOy/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092743, "uuid": "ea2b5323-5e7b-4505-8496-22a1e4a5cf87", "value": 54936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092743, "uuid": "fcc00e32-14e2-4f88-b0a1-b18f1aae5b6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092743, "uuid": "8cfaac33-51f5-46f1-a469-62155b533a4d", "value": "b6da59abf7d2e6cd9063a293fe8675aa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ab2dee4-df13-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098337, "uuid": "d0bdf564-13ec-42fe-9f40-c928aa37cf03", "comment": "Malware payload", "value": "b55b1cd7a8a75a0b390438489d6f4b88", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098337, "uuid": "3622c55e-c260-4d90-8d5b-6c2743547f52", "comment": "Malware payload", "value": "70ee38e442eca20ab577211da07e26da4d15e0aae95e2dc60114f71a155b7b60", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098337, "uuid": "f4d656b3-f15a-4356-bc26-e8caf2f9be82", "comment": "Malware payload", "value": "ee40037e490eb0763c38acc01df247e55aaf3df2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098337, "uuid": "f9b8598c-5b8c-4edd-9c25-2c591eb7c638", "comment": "Malware payload", "value": "b91d9916239af63f45f614543a40ad72c14a72956da0d1ac0c255e023f8be71d493dfc2cfb3027e82ff3de9e58f800d2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098337, "uuid": "6c0cc808-c3cd-4018-ad5d-4066ae6de490", "value": "T1A0A33943A72D0F83C4DB99B12DB72BF1876DB97112A361C1690BEE9003739B81517FA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098337, "uuid": "9483774d-735d-418b-acda-19769307ee05", "value": "1536:7QQfckMzQzgv9OtAC0QptczD3z+FavgcTXvEmL49VqFjtUfkjX:7xH/JFDtczD3mC7vEmU9VqFBUfkjX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098337, "uuid": "72987dda-b490-4743-85d6-0ad4d0d6e00f", "value": 99023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098337, "uuid": "f4b3114d-9e78-4767-91c1-72f3d5f7d97e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098337, "uuid": "5dfde011-f077-4aa1-a802-6f5de97f3383", "value": "b55b1cd7a8a75a0b390438489d6f4b88", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e29ada-de8b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710040110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710040110, "uuid": "bc391318-ccc9-49ac-98a8-d924cbd769ae", "comment": "Malware payload", "value": "5c5d6caa5eb113b5d3b90def251fb3cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710040110, "uuid": "1108e703-0fc7-480a-ab23-244344707441", "comment": "Malware payload", "value": "717471c75c786397320e0819f301936ee538d325ea8b3a3de838648f3824a5c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710040110, "uuid": "f4e9408c-c199-4714-bfd1-5fe0061a9fd7", "comment": "Malware payload", "value": "02e64ffb5d638a8fafbc9dd9feb63868de1231ec", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710040110, "uuid": "1b036397-b91c-45ab-9770-9027ed06d85b", "comment": "Malware payload", "value": "3058c50d4bb7835b668b5fa967fdbf005cca7112114a139c58ff7a736a4646d4169f876a1ac4096d7cf8753480bf473b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710040110, "uuid": "6998afa7-ce8d-4dd5-8c50-e4870202eebd", "value": "T14545F112F680C076C26232314E87C7B6B2E5ED24BA355BB737D42B3E5E742C1893975A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710040110, "uuid": "c80c6afa-5447-44cd-9635-30a7c415ff9f", "value": "b7f2d2fa6957f1a773dabb76c22fa4a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710040110, "uuid": "a9888b11-c6ef-4c84-b3ec-5676f21cd937", "value": "24576:fYDGpx5RWaAYHTrxmUmaS4fMbugxtHH8tU7uGmbnMie:fYDGpx5cwHTVmUmefMTtHudbnLe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710040110, "uuid": "759f41fc-5dca-455e-ad2b-5bc111c93bbc", "value": 1261978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710040110, "uuid": "696ec3a6-d804-4a8c-8f60-247b6baf7929", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710040110, "uuid": "6fdb60b1-e459-4cdf-804e-088f1abe2390", "value": "SecuriteInfo.com.Adware.Presenoker.18459.22298", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed415096-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710109884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109884, "uuid": "44c22b38-1802-467f-a8d7-06cc72c03b5f", "comment": "Malware payload", "value": "44e9e9a278a060436e7ecc128c55461d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109884, "uuid": "d0d64243-e180-409a-bf9c-964a73a81a85", "comment": "Malware payload", "value": "7265bb781b484492f98455c0129fce01a38fc0828c65ca6da3c3cb8a96068fdc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109884, "uuid": "fe9bfcf8-83cf-4a2a-a037-bf38ee0c25d0", "comment": "Malware payload", "value": "3a8a5711f172d8bfcbc55a691391c5f5ef418109", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109884, "uuid": "355ffe33-9a1e-4b4e-8477-ecf7606b5890", "comment": "Malware payload", "value": "b105d173adb1afb4297b28bfc099e62b6d6749e2a5696e5b1abc1a1043b3330d9518a300277916b506843ec02a72435f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109884, "uuid": "db3b49ee-961c-4a10-808c-58fcd6e38b4f", "value": "T122D4238AF4F51049DF8871F338298D92B0EB44A37E995E1087CFC10AF366DEA4AD0761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109884, "uuid": "3368f1c7-cc4a-443c-8d4b-20babd3af9f6", "value": "12288:yFRwKNHZ0Zy11GBlm5noRNVyOW8CU8R1TMiliJXXJS8GgOjE7bz:OwKGQ11GBSo/xW8gqiUpoEL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109884, "uuid": "fb94945d-4cfa-44b8-b41c-9607dcddd225", "value": 647680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109884, "uuid": "811a0101-323e-43ab-9bf2-a253e4671a97", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109884, "uuid": "deff9d5e-c803-4f4a-bbf7-b617dfd91c9b", "value": "SecuriteInfo.com.Trojan.PackedNET.2147.26714.118", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e9aeef-df0c-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710095557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095557, "uuid": "22206915-4d4a-433b-92cc-d28f172ecb1e", "comment": "Malware payload", "value": "fc5e46e4255de75be76ed00e1fe8ae26", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false }, { "name": "password-protected", "colour": "#3D71D4", "exportable": true, "hide_tag": false }, { "name": "pwd-beta_EKhZFa", "colour": "#180EBD", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095557, "uuid": "4bae0e19-680e-4dc2-8d23-857cec5f4f0d", "comment": "Malware payload", "value": "72cbd12a88b137df40260828c14fc567a44bfdd7ae1ed840a6c46d3561a78d58", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false }, { "name": "password-protected", "colour": "#3D71D4", "exportable": true, "hide_tag": false }, { "name": "pwd-beta_EKhZFa", "colour": "#180EBD", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095557, "uuid": "e431bb4e-06e9-48b1-8fcc-20f815bb02d8", "comment": "Malware payload", "value": "0a4bbe3b1faa6bf6e001b1b415d1520c23b27409", "object_relation": "sha1", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false }, { "name": "password-protected", "colour": "#3D71D4", "exportable": true, "hide_tag": false }, { "name": "pwd-beta_EKhZFa", "colour": "#180EBD", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710095557, "uuid": "a386bf77-1020-4e9f-a0e2-c1d7211a8527", "comment": "Malware payload", "value": "1d8eed88e843451f355fdc7a5699bd08e7f5d1b46bc38ee615f3772a772850f55a935c9ca564133d6d258d30ce6b482d", "object_relation": "sha3-384", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "mauqes", "colour": "#3BF91D", "exportable": true, "hide_tag": false }, { "name": "password-protected", "colour": "#3D71D4", "exportable": true, "hide_tag": false }, { "name": "pwd-beta_EKhZFa", "colour": "#180EBD", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095557, "uuid": "e1af363b-14eb-420d-96e0-d754e66e626d", "value": "T105E63365CE840899367311164E942390F3743CA7C6BAF19E497C2FD3EEA62ADFE51C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095557, "uuid": "9527a30d-d59b-4290-99d5-c1fa1a62bee4", "value": "393216:IGXpQQkNZ8YoHfKYO50UU0vLv+vkdzF5NGoR/lbK78h:IYrlHfK/K+L48h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710095557, "uuid": "2a3d85dd-a545-47dc-97ea-c7ad53c3a2d3", "value": 14141890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710095557, "uuid": "06664cf9-b242-49bb-a273-a0fa4ddadd4a", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710095557, "uuid": "0fcd2c25-828d-4259-9978-61a7805b3029", "value": "Mauqes_file.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ce8be86-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077376, "uuid": "d1f6fc5e-3236-4997-8bb9-e4abd0f6e4e1", "comment": "Malware payload", "value": "54884a90a01124b350daa42d10d9e263", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077376, "uuid": "5edfc501-8c23-49d5-b62d-4f45849f4d17", "comment": "Malware payload", "value": "754e30bc20c983a4c4745153691c804de51dc925da8eadd53cc8dfb1ccd5cb62", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077376, "uuid": "fd7a781b-b05b-4bdb-8952-884d7e2f3841", "comment": "Malware payload", "value": "3e1b70ac15f09e48ade397d7544aa2e1f016e735", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077376, "uuid": "163efdff-452a-4956-867f-0a9cc6730007", "comment": "Malware payload", "value": "7fc09c4adc87dbc62a616843dc7fa16db13e02bc26288c7b765d5c6fe5ce905d5147db541f929c9a2fa80d271c67d266", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077376, "uuid": "71785b15-339e-43b9-a802-f64c7917b759", "value": "T107D2D64586EFD9F2C563147611EE773FB3158DCA4181D60641B2FE2ABE36283F22DA06", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077376, "uuid": "6d5af7c1-cb26-4608-b5bf-7800e6c69c31", "value": "210e88ac662ec7bfcfc474be9a91f646", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077376, "uuid": "5ea1cb38-2587-469d-8335-732ced978ff1", "value": "192:lbnpA+6A6tYuthc+lIVfO7iq+1nPD85jOkgUIVkfM9AH2c1vfCahNqwqA2/vppev:lVyNnthl8nkxHdnHqF/xwcmDT7tMBH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077376, "uuid": "c082ce59-b4a2-4e2c-b854-2cb8b127ce07", "value": 28672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077376, "uuid": "348f5b61-2530-4944-8e17-3247e0f7bd70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077376, "uuid": "c3e0e531-0fdd-4751-b148-7b3f2546752c", "value": "SecuriteInfo.com.BScope.Trojan.Downloader.29034.31366", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abbd6bea-df39-11ee-b7ea-42010a9c0006", "comment": "Malware payload (CobaltStrike)", "timestamp": 1710114928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710114928, "uuid": "0320b950-b2b2-4d5d-ac0b-2bed79d47bd5", "comment": "Malware payload (CobaltStrike)", "value": "333b79f6f5baa4fa31f4b9088771062c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710114928, "uuid": "85146009-a0f4-4464-a5fd-ce9693403373", "comment": "Malware payload (CobaltStrike)", "value": "756323b6f9ed389433da8b23172d8126a477308cbbe2f2675e9cd16fa34ce80d", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710114928, "uuid": "0b78cd16-8024-4164-b040-ce899de8bf58", "comment": "Malware payload (CobaltStrike)", "value": "10a7c1cee721277ae73228bb3f39cfb11bf5733f", "object_relation": "sha1", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710114928, "uuid": "96f202ce-c554-4f9b-84b0-b1b8fe11d7b8", "comment": "Malware payload (CobaltStrike)", "value": "0f643262090365611db97037a3f896795884a7875fd01bb3fddf9805c2d2c1b8bd15618b75e752019e5a7817e2e83618", "object_relation": "sha3-384", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710114928, "uuid": "4ac1b469-2b51-4637-8a35-6e0f758a9819", "value": "T14292EA3FE71368E9C106D57885FB3732DCB13DB385A6A31E1724D2B42E106A46EAE550", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710114928, "uuid": "b98162d5-a2fa-4c1b-950e-949cbc2bae20", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710114928, "uuid": "f368f049-5eb7-4f28-a2ec-15193a5ac1bc", "value": "192:fV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2SL+9hPWF8qa1Dojjgi:ZqaCF31cix+Dc4zjLL2huFF46gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710114928, "uuid": "1142bcc0-5b76-4427-8d79-ee2fb64a07cf", "value": 19456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710114928, "uuid": "f3bfaa9b-4540-46b7-b5f1-33b29c166bee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710114928, "uuid": "268547c3-ea61-4795-9206-10dc4b289072", "value": "333b79f6f5baa4fa31f4b9088771062c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbe4f85a-df0a-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710094822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094822, "uuid": "84fac44e-b671-4001-a7c5-53ca92ee260c", "comment": "Malware payload (Stealc)", "value": "217d8ded3c28fba290c4a41b313ac685", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094822, "uuid": "921dc745-7374-4fff-89aa-6999601d73c5", "comment": "Malware payload (Stealc)", "value": "77940969714dc102b3cc802299080a75e1122cfa1323b49d94e7e3bffa6ec8b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094822, "uuid": "12805fca-2223-4c09-812e-d9cc949783c5", "comment": "Malware payload (Stealc)", "value": "1309687252e1fdc9407f9fe7af4f8886fe344994", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094822, "uuid": "39060ab5-e934-4450-a334-113e244f453e", "comment": "Malware payload (Stealc)", "value": "7d6a89840af509fb686001b70cfa619c9bca67a7111ad479833ff079a8690bbfa63ad18e545c407718b953fc1789f14d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094822, "uuid": "d57ee8e8-183e-4f67-8625-b866ecd16081", "value": "T10914CE1D3AE0D07AD0AB563359B1DAA0DA7A7C43F330019F2768232E4E717E44A76367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094822, "uuid": "df78a708-9b61-4c2a-94aa-58169250a38a", "value": "4f55e2a30ec0c2d3680e7e87f2ea376a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094822, "uuid": "58ee0c31-448e-4fae-9631-348da6e74fbc", "value": "3072:NvHcxyLXzal7/+6eFWu76BjQCxCZAVXPi0Q1r4N8hUsOArUuyUb9:NH7LXeNm6EWDjQCxCGxPi0Q1tUBA6U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094822, "uuid": "08edbe1a-7844-419d-9f10-d161f7c6ce5c", "value": 204800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094822, "uuid": "968cd596-d1a5-4a71-9b96-1deb4bfb275a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094822, "uuid": "3422c337-b46a-4ec7-8e21-9fda0e2872d7", "value": "217d8ded3c28fba290c4a41b313ac685.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047b1693-df13-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Gafgyt)", "timestamp": 1710098326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098326, "uuid": "3b108489-e560-4230-87ac-115f1acf2e00", "comment": "Malware payload (Gafgyt)", "value": "e3995fd498b9d78d144a2501360a0503", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098326, "uuid": "c1913f6a-460b-435e-903d-920a4f58582e", "comment": "Malware payload (Gafgyt)", "value": "77d58a074be5b228d3bb8fea82b15abd04a252e1455a9a0b32d94aae9ec38432", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098326, "uuid": "ff28721f-9867-4a1a-a109-fa7dce634336", "comment": "Malware payload (Gafgyt)", "value": "f579c676a1957ce3e6fc47e1019b1c2ad9a45178", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098326, "uuid": "c6f53b66-19ea-4f40-bee4-a64a9115c3b8", "comment": "Malware payload (Gafgyt)", "value": "781abac93a1fd7d67caebb41413e88450a53ce81c77c0f70348b4a0359ece69281cd97c3efd845d32f3acff836cd4f9b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098326, "uuid": "ab462d25-fff2-474c-b2a4-59c2fb513328", "value": "T108835C49D747CAB3C88307B2029BBA764532F93B5E2E9E45F70D7CB49B124D87226712", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098326, "uuid": "bdd64592-a968-405d-a394-ecd5d55a2daa", "value": "1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwzUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5dw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098326, "uuid": "b7ec8a76-296b-4876-ac4d-d8924d614605", "value": 86409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098326, "uuid": "994575ed-1e6b-402e-8e09-4cf5b5d929dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098326, "uuid": "1d86a0d3-4baa-4fd5-8ea5-4bbaf65bfaae", "value": "e3995fd498b9d78d144a2501360a0503", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ead8150a-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710109880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109880, "uuid": "944d1d5a-1cda-49b2-84e8-cc7e900c9ca9", "comment": "Malware payload", "value": "6bf624b52f5393d2665290673c157104", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109880, "uuid": "eb267373-98c0-4ae4-84c4-4294b837d122", "comment": "Malware payload", "value": "786c9de1ad28c6ec8ddaaf19ae0dcdd4f0fe2be879415a00e75ba3cb500c4b12", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109880, "uuid": "00bbc083-007c-4153-892d-6c5ae7b04151", "comment": "Malware payload", "value": "ad855cd0c462a55c7c57e08e9c64be28424bd8ce", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109880, "uuid": "a14aeca1-6d10-447c-87a7-e8d8dd6b9f24", "comment": "Malware payload", "value": "b0d83e4be42e6c0aa20ce21e83d95f0d680e309981208341794b1419fa569d990d030d36b652757b47a59b61bc20fcf6", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109880, "uuid": "c0a3c9a9-bd33-49bb-b696-d2c701fbfed3", "value": "T18971D613B920C2A0C47990768C72D5C4BA187C8DEE05A81374227B3F6FF58E8D484296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109880, "uuid": "971d5c5d-0b89-45ad-98e2-2f40fb43cabd", "value": "48:rjwIAJFbOUC/ikXGRQoN54nrmeTaO2wvy+Xb:P9AnfC///qeTaB+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109880, "uuid": "92c88f85-7fb3-473b-b4fd-c0f50dacb941", "value": 3584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109880, "uuid": "5758d7c0-a783-4b5b-8f36-339699a06f4c", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109880, "uuid": "5ed3025b-988f-4bc4-9b90-6d3f28a537be", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.8245.18093", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d76e3f7-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094986, "uuid": "2df3fd35-9132-4f24-9a4d-5d914fc86b90", "comment": "Malware payload", "value": "d4abdf11e1af619dd0d6635827d4ddb8", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094986, "uuid": "8fe94501-6ad4-4cff-98c8-23a908e600dd", "comment": "Malware payload", "value": "795d2b3d3a8568730cfcfd268dcf5bd7b5c68ac588fe2c06859c9c7f68ed7ed7", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094986, "uuid": "62f6e470-4b99-4e37-9c57-737d9e16dfbc", "comment": "Malware payload", "value": "33a2e7cbd34d9850567d094430d6fac81704fa6d", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094986, "uuid": "17ee441e-c371-45d0-a12c-2bbc8ba03415", "comment": "Malware payload", "value": "ca6d067c956fb60d9d6cfacec146b848e46b19f596094be436f68415810cd07d61530ae0fe7a9ecc66da9257bb97add4", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094986, "uuid": "f4773b24-924e-4218-ad34-d99f315dcd73", "value": "T16471A270B6E1DAA9D4A40A75CE1CF6E366367C85DF28A703B1C6332E7A313928005E41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094986, "uuid": "6b7be421-4763-45e0-a982-e1d94f14e183", "value": "24:rq08DBr7YYmN38HigdxcXunezf10YKeiMMOKPBD8QcCkkSDs7uh:rqDBrGPgzcXunq1SMMOMBD9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094986, "uuid": "d219beec-f95a-40d1-8682-961efb2556cb", "value": 3584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094986, "uuid": "343b25d1-ccd1-42c6-aeef-3021ff02e59f", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094986, "uuid": "1a1dc265-d251-405a-9825-5e3cc44c10b3", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.25352.9574", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b39848-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077387, "uuid": "e7810629-e2de-4e54-84e7-5b48cc8d9544", "comment": "Malware payload", "value": "74a07a048837f9704b80066a94799b49", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077387, "uuid": "6dbb6ca9-076d-4fc9-a809-fe5eb96047d5", "comment": "Malware payload", "value": "7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077387, "uuid": "f403f804-7777-44c5-8ed2-a3f17d710cbd", "comment": "Malware payload", "value": "dd75437a67aac21f42e20a8d8b7c8d00840b7e10", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077387, "uuid": "b9634501-8648-4cf4-aa65-5f93bf628a16", "comment": "Malware