{ "Event": { "published": true, "date": "2025-12-27", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2025-12-27", "timestamp": 1766880182, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "4b090496-a2bc-44fa-a19c-5fabe439978c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d4b325b-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825517, "uuid": "1e86c010-f5e9-4382-b540-5e8719d98903", "comment": "Malware payload", "value": "39eae53632ea1d07e4408d4f731003cf", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825517, "uuid": "e6abb264-4e43-4f8e-a4a7-f6cf252240f8", "comment": "Malware payload", "value": "00c14959d104a3066b536d6ce4a0eb58fc3df8604767e5361b4c96b76bd95e5d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825517, "uuid": "15bbae4b-11ff-4961-8453-60d58dd73df0", "comment": "Malware payload", "value": "f630173f273f62747e14ecc1b0fc1cae25c8a42e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825517, "uuid": "a175fa33-9af5-4717-b997-9a9f3b48c070", "comment": "Malware payload", "value": "401a6790295b18d8ab01d8b622f43a82b36b29c05fb357095dd75997581d10398613d076c955c4afbb5f0b8dd8d596b0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825517, "uuid": "113bc592-5236-4599-8d98-3ae527e308f6", "value": "T13A632B6D3CA9245503A4BA11EA332257F68D4BC1CC9A22E7AF2FD2515F81732E4D3F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825517, "uuid": "26a47792-c9c5-473f-b6da-8593c619e108", "value": "1536:I9l/AoSSMO7RridncXpD5UyP6dntj9vMqKvk92/XRWjU1QUwOqd4SBKsRGbc6eAw:I9l/5MN0usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825517, "uuid": "71505b5a-dd6f-4b2f-83d7-b450fee7f613", "value": 72512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825517, "uuid": "7d6c6fac-ab2d-4f2c-aba4-40e9c7bd39d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825517, "uuid": "43176d1e-87e8-44bc-b2bc-b87d182ac34c", "value": "invoice-1645080830.pdf (41).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a01006ee-e2c4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799457, "uuid": "49f8bb87-d96e-44f7-9368-3a06715681ba", "comment": "Malware payload (Mirai)", "value": "598d11f995324ab21581ea3827e7a614", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799457, "uuid": "fa4a622d-c881-454f-a205-e6f2fac69f51", "comment": "Malware payload (Mirai)", "value": "011aab48bed56fbfadf55a8baf4e09dfa5c4c6e06bf63278cad81a7ca576eff9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799457, "uuid": "f7ce891e-7dd9-469e-923c-73a9fd456bd0", "comment": "Malware payload (Mirai)", "value": "50c7063bc2b9d5eab4f66b72f334ff104dbb4eaa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799457, "uuid": "c78c9ed0-33f9-463c-920b-4874e3300a34", "comment": "Malware payload (Mirai)", "value": "cafd4966ad44e5dd76f269917ee910220308f31ebd4ebaf1fde6a1ffb41c5ce8b64889d4cdba898bb7d676b84409ea09", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799457, "uuid": "45fbfe50-b0e2-421b-9193-512a5eb844de", "value": "T102430946BC918B12C5D413BEFA2D118E33272778E3DFB2129D215F25778A96B0E77902", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799457, "uuid": "0dbcfd4a-4000-4840-9a14-48a4c2e78910", "value": "1536:DRnXHC6tLaC2ZfsuVCThypjLQd+bV4M+iyNBs4R:9C+L8lsuVJjLuNBs4R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799457, "uuid": "d09a42c9-ee96-4225-b7b4-050125b8129d", "value": 58552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799457, "uuid": "34f168d8-0783-40d7-b183-4293eedf2547", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799457, "uuid": "d1a64a4d-0786-4d6b-9ff8-3143774a0490", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065b8dab-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857611, "uuid": "3939ed3d-0993-4288-93f7-639570e820f5", "comment": "Malware payload (Mirai)", "value": "c1b26a69f79d6fab8620337329cf3063", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857611, "uuid": "3327a694-90d5-48b4-a915-4c9942f8b7a3", "comment": "Malware payload (Mirai)", "value": "024f672419fbae45a5e52bd3e91aa806656fceba1baed9307bf4e8b43f3123a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857611, "uuid": "721100a3-1198-4a8a-9c95-1f36e729232d", "comment": "Malware payload (Mirai)", "value": "a6193ee3f27ccfd9ed4fab7a49cab47253d4eff3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857611, "uuid": "27ecd7cd-a0ef-41cd-a7c5-a103822bbce7", "comment": "Malware payload (Mirai)", "value": "64d674a42de53d56b462d3382e6562464174c5a24a03dc35773b2e6bce0f03d0fc8a83368c404bbfaf7b030963a4d230", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857611, "uuid": "3d2db228-131f-4800-a116-0fef7d0ab5d8", "value": "T110332A12547C2F27C1D0FA3F11B793A5B2E12B592248D68FBD624E0FEE25310295B7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857611, "uuid": "e5e749e2-5ad3-45f7-afab-19c059016985", "value": "768:9tz7aE4Vo0o0yNZzq9kvmWMoa1aRMt6ffY/4xSA1sVvb:9Z34W09yrzSKmWMoa1aRk6HsCSA1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857611, "uuid": "726e90ac-15f5-4553-af21-0a25cf2aa0b4", "value": 54512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857611, "uuid": "de0f3627-e154-49c6-84a7-c63e7f57e1b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857611, "uuid": "35270935-0f32-4ab4-8cb3-731bd234f982", "value": "miraint.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61436833-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858622, "uuid": "d32c0453-c479-45ce-a4a3-921cc36fecda", "comment": "Malware payload (Mirai)", "value": "3e4b14ba10c246ecc681a059d7504952", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858622, "uuid": "e93f84aa-fa89-4a70-b238-4870eb96ff53", "comment": "Malware payload (Mirai)", "value": "026ff18f4f8a4ab114d4df8db486dbb90b12c010b7d18e5818adf2b921923f74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858622, "uuid": "f7940757-ea82-4580-a860-1a122eeaa214", "comment": "Malware payload (Mirai)", "value": "7ae86002705bf20c349302667a8b6a0ff32d1ccf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858622, "uuid": "d27d7e88-bf08-47b1-8bd3-36fe5e285967", "comment": "Malware payload (Mirai)", "value": "e3aa259ced476faca5d37e751c5b7c26ce2bff176be3d428a64274ad5d3490666deeab85db29f0974ebdf96f646ebd90", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858622, "uuid": "d58d37e8-772e-42bc-a40a-1491c81d9f46", "value": "T1C973123661502E13E88117F7A7FA03C5C29C95BDB28F27C41BE390847A9274D5AF92BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858622, "uuid": "435acc53-460a-4c06-9205-09b7140d50f5", "value": "1536:znfWY1VwsnuhkIX6doloPwmuzNWAjWBASfCHWVP4LJ:zfWY1VIqdoourPSfCH+P4LJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858622, "uuid": "6f4472fc-8735-43c3-b631-9dd3c6da3a3b", "value": 74932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858622, "uuid": "ed9adf7d-f81a-4dc9-a60e-3db67799dd3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858622, "uuid": "2da9c6a0-0c6d-40f4-ae9d-6c15a894ad5b", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cb13e1b-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823450, "uuid": "77c52392-cc8a-433d-b3ca-bf6f7db69051", "comment": "Malware payload (Mirai)", "value": "3606a5bd7a8576714111cee197918a08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823450, "uuid": "31e7c075-441f-456f-a0c4-02b3d2838cca", "comment": "Malware payload (Mirai)", "value": "029641ed08d3b18c9101fabe9d3e1b4fb84333c96b54ca0e9bdead5b3fc0139d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823450, "uuid": "977cc359-fbce-4d75-80fa-47bb49ba42b9", "comment": "Malware payload (Mirai)", "value": "c2a74e383986b605031c700f7b9f18ff09f0db69", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823450, "uuid": "d8473180-5d3e-4120-9c6a-70d2eab4d951", "comment": "Malware payload (Mirai)", "value": "2bf50e58fcda84878c16c54edceddd761155be0795ccc0a794a722147830d4469a044dea01c3ab62bd1a00e46a403785", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823450, "uuid": "546082e5-fb5f-4e7f-8cfa-a5e447b08157", "value": "T1D5241A90BA59EC32C05E1D3667FBDB593B0369D14EA2D104C460EBCCFB875C0AB9857A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823450, "uuid": "8b0f2c7e-e387-4901-a145-f28eb5f060f4", "value": "3072:fwObuMhXw3VZRO1nPqaamynmetqu4R7vdkiVh43PwH/jS7nGGs2+:btOFZsdqa3y7quyPVh4ofj0s2+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823450, "uuid": "9c4c0915-bd16-4b90-b81b-a4ab0b93b43e", "value": 213080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823450, "uuid": "3a426079-ceca-4b99-813e-ae4963f84932", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823450, "uuid": "562fa7ca-371a-467f-8d81-d05f61c2619f", "value": "bin.armv4eb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22c3c58c-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870543, "uuid": "ca8e8c92-3d44-4b2a-a24c-b375a0056c29", "comment": "Malware payload (Mirai)", "value": "eb53630d0cdff344b30e94c57b8e0940", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870543, "uuid": "39a87b10-2d41-41c9-bf50-c0d1672c3132", "comment": "Malware payload (Mirai)", "value": "02c8d6f62afb66aab385b428d9de32eb56703f6ddb85b5dbeb7a27ac443fa3c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870543, "uuid": "ea3f94f3-124f-4371-869f-e5f4376a5c29", "comment": "Malware payload (Mirai)", "value": "862d55a935dc240d4f54594f27de3be59b2b2f6b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870543, "uuid": "4dd6a121-e2c7-4004-aca0-ac94650d6fea", "comment": "Malware payload (Mirai)", "value": "c53e50e039f636b373e91e2edd0a071007a735e4840c17b1c56aaa6742a045a4d265c7af79a773b481c0de3f9cf6319c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870543, "uuid": "71cd5e90-a358-46c4-b0e6-08e8fd879ff8", "value": "T1A5330881B8816A27C1D4137AF6AE998E372073E9D2CB3227CD604F507AC551F0C6BFA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870543, "uuid": "e301025a-fc4e-4aff-802e-5a7af9c3dc49", "value": "768:rgUd0mV/biocnTDaQWZTt5jTnPpZJKPDAjofINBvFXUNMW671mA2EDEy0eYjW9TE:rqm9kTDDWZB5jjPpPuI1DVQqZN8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870543, "uuid": "658e52bd-d31b-463b-a327-196242ebe0de", "value": 50392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870543, "uuid": "5f974d9b-3b31-4386-bbbe-cf6a68d0c9c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870543, "uuid": "0f88291e-e2dd-44fa-8b09-725dd6be77e5", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cff50d8-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825490, "uuid": "bd1350ca-90f8-4cb6-aff4-016d92db0096", "comment": "Malware payload", "value": "c8dc9a1239f13fe0ffb7439567c2efa0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825490, "uuid": "835da942-7d35-47e8-bcda-b716cc5d64d1", "comment": "Malware payload", "value": "030a3b2ef0b726e54c3fcb8616fdf1d8f46803cf6ed6ec532bdb156e145d7edb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825490, "uuid": "464b9e9a-d2f5-4f49-b66e-39c89182425a", "comment": "Malware payload", "value": "bd8f6b10ff9c295bc5cfcdfccfaf46216f9365df", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825490, "uuid": "fdb1affc-7efc-4d21-9709-51fd92721a4e", "comment": "Malware payload", "value": "695c0adb853ecfac758d07c5b05f4d2d4861fb28cad6a61e035eecb53109eef32dc6a61c1a0512717b9e1760c98ecf0f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825490, "uuid": "2923078c-aace-4a56-acea-c6838046f3fa", "value": "T1AC631AECDB668C5BE49FF43554AD06756E08EE8A6E0E37273E06218903A9CDF54138DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825490, "uuid": "0c4bdce3-0d20-4609-9e25-a82caad8225f", "value": "1536:I9l/AoSSMmMxukVz62dYAmF5YIsq+9ODewpgLfCCzcw7SD7vdmab8s81tlgdX3iK:I9l/5MmMxukVz62dYAmF5dsq+9ODewpZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825490, "uuid": "66026ec9-f954-4e44-8cc6-cd561b49aa46", "value": 71558, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825490, "uuid": "41b1b5e6-19d7-45ff-8145-41af55cb0569", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825490, "uuid": "abeb277d-c4de-4137-90cb-d8133c9a9743", "value": "invoice-1645080830.pdf (50).