payload", "value": "a88eca6e47719c3bbe06692db4fdc7cb4b013d9e6c9878782c2a61e3af54f6eacd43ad354b8bc1e7d3cd37f88db9f9fb", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077387, "uuid": "52023097-33c8-4522-9543-3ccbe465e374", "value": "T1FA756AC63BD8C951D2F826301D616EC65D6E8D20FD8E81623A0C7A6F9F379E01B36D61", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077387, "uuid": "d6a0e367-8942-4305-88f6-f9a0003fe8cf", "value": "a6fd7854ecebaf35762991efad241558", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077387, "uuid": "318ca835-2bd6-4a27-98b1-9fc35b187583", "value": "24576:RscghjFFuCOjfTYs06OVzVeDl9UwdnQ6:6DsHsV6yVeXd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077387, "uuid": "ccd28f3d-80a8-4c0d-9a19-75d580a5488d", "value": 1581825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077387, "uuid": "010ce1c0-ac3d-420c-b934-86b89a81cc7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077387, "uuid": "b1b148a7-eae6-4273-8aec-098e8b3e3287", "value": "SecuriteInfo.com.Variant.Tedy.520099.14081.5948", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee9870fa-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710109886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109886, "uuid": "b94ec6c8-01b3-4c3a-8b67-7c7ea6bf95e4", "comment": "Malware payload", "value": "94d2c41208540f0a763773aef48533f7", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109886, "uuid": "f9cc8b3f-4fa0-4bc9-8569-99f6103ec1d8", "comment": "Malware payload", "value": "7f7277cb86d5836c1c206c6b8bc4edc8a31859e64dadbb356371a26cbdf4db68", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109886, "uuid": "6cbec44c-9b77-4ed5-9b73-73ac022db40c", "comment": "Malware payload", "value": "8223666ddfdc6a2ce4ec8238fc4161029048b387", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109886, "uuid": "cd3c25be-0c87-4e43-a742-a02892cb9d82", "comment": "Malware payload", "value": "2b92a5bba45c312ca3234a1887bc388378f279421ef99fc57afb8bf4d11e67658fbb678f30dfd6b564dab9449b39cb21", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109886, "uuid": "4b25f931-db9a-452d-a95e-9faa33cc8502", "value": "T17881E670F678E836C5C99471AC2EED85032DFC02FF2525437684775D48B0B60828D32A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109886, "uuid": "1219dcf8-ded8-4f87-bdc1-b7908f86db1a", "value": "48:rw0EmnD298vLq8cpW5dToplTg3ga2EscPr8OCNK+Z7p:M2nD298u8cpW5Kpxg3ga2EscT8OCNT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109886, "uuid": "bfb2e665-0aa2-4ea8-b9bf-8f24fc792bd0", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109886, "uuid": "8fc5f446-b4a4-4d3c-b097-bc70537ee342", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109886, "uuid": "d3204b85-63aa-4431-b462-3869683fac45", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.29599.9352", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "439b5253-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Gafgyt)", "timestamp": 1710098003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098003, "uuid": "d48a40f5-ec71-49a2-98a9-44a86b0082e8", "comment": "Malware payload (Gafgyt)", "value": "30cdd978678c9af176def0770a652740", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098003, "uuid": "4497e88c-72ea-4708-9b51-1433ccdd8fe8", "comment": "Malware payload (Gafgyt)", "value": "7fdc310ffd1cb5088bb35af925105220de5fb8cb4cb3cb5c889a93f5ddd0420f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098003, "uuid": "9b1b80fd-aba3-486e-9e05-a2b82117108c", "comment": "Malware payload (Gafgyt)", "value": "ec4d2cf43b6214153dba390204d2f820ba59df6c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098003, "uuid": "721adf68-8b3e-4767-bf61-3ddeefa3243b", "comment": "Malware payload (Gafgyt)", "value": "eddbbc28cbc247a2f6f08f7c18aa4d2d5878c2f0a2bf269c3b530ac1c94d61f3de8fd6eb5346fb5b018aca6c44d9cef5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098003, "uuid": "5aa77bc2-af48-4efe-84d8-36b77d8e07e3", "value": "T1FAB30804F8448727C2D327BAF78E439D7735566457DB33116A38BEB82BC6B982E29170", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098003, "uuid": "21871308-b998-4c54-871b-4d82f49e7caf", "value": "3072:9lX2jKRi0ZDvCTpWv7DSubUmGVrQAXiUXouX:6j6ZUpWv7DImGVrQAXiUXouX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098003, "uuid": "ad4d1e2f-3cb6-497e-a870-411a967e7ef9", "value": 112657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098003, "uuid": "b23bce01-4ebc-4a6f-8703-34b8db3d9772", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098003, "uuid": "d4758d74-0cc9-40d1-bde5-30b1690931d9", "value": "30cdd978678c9af176def0770a652740", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0243629-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091313, "uuid": "77552836-e8c7-4db7-bf39-e482ca28bd9d", "comment": "Malware payload (Mirai)", "value": "d985d8cd26a55be270498f8ee82a9c0c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091313, "uuid": "5a26c2a3-9782-415c-a43a-8b591603f375", "comment": "Malware payload (Mirai)", "value": "8121413abe6fc0e8d91b859398a59f17a6f97debdcc2d731b290d2df2d9ad8fe", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091313, "uuid": "36fac330-4149-45d5-bce5-d7321af1c1fd", "comment": "Malware payload (Mirai)", "value": "b1f2a5611a93d352119b2581d7ab7d3342cf7809", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091313, "uuid": "459d4ddc-e9c5-46c6-94d8-1e4cb168d12e", "comment": "Malware payload (Mirai)", "value": "6d38399d8556a2676c5e3aae3793d5a212e8f6cbd6a45593e3f71514b580efde763a7a5483cb824c293b79aeedc3cf79", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091313, "uuid": "d43dc10f-3269-477e-bf37-3bb93ecf4e9a", "value": "T16D23F12855A5BEAD80B02F3ECED9C546755739F890B668F221DE828C8F414C138FC9D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091313, "uuid": "ac397c6b-8aa3-4345-a77b-6b3164f9816d", "value": "768:xOsB+zn1If1XbPbzcU22PgHiGKUrkLi2u4/LbWCCH9q3UELYIk9r/e/lQMqqzA+j:xOseO1j3cU/PgH97rkhu4/mCvLYIO/e3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091313, "uuid": "beba72b3-f3ac-4f49-bcbe-5a9dd1c28ac4", "value": 46636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091313, "uuid": "31c19c3a-af24-4eb4-ab83-bf9f9deeec6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091313, "uuid": "a08409cf-08c4-4a25-ac14-9e75feb68458", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39c12404-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077370, "uuid": "63f530e2-b6b0-48d9-989f-7537e2f59505", "comment": "Malware payload", "value": "cfc0b02e72c5c8e8f2c10accfb720eab", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077370, "uuid": "c3354537-04ac-4b22-99ef-338eddc468e9", "comment": "Malware payload", "value": "836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077370, "uuid": "cf406e29-4eb6-4ae6-8123-9b3352e22994", "comment": "Malware payload", "value": "1cfa768242d4d502e7cc81a39be649b60149ac4c", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077370, "uuid": "78d702d3-f4d6-4114-a80e-a140ef024533", "comment": "Malware payload", "value": "fb635d3cca4a0cbaf847ecc2c74ebab22ce11cb5e9f92e3c9041f0afeee7a2d51d83d3a7e86992e266d69c6dd1a73a44", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077370, "uuid": "5ac62f7a-f543-4479-be96-2c12017c2be1", "value": "T171A5CEDA27C9C451C2F86230184A6ED25D6E8D20BDAF4162BE0C726F9F379E12776D70", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077370, "uuid": "f497c465-cf06-4fe9-b50f-b7ae46f1c63c", "value": "0e5cab6151235c9b90eec6aca8a7c6ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077370, "uuid": "8908083e-f9c6-40be-8820-9a0e6366c5a5", "value": "24576:4HBaG8usSwizF92oQt85an9SLHAnYhJGxKzEr2S92p31W09f:E8ushwibt85aGH5G8S81W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077370, "uuid": "2a937046-2149-4f5a-ada6-b438641e1de9", "value": 2230328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077370, "uuid": "e50f216d-43a4-4ab9-b136-4d0efc5baae1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077370, "uuid": "214bf38f-5de0-4714-b3f1-ef6a029041d6", "value": "SecuriteInfo.com.Trojan.Win32.Sasfis.5783.26814", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "402710fd-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Riskware.Generic)", "timestamp": 1710077381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077381, "uuid": "3469d8aa-a253-4df1-8199-3a7ee72c013d", "comment": "Malware payload (Riskware.Generic)", "value": "3b688b75649ef910eabc215d7264d72f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077381, "uuid": "de049db1-3225-4543-aeb3-26f978c4a92b", "comment": "Malware payload (Riskware.Generic)", "value": "859a1e537099af06c48d9acbfa1870698fb2412a8b5d3fe37e9b6ab363f931da", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077381, "uuid": "4c256b9c-4b35-48fe-be58-b592e5e9a415", "comment": "Malware payload (Riskware.Generic)", "value": "3c4f54bd45b8c75dfae67a57fd685fa7fd43fb50", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077381, "uuid": "fdeede4a-a692-4036-b181-acf2898dfb70", "comment": "Malware payload (Riskware.Generic)", "value": "458322bd923a5af80e0c113e33d6f04b7f6bd998e5ebb6ba20659a9db32ce5b60c4941ef02d1239f47b919d0e08fccb4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077381, "uuid": "46abefb9-6464-483f-a4f6-47632790439e", "value": "T1DB35AE13749280F1D1291A30997A97BFDD319EE50E35AA8FA3B0FE293D37152C53B11A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077381, "uuid": "1b1173f9-38dc-4692-8337-2542545e8bb7", "value": "ecf89b84a47842999801bedf07cfa23c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077381, "uuid": "3dee3777-7624-485d-a9cf-24032285852e", "value": "12288:l1KTnbt0YAXWSQez7dAAcK0CWY/JjioZYCj+l923hT3QX/EMK1nbAftNQLkN:l1aZdAgVKjWY/Vi2hT3QX/l2EfvQLkN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077381, "uuid": "4387cb75-da21-49a3-8889-b94c78932073", "value": 1126400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077381, "uuid": "5ecfd039-160b-497f-a83b-65194c68dfa2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077381, "uuid": "b1aa012b-6e38-4451-bd30-830c61091af7", "value": "SecuriteInfo.com.FileRepMetagen.4849.26373", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fad3ac8a-decb-11ee-b7ea-42010a9c0006", "comment": "Malware payload (DCRat)", "timestamp": 1710067816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067816, "uuid": "73dc9fc6-698b-4fe8-92b0-076ee2ca9943", "comment": "Malware payload (DCRat)", "value": "09eef44272d050d8054cf913ed7bbf48", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067816, "uuid": "e1013b40-f4c1-433d-8879-d7a48abcda53", "comment": "Malware payload (DCRat)", "value": "87f220dad3bbeec6f39ed3e74eaa5b63f91924104b238fd33b4c5d49cc88f1ac", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067816, "uuid": "28c2c27d-e299-4f67-8aa7-fc53a506a5ee", "comment": "Malware payload (DCRat)", "value": "b4cd2add18e8445529b107d5ee847b89c70db333", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067816, "uuid": "f28f0931-b209-4c25-bc29-48f796fdcb49", "comment": "Malware payload (DCRat)", "value": "e6eb0610b3e9e55c1aad620347a275eb613d3072669f3efd0ba0ed22fe38878df211698fc60d61f154d68ffe646fe8aa", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067816, "uuid": "1ebe2702-49f5-4c4a-8a10-2ffd278a0f95", "value": "T18AE5E0017F48DE11F0191633C2EF4A4847B0A951A6A6E71B7DBA376E25123AB3C4D9CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067816, "uuid": "eb5d4e8d-2cc6-4244-8b59-5b58328f762c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067816, "uuid": "26b90555-8350-46a6-a48e-f4f2f12a4c24", "value": "98304:Cc8eC24luyRsHatJTnXk8AkY9/7x0go6/e6BJ4:9kuyRsHSXk777oq3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710067816, "uuid": "8e4f0f9c-fc4c-41d3-b849-11e0ae1c94ac", "value": 3306496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710067816, "uuid": "5016c63c-a6d3-4df5-98c1-9ee76fd384fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067816, "uuid": "48950313-87db-4d61-9c68-55830df2af5c", "value": "09eef44272d050d8054cf913ed7bbf48.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbfd5c48-deae-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055282, "uuid": "5f5634ea-5b65-4b97-bcf8-9360f80c6cf9", "comment": "Malware payload (Mirai)", "value": "493985d7e764e8ccb4af1a66bac17cac", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055282, "uuid": "57ac00ca-ca0c-474c-81e0-d775014da055", "comment": "Malware payload (Mirai)", "value": "89008e2a6cf130a0066d870156c04a88c5afe089bef22476388556697a053696", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055282, "uuid": "db4742b0-4996-4d40-86b9-48d926eaf19d", "comment": "Malware payload (Mirai)", "value": "f599844aecfd409f0d52bb51c3e3edf22b238d1a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055282, "uuid": "00b9edcc-bbc4-411c-91d1-93f7b4df3be5", "comment": "Malware payload (Mirai)", "value": "11bf0921a5cf010c1355df33454e6dade2370f0ed2b7d59471dc821df80a9974a2a14c912430f9052cf4f8013dfbc066", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055282, "uuid": "8631b831-5eaa-4857-b2bb-d9e5c8e722c1", "value": "T1C292E02C02C2ACB0C9B08D31CA6DCE997B130EFD65F939382054A7B0E6D655393B8755", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055282, "uuid": "e094a2e9-cf7d-4d9f-9206-e5eea3771daf", "value": "384:Vy7WQCE2EIlPyhCYWXjXxwy8A6zao8dyihymdGUop5hh:rQDV06sbey8AGKs3Uoz/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055282, "uuid": "c713c956-9007-49da-a921-7f4f0e85a640", "value": 19932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055282, "uuid": "a3cb540b-3393-4444-b1f1-13a3cb8bf9ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055282, "uuid": "b1c339cc-9db1-45ce-b853-555a92900434", "value": "493985d7e764e8ccb4af1a66bac17cac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40cd8184-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077382, "uuid": "1f543717-1a9b-48a2-bddc-2259cea6bcc7", "comment": "Malware payload", "value": "e0ff43cf78b4c16ca99e8aad6f08af0b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077382, "uuid": "cbe41296-c9cd-42a4-81f2-dd8b47ac6f9f", "comment": "Malware payload", "value": "8a1099f9409dc32446378dd147ea1182dfdec54822a2acdd659d6ce0e64823a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077382, "uuid": "9340955a-572d-4b72-a67b-f48412ff754a", "comment": "Malware payload", "value": "a90685c5e18e8971388ee7f5e0247b2880d15b67", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077382, "uuid": "a2fa721d-7434-4b34-a38c-48d69d21f01d", "comment": "Malware payload", "value": "980b410bf4227c03f4dfe28fc612d7594cf620062018023af277f0d983f8b2ecd8db23522cc21b9e33f93de32af58fd4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077382, "uuid": "dab0a737-2dc1-430a-b115-a7e588394509", "value": "T11DD4231A3DCE8762E14D1471160D69E6A455EF233B2D836993763A0BC5F83B031AEF6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077382, "uuid": "a862660d-84a8-4c22-b47a-29ef42879154", "value": "23615023d461e78d0629dc17085ae148", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077382, "uuid": "0f59fad0-762b-4090-b602-936eb7738471", "value": "12288:/E/wGjJu2w+CS80r+7YyT2A2z98qfljTyztvchAA/3MPS5Y:/E/wGjJNhC8r+75F2J8qxyRc9U6O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077382, "uuid": "3765bc19-51d2-4752-b7e7-49a0019ebfc1", "value": 616700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077382, "uuid": "eef0cdc0-3c17-427f-8d59-5ca6156b9abf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077382, "uuid": "f9df5e89-67a7-48d2-80f5-fb373f9240fc", "value": "SecuriteInfo.com.FileRepMalware.31300.5184", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b18dea74-de7a-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710032904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032904, "uuid": "0caf09a3-317a-469f-b5a5-9bbdec8b52c8", "comment": "Malware payload", "value": "f3d6a09990a1a260ba1a2e2219c0fb1c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032904, "uuid": "df17bb08-f320-46c2-87d0-fa6405756536", "comment": "Malware payload", "value": "8a6660dbf1aa0f542aa69455825fd0512587e6beac3f88c99be0e2414d584bb5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032904, "uuid": "67658e35-c41b-4303-a80f-b355f2f612c4", "comment": "Malware payload", "value": "6aaa740506cc409c8a98b73b432926d60fef9e84", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710032904, "uuid": "94ed6f2a-6562-4ca4-bc14-886cea23636c", "comment": "Malware payload", "value": "fed82382c013685e39160b27bbb861523a499a1d80dd658b0dae284b8daf908182539f6aa806d857326ff63304b1ecd4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032904, "uuid": "5bc0787c-529a-4995-96bc-86867fadb86b", "value": "T126969E15BB4AD837D4721A788C0B92C85929BF103E34AC9737EC3F4CAB74791792529B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032904, "uuid": "1a5fe7eb-94b9-4c01-8f27-c2d1a43fbe75", "value": "f69cce634f4480f08f3841950b297bc1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032904, "uuid": "41574c2d-dbbe-4887-a123-ae0a06136369", "value": "98304:gzqG0mWZDotHa7vgbDpfKclYlMWm3Z12SYVAqA8/QY6hlCabD/91v2DYrU4zOMio:gOG0TEHiwDylMV292qh/cMabDTiLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710032904, "uuid": "761fd5ed-0c72-42b9-a46b-b01d554d086d", "value": 9178112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710032904, "uuid": "b7c22334-22ea-4eeb-a4b7-98bb770d2840", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710032904, "uuid": "b2e61bca-2dbe-44d2-b5cc-1742da8d9f33", "value": "SecuriteInfo.com.Win32.BackdoorX-gen.24037.1276", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff01f6ff-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710092734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092734, "uuid": "a88febcb-4cdf-45ff-8af7-ece38f142fa2", "comment": "Malware payload", "value": "551e54b2921b165f004d3f573ba08ba3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092734, "uuid": "a09550bc-fbf6-4497-a434-30933383bae1", "comment": "Malware payload", "value": "8cc592499e77772377eeb45f015086ac4a1b44def8749b3f7132bade5719b039", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092734, "uuid": "8aa97ed5-73fd-43b4-bb33-f207034a043b", "comment": "Malware payload", "value": "8c3d0a24e0a5cca8658925a5282e2bab4a77d827", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092734, "uuid": "0994e152-d027-4da3-9809-96bca97ab14f", "comment": "Malware payload", "value": "33f2f70e7c31e5d1a72d8f169ae7b82c4affeedb75ef763c428ff9eb8b45a8a329e59ece72d48210c1a3534633ed9569", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092734, "uuid": "ccd4e469-fbbb-4f4e-82d9-57da08656224", "value": "T1C7D3956EFA12EBBEE16C863107F76F70D39531A22AA1D341E12CDA181E7125C2D4F760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092734, "uuid": "483a8ac5-5a22-4c38-8e39-85cdf4d9c956", "value": "3072:jGTyrDxJWwAfr9f3yJddxUEJmTDmjOrWcpu3NJFARtRVJhGvaZqhZYiDhB/ZZ9BJ:C+nZSZ1nJeUmkASFxBKvXZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092734, "uuid": "224a46bb-f9f9-429b-a018-c612accb3b7e", "value": 134222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092734, "uuid": "f17da5c5-e5e2-4623-9711-f872a6874469", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092734, "uuid": "52c6619b-7a20-4f99-810f-a1245bb5d4bd", "value": "551e54b2921b165f004d3f573ba08ba3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f378c744-df32-11ee-b7ea-42010a9c0006", "comment": "Malware payload (njrat)", "timestamp": 1710112042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112042, "uuid": "fc10d364-28ba-4ad2-b05c-a210b516df73", "comment": "Malware payload (njrat)", "value": "2c44baac02534abaa00696f649c2792f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112042, "uuid": "6f511fed-9a45-47d2-b02a-9edc0f2371b1", "comment": "Malware payload (njrat)", "value": "8f21cc5b66c620a939e64945799b90330b3a1a9e2b915e1293ca118a4e504d56", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112042, "uuid": "3009b07d-3b9d-40bf-874e-ac37a6c16a7e", "comment": "Malware payload (njrat)", "value": "58f6eba650cdfa331cf0cdf829b0f927080d153f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112042, "uuid": "b081a76a-c0f7-45ae-ae1b-c8d0eb7997ea", "comment": "Malware payload (njrat)", "value": "8e0da37bf4ea5d50d451b3f885389caf9da580d42b33833bccfd2f9fdb400c3117c94dcbabb215b100b32764bd057d42", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112042, "uuid": "78a58c82-f1ba-4c22-8a52-00931d97e5b7", "value": "T1D3E218467BE54215C2BC1AFC8CB313214772E3878472EB6F9CDC88CA5B676D00251EEA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112042, "uuid": "3df66e73-e547-4fde-9f11-346c47183897", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112042, "uuid": "8d4208d9-eea9-45bf-bddb-444f8d36f6c9", "value": "384:R0bUe5XB4e0XOOZ9Qq1pvmufCsIs0WTQtTUFQqz91ObbS:KT9BuN/Qqvvmu6dTbS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710112042, "uuid": "dc22ad3a-cad9-4024-bde1-3a0bc6004be3", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710112042, "uuid": "81ad7000-f5cc-4fe0-bcd7-00a6d9d26def", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112042, "uuid": "0d6f751d-a197-4f84-aab2-dcafd7aa85e9", "value": "bUb8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee2445d8-df2d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710109885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109885, "uuid": "ffb7ac57-2ece-4244-8b9e-516bf000a525", "comment": "Malware payload", "value": "e587e1b9fc84c2d74fef3181e49ae7c9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109885, "uuid": "248d4940-d773-4779-a38d-04de6056eeeb", "comment": "Malware payload", "value": "8fec5dfa4700630d9ff5f6ca384db8d258fa3b3eb96ae3a564b4ce6b6cab7a97", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109885, "uuid": "a7adc5f0-4153-4664-817f-9dd9c942f99a", "comment": "Malware payload", "value": "18dd63760fc9a538b68c3da6cdfcb453a0cc135a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710109885, "uuid": "25675dda-b2c9-4bcd-a167-59213fc9f076", "comment": "Malware payload", "value": "10a436cce8041afcf8b790524802c9726e9cdc0def76ab99f676899f4486701dea9adabfb57344a45bb1e30b2d67887f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109885, "uuid": "3535ee0f-714a-4640-93ee-87a5da17f248", "value": "T1EB2633A55BDFDAB9F633E8F15A937BBE4A6EA1C93002A8430D8031250FA057512773D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109885, "uuid": "dce97e87-6fb4-4c76-bced-92f0b3b5a009", "value": "2e5467cba76f44a088d39f78c5e807b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109885, "uuid": "64d3b2ba-d68b-4036-a673-2a5c8b43b2c9", "value": "98304:Fll/liVBr5FEfWMGOADxzGsU0AJ3Vl975oxxR1cSfRvVf6rOjv9cS7zQAHgLa:J/cVx5FEfWMHAUN3D9NoZ1cSfltwOhc9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710109885, "uuid": "034a1132-dca9-44c1-a468-ff7526a89d6e", "value": 4672512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710109885, "uuid": "a8eda75b-8834-49f8-9aaa-c63dcd15abe8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710109885, "uuid": "6de340f1-eff5-4b3c-b004-43ee476353a0", "value": "SecuriteInfo.com.Win32.Malware-gen.9070.1301", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00290cce-def2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710084146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084146, "uuid": "f73421f1-b262-48b9-abfb-6e95d8f6a7a6", "comment": "Malware payload", "value": "f49ef74f2b47d17eeaa2c7d59e48637d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084146, "uuid": "cdd2a907-3e47-4385-b33c-27c425631b92", "comment": "Malware payload", "value": "9024e94e66c76302bc6623a9c63de287b4881030ee81cdaec031cce2fe2f428e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084146, "uuid": "d6c215ad-370f-4256-829d-27795ed31982", "comment": "Malware payload", "value": "3325c2e68487e93883da16d8fdf6576096f35d82", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084146, "uuid": "1dacfc5f-1ef8-4c71-a01e-aa8f93e92c44", "comment": "Malware payload", "value": "eb460276e7b08c513567526c700db06a4b493cde58728227d7e6ce564f3050676a2aa3a2df5f30b40cc5c46c7248dd88", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084146, "uuid": "615d39e1-95c5-404d-ad6d-85ac4e585333", "value": "T1EA55193BF350A777DB024970D69A0E3A449B2C746429A467E3897B097BF2DC3E914723", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084146, "uuid": "b34c4704-ac09-4c15-8add-f9e7e243d3f3", "value": "1da4d4c80cff86070d89d6d5acde1700", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084146, "uuid": "755cad02-0bee-43b3-bcb2-f22b38156351", "value": "24576:R7hux25k06Vmld/S2K2bc+oOYqPRZHaBeChxfXBsBYtKob0UjKQoCNuR2+zDcQye:Rhux6pRpoqcrg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084146, "uuid": "ff830e53-a1c8-4f08-ada9-f0c40171eeee", "value": 1286144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084146, "uuid": "1b5da6bd-edf0-426e-8e82-951a15f9306b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084146, "uuid": "2b8c59fd-b769-4584-a50c-3e5e485bc953", "value": "SecuriteInfo.com.BACKDOOR.Trojan.13330.3812", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3edfae96-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077379, "uuid": "f73c4944-bf23-4312-9614-2c0e14fff6a4", "comment": "Malware payload", "value": "8f5b4c533ec8304959e80dcbc7ea18d1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077379, "uuid": "bd6a4bf4-9e64-49bc-8e90-8755e7eb225a", "comment": "Malware payload", "value": "90fdcd6f5153d6162ee866143cd0f11f662c5405bbe82a0d2a9fef38ec3d8f01", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077379, "uuid": "00b6a021-d69c-4fc9-a779-1f99b33eab47", "comment": "Malware payload", "value": "f509361f776225415623470acacd587fbb944d2b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077379, "uuid": "b36d41fe-c5dd-44e6-b4b6-21976fb5e880", "comment": "Malware payload", "value": "fce14d907f18eae3290722e9f1361a5908b495bbb696a0673e84fee0d0d32d848aa5d9a0864f0a0fd49d190e2965c74e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077379, "uuid": "686f34dc-aaf2-404e-9b24-3117a0413d55", "value": "T10415AE76B58744A5EB11167319E3A339EE34E6810BA1EFC36384CF798A331B54D3B291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077379, "uuid": "84eff73b-2273-4294-b274-85830689bfc2", "value": "24576:bhNk9DH2cGs/uM7P7S1IbOcJ2JViymv+:bhNDcGKPD6mv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077379, "uuid": "2f7c6c1c-0e9a-4627-9892-8f86411917e5", "value": 958464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077379, "uuid": "027f5bce-82ce-4c9b-8c25-3d43d573e7be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077379, "uuid": "f768ea30-b456-4668-890b-323a72b77427", "value": "SecuriteInfo.com.Win32.Trojan.PSE.D733LJ.32698.8497", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dd272f1-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1710098127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098127, "uuid": "7e9ec8de-3d38-4491-bb62-91a3c03db465", "comment": "Malware payload (Gh0stRAT)", "value": "260ffaf122376ce7029f7ea98fe0b721", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098127, "uuid": "039a317d-1202-4a93-81d6-0de46dbfca02", "comment": "Malware payload (Gh0stRAT)", "value": "92d1eada419273a87ee66170826f94aab7af63a521bdfc20273620a5bb9e012b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098127, "uuid": "e8ab56d4-7a8e-4386-90b8-1f8cf9239983", "comment": "Malware payload (Gh0stRAT)", "value": "aab03027fbc29f0d1151480d388253914e985cff", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098127, "uuid": "3ed6d0b5-121c-41fb-802a-1bfbbe9f585d", "comment": "Malware payload (Gh0stRAT)", "value": "64f4668ec58b848d82d6c05a065d96f7863733a74c510ec1195b877e304cb5dec313b82c4c3722e1601d177bb63246cd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098127, "uuid": "eec700e3-fc8e-4b30-9c89-8e612edbd2bc", "value": "T1F5249F32B5C548F2D914143004FABB7EBA36FE8906119EC76748FE6A3D33292D727246", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098127, "uuid": "a70dd0c5-646b-422c-84b3-a90765a850b9", "value": "4d4c746105ec68f3b3b28040325a9d96", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098127, "uuid": "1db60154-ffdb-4ad1-94b2-8565253cb533", "value": "3072:PTeTY1km5WBqwP3gsxQ/Xz7iasfsyC/hX6sxv3pAEAXPWegryrLr:PiTtiWBvOL7t5J5Zp3qpXPWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098127, "uuid": "87d9bf8b-c637-41da-b71f-f7c9a19e04fd", "value": 213199, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098127, "uuid": "bcaa02ed-a580-439c-89f6-f0a65c0da208", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098127, "uuid": "93ae7851-f8dc-4260-94f9-e33d9be74e6b", "value": "260ffaf122376ce7029f7ea98fe0b721.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07821b7f-df13-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Gafgyt)", "timestamp": 1710098331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098331, "uuid": "89fd57ce-c66c-41c1-a787-2699d3677f44", "comment": "Malware payload (Gafgyt)", "value": "c2c9ad982383a32eee00ae402424e867", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098331, "uuid": "7c7beb18-605a-48e8-8213-0e50eb789a00", "comment": "Malware payload (Gafgyt)", "value": "93d18206d8331bb4d41f444661eb100369777bf1440c0c0e966acbbc8ac9bdcc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098331, "uuid": "277b7787-5bec-4722-b93e-f437aa013282", "comment": "Malware payload (Gafgyt)", "value": "bbaeb47bfddbeadf1dc51368519ce9f849a1821a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098331, "uuid": "a36b4f26-24c1-438d-b1c6-a58f445d6d81", "comment": "Malware payload (Gafgyt)", "value": "c8cbcd5b0799de094912cdefb36a33f6ba294410ecb408cdfe790e39d377dcbcb79254aac731ab1e39a53b548005641a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098331, "uuid": "49f164bc-5d21-47ef-8736-43ec55015133", "value": "T159A31744F8448767C3D327FAE78E439D77351A6457DB33116A39AEB42BC2B982E29130", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098331, "uuid": "35d7fad3-e858-402d-a30b-551ee80138e8", "value": "3072:Plf1jKRi/VYf84YCk7XTRUmpEqQ45vVXY0X:vjdVC7YCk7qmpEqQ45vVXY0X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098331, "uuid": "6fc4e9ea-95d5-46ee-9bae-6cfb2d85e174", "value": 105111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098331, "uuid": "92a501bf-5164-494d-af81-276698db8e9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098331, "uuid": "622e1ee8-8dd4-4715-a94f-229129040e53", "value": "c2c9ad982383a32eee00ae402424e867", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b93f5ad-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055576, "uuid": "567b78fb-7f25-4110-be57-557d7a8f8afe", "comment": "Malware payload (Mirai)", "value": "ba443f82ff4a9404d9a0ddab470cb937", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055576, "uuid": "96838b9c-39d9-4eb7-92de-b930a0e16753", "comment": "Malware payload (Mirai)", "value": "9442d7b47572d693180fdf65d67b99d79cb2bccf85dda26644a98e6df1cdf406", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055576, "uuid": "ef8d5ff9-3262-4c64-abe9-18437be8fc6d", "comment": "Malware payload (Mirai)", "value": "b73368855775e9884f0d2600cdeb6d2ea69ea8b1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055576, "uuid": "86a82701-0703-4e7d-af86-d14ef1c6482e", "comment": "Malware payload (Mirai)", "value": "ea23a4fb5e99f5f852c47dd85273077f4ec275c57ba12b26d85eca912b4244abd68a045a92a00b179e3753bb89877774", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055576, "uuid": "77f07ba3-6391-4064-8c5b-f37ed7dc533f", "value": "T194333A35BEA21D17C0C8A13F56E34725B2F6874734B88A2EBD720E8CFF5464462276D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055576, "uuid": "1502ce7a-df09-4051-8f7a-88632abccffb", "value": "384:vfffQw2qaC46WtKX19dgvI0p6ekvv6SN6ObbGKxFU+pGeqdaDamhlzwuO9pMkl8h:vfffQwhaCjWwlswek+OtO+okumYuOxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055576, "uuid": "57f32522-c6c4-44a9-a23c-ebe27008a7be", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055576, "uuid": "44b12224-5e8b-4863-b429-51acad9faafb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055576, "uuid": "ef492539-d5fc-4755-8cdc-2128cab55309", "value": "ba443f82ff4a9404d9a0ddab470cb937", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730a3519-df1e-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710103236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103236, "uuid": "af7a30a3-2bc9-4fe5-8f52-27671ceeb9c0", "comment": "Malware payload", "value": "aed84b4b8397afda419da88630d1fb5d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103236, "uuid": "15cfe356-e91a-4148-97d9-b805c9b89a78", "comment": "Malware payload", "value": "94d8ffeddd3cef50a4d5b09eb5335098e60879996d0d57f72dad14b9289fcc46", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103236, "uuid": "b91d1101-d5a4-4c79-86ef-9ce27c89ed91", "comment": "Malware payload", "value": "162947f29130e7e3bca434bd21de6af0e13d544a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710103236, "uuid": "b928dacd-2db7-4275-8513-70f4968a972e", "comment": "Malware payload", "value": "bdcb82a2e15ef0e464429b2c87ea180a9daa5bf1483981e472330629af5795b3c2079b2bc6a3bdeab4c9131587ff8195", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103236, "uuid": "aa4a2868-6d3f-4a64-8fce-10f6fd70f195", "value": "T178E4231097C09DA9CC670F396E694964DFFCFE26AE24D38F17509A4C2E59153282BF0D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103236, "uuid": "bd7e2b84-0d49-4cf4-b3e4-5f5ac41ff01b", "value": "56a78d55f3f7af51443e58e0ce2fb5f6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103236, "uuid": "6168186f-77c6-45d6-8f97-43c2faacadcf", "value": "12288:3N2ylOChVHZ4CiyBq9ph0u48c3ZZo8aSJ30Zl31qFWeKx6k9EN3hlRSx:3NhICn2vyBSoZ8c3E8nJ30r3KWeKY2EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710103236, "uuid": "e860a7c2-a33a-4228-a3e9-81dafe31dba9", "value": 705140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710103236, "uuid": "ff93cd8e-4e3c-4e50-a776-913e3f8aba32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710103236, "uuid": "e8558263-27b6-4a59-a8e8-008259baa649", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d003565-deef-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710083120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710083120, "uuid": "7033e031-06ce-4197-970b-755c366ded20", "comment": "Malware payload (Stealc)", "value": "b01f53b153d64b48a3e555b4ed7a5274", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710083120, "uuid": "99428034-a494-49aa-99a6-c3a6ee17472f", "comment": "Malware payload (Stealc)", "value": "9648391b4b4a1db893e6939901524170ee2a6a0f1744dcc6e770da2be55f191a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710083120, "uuid": "4d79f083-a82b-47b3-b4f4-77ff506fe678", "comment": "Malware payload (Stealc)", "value": "cce313caf427dd96ca5993fd83045ed57c782e54", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710083120, "uuid": "b7aa771e-888c-4b2c-a9dd-de858b36d858", "comment": "Malware payload (Stealc)", "value": "cd24e730200d26185ef08487a8cf2756cf7f8cf17c498200a126326a89e89d66d73843d51617dbb16fe3ce713c5452a2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710083120, "uuid": "c5959718-1af0-4fd3-a47a-baa25dc42873", "value": "T16C14D01272D0D074E4B7973049B496A41ABFBD822BB401DF37B83B2E6E31AE54A31717", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710083120, "uuid": "082028f5-a751-4faa-a8d8-5e0bbf1a1f1b", "value": "ac2ae63bc0c9af73d4bd0b2f5d2036a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710083120, "uuid": "639c45ff-f156-4c8a-b542-375291825034", "value": "3072:LBv3GsI59M50Xf9XVCHZnBab8//+3NY0SIoM0mg:LBv3G35O50Xf9kHFwIYvWm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710083120, "uuid": "2443c0ca-e2a6-409d-a9ad-176e23f99927", "value": 205312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710083120, "uuid": "f675136b-901d-465f-a48a-abd9d91586ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710083120, "uuid": "77befa76-024e-4802-8c48-28430bebcf6d", "value": "b01f53b153d64b48a3e555b4ed7a5274.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23f28bb1-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092366, "uuid": "ae4ddb7a-0ec6-4d2a-860f-b400f5458c8b", "comment": "Malware payload (Mirai)", "value": "6981cde829385752c38e06601fd0e170", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092366, "uuid": "4f634048-c43a-4fc5-aec9-4dc33e71c19f", "comment": "Malware payload (Mirai)", "value": "974e7f02e3b05187d40d6ff99438cc180f948f71e669563fcfa4902f042df720", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092366, "uuid": "b2b2e32c-4e91-4435-9e6c-6db7d4a2deb8", "comment": "Malware payload (Mirai)", "value": "332aed121c0b37e41356fa007b673e9e96b492fd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092366, "uuid": "f6394cf1-70ba-47b5-ae65-c0cfc427834f", "comment": "Malware payload (Mirai)", "value": "253f9f394ce8f6510b4250152114e4a6134dc5fd9c0f41abab5d4aed3cb353714f1b835b98e77c30309d89f3a6ca1ea6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092366, "uuid": "24831f7c-10e7-4043-9442-6bc8509cf550", "value": "T16BE34C56EA818E13C4D527BABAAF01893332A75493DB730689145FB43FC6B6F0E77601", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092366, "uuid": "5ce71544-ec26-421b-a228-d79b57968827", "value": "3072:UgxYi2gojQeTWKrsRdx4KD+w/gyCeMdO7u+bnZuxy13Xnu/IM/9Vxqh:fxYi2gojvTWK4R4KJyO7u+bncx6XnIIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092366, "uuid": "fc5baced-e1c6-4fd3-952a-202073bf9555", "value": 156877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092366, "uuid": "9c518906-471c-4b09-8cbb-cb4aebf51a52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092366, "uuid": "91559198-0aeb-4018-9042-3c4879277678", "value": "6981cde829385752c38e06601fd0e170", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac3c106a-def1-11ee-b7ea-42010a9c0006", "comment": "Malware payload (GuLoader)", "timestamp": 1710084005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084005, "uuid": "3896e30d-ef74-4789-a162-1604f479cb83", "comment": "Malware payload (GuLoader)", "value": "cb2856a69418470ea401b9349fd2e3db", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084005, "uuid": "1dddb656-af36-4d2c-8f0a-a94f6e8b63cc", "comment": "Malware payload (GuLoader)", "value": "9766cb029ae01f7613ca1f034dc19de2fc01ace4ab7d62546da556aff7f782c2", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084005, "uuid": "d7613fdc-5a31-4b7e-85a3-c3c66a5b64b0", "comment": "Malware payload (GuLoader)", "value": "a55a10e2bfefddd2c701db10cbc7f8e880a11094", "object_relation": "sha1", "Tag": [ { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084005, "uuid": "9283ccb7-19b6-4ee2-bd70-bf0a5b2afc74", "comment": "Malware payload (GuLoader)", "value": "34322a1c6b44b9e1fada5cd1f451dcabacd9101ac3a6d429c6de1d268f1263e1d87db1654641fc9069cbabdabee4719f", "object_relation": "sha3-384", "Tag": [ { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084005, "uuid": "731543a1-7b03-4dc4-9d0a-6c2de6dd200d", "value": "T17D125E6BC28352CE5F9527D2594F6D08863544A1F1311AE4BACD634C1F065ECB6A8ADC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084005, "uuid": "f2e05d55-024f-4266-a6b7-c644783c9b4b", "value": "192:thFFuLiRs0mJYHrpf8YQLx4OR1gBPE0gfuZjmL7Sps8t6X1FOaayqlFQnl:vFMLiRs0gYFfJQ71g9vPjmL2S82EyU8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084005, "uuid": "fcb6ec72-f7eb-407a-8a8e-c4cc7cc6ba5f", "value": 9915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084005, "uuid": "b87489e9-4531-47fc-b3e2-71070c864e4e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084005, "uuid": "329df9dc-fadf-4e39-ac6f-af7fb36e431c", "value": "24319847.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "269df5da-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092371, "uuid": "7c024b5a-49e8-4a87-b4fe-efd0985456be", "comment": "Malware payload (Mirai)", "value": "115487e8e02d70eff21ec77506f52f0f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092371, "uuid": "a85a65e4-0c8c-434b-93ab-4e1b3bd2140d", "comment": "Malware payload (Mirai)", "value": "976fcc05b01c600806525f94164428b2e7261bbe31d5274a5830c801ccd2d3e8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092371, "uuid": "286892e2-3527-42ae-b81d-7235ac6354e6", "comment": "Malware payload (Mirai)", "value": "5c8f5012d1299f68aebf79988c1c5cac55fbd106", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092371, "uuid": "0fa0381b-13f3-42b7-bc58-ebedfdba802b", "comment": "Malware payload (Mirai)", "value": "a1fa2e1134d1977360953c355b0bc2e72b1b9ae54f9aa90f2a231a5d217510c92ae06b7066b198c66d8f83f1cbfea51f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092371, "uuid": "3d07fe5d-781e-48e2-811c-1880b3b67d44", "value": "T154835C3169392A26C0D0B97E12F74758B2E21B4E25E8CA1E7D730E4FFF51A5064136F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092371, "uuid": "d5949c51-10f8-4dfb-a0c5-59d70052cc72", "value": "1536:KYHpONKUq1et03jRIpwXp/ra/SjPsIhJWsjM3wlMVjeQP:nxVJTsIXzY37eA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092371, "uuid": "e177d018-7f2e-4fe9-9dfc-38ca2b058135", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092371, "uuid": "b29df6cc-c7d8-489b-9342-e543c7a87ee9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092371, "uuid": "62422565-cb54-437b-a00c-e323e0c81d9d", "value": "115487e8e02d70eff21ec77506f52f0f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "244d4bee-de9b-11ee-b7ea-42010a9c0006", "comment": "Malware payload (GCleaner)", "timestamp": 1710046840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710046840, "uuid": "eb9da675-1aed-4fe0-bf51-2133093a60ff", "comment": "Malware payload (GCleaner)", "value": "60194970d3fca26d6d62ad4263a3ad62", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710046840, "uuid": "61bf7bfd-a692-4b18-8585-ae7d1e0056b6", "comment": "Malware payload (GCleaner)", "value": "99427242576075c6bfc1038c07587b07f69b0d85149fbf0091b9a582e68a9cf1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710046840, "uuid": "a4528a1b-26da-4702-bd19-a21c7298f9d8", "comment": "Malware payload (GCleaner)", "value": "561eddc46818941773b0ec6fd1694da5031eb467", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710046840, "uuid": "6903a049-c6bc-4458-aaba-72b50cb19217", "comment": "Malware payload (GCleaner)", "value": "9cfbfc113d3d40c7ed1392c462d4d3cc1de6e084081d0f2f248710d8b273f7a6a3afb8efa6d38f71f682c0f6ed4fc781", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710046840, "uuid": "59bfd9c8-59e5-4653-9e5c-a27c7f607a22", "value": "T11A74CE3072B08432DA7616308879DBA5566ABD99D730F15733F4AF2E2E3229C59F035E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710046840, "uuid": "508821bf-175a-4b80-b15e-bd244aa884ad", "value": "0f7b69b762e9586196f1df5c0f15d6fa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710046840, "uuid": "abeb4b72-29d1-4535-984e-7703e9062d1c", "value": "6144:xTgQjN1N+dwK8kYud6mHFAJQXZYG0FjPbb52qX7tNfVXVHQLIiu8cfo0/pW:2QjNr0wK9FyJkYpjR2wZGEX8cA0/M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710046840, "uuid": "65dfe4e2-bd44-442d-bf86-316c928ed100", "value": 342016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710046840, "uuid": "ef468b1d-3195-49b2-ba36-a6cf05fdc42a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710046840, "uuid": "6e38d56f-7af3-4fc2-a240-11bc30cb9eba", "value": "60194970d3fca26d6d62ad4263a3ad62.