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7d84749-e341-11f0-a129-42010a9c0007", "comment": "Malware payload (Amatera)", "timestamp": 1766853291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853291, "uuid": "ec5e2b14-f768-4fae-aeec-1d2cf1e2105f", "comment": "Malware payload (Amatera)", "value": "e8543a0575b20bfdf3e7a3eb4c717a62", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853291, "uuid": "8abdf615-9e0c-4ef0-bda6-062c7694679f", "comment": "Malware payload (Amatera)", "value": "03d623bbb0ef63709e3cc299a146093f97d3a4ee1f46b2b55465b1304b372f7e", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853291, "uuid": "7a538547-d27a-446c-8708-9c541cc203f0", "comment": "Malware payload (Amatera)", "value": "464c5178a0a9240cbac4da4dd4539b1b44c7c929", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853291, "uuid": "030271ee-69d7-49f0-9180-eeb227d4623b", "comment": "Malware payload (Amatera)", "value": "f3f3e9bb488066ec2107e7490db81269320f4758f9bdf828f844b455b6560de78c29bc69aed85503a330f9089b88ce5c", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853291, "uuid": "82d520af-1277-421d-b9dd-84169fb2ba74", "value": "T102F55B17F284653EC81A2A368633D5E4993B7E6079128C27E7FC394C8F355906A3E7C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853291, "uuid": "db6f7243-e3bf-4e65-ba1e-e014519e1ed9", "value": "32fbe81dfedd5c097347c36839ca94c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853291, "uuid": "70203830-1e47-4326-a74b-54a974b14c3c", "value": "49152:fNdZGViZaH7/p+Slo8+56LaShsyIWxmSUPlo0DRZh/1TC2GoaWg333W3z48e2Y:VnGViCwdux3UPlo0VZpHj8333Gz5er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766853291, "uuid": "06d1be73-8e18-4e90-bf72-0820e2ce1bba", "value": 3608408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766853291, "uuid": "c35fa621-b382-4134-a277-390ebc0f1021", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853291, "uuid": "c1c46654-2650-4f44-bff2-2e994b2716fd", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002508a4-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830542, "uuid": "9f5678c1-8c4c-46ea-8675-415546fe3511", "comment": "Malware payload", "value": "02bfe1e457f3559bfa134ff48cc86716", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830542, "uuid": "e1840634-fee8-4136-a8c8-af4e9b68f687", "comment": "Malware payload", "value": "0422e89137ebd383a907f562059bfc054078118ca95bbd4525a64b3b1cf1b737", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830542, "uuid": "c19812e3-56b4-4ec2-9967-8c9a46824960", "comment": "Malware payload", "value": "cd961f89d2ea0a2c728b3f30a7eaa470053ca86d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830542, "uuid": "43ce6676-2fb5-4019-b6d2-1e607e88700d", "comment": "Malware payload", "value": "0199d7947b95b8094996e50d7988009bdf1c3f47b85ffbeed941419a09ccc01aaec8940873f902760d4deb95dedbb067", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830542, "uuid": "03592331-345a-41eb-acb6-80a27b9ff100", "value": "T11E6329D42018FCFAE5C30010AA7E9D9AEB2F72B4542177582DE8930F8B5DBF645A14F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830542, "uuid": "03b8f003-0d96-4ed4-93e5-dfd500b321c7", "value": "1536:I9l/AoSSMsTjqkTEw3W1nmJHXDT6hPd7MhbMYEUlq5aEKEnz0Unawp3gEE02q2xa:I9l/5MhIusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830542, "uuid": "3d0dda94-afff-4775-9b5d-c3ad07b0c513", "value": 71552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830542, "uuid": "91ba65dd-5ec5-45e3-ac21-6f4168013eb3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830542, "uuid": "157210c3-cece-4547-bece-a71b42432978", "value": "invoice-1645080830.pdf (75).