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4469d1c1-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077388, "uuid": "b12e5d8e-6815-462b-8bf5-24fbee768bb3", "comment": "Malware payload", "value": "f1b994ad01d3df49e68380eca52d330f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077388, "uuid": "289ad8cb-1f43-4166-8f2e-16b4b2e4fddb", "comment": "Malware payload", "value": "9aafebc447f4541051439030ad411a71d0582dfe3e2fff2d42b1e896e454046f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077388, "uuid": "1bcd9683-12c3-4b3c-93c1-596be5869021", "comment": "Malware payload", "value": "121a74b6647f558dff898c445ce9277ddd3d1813", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077388, "uuid": "fc56490a-03ce-4120-a489-04bad64a1cfb", "comment": "Malware payload", "value": "ab49db6227f547fcf85eaf297ca4b2924ebed1aa58b80276a1500f89d8c3c990664ee3dba8ce0de913afba43863d8f8b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077388, "uuid": "e0869292-ecd8-4aa0-8d94-48e82df9c298", "value": "T1438533E8A44E53B1FD8F183D18271F01F532A5E6BA24CB4E1EA03CE7AF9E66011D9457", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077388, "uuid": "a21f47e2-5713-4eb5-ab77-9e72c2cabc85", "value": "2b292fdec6383ced14d3cce31c79930a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077388, "uuid": "e9665ab6-152c-49f6-b545-8455fe50c9e0", "value": "24576:+4BmEv+JJFAdweoYsEQEs7ZBTnVCBwwFLbi946UHjtKl5mMPTo17aSPE/deEoOmw:sxJFNeUvnTw1RlHZKl51W7aSPEFsDvO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077388, "uuid": "9efc2332-3e71-4732-aa57-f27b0dcc16e6", "value": 1758596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077388, "uuid": "7c7e26a4-349c-442e-9388-410dc2cc665b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077388, "uuid": "48f06c5f-fb85-41ee-9351-7c3d4b80fc07", "value": "SecuriteInfo.com.Win32.PUP-gen.2847.28870", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "566f7a3a-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098034, "uuid": "a160a6a1-313a-49fb-a58b-26401f960d64", "comment": "Malware payload", "value": "76a2b19bc8d73f17efc3edfc50eea27e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098034, "uuid": "61fad2f5-232f-4f7b-8e57-22f242548ce2", "comment": "Malware payload", "value": "9c42bb89102292146087d8cf7435bdb29a703c47eb70e10fccd181d1768cb1d3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098034, "uuid": "c2c283a6-abaf-447e-8af4-31c1d5cf86e8", "comment": "Malware payload", "value": "997ed19ecccdd37babc6e4c09d581db121c519cb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098034, "uuid": "bedf1aca-583e-491e-b494-e91833172240", "comment": "Malware payload", "value": "84fbc46b3307c8dd5a17d65ad1a53985fd260f832bebafcb6fe0b79d09a291570f3b04aa4c3fbc912db94a71d80df30f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098034, "uuid": "dc584bcb-970e-408b-8579-543beec10f29", "value": "T1C5448E217665C432C6571577CD7DAFB95AAD68306FA0A8C733E40A3ECC101D2A236F6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098034, "uuid": "b81b07ff-28a4-47dd-a8e6-0a9b6adf911a", "value": "6ad66b9e28c0fa16d00c21343b49c9e6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098034, "uuid": "f78c8fe0-6ae8-4d67-ba12-13a7a2b438e7", "value": "6144:Wg5fJI8RTsUTUtUMU8U69pK1rTFKwYdy7Lis9yJ0FEUkDAX7Ufu40brpeb:Wg5fJI8RTi9p8FKwYdy7Lis9yXZDAXQF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098034, "uuid": "41961475-0bc0-4a18-84f5-a33a24421bb0", "value": 255488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098034, "uuid": "d004383e-1379-47e8-906d-dae48022b735", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098034, "uuid": "e5caa4cf-36de-4af1-ba8b-6d1d3ce417fa", "value": "76a2b19bc8d73f17efc3edfc50eea27e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4172b20e-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077383, "uuid": "c59624de-f904-4683-842f-73f9a8448c6b", "comment": "Malware payload", "value": "eee4d5e5225523e59062b06e344903d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077383, "uuid": "42385005-2feb-462d-ad4e-a45c0b238e69", "comment": "Malware payload", "value": "9dcd418e09a12b89b3958da0659f7dd18cb4ee2894d4db1d3b586bd88be4c77e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077383, "uuid": "5475e394-e594-4cf5-b843-219e1b7a0b0c", "comment": "Malware payload", "value": "5a673a4cf0faf14ebe4348dc28412bc6147260d2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077383, "uuid": "817819f1-247f-4df3-8d03-7e46813d85c9", "comment": "Malware payload", "value": "3f512e300f3414e4f599b4739f86c2cc80b65c2d26bf5b06e33c06f33db685d316472d9a5a967789a66793cb0e823e82", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077383, "uuid": "b4b25653-3b06-4a12-a4be-74b6fd2e96c9", "value": "T178C47D22E6D0C437C163193DDD5BD6F9A829BE913E2458472BE83C4B7E39741393A293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077383, "uuid": "4857b825-ce05-46d6-a9cc-c1452ede5f54", "value": "60cfcba864cf8e701f67a5b88d4ce64d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077383, "uuid": "850f1963-4f5d-4d68-a7ad-5270a908e2f0", "value": "12288:hdME9iP321W5hQ4kjnaNSR2a/kXBX9/j+g+jqa:hSee2A5Lk7DRBcXBt/kO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077383, "uuid": "a8faca52-9a83-4862-a10a-05fd5bdb9cd6", "value": 548352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077383, "uuid": "31214fdd-254a-462c-a14f-27fc39934b87", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077383, "uuid": "946761ee-1ae2-437d-8436-88927a826bfe", "value": "SecuriteInfo.com.Trojan-Downloader.Banload.21349.3048", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c500708-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077375, "uuid": "481bae5a-3481-4eb3-a3eb-4e7781e5b965", "comment": "Malware payload", "value": "61bc92300d1bdb57026a090e78e2adb0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077375, "uuid": "357949d1-2168-4474-85d6-6bc039247ceb", "comment": "Malware payload", "value": "9e798c1d03cbcf16d59d11847ecb2eebe9e703b6e595d11129c0ce6c69beb635", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077375, "uuid": "2b58ef6b-3b17-4ade-a9e5-e197a753a104", "comment": "Malware payload", "value": "5ba41fdf8e1465873a51be0651d2fc93df1492da", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077375, "uuid": "d2e3dd4d-63b5-4038-8035-9d6d7b115abc", "comment": "Malware payload", "value": "d4aaab2d7d3137c949864e7979c9a734a9aefd99acbdfddecd94db96aebbbe2087f1ff1ac861ffb565181ff6e2d3b9c8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077375, "uuid": "2850a980-167f-4133-ac17-df3efcda8d74", "value": "T19286E432AE507C22E008253A8477F965A0367DC85B9178CF5528BB0C1BBB7E0F9B5F59", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077375, "uuid": "b3070608-5bb8-44d2-9792-e2201db718f3", "value": "a03948d1217304e03e8d68932d49ba26", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077375, "uuid": "8773033f-4178-4fad-9627-99672370a8e0", "value": "98304:jDmqU04ZvRKbtczH0zzJsKwQ2wFfOP3M1NSbAaIzhhhMhkRP:k7zUHTn9OsNSEaIzhhhMhkRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077375, "uuid": "b504ea70-29a9-4855-9343-8c4c2480823a", "value": 8560640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077375, "uuid": "5b45b7a7-2fc0-4df2-b08d-0898292a4df1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077375, "uuid": "a889f378-0939-42fd-92a7-3622699a6a8e", "value": "SecuriteInfo.com.Win32.Evo-gen.23836.28931", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468d683a-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077392, "uuid": "c4492c48-a856-45de-b2e3-ddc60e8966a3", "comment": "Malware payload", "value": "1bc219b3b33bf046435fd0f6dbf3a7c7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077392, "uuid": "94495ae8-5d21-41da-b964-049386f069a1", "comment": "Malware payload", "value": "9f74fcba02b990e93dfdb4f10b1f5ab1dcc26f8bf2cec4fff03594ec793521e6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077392, "uuid": "ee22a675-27df-4273-ae0c-da13509f07fe", "comment": "Malware payload", "value": "ffd4a6f79bacce1e603f534450c6bfad288e2121", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077392, "uuid": "c3618116-08f3-4ca4-abc7-4f4c75e09d44", "comment": "Malware payload", "value": "1c8b8ab04be365b8ef122d75905fdab7028a5e0c8ead5b38f393d1b6eaaa0521b54c7e40c2becb169300a2842bc78b97", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077392, "uuid": "7a595a32-c1ed-4926-b97d-b34b456d836b", "value": "T1DE5522F466F7DD97E004D77F8844BD318917017E671B96A9EA84372FF4A2209EF0A109", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077392, "uuid": "d087e145-a735-4fde-b72a-9111e7afec6e", "value": "e710feb0eb6204d1acb452f545c64c30", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077392, "uuid": "89d58ab0-db1b-404c-83c5-05370c754b3f", "value": "24576:57USTEdH0+9Y/3veLZjEfNxohARLQqaeoPGfTtK/cRgOnmq9g6OB36rKX6B:5xkH3Y/3vedYfDoheDaLPJcOU7m6WlU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077392, "uuid": "eebca116-ee94-492f-a48f-1b442469d3e5", "value": 1336577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077392, "uuid": "21e03bfb-84d9-43bc-bde2-3981f7acd7a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077392, "uuid": "96010af4-eb3c-4103-bb29-b5325acfa4fe", "value": "SecuriteInfo.com.Win32.Evo-gen.15493.29278", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3084d7a2-ded9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1710073489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073489, "uuid": "e6b4a534-eb51-4a4d-a68d-2e8cd426c953", "comment": "Malware payload (IRATA)", "value": "204648587754bbd2beb5e75b69e32e5e", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073489, "uuid": "6263a313-f9ee-4960-949a-2d3c0b764d4c", "comment": "Malware payload (IRATA)", "value": "a2ed28edd4acd5ae9d404cf782db839656a392e0fd0ee9ced994418e47a4211f", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073489, "uuid": "39443b20-0f89-4115-931e-132d668c35d2", "comment": "Malware payload (IRATA)", "value": "592805c00baa9a8944899a1a64c07cb0f6c1ca32", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073489, "uuid": "06ad5a22-2f55-42fd-9ee1-156565547037", "comment": "Malware payload (IRATA)", "value": "1539769af0479a28178b8c21d8e1287009533b563c51d9ce191f0b687f9219f19bbb219b68c9a8684e91e3f61327a5f3", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073489, "uuid": "9b297b11-260b-4f82-b6d9-e35567394ade", "value": "T111F52357F376D91AC9F2C3332135123650774D29C743EB8A2A497BB938BB9E84B816C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073489, "uuid": "e32684cd-df5d-4530-bada-69ca826c3c05", "value": "49152:AsYanNmSlMZbBbZml99KMTSHh5dAm/+/eO0B/ox9bJt0TewQ5NwArYz4PiIrx8u:Ao8SGZblkZTSHh51u0B/QeQbZYzzImu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710073489, "uuid": "7f9e1b5a-9c66-42ab-ba39-d95def013273", "value": 3632730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710073489, "uuid": "a507800d-d290-4e9f-93d6-a50007b4e072", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073489, "uuid": "573bce47-3bdb-4ee3-b912-6ad1f8669fe7", "value": "base.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39844de7-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094979, "uuid": "1507cb7c-50c4-4985-8258-5337d99c55a4", "comment": "Malware payload", "value": "ca51d3e5cf4d8a11d0c8ad6e23c8b881", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094979, "uuid": "b395d856-fe74-4b64-9f1c-3a25efd6340f", "comment": "Malware payload", "value": "a67aa2c6b6fd676964fd1995d052130c10ea785931c59e08d75b657c6d76a531", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094979, "uuid": "87f9db1f-b4cb-4928-b63c-ce442dc1dfb2", "comment": "Malware payload", "value": "602af5d7f77dba9337608e520b652154cca541f8", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094979, "uuid": "a759a275-10f2-4d5b-83c9-c74bf0df54a7", "comment": "Malware payload", "value": "93348d7c4d8bc6b47047a0675aa41608f0085dd5e848e58245c3f5b98b298b62ab470d7a7fb0ebca8251d9a5e65b4002", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094979, "uuid": "a014fc6d-43c5-4f47-b55a-5e6e26a27b94", "value": "T19A81E7657626C413E19424341EA1CA793464FC47DE08900530EA777FA6FF79299C1CE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094979, "uuid": "28ca5359-5cb0-466f-ac4e-7aa0f0454343", "value": "48:roPFHBbDU9Zr4JksJNmgy0njwqzJUxUoOmas:cdBbDeMJkOZjwqzKUbts", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094979, "uuid": "2a93a645-6c84-4295-aa9c-1e09d51aafa8", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094979, "uuid": "2f3cfae5-a88e-4b37-878b-e57aa99077d7", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094979, "uuid": "c5c09f65-b99e-4b91-bbf1-2bd7de2899e6", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.28150.6191", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b636ebdf-de74-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RedLineStealer)", "timestamp": 1710030334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030334, "uuid": "12477f28-d14b-4b79-94b2-89354bde5ce0", "comment": "Malware payload (RedLineStealer)", "value": "e0c20663783fb894d4c8aeabe5047d58", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030334, "uuid": "7fad708b-ecc2-4bfe-aba0-975770814be7", "comment": "Malware payload (RedLineStealer)", "value": "a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030334, "uuid": "3e22ba2c-3385-40fc-893d-c4c30a778658", "comment": "Malware payload (RedLineStealer)", "value": "b1f4d1321a4c59610e2da83934f5e5ca008b8f98", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710030334, "uuid": "29816571-06fb-477a-a580-aaf8af414645", "comment": "Malware payload (RedLineStealer)", "value": "164cf1a8c1ef78bfec88e350f4c71ba8ed0412fb3b7712d54f63f13e6838331210ad0210e8c532cef947c25ebc5b74d7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030334, "uuid": "48fb1072-5c66-48d3-b2c8-e43ba594d408", "value": "T10B5633D0565EFB52C83D803289EC88BADDA43E5D6F24E318F278772431B5B98798119F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030334, "uuid": "39e34180-7ac0-49fc-b949-a5ce15f774eb", "value": "2e5467cba76f44a088d39f78c5e807b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030334, "uuid": "9f896b16-f1da-4707-9ac9-1fe3ee544ab9", "value": "98304:8Epeal8MR6bwsxS8SVvosgtnbiU7/rYdaKKOJrcpRDeepgrrpU+M:8UXbiUVA/bnjYdF7rqR74NU+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710030334, "uuid": "21abf43d-a685-4606-9ce3-3580a49593a4", "value": 6417312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710030334, "uuid": "8215907b-1cb6-4b00-ab94-1c471e90573b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710030334, "uuid": "63a31c0c-82a1-4670-a706-af4a5f36775c", "value": "E0C20663783FB894D4C8AEABE5047D58.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1aef63e-df1d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710102885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102885, "uuid": "69cab70e-38e6-47d2-861d-f3d4ad320c3f", "comment": "Malware payload", "value": "94d5058bf7ad8926dffd3018f2b6aa9e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102885, "uuid": "1279b35d-cd5e-447d-a1f9-ffb7df8d26f3", "comment": "Malware payload", "value": "a750a11f9a9f3ec4e33c8ba6a8625efd1b503bf7b203bf4da5afdd7af401f9ef", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102885, "uuid": "400ef3ab-0901-4c30-b74a-228be0b6ea5c", "comment": "Malware payload", "value": "539a4ecba5c902c66f9de29ab9295fb5a4be0fef", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710102885, "uuid": "b04d4d77-3261-419c-b188-14353378fb0d", "comment": "Malware payload", "value": "896b25c10e123ea063814925dbc7aed4dfc2ba5729ef95539bf4f5c2bdbf28e22bd33ff4864cda76e48315407b63cbee", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102885, "uuid": "8cffc3d0-daec-485b-b7b8-3311dac4d13c", "value": "T1B806334C694A9A6BF4B830F992FD4E2F369147F5DCDA0DAE6CD6185884436C3CBB7012", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102885, "uuid": "a9a96184-a15d-4993-b2ff-be8e3398764b", "value": "9525ec72763264a238575e01662fbe05", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102885, "uuid": "7b4b47fb-a10b-459b-8f59-787cab4df340", "value": "98304:Zfznze/jaG0IXf/ny+FJNWc6HqL1t/QhhiC+UI5zEk:ZzsaG0Sf/DNW5KL1t/Qfvxk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710102885, "uuid": "a459ccf0-1337-47e3-a267-971a551d8af8", "value": 3953168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710102885, "uuid": "7e738916-ce8f-4454-be40-ed7d8d76b8a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710102885, "uuid": "84a584a9-de1d-4280-935f-14c5fa698e2c", "value": "SecuriteInfo.com.Win64.TrojanX-gen.14161.22179", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4c25f2-def1-11ee-b7ea-42010a9c0006", "comment": "Malware payload (STRRAT)", "timestamp": 1710084008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084008, "uuid": "60b23030-2d67-4232-a737-45a37d4700e7", "comment": "Malware payload (STRRAT)", "value": "90e0fb5c6cb86b7b12129108077f03b9", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084008, "uuid": "86d67d32-035c-4639-8caa-99f0a8ac9601", "comment": "Malware payload (STRRAT)", "value": "a95313d60a72e884da0432039645f13e0cdf14fc05e24e78785a4e2de8931ead", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084008, "uuid": "12319289-e62f-4287-a4f1-de487aa93b2c", "comment": "Malware payload (STRRAT)", "value": "26f78fce02a512e1c14715cc5f76a98cab26282f", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084008, "uuid": "a58c46bd-ffa2-42c7-9c90-ad8acec6c0a4", "comment": "Malware payload (STRRAT)", "value": "17ca51e0afdbc3fcf8b3ab704cd37458d474b5cae2399cec4f62088421416605e74e6cffc945c26bf6450c8ffc65d011", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084008, "uuid": "7a507ced-1035-471b-b17c-e9f52d4e5193", "value": "T173B3CF3EFDCFD5A0D04B8A7284258137AF5D81A9E142A50F69FD14874CB2D684B27ACF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084008, "uuid": "2cff9d6a-03b3-4d12-bd2d-360f6d78f523", "value": "3072:JsOq/Sv/eNHBeBy8BZMCOZ6mdbx9jHTuctPXZWyROqzyNw:Lq6v/e1gBy88Cy6wbx9vuctPUtqzyK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084008, "uuid": "8bcaa389-3f5b-4c80-b277-65d78bff17c5", "value": 112048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084008, "uuid": "4c0c9649-8203-4a97-a912-b526c670c015", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084008, "uuid": "da6dc4a1-b431-4dde-940e-97ce4cdaf8db", "value": "DOC65346578090000.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54913785-ded9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710073550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073550, "uuid": "b7f5a49b-fd07-467f-8a09-41d2e4fc65fb", "comment": "Malware payload (RiseProStealer)", "value": "a7488bccbaf0c88a990e6df45bd24f06", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073550, "uuid": "72d73637-edf5-4123-85d2-762e7bf1384e", "comment": "Malware payload (RiseProStealer)", "value": "ab4bf847cfb7c2d2fee7c74380cdc960b02cc6d0a2345f281f003713f67ad44c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073550, "uuid": "04318e10-0521-473d-bb38-85f8b41b13f7", "comment": "Malware payload (RiseProStealer)", "value": "6144e4eda145232b5ac23060d3f812e684e0eed1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073550, "uuid": "619a52e5-e59e-4593-921b-c1bd96df6319", "comment": "Malware payload (RiseProStealer)", "value": "453a5b6d44d22e8ab0002b54dc1b1d77ef6c06482ed03ddda7fa57dc63b7bd12e6daf45847b978984162e6559dddccbe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073550, "uuid": "6ae49575-5d52-41bd-9fd7-deb5f45d67c2", "value": "T12C764A47F591D910C31C6D33C7C56628D39797819202FA2B73B1FAAA9E433AF078B499", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073550, "uuid": "cafb2137-3943-4d58-aacc-49989373bfc6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073550, "uuid": "57af5fa7-3790-47e6-bbba-cf6a6b97906c", "value": "98304:Z3XQ46gfoI73WCOj+F4IUI5BbfUUMW8POIk0Eu36Rvov:ZnQ4jfoZ+FZXrgBOxzRvov", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710073550, "uuid": "6e579abe-da5f-493b-a4ae-af05f62f5f26", "value": 7752608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710073550, "uuid": "6c7f5812-f656-4964-a30a-180b289c8614", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073550, "uuid": "78bca54c-f5dc-4eea-ba0e-c847f9354dc7", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "487e394d-df12-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710098011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098011, "uuid": "1c9261a2-46bd-4fcc-bf4a-11b82984a409", "comment": "Malware payload", "value": "4197e002bf39bef8cb338cfa18b3be63", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098011, "uuid": "6df189ef-514f-44d8-af1f-576486792f44", "comment": "Malware payload", "value": "ab74b4b726b330617127e21d4eef75d068f0c8935991a4a213c0ded1f12a407c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098011, "uuid": "c3e89e2a-3e2f-43bf-b51d-c72726036243", "comment": "Malware payload", "value": "f05692fef559d34b6a0baac4ffe6e2b7ee21cee7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710098011, "uuid": "3c3b114a-6be4-4fea-a2bd-561f58c8a4ed", "comment": "Malware payload", "value": "4afed33e1c4d407d90b92f767e4b9eb5682ed71200f53e30afe6bca6126cfc208a715689eb644548e20c86d7e7e067f5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098011, "uuid": "7c193881-c49d-4c60-9c96-d473f33c4d18", "value": "T138D3C55AAB619EBBD81FCE37069A4501248DE64682D93FBFB2B0C51CE74B94F08D3D44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098011, "uuid": "36343ea3-57b2-441e-89fd-11bdbd687a37", "value": "1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqovd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1/vdlPUmkASFxBKvXZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710098011, "uuid": "43efaf49-0419-49c7-87dd-07e80a58695b", "value": 134222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710098011, "uuid": "dc0db5ca-7796-48f6-b349-23a8266dfe20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710098011, "uuid": "44ac0669-b1e2-46b4-bbf7-aa63cc583047", "value": "4197e002bf39bef8cb338cfa18b3be63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "756a1160-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055566, "uuid": "8de1aa67-575e-47d2-8555-2ee5a8f1433c", "comment": "Malware payload (Mirai)", "value": "4fb798786e77140a2936299f90f0bb2d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055566, "uuid": "aa26fcd9-8201-459e-bbea-c5e236f8e975", "comment": "Malware payload (Mirai)", "value": "aba9e6aaa079761cd1ee0c6fd982e2d67ba9e032b96fe39d01d7a83037f26a30", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055566, "uuid": "9d1e463c-cabf-47fa-8f50-a8744736bed9", "comment": "Malware payload (Mirai)", "value": "7c8195ddb2d359823fcdf24f4508d8b1c84dadc3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055566, "uuid": "f212b934-6639-4be1-9f9c-ebeb6a9afa4f", "comment": "Malware payload (Mirai)", "value": "45631cb9cc198ce0df2ed043dab5478c497965fad9db2a60e97e7f1ab50ed3f8906f5ace8c477787d22bb6a4d93a6e0a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055566, "uuid": "9460a62b-167b-4f1a-bc16-41a0336e6015", "value": "T1331309D2B405EEBDF85FF77B84074406B13173A641C20B72A7A3B8A7DD712980E26D86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055566, "uuid": "d77af41e-4f89-4334-8f46-45350f739ccb", "value": "768:wdIhZlfQ758MYzjf5uxYp8Tw8XGwZYIQhnEIf8nN5QMMUU:wWhZlI758fqE8XGQQhnEQ8nPCUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055566, "uuid": "39e51e02-8ac7-4482-a599-96b040689b4b", "value": 44144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055566, "uuid": "75264910-6270-4ddc-9f97-d33bdf25d243", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055566, "uuid": "6f0b4cfb-637c-4b72-aacc-d3102104748b", "value": "4fb798786e77140a2936299f90f0bb2d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a0fdcb1-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710055547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055547, "uuid": "01903674-f785-402c-8c59-efff3ef34ed8", "comment": "Malware payload", "value": "b689539a208cd2112b11bb144e781593", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055547, "uuid": "bb2b9a3f-bbe9-4a7a-8245-830365cd4219", "comment": "Malware payload", "value": "abd784503e3fc683017c7afb832dccefae09ea813cc577ea23119a11f34803f5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055547, "uuid": "855d2b0f-8fa8-4db9-9563-630a155c954f", "comment": "Malware payload", "value": "85e16c4709e2aa948e95115741a890e5c67d90f8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055547, "uuid": "58660850-e757-457f-a872-566d779d16d8", "comment": "Malware payload", "value": "46388247bb3906bb53e00659646c3f5eced359aa4205ccc53355e7c026c478a51d032a49777233d39ff4d98bdeea381f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055547, "uuid": "00b384de-0497-4124-983a-aac2fd3a3494", "value": "T17292C0A4F24B19AADFBB7C740FD5E9C023618E9E6738CDD3508697602B261253705BEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055547, "uuid": "21ba3ff8-6ddd-4bd1-905b-1df8fd1e9d2c", "value": "384:wBMgD3hvw4eG2iOLsPDwNYmBZKWDs/UsRhNINwRm7/fnM4uVcqgw05VxJC:uMgjhvPeGHwsPDwNpdaR8N42/k4uVcqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055547, "uuid": "1f1535a2-c270-4c1d-b96d-b509c47dbf1b", "value": 19820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055547, "uuid": "b962f6f6-d03d-4551-97d3-03d7b3ab88c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055547, "uuid": "52060f70-c397-4362-8d05-2dc647d636b1", "value": "b689539a208cd2112b11bb144e781593", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9e6ca25-def1-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710084001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084001, "uuid": "3e351554-0cb0-481f-9bb5-fa4f8c257177", "comment": "Malware payload", "value": "0bf1df54a2d1db9ab51253a796f00584", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084001, "uuid": "fbbeb094-9085-44c2-b8dc-4f81712f9028", "comment": "Malware payload", "value": "ac87a60be063ce74080f47c16f24d6ca735ce790e3d9665fef587363e6197a61", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084001, "uuid": "be90f75e-3242-419a-9983-073090ec7347", "comment": "Malware payload", "value": "d1ab127fd460fda858378bf667a01153b8fef5b3", "object_relation": "sha1", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084001, "uuid": "e996822b-dc04-468f-a11b-de259fe55b56", "comment": "Malware payload", "value": "3fddba2d140475b371c313d0e83309407cf195b3f6b30b0f6b6a6a57ebb8895c920fed24b248fcf012fa53cfa22c110b", "object_relation": "sha3-384", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084001, "uuid": "e682c5be-a01d-4665-8fb6-005dfe4a0db0", "value": "T111714C9653FD9500F5F34E50D5B0252A5F37BA2A2C3E861C08E00D1E6AF1E84D87B7A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084001, "uuid": "500a025c-8cb2-4f1e-8233-bc743355fe9b", "value": "48:ortsjKU4uUMU1GQCzOl1d7o751BNcLfVDRDcWJk5OHpiQp/BTotPHwuq/Hb3fxq7:oWvtY11217RQuALUcgkysrgvv0tf8f53", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084001, "uuid": "d423a3db-cc0e-4860-920c-bb506847ef47", "value": 3550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084001, "uuid": "d0ed1150-f596-40d5-abb7-a26a53a7dd96", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084001, "uuid": "728a2b2e-1c85-4397-8fd9-33ba5898b605", "value": "EAP_approval_B.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69e6bce6-deb5-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710058124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710058124, "uuid": "d7ea2746-216a-456a-85bf-8c693c2af57f", "comment": "Malware payload (Stealc)", "value": "74fdc3abcfc89cca5d9bfcf93eed1845", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710058124, "uuid": "9040da1a-f9b8-4b43-9168-4f7a9d1988de", "comment": "Malware payload (Stealc)", "value": "b02f9f94c7af78cf82d27678bb527b2512787d98fa933a8ef3227d27c1acfd2b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710058124, "uuid": "a350244a-f4f4-467d-bd4c-2834d2dbd74c", "comment": "Malware payload (Stealc)", "value": "c828861c03c99613dce907898845277a4e16ea3f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710058124, "uuid": "fb997f8c-71d9-4eab-9f94-54143b86f569", "comment": "Malware payload (Stealc)", "value": "0fac1775525c51cd023715f89926faaa3d4e1b86b11e571d486efd6caf43d2d4f5c3e6294c19c4c57c359cad6a068e74", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710058124, "uuid": "d1603d98-a7ab-4c23-bc28-b37b73876781", "value": "T121662947FA84C900D15A1A73C6D43A80D376E7D15602E31F3AF66B6D1E433BF129A29E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710058124, "uuid": "0d05546b-5f40-4224-b492-32a62259a73f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710058124, "uuid": "f2285e7f-18b3-4d83-904e-2172ad6cefce", "value": "49152:9sa+2127N6dYhzZzBksc+Z8qLwqg+EAqxxjZDHfCxT0VoZ0uhtwWh7no4reRBHdM:6nZ6wzNHfqHVLGT0a2u4W7reR9obZ3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710058124, "uuid": "b56c27ba-8c9d-475f-87ba-61fe84917348", "value": 6669360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710058124, "uuid": "ef1f278e-2c6a-46f9-a454-e9c153f9cc88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710058124, "uuid": "457c11fd-44f3-4aaa-a820-0fc84fd71c45", "value": "74fdc3abcfc89cca5d9bfcf93eed1845", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b1368b7-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077373, "uuid": "ffc4a592-4ebb-42c3-8fff-9a3fc89807dd", "comment": "Malware payload", "value": "108d4e43b00ee53aef0b7eab65eb7761", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077373, "uuid": "73c8b65e-6c0a-43d1-8fde-47519cac6801", "comment": "Malware payload", "value": "b23d192bf846ae90c13704b95bb526f61ae6981512325259b5affa7a30879223", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077373, "uuid": "fd012441-cedc-4f39-b68d-f4829a24959c", "comment": "Malware payload", "value": "97049ca05c1d4cefacb577a63622cb0496c9eec7", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077373, "uuid": "4b1ba318-c787-4ea0-ab4d-5e23730e0a8e", "comment": "Malware payload", "value": "f6573380d38c21c3bee3a2c41bdeaa79d2b98ffcfef44336ec04937a0da435ed5072d4849c2621ec904cf77d9fb0cc1d", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077373, "uuid": "0f5d4cf1-a9ba-4612-a164-6c0f92081f2b", "value": "T125055B217992C4B6D54D193084E777FA9BB5BE038F228F876754FE6D3C72680982313A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077373, "uuid": "cb7aa6b6-1958-4ca1-85f8-507fb8cae4fb", "value": "94423cce6ec4dda0ac634a3e2f3b5ddb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077373, "uuid": "7f6cafb7-fbf3-4f5f-b6d6-8cf8ada90056", "value": "6144:ypHi1Q4fby+oRRD4HuL/lhMARhd+Y+VcJHrUNdHAziPd3C5jZaoFuHrRmGChzA6O:ypHi1QIb+Z4HuLtPZNoUziU5kris", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077373, "uuid": "5502c264-7d31-4fef-b49a-fc076869fe41", "value": 858085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077373, "uuid": "dba54940-9ce2-4ff2-97c9-8e637f6acc38", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077373, "uuid": "c49655f8-6045-4862-b313-8ed9b560ba41", "value": "SecuriteInfo.com.Win32.Evo-gen.4961.15977", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5021ed0-def1-11ee-b7ea-42010a9c0006", "comment": "Malware payload (AgentTesla)", "timestamp": 1710084020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084020, "uuid": "c2c29404-7ab6-49e1-9821-06fbba73ecb2", "comment": "Malware payload (AgentTesla)", "value": "fb28131c045459cbbb0b5b0fbd64d4a4", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084020, "uuid": "bb678f88-c8f7-4e8a-8f06-08ed04a71a48", "comment": "Malware payload (AgentTesla)", "value": "b2bf7f19a0c33826452a8b3037809808b52eb86d8fa0f2efddb4f999cc565ece", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084020, "uuid": "8303a1e8-e9fd-4d27-8015-274dd5776c14", "comment": "Malware payload (AgentTesla)", "value": "71370389489bae1371d293041ffc5faebca769a1", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710084020, "uuid": "745a8e13-934d-41dd-869a-cea3c039fc66", "comment": "Malware payload (AgentTesla)", "value": "d425a4b4548233ebc2c1debcdbf4fac9a0ff7634dfd5490c7af7ea897445424e5d56fb90bb7c7aa6363bffd3be6391cb", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084020, "uuid": "9759b12e-d92d-48fd-a954-b4bd132dd229", "value": "T104E4127131BD5B22E5FF5FF8996004448BF2266B64A1E3889ED360DEA7B0F808914F57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084020, "uuid": "6f77191d-08b4-4eb6-9942-449ffd6d758d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084020, "uuid": "58971f5a-e35b-431c-873f-01713ade3dab", "value": "12288:0KcFtImAFhhs+0Y6S415FauQ/xtO3UW67qGUt64BnP7d2qPV7ldeKwm7KR/:0K061Fhhs7Y6/XFDQkLGqG6P7d2qPJls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710084020, "uuid": "192b6ce1-2305-4a43-88f7-737f33c253d6", "value": 717824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710084020, "uuid": "5e6d2117-4500-4af7-95d8-70eaa4ee59e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710084020, "uuid": "8dbfb255-8a59-420c-aa27-3dd9991e5630", "value": "DHL L&S - 1C23THP 00042194.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d62e466-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055553, "uuid": "076c5b38-07cd-4dc9-9358-85b52457dd4b", "comment": "Malware payload (Mirai)", "value": "0242b323091b38fc0c958f13b029c0f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055553, "uuid": "aeb098fc-1fe7-45fc-abcd-805fd114e3a6", "comment": "Malware payload (Mirai)", "value": "b2e685c40904305763a8011b526dab09b44d4d583278d5916c13bf7680b96b19", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055553, "uuid": "adc039a3-973a-4fd1-9660-fc4a9d61d0bd", "comment": "Malware payload (Mirai)", "value": "c1e0e5927b4de55ceb0b0ddac497418c0025d211", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055553, "uuid": "5a9d8901-b6cf-4c10-8653-ff8745bcc6a1", "comment": "Malware payload (Mirai)", "value": "4abea4c8bcfc0aed54b77b250e1534f34c7f9c25a80e6926462f43e794666082d1a871dcd3f11a36535918cefd6d9c8f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055553, "uuid": "b714f88c-37d3-4b5b-b101-6a7e30ff62a3", "value": "T18F13F172F25FA052E4F81CB2B97D4FC4BE865BB8249DB4E0081E48148D466DB7270BE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055553, "uuid": "0d586345-379e-48de-aa0a-2e7b71c6d506", "value": "768:ccduSyjTF7b0Xt8V0dCgPMX8XWeXFYDLKiS9q3UELDkOfx1NZIZtH3fyw5BH2:arNbwtddHMsXWeX+n9HLNU55x2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055553, "uuid": "5edb04d5-97f4-4519-8000-6a23c090ab00", "value": 44252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055553, "uuid": "d839312e-bb8e-4552-b432-d42a7edd6621", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055553, "uuid": "ece05311-3a93-4c48-9136-1b87dcd0287e", "value": "0242b323091b38fc0c958f13b029c0f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c1adcb3-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094984, "uuid": "ef640801-d360-4af0-bfb1-aa85d0e98c08", "comment": "Malware payload", "value": "d701f738659bcaa249fbe2e7ad7ea5fc", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094984, "uuid": "aa60aea8-6f2b-4906-bc21-5bcf324e9364", "comment": "Malware payload", "value": "b7e95b447cfe87ad8f4588165767cdef30a2f3ce4dcacf3250e45e719b935621", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094984, "uuid": "59a5d083-5ced-43b1-9d2d-26b211699236", "comment": "Malware payload", "value": "d83e20b3f3235cb4897e58230eca8f45f3cb299f", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094984, "uuid": "5b72f952-2ab3-4184-928b-82c1fd872956", "comment": "Malware payload", "value": "735a37373512a6edb028e82946c8041c8ef6010cd59ac1af372f9240ed94085ee6b83da74560150ee7b79d9a2f9be217", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094984, "uuid": "9d0dfd87-400a-4611-a057-afcddb209771", "value": "T17F81985632A4D247D1000137AD92CDB45A35FC4BFD0A2513B5D4335E5AFCFD20D46299", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094984, "uuid": "50d8dabd-6b9b-4834-ab3f-b879afe4a00d", "value": "48:re6m23oO44wEk937SAr13VRmx9SF3xiQuriDDKg2:iRO+VJFRmnS9xiHri3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094984, "uuid": "cbe94a82-62bc-4119-a2cb-9c4735706ff4", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094984, "uuid": "49f43e99-d1cc-41c1-90f1-9b07bc002f64", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094984, "uuid": "fc8663e3-bc02-4c95-ac2b-e04706799d45", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.313.2090", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6e2da0-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077371, "uuid": "4bca41a0-9a68-4efe-84ff-836aa767bb3d", "comment": "Malware payload", "value": "e3538fbbbde83f6b5231ae9be0b6ac1b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077371, "uuid": "f03dd602-d9fa-4581-97fd-3e7550e1baae", "comment": "Malware payload", "value": "b86ac9ca7c09bb0eb2d05fef43dab8266e5f5a88428ea4ceeaf1371a5508c45f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077371, "uuid": "14354a90-106e-47a2-ae07-ca1aaea07919", "comment": "Malware payload", "value": "0bc4d3dac4c105df89e7632064755cc8aa73aa0c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077371, "uuid": "7b9d5872-36ea-416f-9c9b-73ba044b768d", "comment": "Malware payload", "value": "c83e71bb0b9a9ccaba146c31026a62aaa02b990b4e63ee5d6603afd14e9684604922adfb375df96ece0ed05deb7db60a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077371, "uuid": "5d6d43cb-b8f9-4ab8-95d6-916105996abd", "value": "T18E155C13B280573BC122163AC9779364683F7A207A967C17EEE41D4E1FF92A12C3E657", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077371, "uuid": "f7324bd4-cf6e-4003-babc-0367c78f1ff9", "value": "ac9a8ca5ae483657b7d1f38507e16689", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077371, "uuid": "8e221aa4-8ace-4215-bac6-ee3aaab7d9de", "value": "24576:fKTyeBGDuC1IDPxSB3SvRgwWwQU8pH5YmV:mPYhSGwQUGH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077371, "uuid": "d74070ce-adf3-4114-9707-86c3b1559398", "value": 945664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077371, "uuid": "e6bef7ac-7d28-4ef6-b078-3d1cf9898582", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077371, "uuid": "a357e6ad-acb2-400a-8e9c-1c3b7b22e0f2", "value": "SecuriteInfo.com.BScope.Trojan.Wacatac.4177.1593", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e1f03fa-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094987, "uuid": "1cbd1741-f821-4230-8b53-680b6f94b57c", "comment": "Malware payload", "value": "886474969bb7556edc0b3acc2942609b", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094987, "uuid": "155090e4-3ec9-4616-9206-8c282a68fc08", "comment": "Malware payload", "value": "ba8d1b04f9bb28cd990e915842e5ff64c56817f4de4e4d98860e63b1b23ab962", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094987, "uuid": "2841a381-7134-4166-8953-456f473d861e", "comment": "Malware payload", "value": "8694f6c2f246f8db4961b56ceecdb2ea0a4aab9d", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094987, "uuid": "624282bf-4b03-4160-bc2b-4fe7cb63c196", "comment": "Malware payload", "value": "47ad3c5b9cc3ee0a3fb8669b123b206d41174a9b3b3a1963e48cd42188bff81294e5083141df2a867f78159f8b8fc21f", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094987, "uuid": "01060734-9417-435f-bf3e-213b47216ca4", "value": "T1B971D865B1E1D2B3C8514F3B4C90CF540130BCA29E46493FB29D332E3E3A1E60559DA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094987, "uuid": "748868b3-29c1-48c0-bd68-2cfd3470d139", "value": "48:rLoXKMhqeek+UeaIXh2SRLmylJOpUD/zrrsUO:Y6M8trFNlJOpUb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094987, "uuid": "ad969698-f82f-4b00-8152-6eb0e05d5c27", "value": 3584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094987, "uuid": "0d39ad27-454a-470f-83b7-4717422d13f9", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094987, "uuid": "d9614f8e-9524-4008-82f0-0e265ea1a4f7", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.4553.9230", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dc21175-ded4-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710071418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710071418, "uuid": "51952978-0f7f-45eb-ba82-550f4a5ac316", "comment": "Malware payload (Stealc)", "value": "e771c0057ba416555a7dc16e9e281809", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710071418, "uuid": "7774a1ac-7a25-4bea-804d-aee749948cc5", "comment": "Malware payload (Stealc)", "value": "bb94b5a0a317403d2bf8f8e21913a1a7910641e03a5157a0edcccec1a9d86240", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710071418, "uuid": "fd3f014c-11f4-4e97-9be3-0bc3ba85623d", "comment": "Malware payload (Stealc)", "value": "748c47ca7c553a9dad28b74b24555a78299eae4e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710071418, "uuid": "e17c967e-39e7-4082-b7c0-0e48e5fb1335", "comment": "Malware payload (Stealc)", "value": "e94f4b40b7e41cf9c6ce0ab2d4998d6e5fcb7811759283edce58d21e4f9c5c04790dfb8c21bf2360c70583710f3b80d3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710071418, "uuid": "4e6d6d3d-9d71-45fa-94aa-66a6270ffafc", "value": "T14014DF1132EC8079E5A30931FCB4A6E1476ABC932734419F77982F3EAF716C48A64367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710071418, "uuid": "50467371-b551-422a-a7c7-1b6f5bc0b3fb", "value": "f713e9b3b1303cb3130c63e0f850f9c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710071418, "uuid": "083f623a-bbcf-4c50-ad13-649ad39e2cf6", "value": "3072:ZfIuO6wtnvOFVIwQRefSszsls0Met3hv1C5u0EJKaPJBSE5t51:Zgunw9kViRe5sl4etxv1CNEoKS+t5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710071418, "uuid": "290a89ae-f754-43ea-950c-27323bd0374a", "value": 205312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710071418, "uuid": "83506ecd-0f14-4770-8ba3-47d0c0b43726", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710071418, "uuid": "04d8d819-88d6-441a-883f-2132767fe432", "value": "e771c0057ba416555a7dc16e9e281809.