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2938ae99-e2c5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799687, "uuid": "5bd3e813-8cc6-423f-8e10-7f37bdb9a6e5", "comment": "Malware payload (Mirai)", "value": "8ec3ccd90119f0a3b93853b23ce0125c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799687, "uuid": "356afbdb-52ff-499a-815b-f51a0cf4c0bc", "comment": "Malware payload (Mirai)", "value": "0467d488148ce623e2d6bc87f27b56d596e646cf2032fbeda82906d48aaa9db8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799687, "uuid": "ba86d171-0ab4-4730-96b2-9bcfff3ad490", "comment": "Malware payload (Mirai)", "value": "d94af45508648886d41691aff367736a38be8742", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799687, "uuid": "f6758c8f-54f6-4f0a-bfc6-0255f1821e09", "comment": "Malware payload (Mirai)", "value": "d3de1d458f49ed6d98c9c758a8994c3256c3934690cb26923b4dd4d47b0eac07239ac84283a27d65a7159fdb22bf1cc2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799687, "uuid": "b4a11888-eb6d-4043-9f24-909bef81c84e", "value": "T10E639E7BC9AAAE54C54855F0ACF18B752B137000E2571EFB5A86C8A58043DBCFA4D3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799687, "uuid": "c4801373-ff5d-48b6-a83b-54621ec74487", "value": "1536:fa7wtasrXfmVznh3yUn+UmtQpCpcK2G95bVR:fAcrO53vmtQpacKXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799687, "uuid": "0e74066b-0d22-4f85-8f60-1cad565a8c76", "value": 67344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799687, "uuid": "00aecf1b-1d98-4206-937d-fe7f576f0ffa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799687, "uuid": "6c9829a7-da2b-46cd-968f-087e9ecf0a54", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a86da7b7-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825670, "uuid": "ba204a6b-9454-4c41-885b-d5ba4facf4f5", "comment": "Malware payload", "value": "3b5faf5e31fd3900f93329628b25d0e8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825670, "uuid": "f7bad7b2-b11c-4fb5-9064-1c5686398a76", "comment": "Malware payload", "value": "04881741bb72cc496de0cddbece1d5497591c542346047afae3f2e613583c0bd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825670, "uuid": "b4752153-a4a6-4a14-9a5e-252ac859bf5a", "comment": "Malware payload", "value": "f44f2997c80dd25c819b7890656c567a02e88379", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825670, "uuid": "2bbeccbd-29cf-49de-a599-dfac8792c4bc", "comment": "Malware payload", "value": "abf59fe247afae522a9540cd83a21235bc506153206785446af98f5939f78787ecf58d8325a75b80032b63537ee3865d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825670, "uuid": "67f93f2a-bb24-4fb0-b4c3-c18d5b2c912d", "value": "T101632B21FA5A68C05456343F2B2D425244758701BC8F60EEEF1AA63603D9DFDCB86E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825670, "uuid": "3243676d-3dc4-450f-9962-a80afa9d41dd", "value": "1536:I9l/AoSSMso2xKlRtEdnVTmhKr70DcBGk8kEncdw7dJ9hmHS9mnzZHVskfEoxC/i:I9l/5MsogKlRtEdnVTmhKr70DcBGk8kZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825670, "uuid": "ffc495fb-a1cb-4836-a8b7-6b94692517dd", "value": 71582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825670, "uuid": "b8bb4f31-03e4-483d-b729-c14971162244", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825670, "uuid": "aea62dff-2848-4fca-b0a6-878bec64ea5a", "value": "invoice-1645080830.pdf (7).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0c71f97-e2fe