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45de6f2f-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077391, "uuid": "a3c4db8e-fa0d-4c2f-b82b-9585249db8bd", "comment": "Malware payload", "value": "3064015fc6e718a216a0d1703f503731", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077391, "uuid": "1d6b6499-dddd-4c23-bcd3-fe1702995200", "comment": "Malware payload", "value": "bc08b65933f41a75e34aa7450f20571aadabacce902ed2acca50340295cd6192", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077391, "uuid": "b0b679ea-3940-4620-b931-f4b4a2c9f817", "comment": "Malware payload", "value": "2b0c455429de58a25abfce79de03bf0fa4590f59", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077391, "uuid": "e4df79e1-6856-4b2c-b9ad-798d0ae8e4ac", "comment": "Malware payload", "value": "bb49cf46eec2f431f68988cd63d4f324545daa8cae970d6f9e1b0ba3fbeda23653c7f60627b6fa09aad969bccf549c09", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077391, "uuid": "b70ddcaa-030e-47fd-b15f-8a045bf6985b", "value": "T167E5CF03F78B40B1C95B2771118E77AA927D9F9827356BD363B03E2E2C742E1993524B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077391, "uuid": "0f5d1d1d-23cb-45fb-9927-234f0774e976", "value": "c042e6799125d610f65abf1651a8553e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077391, "uuid": "e58be2e1-c48d-457a-80ce-ef72e9e045d2", "value": "49152:ovfAWBFdr+1uv7wVJkElB186yxWbSRlWoESaNpw4hT6r:QZh70JkEl1y0Z6aM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077391, "uuid": "ba350429-0874-4350-844d-a63a93246311", "value": 3190784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077391, "uuid": "5f4d966d-8afe-4bb4-803a-08ee7f293738", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077391, "uuid": "2e4faab1-e060-4f1e-85e2-94c642026d7d", "value": "SecuriteInfo.com.Gen.Variant.Buzy.31291.32025", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6af7268c-dec8-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710066286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066286, "uuid": "e6a240d8-7c29-4c33-b3ad-8095948bc94c", "comment": "Malware payload", "value": "6f4e8bf949fa92d0fb88adb19b99ebab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066286, "uuid": "05336f47-bf82-4f3f-ae95-64393abcf835", "comment": "Malware payload", "value": "bea6eadf41883bfc59362bd16920120b7d6546134af1ce53f0f97d3f0c47369c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066286, "uuid": "6573a2a1-6eb6-486a-a0b2-eedaeed20d8c", "comment": "Malware payload", "value": "92a1bc8d8884929d808a3cfbf8d758434caa0cbf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066286, "uuid": "0ca70704-1965-4da2-b218-45e3e586a598", "comment": "Malware payload", "value": "21ba083cf00d747394c431406bba5a3afa81b3809ec65fd46db26b7fd077f1852579168edac6ceca9a8034144277ca8c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066286, "uuid": "b1285876-69bb-42da-aa63-c411d20aad34", "value": "T197C66C12B245943BD0770A3B8C27D6C4283AB6617E25DC5B3BB40E4C6F79B81BD2A357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066286, "uuid": "64ffa5f8-f333-4f18-934e-d73d2008b7d9", "value": "cba1a2e4870926c3a9e6055dedb68ed8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066286, "uuid": "22c66194-590b-4f5f-9155-a05be180120b", "value": "196608:5RzUtuEpsYOJTtDMqgfB37DSUuPHcio/Ysr:5RzMpsYOJTtngfxXzuPHc1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710066286, "uuid": "7d32e29f-3e4b-4c51-a3c5-3b95ce082f43", "value": 11807744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710066286, "uuid": "490125bc-4cc9-4f1a-92d1-39809a20def1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066286, "uuid": "d9984fce-034d-42e5-8f10-cea471e543f8", "value": "SecuriteInfo.com.Riskware.Agent.9873.20281", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "174f7c3a-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092345, "uuid": "27a3631a-786e-4dfc-b08e-6e87eb02d767", "comment": "Malware payload (Mirai)", "value": "d7375a9b69fdc9ac51617ac90e644ff4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092345, "uuid": "d1e6b184-7057-454a-8f5d-db4f0ce2ed48", "comment": "Malware payload (Mirai)", "value": "bed3a72086c08ade6cd6d17637a563bca93999570b3d9beafff2907b4d4446d7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092345, "uuid": "2a1de1c9-92bc-4663-884d-ec1c0146f5dd", "comment": "Malware payload (Mirai)", "value": "fb6d84819fbe975b0da66fc49f6bf5aa0d2407bb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092345, "uuid": "2f616ca1-964e-4375-83b9-85d36f727e59", "comment": "Malware payload (Mirai)", "value": "853b806a9ca1c4f04f36503e9bf96b9699ede1e0ff526f269c4ab9a476589170fc0767762fc97bd0cb9866098ccb21c3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092345, "uuid": "d0fb72b3-18a6-44e5-b950-9d094616b6e5", "value": "T18F53E9627C926A2AC5E063BAF6BE518D332167B8D1DF3217CC212B057BC551F0DA7B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092345, "uuid": "60348182-e18d-4c12-a7b1-c62c0ee6b0c4", "value": "1536:omHfUXVywKHMIeVOeKSs2KlkaLFgiZu6Kjoh+tTnS:omHfUl1IFM6KEhqT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092345, "uuid": "e1dfd63c-0f15-42d6-b1bf-b6758ccd5711", "value": 62700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092345, "uuid": "56df0248-15b6-417b-9f5c-6458c05c48b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092345, "uuid": "442bb6be-a059-403a-a0b8-c1e2e17d83f4", "value": "d7375a9b69fdc9ac51617ac90e644ff4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3310731e-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092391, "uuid": "b10f2b4b-0936-41fd-bb44-90d660a93eea", "comment": "Malware payload (Mirai)", "value": "9bcc3406b2dd93696d60b9f8a6354f87", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092391, "uuid": "9ce04bf7-4c7a-444f-9091-888c29a3474a", "comment": "Malware payload (Mirai)", "value": "c141d1ec0fef2ac6a850aad1976200189f03129def982f838895b52fe339cd7e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092391, "uuid": "8b425945-6b54-42ef-b29e-84820ab38ac3", "comment": "Malware payload (Mirai)", "value": "a4b41db13dc2575725b689ac649c5c0ed7327b67", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092391, "uuid": "0483efbd-4e66-437e-8196-9ba684316fca", "comment": "Malware payload (Mirai)", "value": "a71181b1e8cbc7a27a670708619710de31ce584a043762a2d6c88551ee9d3aee3a534a3f685728a8d0046d8ab2a363ca", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092391, "uuid": "2b8fb391-d7df-40d6-9f28-96832c3430b1", "value": "T14D735CD9A8025D3CF85BE6BD94220F09E924231557D30F2BE5AAFDD36D731689E02D82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092391, "uuid": "50c3b8c5-0977-401f-a87d-d9659778a40c", "value": "1536:jvXzeOyllm0KfPKizrqw6agTLfKRslO8Ap:jvjeOyODV6w7PROa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092391, "uuid": "3862b78c-1643-4e0c-bed3-c3cb60f27362", "value": 78808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092391, "uuid": "29b30157-2073-42f2-800c-5139fccec6a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092391, "uuid": "5141a988-7876-48af-af0c-383a4bf38da9", "value": "9bcc3406b2dd93696d60b9f8a6354f87", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a905c1e-df0a-11ee-b7ea-42010a9c0006", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710094525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094525, "uuid": "50bf7d6d-bb79-4d48-9658-732d07c5869b", "comment": "Malware payload (RiseProStealer)", "value": "60b14cca7c6da9e3f12145da6d04d401", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094525, "uuid": "774dc531-8311-4021-a953-c41574279785", "comment": "Malware payload (RiseProStealer)", "value": "c14e48cdd7ed8029b00e3b5f1500569f88a178095976d2ba25a1c817aa4cad40", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094525, "uuid": "bc894ccd-f282-466b-94eb-fa2871824366", "comment": "Malware payload (RiseProStealer)", "value": "14cc59948ff7da33c03de7c3788a103fff79bbbd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094525, "uuid": "a800804b-add7-47e9-8e61-4a7c54d69fd5", "comment": "Malware payload (RiseProStealer)", "value": "80808dc9aa07dbb51b619a1e930036c61ceebcc189490b4568faa75d1700bdfeedf1a6ef90df0a448f520f82109234bf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094525, "uuid": "c6e422a6-d788-496d-ab8a-fa979962bc55", "value": "T131767C07F89155E9C1ADD23086668252BB707C894B3123D32B60F7B83E76BE89F79354", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094525, "uuid": "391261c7-4433-4eb4-a75b-71db1da799f0", "value": "85cddd6092e65c1a58dd1e6e9ab9fc63", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094525, "uuid": "c508b84b-e832-4f86-9f88-f364e5bdc685", "value": "49152:YnktWG3ug3n9gZxrb/T4vO90d7HjmAFd4A64nsfJiL3VI/IZkViJ9p1SJILtn/zQ:N3npWI2sTokZ4EkrE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094525, "uuid": "1533b413-0d15-4800-8705-84d7bf36cf4a", "value": 7303680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094525, "uuid": "c7e062c3-8c8b-4442-b06c-65a819a6db9c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094525, "uuid": "fd4f1f94-0b0d-4a26-84ca-042043bb6703", "value": "60b14cca7c6da9e3f12145da6d04d401.bin.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a9df9d6-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "5f181588-668a-49a7-ba72-f4ddf180bd83", "comment": "Malware payload", "value": "4b8d048afeb17fc6b5d9b00fa6eb6eb1", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "c5db530a-d01f-4bd5-9709-ef0f043d52c0", "comment": "Malware payload", "value": "c3f7b1069b455db2324232f78a79ec7bb40d07f56c92e26dfbdb8bf8e6bf82fb", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "99699614-8d9a-4362-89ab-972b0ea214e0", "comment": "Malware payload", "value": "240599e50932f98a7de0c230c8b633d96bf7a644", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094981, "uuid": "2492533e-0820-4212-bd3e-0d18581aa47c", "comment": "Malware payload", "value": "c4d606bd8e989f88fb12d2255a6bb6b2cb782056a5f7567af806d2ce48e6c221bf6736391fffd5e34e25534690d734cd", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "7abafe61-602c-4622-8591-d423c7a04ccc", "value": "T17281B749B616E727D0541A719E06C378A2A5FCC7FF10A003B2C6372E4FFD6450411796", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "6646d840-7ee3-461a-ac33-298b611de901", "value": "24:rHE08cfuiNrRg9LLLA0Oodgds7BUgSNzPJtOLXpcE+dlJ3rpEAHGlLTtziPQ:rkouLOofFUDLjOzpc153GAHGtZziP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094981, "uuid": "623e0445-95a6-4e33-843d-4998fd5354b3", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094981, "uuid": "57739631-a56c-4204-a630-d0bf2a572294", "value": "application/CDFV2", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094981, "uuid": "f6874b98-3dee-4f2f-9fa0-ae11bc53477f", "value": "SecuriteInfo.com.Exploit.CVE-2018-0798.4.29624.10698", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "596d4418-df31-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710111354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710111354, "uuid": "a7243146-25ee-48c2-b766-418b363e605b", "comment": "Malware payload (Mirai)", "value": "0b9ef1699c63411c008e6a1fe69c6296", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710111354, "uuid": "0a7e490b-c343-4e3b-ac41-6e196e90a98f", "comment": "Malware payload (Mirai)", "value": "c99803de8df246460796a91399936cbdba87aa74308b1f163fa291345bc17b96", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710111354, "uuid": "cade0ebf-234a-4c6f-9367-b923cb2fd049", "comment": "Malware payload (Mirai)", "value": "61e0661958261eca9bcb1b1c849dde41fc30299f", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710111354, "uuid": "79a7ad68-0814-46c6-81d9-4bfac9102b95", "comment": "Malware payload (Mirai)", "value": "19a563f9a8729c22b692295ef4195309624481ad195e2b0c79aa9d83c3bd98cfbb293c90e34ad40faf5582be909573e6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710111354, "uuid": "09c0cc38-26f7-4746-b588-5966963a4935", "value": "T1ACD33B1BB4C180FDC4DAC1B44B9BF636DD73B0A91238B16B27E4AE261E59E315F1DA40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710111354, "uuid": "02213a56-2651-474f-8351-042a4690a80a", "value": "3072:XHJwad33EtQj0fdzVqWITcIDPZvteAkC4jp7wBYRs3:XHJwad33EtQTv9knXRs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710111354, "uuid": "eff8c1ef-6729-48a5-a7f1-b0c7b34f672b", "value": 139608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710111354, "uuid": "72353333-8f38-4c96-8ece-99f4262967ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710111354, "uuid": "b8ebcb34-728c-4c58-b1f7-b27079f60187", "value": "bot.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e386897-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077378, "uuid": "772a731c-b4d7-4af4-b940-8f61b363c761", "comment": "Malware payload", "value": "dba60ef49a61f7b63a5ee327ea51f24e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077378, "uuid": "8dbdb2d5-e419-48d6-b95a-a0fe9c73e358", "comment": "Malware payload", "value": "cb044ce5631c5204667e8f1c7c2a4a348790cffc64afde8e2c0e8e03d16e3d9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077378, "uuid": "e1b21222-5e8a-46e9-b0b0-8cea7ba9b155", "comment": "Malware payload", "value": "55aa3a64af056b500ff03543bb92e6cf18208e86", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077378, "uuid": "bb9979d2-f4b7-4e19-bef9-44cae0bedaca", "comment": "Malware payload", "value": "1ed642bf7f0839db991f3559534e4af37b3a851a5a3c0859de7fe485ac80512c95e736e0626f791e330714f2386c28a6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077378, "uuid": "a5f130a2-869b-4742-bcbb-c4d75c8a952f", "value": "T1D2937D49F4D2C0B9E9C0A3BD05E82776AB36C474077AD7938394EDB69B521C0B40A79F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077378, "uuid": "e1aef3d2-340c-42a5-b1f2-b773aa3d7387", "value": "e29216111be8758f004d4ae8b6c1fd97", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077378, "uuid": "cd424c11-1778-4905-97af-af955b13d4b6", "value": "1536:sJlyE4eD3HSxwR04yUTujLbXZghOICwzWEO2B+NOhk21BEYp6o33M8fcj:4lH4myxwRpyUTujHOhwwXZ+MsYpx3M8k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077378, "uuid": "48160812-77a6-4e2c-93c1-e354c9cb8060", "value": 92672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077378, "uuid": "08c1942f-38af-4c98-ac9e-4f4bef147f86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077378, "uuid": "bf5a763d-085e-469f-a0c6-e8db52cf78e9", "value": "SecuriteInfo.com.Trojan.KillFiles.26002.9344", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba23d7e7-de7d-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710034207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710034207, "uuid": "f663b50b-bb17-4f71-a4bd-839705e01a36", "comment": "Malware payload", "value": "ea341c02bfd5cfeb9d75f2dc378c87ec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710034207, "uuid": "36e4a6ac-56c1-46cd-a6c2-9225c95e6aea", "comment": "Malware payload", "value": "cc652f4b99c0cfd6d8bb516b7f021d201c8a15d81fe73d0923b14fdecd3a4c94", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710034207, "uuid": "2b7e4262-1580-47e7-8322-7478f662ad34", "comment": "Malware payload", "value": "79623afa94fbd1f24f610f8010b40e5f8fb2f848", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710034207, "uuid": "1ddf2683-126e-40fd-9e0c-b382998be9fa", "comment": "Malware payload", "value": "7b4a197700d448dabefa9674dc9150a34ddf36d8cb6aebb2975a161ed051a4d1a471fa31691921b89eebccc0f62c42a2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710034207, "uuid": "70b77c24-8b09-4bf2-bf64-2c51f071b82d", "value": "T1F926236346412EC7C23117FD1C62E7388A296BE57E128352A47F79A3F589A0F5FB42D0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710034207, "uuid": "27194857-0d08-4ebe-9c3c-428a5246d277", "value": "5cdedcbcf5ca4c76772914bd655c8982", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710034207, "uuid": "d295ed0a-fb61-4cf3-b0e6-2392d864ebd4", "value": "98304:Laig4LJf//fSUdoR3yI299W4vTM5I3ayAS0xv62cLwIqGQ1dIki:LxJf/HS73yT984vTMgGhXGQ15i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710034207, "uuid": "4dddf8b8-16ca-469c-8008-fff10cf11541", "value": 4458000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710034207, "uuid": "0a43294b-d002-450c-9cd4-396bf662c50a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710034207, "uuid": "78253b1f-8dad-43d7-aacb-9eedcc7f8552", "value": "SecuriteInfo.com.Trojan.Heur.TP.@Z0@b0ZRLvfO.14492.7389", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "420c5fb6-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077384, "uuid": "dbde0e96-4d91-4328-94ce-2fb2fa00dfca", "comment": "Malware payload", "value": "49835d434bc76968beaa025f25d63467", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077384, "uuid": "471286be-6ecf-4325-91ce-e42a34dd4ea7", "comment": "Malware payload", "value": "ccd71bed0e3ad5d93b60b38bd6c4bc953245aafa6f6f16455dd1026f18613768", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077384, "uuid": "955db218-6b59-47a0-8ffa-151e1e915241", "comment": "Malware payload", "value": "61ccd49b53a37b3ed17be6c729ea5b0c55b976de", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077384, "uuid": "dfc0309c-585c-4624-8938-34bc6439f5f6", "comment": "Malware payload", "value": "ee7c486db7bb96cef1126631dff63e27443ed9efefd192f7c6d4013ab201dd94c15075a99213d032f362aa6e29da3180", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077384, "uuid": "d4733cf4-5f4d-4405-996a-83bcac20daa3", "value": "T1F0937C05F5D3C0B5E9D0A2BD04E72776AB36D1700FB6C683C3A4ED7A9A53580B41A78B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077384, "uuid": "74d77d52-00e9-43d3-8063-9f418b536635", "value": "e29216111be8758f004d4ae8b6c1fd97", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077384, "uuid": "eb61d2f2-9392-4c13-9ca5-82f45b11a3b7", "value": "1536:G3jkEKNFPyEqADF2V1xSRJd0DUw/uqwbDd7z58cKp6roQLwvRehmyCCg8fcjQv:nPnqkE1xSRJd0DhidhKA2RZyCCg8fck", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077384, "uuid": "7d81884d-2df0-4db2-adf2-274e0b515478", "value": 96937, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077384, "uuid": "3a8b4751-05a3-4d62-ad0f-8c448a4adabb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077384, "uuid": "bb293759-60b1-4008-9821-9477e7317089", "value": "SecuriteInfo.com.Program.Monitor.2797.11909.9455", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1388fa2-debf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710062619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062619, "uuid": "f90448ae-209a-453b-a68d-18b71d2dfd71", "comment": "Malware payload (Mirai)", "value": "a6f3cc6f55819b9fd868a489080ba4b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062619, "uuid": "55423ac0-5812-4a3f-af08-b208ac7c4272", "comment": "Malware payload (Mirai)", "value": "d2f42f458645fd53fcab926b6057246a43958c6c59c24db79062d5c6227648f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062619, "uuid": "dbae4189-5d80-4073-9e81-a62be8cf2a1a", "comment": "Malware payload (Mirai)", "value": "7c081904da7f76aa7e6c4c2f0e2185729308fdda", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062619, "uuid": "201e0e1e-ec48-42a5-a512-a7b503f634bb", "comment": "Malware payload (Mirai)", "value": "d38c5ade8a43215f415e0516171f65e26c6e899dc8e6c15fc370a7f7fb577bdd57887c7680754a212724f8af1b97c80a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062619, "uuid": "92eef7a9-ba53-4d7a-90cd-78b7a3c4afe7", "value": "T11DA2D01C5A020AD6EA79C4F64EE907901FB11FF9A187BC0B6C1DE40B6BD78643897AD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062619, "uuid": "22ebe4bc-1d68-41f7-b22f-75cb35fe9b71", "value": "384:R/IlVuSZ+CUIsMcwm/ifA7WX1UI9zMmLjqCbBrQFi9qdvJgGlzDpH7uNj1JA:R/4VuWBlsM3OiI7WXWIPvRQF+cvJgGlr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710062619, "uuid": "d1b62c87-1024-43bf-bdbc-443111cdd5f1", "value": 22236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710062619, "uuid": "5f8d7f49-7fcc-4b03-93eb-3b29b79c0493", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062619, "uuid": "40e9b459-f03b-4863-851a-6962fc90b006", "value": "SecuriteInfo.com.Linux.Siggen.9999.3745.25857", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "375c7d97-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710091110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091110, "uuid": "30819675-832e-49f3-b42e-7347151e3cd0", "comment": "Malware payload", "value": "72ff481fa8614b3adbfff29253298626", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091110, "uuid": "2b43865c-bc69-4c96-a12f-f764a5d49e02", "comment": "Malware payload", "value": "d3a4f5195388b8adc167507508c61975418d9fd472f7e2b9135d6cd184613350", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091110, "uuid": "9ac26e63-d4a1-4655-ad9c-4d1a89e7ca5b", "comment": "Malware payload", "value": "78ffe29c592f383f448618476ec61f251aa26dfe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091110, "uuid": "52bf89e4-8a10-47af-94d9-12596a6c55b8", "comment": "Malware payload", "value": "af12bbb28dd262cebf5117b430b73973f7a974aa1fd80aa8fb9687bb0ed9928324927e43586a9761b11a0be6f2d38a70", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091110, "uuid": "e1806848-4e94-4f33-9879-7e4555bf672c", "value": "T19E573328A6A6DF7DDF231BFD904E44EB9A6F9DE312C5007227F059C686147D0840EEAD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091110, "uuid": "7fa569f4-bc8a-427c-a89c-cd32aca71e6c", "value": "a0722f4d4407b49f848f72fd4df721d0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091110, "uuid": "59ff31ca-055f-4f4e-a517-c562c2f275b2", "value": "393216:3x5vAtM900k3ClwrwsWE3RaKGYeq9cwFE0dMPx+vGMeO36we3FwQJwN2GEE3Wyxt:bDAwDE7elaEtyG7O36we3F+N2x+pGa9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091110, "uuid": "1a606456-74e2-463d-9094-a07d6ac52bd1", "value": 28436544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091110, "uuid": "55ec5c72-991a-4a28-a16d-a64f0ea0681d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091110, "uuid": "3c55b175-d255-4cb3-ab46-03751de08a9f", "value": "SecuriteInfo.com.Trojan.Siggen21.29401.24890.4765", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5130070-df34-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710112823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112823, "uuid": "b239f3ec-e962-4a1d-8eb7-a70fb649feea", "comment": "Malware payload (Stealc)", "value": "ddccd52c133ba0b39be99d28d459bfe1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112823, "uuid": "6693ff03-d1ed-4479-873d-1c977d9c7ebc", "comment": "Malware payload (Stealc)", "value": "d56b93388319e4139dcd139b4276fb390aabd749d24535b6a3181fb628777988", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112823, "uuid": "8c1cd71b-3d21-43d0-a304-eca83312bc82", "comment": "Malware payload (Stealc)", "value": "c948793ffeee04b0012c3b16a01dd2133a6e9adf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112823, "uuid": "e4555b66-e717-4073-8146-8c41267dcb7c", "comment": "Malware payload (Stealc)", "value": "8161be09b8cb60827968fb2d1a3715ade3c561dabbde4e096ed213e1f985aed724c0124f7559e90cc83208478d5a2192", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112823, "uuid": "f3d51321-7232-4dcb-b5d4-954ac6a6a7cf", "value": "T1A414CF1076E0E27BD7A7113009BD96A30E7A3C52573041AF27583A2E7E327949A7DF36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112823, "uuid": "05647cd7-48de-4fb4-b981-b870ade6ad5a", "value": "274ac5cec143bcfe1f9479fdb6bea3bf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112823, "uuid": "5eed665b-82b0-4ba3-8413-8c92e2b54e4c", "value": "3072:94E8Y4L3uyye2MmYJpqXodDK3bRa/r00sZkjR:GEUL3uhKyOiKfX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710112823, "uuid": "93c37d05-cea3-4e93-903b-af40b0f0a9ed", "value": 203776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710112823, "uuid": "a67335e3-31a8-47a7-8f1f-520328a81183", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112823, "uuid": "baa25806-76f8-4f2e-91b1-75ebce92a0e9", "value": "ddccd52c133ba0b39be99d28d459bfe1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66eccbfa-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055542, "uuid": "c1e149a5-2a7d-4a15-b71f-6aa09c378ab0", "comment": "Malware payload (Mirai)", "value": "87455b2ba3ada008b0fbea72ab2ac33e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055542, "uuid": "91615699-9b3a-49eb-8671-c1a73422d8c8", "comment": "Malware payload (Mirai)", "value": "d61609de1830ad0239bd2582a3c929361d88bf363e220fb99f62d963f8b683b1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055542, "uuid": "408adefc-d333-4448-9db2-7c93ed10e10a", "comment": "Malware payload (Mirai)", "value": "94fa3fc0268d70caa9979461bc5181c38581cdcb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055542, "uuid": "eafabb19-c1f8-4bc0-ab90-5c4041117127", "comment": "Malware payload (Mirai)", "value": "580be483dcbdb97944ca66c0f3470c90a925aec5bb621bb6bc558c8a229a1755b751ab6eb7a39a6aabd4b0e6263dd458", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055542, "uuid": "a3f599a4-c06e-485a-b35b-4835fbf25233", "value": "T1F782D0ED17450753E881E3754A1DAEA51434FC448EC1CA59E74AB1DE28B3245D7F8E33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055542, "uuid": "c21ccb6a-1d21-43bf-b012-c189d5b6e65e", "value": "384:MbLuPhtcIfTAhaDqHfY+8ufdqKpEm9FwjGWPnSVtBJG9bwTaNLv1RUSM:wIfTSkUdq7cFcSksSbM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055542, "uuid": "7f749c37-d085-45ba-9d39-9c3297d329af", "value": 18692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055542, "uuid": "ea496209-e10c-48e4-8a29-2b9b5ec1257b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055542, "uuid": "2e18ef57-44f1-4f94-b67f-5257d840288b", "value": "87455b2ba3ada008b0fbea72ab2ac33e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20ef3035-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092361, "uuid": "757744fa-ef1c-45ea-b4b5-9a3f46379df7", "comment": "Malware payload (Mirai)", "value": "78fb3fa7e71683f83bd1bdd5e94cf3fe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092361, "uuid": "0bc69e9f-0ec1-4388-b1e9-4bef0f31310c", "comment": "Malware payload (Mirai)", "value": "d6649bcb478b7a8f28388fc6dde3ffb725837a0cd7df230f6537bcf5a699f3d6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092361, "uuid": "c8d239f8-dde7-45a8-8e49-af19301ef6a0", "comment": "Malware payload (Mirai)", "value": "6f87a513b764add8cb461419b6db2b551502b258", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092361, "uuid": "2e35f147-4d67-4417-be5f-583a673e2680", "comment": "Malware payload (Mirai)", "value": "bb2fcd65fe1d8d1e27fb6d48b05d0cbfa715247d523ec272e2fc7e1ea7edefff390d1b478440301d9ff0ddaaa8fdf4be", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092361, "uuid": "1f52b649-d2a2-48fc-a12e-584763e5b2f2", "value": "T11CA2C145D2C45B70FEBD69A44B47E2C13F948AC733A2896332E74F15A443066B3CDE90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092361, "uuid": "2793e02f-5e9b-4ef8-8881-48c86f54fcd2", "value": "384:R/JywWc84Tp2YshxqlDyXpn++Lobqhl6Ah+q2c3ofodDkM4uVcqgw05VxJd:RRxsSVsMDyZ++0eb6E+qwodn4uVcqgw6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092361, "uuid": "da24a9d0-186f-4797-9633-b548706e3763", "value": 21900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092361, "uuid": "70228dce-260a-4934-a5a7-543149e570f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092361, "uuid": "d017ede3-7c3d-4cfa-bf2e-15edf19c3ca5", "value": "78fb3fa7e71683f83bd1bdd5e94cf3fe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e91940-df06-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092738, "uuid": "57d5b008-345d-4d31-9431-9fbe4d8614b9", "comment": "Malware payload (Mirai)", "value": "e059f3c2739dbacc71867f92a8078c16", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092738, "uuid": "9eb401fd-370f-45a4-9d13-dff020fbe73e", "comment": "Malware payload (Mirai)", "value": "d85600c70e061ff215123ccb0dea79ddaf4ecc8012581890104514ac33be6adc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092738, "uuid": "46d9b8c6-93d2-4e8e-9b4b-69abfc230d47", "comment": "Malware payload (Mirai)", "value": "feb4f9e280447dff7a3557011265153bbf1fa718", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092738, "uuid": "f4bb4a7d-1c80-4b8e-b110-4ec752262e5c", "comment": "Malware payload (Mirai)", "value": "83fe21a4b604862727286905c533d1b5b0e27046bac89e5afbce3fe43a0e2cbdf989bc7cb9803a6e660f614f3035cb52", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092738, "uuid": "4867278d-35f2-4e98-b3f9-ac84bb6fcb21", "value": "T18FA3C71E6E158F7CF79D873447B78E259688338B2AE2D141E14CDA015EB028E741FBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092738, "uuid": "425ccd90-5b8e-4b68-8337-a74321b0253f", "value": "3072:pqunD7x7p9V7Ebcr/kq6dH3faIfaazOBC7M:pqunHtp/V693S8aazLM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092738, "uuid": "401fd259-3802-49ba-9a8d-e083773f9316", "value": 101132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092738, "uuid": "451cd387-82b9-4aca-b8cb-6392e50152e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092738, "uuid": "1058220e-c616-43b8-83c4-54fce47a35b0", "value": "e059f3c2739dbacc71867f92a8078c16", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e01adda1-ded0-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Zyklon)", "timestamp": 1710069918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710069918, "uuid": "6314e0ff-2649-428a-9996-de013ff56de9", "comment": "Malware payload (Zyklon)", "value": "1b386f1c6ccf7750b146172492951092", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710069918, "uuid": "e41424c0-ff21-46a2-9ac2-76960e7d60c6", "comment": "Malware payload (Zyklon)", "value": "d8a2d92eeedda7214767ae29df6fae9e8793f9207a26db3bd346af2d3d50cbca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710069918, "uuid": "be507f2d-292c-4156-84c8-f347f4150a11", "comment": "Malware payload (Zyklon)", "value": "fa4ebd833978504374bbf60ce568b5937ee60ed7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710069918, "uuid": "43f31f3e-3e7c-4ee0-8c13-b4103415d61d", "comment": "Malware payload (Zyklon)", "value": "401d59b15380d762336a3a1960e44f4c389105cbebb29127772245efa851197ecb719f0b79d08a5f9e9d87359062fb1d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710069918, "uuid": "93a7e037-5045-441b-b496-fa232a224ee5", "value": "T1C306F146DD528E33C2683F34C9E7062E92B2D6627623FF4736BF18D169062358B171B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710069918, "uuid": "551e4df1-c818-4770-a57f-1c62df51e474", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710069918, "uuid": "b99ad7a7-9ed2-459b-b8fe-b6fb56a3f47b", "value": "98304:g1tWjfqEY30GmmBJgTnOgXO3DxtRQUFwX:g1tWjyETaJgTnOgXIxtqQw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710069918, "uuid": "a3547550-c6c4-4611-8e87-080ce9910a8f", "value": 3675648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710069918, "uuid": "064388ca-9cc1-44f5-b703-429797a179da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710069918, "uuid": "36e45aff-13f7-44db-808b-cbc857f4ca44", "value": "1b386f1c6ccf7750b146172492951092.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3f9c9b2-debf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Latrodectus)", "timestamp": 1710062623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062623, "uuid": "7d10a913-aec0-4806-9a8e-c6180cbc0bcc", "comment": "Malware payload (Latrodectus)", "value": "f2f2a4b96e57fb66e1f1bd8c7a558fe3", "object_relation": "md5", "Tag": [ { "name": "Latrodectus", "colour": "#156C04", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062623, "uuid": "93b4dec9-aff9-4dad-869c-ee15590a5d26", "comment": "Malware payload (Latrodectus)", "value": "e054153819d00712c4e34319b4021fe64ccf85c1f472816f4ca2251175e74b5b", "object_relation": "sha256", "Tag": [ { "name": "Latrodectus", "colour": "#156C04", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062623, "uuid": "e6a911b9-270f-4186-9e01-0d8005016e8d", "comment": "Malware payload (Latrodectus)", "value": "18fe55abdff5f2ac4507224e058f193f7acfbaad", "object_relation": "sha1", "Tag": [ { "name": "Latrodectus", "colour": "#156C04", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710062623, "uuid": "eccc112f-e39d-4e2a-8baf-b51be085cff0", "comment": "Malware payload (Latrodectus)", "value": "78214539f11d49b83852b2d4fa17531512c849a68239615781a47b523c87f5994c9af8bcc5c5305b0f387cf011c02a7f", "object_relation": "sha3-384", "Tag": [ { "name": "Latrodectus", "colour": "#156C04", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062623, "uuid": "8d23bbfc-a060-4a6f-a18b-f91483b71af4", "value": "T12D85D0227386C533C96E01303A2AD66B5579FDB74B3140DBA3C82D1EADB45C16639FA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062623, "uuid": "f92ed887-e34f-41fe-a5f6-506f0d096119", "value": "49152:7oivYpW8zBQSc0ZnSKeZKumZr7AmQhSeJmSi:PYQ0ZncK/AmQ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710062623, "uuid": "b7154743-9ceb-437d-ba5d-0cc51ebfe7bd", "value": 1723904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710062623, "uuid": "38031e5f-b787-47e4-a9c1-2fcdbeb05141", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710062623, "uuid": "3871230c-6db8-423f-84b1-4e580d64ad9f", "value": "SecuriteInfo.com.Trojan.Generic.35319809.8233.9994", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ff27648-df34-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710112760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112760, "uuid": "29445fcc-4fc2-4c76-8a0a-c817682a2fc3", "comment": "Malware payload", "value": "609fea742d34dc1d53f0eeb4873b1a0a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112760, "uuid": "28cbb7ea-6543-4264-8379-dbb0b8bcfac0", "comment": "Malware payload", "value": "e2e15826b69778e381f25ac8f2b109a377b23f7cf79b5f482e81f4d28c30f95e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112760, "uuid": "ef1df5f6-7f80-4821-96fb-602ba15b6622", "comment": "Malware payload", "value": "3232c52da3cb8f47a870162a35cdd75fcae60aea", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710112760, "uuid": "c6884d0f-d0a2-40e9-a095-21a227f81138", "comment": "Malware payload", "value": "954576c71a7abbd8ab45b03287956dc440eca7fe81a4023eeb280fea1f0c183ce4beff554240705c234882b1eb485f36", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112760, "uuid": "8207cb81-e1cc-4583-88f8-190426611a2d", "value": "T162E5F13FB264A53ED5AF4B3206B3D350587B7A61A81A8C2E47F0494CCF664711E3FA16", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112760, "uuid": "8204ce07-9b4c-4d22-a06d-b584f521bdb4", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112760, "uuid": "0e8b35c5-3290-4241-b8ad-11fa389e67ba", "value": "98304:wSiW4opH4opH4op4U9tNz9RGa/xlbLP/h4:ZDBDBD1t3Hbb+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710112760, "uuid": "7f7ca51e-2ee7-4caa-adb6-b7541fb2a127", "value": 3226144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710112760, "uuid": "b3b74d5d-8429-4f26-a898-dbb95e42dde9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710112760, "uuid": "fb47c099-d699-4772-8b27-df699643d4ed", "value": "SecuriteInfo.com.Trojan.InstallCore.4077.7832.32635", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7890c96a-deaf-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710055571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055571, "uuid": "790cb919-a690-43bd-a92a-e22f1b7b4aec", "comment": "Malware payload (Mirai)", "value": "7e6a54d11436f30fd990bd2640224785", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055571, "uuid": "9647db39-04b2-468a-8ebc-fb6aa58d10ca", "comment": "Malware payload (Mirai)", "value": "e67b341a83eefea3803be79fc6e9aded5732d7d7d594d1a3aa740dc3bc18f024", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055571, "uuid": "2ff34b2b-e957-4c70-aa15-7d7d77721d97", "comment": "Malware payload (Mirai)", "value": "725bdfd7daaf1f62e494c68792a333bfd0a8d64f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710055571, "uuid": "cab333d7-2277-48d6-81b8-6c724caa5b15", "comment": "Malware payload (Mirai)", "value": "3c1b5091b856fccac1f1f687f7733f02f23d439d0c5be6f8308931bf9c094524286a6091de0725eee03d0c56e83d9fd1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055571, "uuid": "bf9eed38-96bd-4b8a-93fe-c22c339e6dca", "value": "T1B992D021234BC43ED2E85838E921C9C7F7471BB8A3F9356209082D1DEAEBB579374589", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055571, "uuid": "1f689372-b943-44f7-82ed-6a1adb6d675e", "value": "384:/y7WQ0+M8ivC/7tAPZlcgNzwfUrtKj76EXthymdGUop5hs:FQdvSCZalcg+6tKXJs3Uozq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710055571, "uuid": "eb6df578-5d27-47fd-8827-d478757d99a2", "value": 19940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710055571, "uuid": "54e73957-6cb0-4850-b061-acd85341e127", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710055571, "uuid": "d52accf8-67b9-4623-bda2-786d343dd208", "value": "7e6a54d11436f30fd990bd2640224785", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da368a1-df15-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710099281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710099281, "uuid": "6d1c30fb-fa2e-4e50-bbc6-bd69566863d2", "comment": "Malware payload", "value": "90cb6020435bfc2dca18c050b7934fa3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710099281, "uuid": "69edd389-c670-4eab-8aa6-d55022a9d26b", "comment": "Malware payload", "value": "e83eefa650a1e520d82cf2196701660dcd5d5eb271ad4e85d0b9ed123861fd9a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710099281, "uuid": "3e402e2f-94c6-4bfd-9316-48a8f2687524", "comment": "Malware payload", "value": "87f8a1f0543bf0ae99b30e4431e90f669a2e1509", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710099281, "uuid": "f5e3fec1-5b77-4cab-989b-35e41f3267bf", "comment": "Malware payload", "value": "accd4ba3f8ef6aba643957bd0edd17514026525c02d73ccde82aa99912548b37223ec5b0671c18987f5ef2fbfb6c0f75", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710099281, "uuid": "cbf2aab0-f105-436f-9167-266c31e57f00", "value": "T17EF43C2F259241FAD376B034C8132E57F4B671880670E23A47E4484A5FEF5327BBDA66", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710099281, "uuid": "3b243f2b-18ea-463e-bc04-3a8b6eebb67c", "value": "9f5383077bc78202478659bd0c3202ac", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710099281, "uuid": "a83b6686-928e-4973-a728-7326faf3103d", "value": "12288:XCJr2Zxm5KzO3+kTXkwD0ZXkoL6zhJWyXv7BZumapB:X8KzO3+kTXBD0OzhJWklZBapB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710099281, "uuid": "558fe386-876f-43f8-ab5a-c3829b0fbb6c", "value": 741888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710099281, "uuid": "789632c8-9a93-4070-8b0e-86f284cc0707", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710099281, "uuid": "a58365c2-f2ba-4485-a3a2-d0c054e108e5", "value": "SecuriteInfo.com.Variant.Lazy.458596.1767.28170", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49aabb54-dee2-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710077397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077397, "uuid": "9285fa09-3236-486b-80a3-3b623f6c0789", "comment": "Malware payload", "value": "66dd0f7dc1188ce3a6ae98a83b31057a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077397, "uuid": "8f788b4a-648b-45bf-bbfa-962f1a84bacb", "comment": "Malware payload", "value": "ed1d8a977f3ff693cbf338fbc517ddb63dbc475bae0539b06258304d55626783", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077397, "uuid": "a29ad7e0-a493-469b-b525-114091983a5d", "comment": "Malware payload", "value": "d6b892acc717a68df11bbc89057c6a467d895a0a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710077397, "uuid": "a492ecce-e9ea-45ad-9cb8-dd063675764b", "comment": "Malware payload", "value": "8cf5e53956031dc55997b1c7f8a5baa87308ed6d21f9cef810c084d5600bac77a572ab8b78aa3379235ccf639275ea94", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077397, "uuid": "eeefe572-8aa2-4739-b511-044cc7fed77c", "value": "T1D1C55D5366C8621BD2E35F338C7BA6506D3BBA503AB6AC6B6DE51D0C0F345807D2A743", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077397, "uuid": "62849ffb-6e96-4b6f-a0dd-e7e6acc1342b", "value": "24576:qET1Jgz+TpZkWM45vlhAVlfvptXL8/dInQUNBFSM550Gfy+FJ4luZF32K2uQqimZ:qiOHrNHSMc+rh5FIGDEjvQTSTjeT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710077397, "uuid": "b2eb2ee4-6f3e-4a30-9892-25550c0cf2d5", "value": 2727936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710077397, "uuid": "fa23b425-6ad3-4b65-97ea-6fc994b145e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710077397, "uuid": "3ede7690-823e-4e61-b235-e158326ce3e5", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.24331.15173", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c18b4194-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091342, "uuid": "ec50f49b-1c5d-423a-a9b7-d87204709098", "comment": "Malware payload (Mirai)", "value": "df2ea0af8e03b881a44e92e3aa6a25e6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091342, "uuid": "c8be18cf-bcbf-48fe-bc59-2144d520fdd3", "comment": "Malware payload (Mirai)", "value": "ee1d7612f2e3e20d52b4d48a73ea4d158d7c59d1600037a041a1e5f645ed2fb1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091342, "uuid": "f4efac99-ed0b-4a1e-8705-b154289d7d7d", "comment": "Malware payload (Mirai)", "value": "69362b205b239b1f444dcc1dd062a55883e39140", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091342, "uuid": "540fc59f-dbf9-4ed4-8ff3-d8d2be1d043d", "comment": "Malware payload (Mirai)", "value": "9db2d930f980036e4f15cd438acd8ab9cb0f1b4b8e711daf772188b5d6261fcc8e25c13b96b7f73555539a808f6f0ae8", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091342, "uuid": "994c0fe0-8e1f-401f-a0d1-6283db776ce6", "value": "T151B2D0CED0892089C80D3CBE06DED7554F6831D1AACEDB29DB50CEA81BFE54B700A1B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091342, "uuid": "c7f5cbfb-de22-4504-aa0e-90c5efec614c", "value": "768:cfrQlS07dEv0UXqUhvQE+CXQBszOrrF2SZqCWvy:oQlS07FUXqIYSXQmKrJ22qa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091342, "uuid": "2c896514-630f-407f-9663-676478f8f204", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091342, "uuid": "166ca436-d68a-441b-b6b6-0a5158c2cb24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091342, "uuid": "066c5be0-a3f9-4a8d-8879-be7ca15deaf3", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6977b023-dec8-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710066283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066283, "uuid": "42e2be39-c264-4792-91f3-26167fed9a79", "comment": "Malware payload", "value": "9c271e87a34ad605c8d01033ffbfe45d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066283, "uuid": "7fb65390-b4d4-4cd4-a97f-8d4f62f3dacb", "comment": "Malware payload", "value": "ef03564389c1df12af2595d8da8ca2f35e432cd45823f552f07c01a21d2fb6e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066283, "uuid": "568d8157-73e1-4257-9ee2-95c42b8d6ed0", "comment": "Malware payload", "value": "c538d5e6a5d055dce8d3fafb9bd83a810e99e94f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710066283, "uuid": "8c2ba6d3-ec7b-4eff-9ade-7bdf5191c7af", "comment": "Malware payload", "value": "3a6383c6795aa56ccfa12ebeeec895f16366fda1a3b097222f540ecd4086250237c7bbc3e2c708c5f35103e3e6f422c3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066283, "uuid": "ebdf0949-a30b-4a0e-9fe6-e4cddc881e17", "value": "T117A54B23B284613EC46B1E3E15679A6CBC3F6B61E5968CD74BF0194CCF351812A3E64B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066283, "uuid": "3977c4e4-05ab-4747-b6ae-f8428ae4181e", "value": "b98923e520c238bf5e41d1144e691eb5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066283, "uuid": "1e5284f6-761a-4c54-b936-2c1e67cf44fb", "value": "24576:9Tt1a2uxXAOxUi4kRtFv+xai3Cg1BuShasapy8GetCGECYgfMTQBCVunCzh:VfaDC1EShnqgA2TQBCVunC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710066283, "uuid": "e453c867-9434-4a57-bbbb-17a05c7355ba", "value": 2093568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710066283, "uuid": "e6b16a68-4933-405e-8097-7a407e496527", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710066283, "uuid": "d0011981-45e9-44c7-9d9c-e3d78854cd3c", "value": "SecuriteInfo.com.Win32.SpywareX-gen.12944.24536", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f66e6328-df05-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710092719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092719, "uuid": "36cd5ff9-abc9-450f-a31e-63287ff7ccfd", "comment": "Malware payload (Mirai)", "value": "bc4d94b3d62ec7f474e151deb66cc108", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092719, "uuid": "d894965e-1c5b-44eb-99ba-77702c52f473", "comment": "Malware payload (Mirai)", "value": "f1c851b6084c114810f99e67fe3cd3a2bae9995dd7e1a987861911876232c6f6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092719, "uuid": "3c515881-10cb-429c-90a9-cf084d137393", "comment": "Malware payload (Mirai)", "value": "42a0673cf01a256be95e253fe7cf96fb91c63ab8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710092719, "uuid": "f0e7d88a-4896-49f0-8aa3-b41ddd6aa83c", "comment": "Malware payload (Mirai)", "value": "766ab3cabc6a60c2fc29d3c8625efa2d519840a9386731ab84f1b976954d356519f1e50a75182c2997b2c9d03957b46d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092719, "uuid": "162e5805-3a04-40c9-9a6b-a6baad583a27", "value": "T1D5732A4371280A47D5930AB0263F57E083FFF99024E4BA89685FDB5A8A35E771186FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092719, "uuid": "0fb94f45-2f21-406f-a73d-66599590776a", "value": "1536:yqfeY9EA/CTxj11EEGFHNdMrCHsFhDajpI/P0:4BpiFHxH6cpI0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710092719, "uuid": "6ea4500d-d212-4622-b725-d85e09f110d5", "value": 77056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710092719, "uuid": "c8f9c86c-986b-4c5c-bea8-4c9db2335d81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710092719, "uuid": "3436c165-58a0-4169-9c30-63b5b80774ef", "value": "bc4d94b3d62ec7f474e151deb66cc108", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9e9bd0-deec-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710081620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710081620, "uuid": "67ad3c9a-d1d1-4956-a59f-7cdfd53e512b", "comment": "Malware payload (Stealc)", "value": "02fb72e349fbf4eb6e75126a2e93130b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710081620, "uuid": "0c579549-ac03-4e07-8649-46163afb901e", "comment": "Malware payload (Stealc)", "value": "f60d870ba4a24b757b7d6200d7cbfdd6ee7da44fd8d674915895ec24065cb9a4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710081620, "uuid": "c2c77469-0351-40f4-a6df-769b8befad8c", "comment": "Malware payload (Stealc)", "value": "9a3499b651eb21643590dd91f902dc532ba72678", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710081620, "uuid": "5b54624a-bfe8-46ea-b691-31303f002f54", "comment": "Malware payload (Stealc)", "value": "51a081fb5026d22836d6b8fcd01048e1a6123e7fef54f95d2667a8f83c351a6a9a0e3f21a90264a503465fce9d9e391a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710081620, "uuid": "e4924822-0ce2-43ac-94bf-b2e39467efa6", "value": "T17A14E02133E48079D1BBD63059B4A6A25A7FBC52273041DF27A8227E4F317D14E7A36B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710081620, "uuid": "97ab6ded-963d-495f-820b-7cac34b3ee5a", "value": "ac2ae63bc0c9af73d4bd0b2f5d2036a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710081620, "uuid": "74cd29b5-dc82-480a-9a24-20e995c212e7", "value": "3072:vSv783vidpjmqE4sji+i8bIECzSrlH/wHfIdyA/ZafLelLB3y/:vSv78/i5yrMElrlH/UfId8fLy8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710081620, "uuid": "bfe4d140-8202-47e2-a17e-5863e0420974", "value": 205824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710081620, "uuid": "b5455b09-640e-4b71-9853-e44e752b3b8e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710081620, "uuid": "2ed7214c-4004-41fc-8df5-d483757df56b", "value": "02fb72e349fbf4eb6e75126a2e93130b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96b27bd0-deca-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710067218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067218, "uuid": "64227528-f1ea-4caf-aa19-c342dbf3dae1", "comment": "Malware payload (Stealc)", "value": "27023fb0c8a72470a9bec76bd80f9f72", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067218, "uuid": "5bfb29c8-e390-407a-991b-ffc01cebf020", "comment": "Malware payload (Stealc)", "value": "f65d09fbd39dd8abe1a223fc743a0a25172ab32887013215a623ea433fd1b19f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067218, "uuid": "e238faaf-4d31-4110-9c70-8cf4754f049a", "comment": "Malware payload (Stealc)", "value": "5f7314085bf21f757e41cc318943e363f70cae55", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710067218, "uuid": "111e6e76-8fe4-4aa4-9f4d-4ce4019ef536", "comment": "Malware payload (Stealc)", "value": "070066f9a3bfaf76c73dac61c6fb3f1b1a88d562bfbd1b9e30f388cb55e4e7360686ceb764ccd6fa19a98caf2d09e36c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067218, "uuid": "c6a664c6-95ba-4e7a-9ea8-6f53e03c3246", "value": "T12D14CF0135E09078E4B76A305974BAA61B6EFC812733E1DF3794266FAE717D04A7132B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067218, "uuid": "e3f5aa56-ba80-4d79-9916-4beb37d125d7", "value": "31798c16c6b26cd7875f661806301572", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067218, "uuid": "36d50f22-1838-400e-86d4-3ba5a7a29ee4", "value": "3072:0McOoE2yp9AiDX/iOdUzMmCyLdDEwuo3GvO8jH/CcKN6lzWJZtglRG+d:0POAypyyPQomXRAwuoWWwyRtE5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710067218, "uuid": "3e70b22c-7306-494d-8e85-37794b8d4999", "value": 205312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710067218, "uuid": "9eb3a6c9-8274-498f-821b-c2d4faa6ddd4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710067218, "uuid": "465435af-0931-4fb9-844c-385dd42e6cb4", "value": "27023fb0c8a72470a9bec76bd80f9f72.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b828b30a-ded9-11ee-b7ea-42010a9c0006", "comment": "Malware payload (IRATA)", "timestamp": 1710073717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073717, "uuid": "13750469-ab71-4c67-a91a-ffe99df8a266", "comment": "Malware payload (IRATA)", "value": "11acb6d44035ec40d2cb0c8acb89d343", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073717, "uuid": "f6e74033-28c3-4d4e-88fe-5fc9432cf02c", "comment": "Malware payload (IRATA)", "value": "f91ec05286551600d59128a736354ee5c5bb1535cab8ddc2c3e00b15a70976b2", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073717, "uuid": "90fb1dc9-6222-4536-880d-b36108d60ef1", "comment": "Malware payload (IRATA)", "value": "736a4c5cb3fc3cab664cecc1554d82214954f0b5", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710073717, "uuid": "41d439cb-6633-4e0a-9993-e7b704941627", "comment": "Malware payload (IRATA)", "value": "6eda382562b868a8a143a87a85fd88a02ff01426aa62d7962ee0779765a3132b1ad1a9d14caba3a38d3af1038b5c6f64", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073717, "uuid": "03225d0c-ba6c-4d04-afa6-84c429caddb5", "value": "T1A2162353F766E827C9B5C33225251A3A003A5E14D343F74A394837FA78BBDE81B892D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073717, "uuid": "d26b0dce-9dc9-4b0e-8cb6-44685790343e", "value": "98304:6zeMlX3nBSfOwQm0qs6kkMsWGjZWM375zhJvhm8+DhXG:mecBE8m0d6tWGcM5zjvSDh2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710073717, "uuid": "c2cddbc7-fad1-4128-9947-566819d383bf", "value": 4230487, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710073717, "uuid": "24b09626-2daa-4faa-a084-ddbbfe09ff04", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710073717, "uuid": "c5c57909-ee29-4f7c-a2b4-be3f36a92a54", "value": "Application.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59b32a1d-dedd-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710075276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075276, "uuid": "95dde57d-4f73-49f8-b8d3-bbc9d1d5b6a5", "comment": "Malware payload (Stealc)", "value": "f3fdde1bac850ed065bde5e3a03e12e2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075276, "uuid": "6152b702-f68b-403f-88be-663a6eabc9b6", "comment": "Malware payload (Stealc)", "value": "f96c472e92984d1391d5177f4bc9512116a3c6b59305c908beced9b6f5b8d5bd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075276, "uuid": "f30c959e-b9e8-465b-9c77-c5e72cc2e01a", "comment": "Malware payload (Stealc)", "value": "2bfafa4134452425fdd5ad734c07383abdb90194", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710075276, "uuid": "1cc86c00-7e6f-4d22-812f-0ae50d4d98b7", "comment": "Malware payload (Stealc)", "value": "d20688a8df82dee9e786653a3426ba08ea619aed11310cf42c2f7f7c1b8cb3655a2f127375b49cd680abde001b3c5fc9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075276, "uuid": "332b927d-c372-4c43-95f7-b92e798fd429", "value": "T15F26F03CA4CB548CF7A4D2AB3CF5E9E7597EED18B94252E821C5B70581B6DE0BB50320", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075276, "uuid": "fe0e50bd-61c6-4746-884e-e97ca2c7b58f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075276, "uuid": "b6588b9b-0ed8-41f8-a7e5-699e743578e0", "value": "98304:jNZpeK9mPkTUZb+9sBYHj7ixIflarxZPAXracAmiE0HK:ZZ9mP9K9se7GAumViK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710075276, "uuid": "95b7dbac-3470-4f94-8624-a3c4243f74b2", "value": 4639232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710075276, "uuid": "e3174e04-b764-463b-8390-128b66a1c0ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710075276, "uuid": "124331f3-1d5c-4cba-8e70-c823af194570", "value": "f3fdde1bac850ed065bde5e3a03e12e2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80df30ba-def4-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Stealc)", "timestamp": 1710085221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085221, "uuid": "f7f4e741-0d28-4b33-81ea-c374fc56378d", "comment": "Malware payload (Stealc)", "value": "8b8e248057ebfa17bfae6e40f66716cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085221, "uuid": "2f087ca7-01f2-4577-9212-531e7e8ac664", "comment": "Malware payload (Stealc)", "value": "fc7a0e0dcefcdff77a414a9c76b04c6c6a90e4bc1e54b27099fecd587048c414", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085221, "uuid": "fcf6f704-7aec-4a6e-ac20-0512e8936ab7", "comment": "Malware payload (Stealc)", "value": "679dfcf6de7ae13b0968be336655afeae40bae09", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710085221, "uuid": "40b75931-2664-4362-b71c-dfd012feec0b", "comment": "Malware payload (Stealc)", "value": "0a236190eb4c4728e49b7ed36f1f7a3333b5bc6455b4a553732eb9637429010c4357a1049a393347451a3589a694e187", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085221, "uuid": "9b8fff7d-2a67-4eae-834b-ff6ef0461894", "value": "T1CB14DF1176E090B9D5AF56300574FBA44A7ABC426B3051DF2798F73E2F72BD08A2532B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085221, "uuid": "689a43b7-efc4-4357-88b7-a5ac8e8904f7", "value": "189b9f8f90c19e9ff108ef094d9e4f21", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085221, "uuid": "7059c8a3-8680-4d29-b40d-7cc2bd34980d", "value": "3072:ABvX21uQz48x2JkaVL8Kk48JI/+r7llwejSrZvKDKu:ABvX2AQgHVLbkxI/+r7VCZvKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710085221, "uuid": "d354f5cf-d2e1-4e98-84dc-34b6c04cb804", "value": 205312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710085221, "uuid": "26ef6b4a-8faf-48f2-aab1-74c77028c3f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710085221, "uuid": "37479fa5-dab5-4a55-9230-9a66a8ece14a", "value": "8b8e248057ebfa17bfae6e40f66716cd.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b783641-df0b-11ee-b7ea-42010a9c0006", "comment": "Malware payload", "timestamp": 1710094983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094983, "uuid": "0999bf05-f24d-4503-ae44-4eb1b64231d2", "comment": "Malware payload", "value": "84e6f62f87663f76831eac78a1c9435f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094983, "uuid": "b841a7b7-f57b-46b6-a374-76626a50c14f", "comment": "Malware payload", "value": "fd879cab7fda04fbd21802ba084399cd7c2060982f7cd30b1659abe1eefbaef0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094983, "uuid": "e86c4946-e053-4808-8c91-67dd475f01c8", "comment": "Malware payload", "value": "a4dbf69664450ee492b11f68b78d308bc4ff54bd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710094983, "uuid": "1d6ed939-9290-414a-94a8-5ea6bfa25fb5", "comment": "Malware payload", "value": "cace2363c6f0b5006ee9e87e3417a7fa4f8fc37fa40a4acd68783d1a36dee619a16ae6b923d68f84f72624b217fd04ff", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094983, "uuid": "2a862ade-c422-422a-a036-911815f65550", "value": "T10CA54B4BBCE404B5C0BA92328D6692427B71BC441F3263D73E90B7782FB6BE49A75744", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094983, "uuid": "e86a1bbe-922e-4562-b68e-3b65e942ea8a", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094983, "uuid": "ed390c1a-2754-4b1f-9cbc-c88444081b91", "value": "24576:VWip4F5qV/B2f+2iIVf6q/FLjQZczKuoZEMghGg3CvA8acWUGv:IbqVZ2H2q/FLjZLThGfac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710094983, "uuid": "d112d3b2-2456-4837-90ea-e859a53ab119", "value": 2072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710094983, "uuid": "c8e8ac5b-819b-4176-9f97-1afea73c2cd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710094983, "uuid": "11e5ff2b-5996-415d-a4a3-869078dd764f", "value": "SecuriteInfo.com.W32.PossibleThreat.23834.8295", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac99adac-df02-11ee-b7ea-42010a9c0006", "comment": "Malware payload (Mirai)", "timestamp": 1710091307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091307, "uuid": "054e8791-ea97-4c82-a8db-198a1ec8e0c4", "comment": "Malware payload (Mirai)", "value": "4cc1947d80733fbfdbcd16344eed692b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091307, "uuid": "e33dfefc-08da-42af-87ba-24fd5c113f1d", "comment": "Malware payload (Mirai)", "value": "ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091307, "uuid": "14b6b91d-fa7d-4ef8-acbb-f761689a6129", "comment": "Malware payload (Mirai)", "value": "12914f8cc6e5827fdc7b784fcec19986fffea516", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710091307, "uuid": "fb4b56ec-174c-4a37-a76c-eaaa63abcedc", "comment": "Malware payload (Mirai)", "value": "d489822eebd86dc809c171bfb10206116efdf5d55f61cf89fed59efa7fd5e4392c7ca8f2a1b032b88785b07b18f09146", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091307, "uuid": "526914e8-6cfa-411b-b9e3-f4adef6a6a4f", "value": "T13EC2D0E17A10B9A6C4305C33DA6699C3AD8517FD50EFBA7516419C34BEC148F87EC2C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091307, "uuid": "acd63525-f065-4b22-854a-8604603cf25a", "value": "768:7MKyhegCCMqfiJw3GkgjjGU/nmr5JoC5F9q3UELYZ+:QKy4qfN3CjjGUvE5YL8+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710091307, "uuid": "ed0d5b69-347e-4098-88dd-607a3f61147a", "value": 27308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710091307, "uuid": "01b78c25-ec3a-4e97-94b1-a552d9e04c4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710091307, "uuid": "6cc8f7fd-c0db-4d90-8001-00de21a160a5", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }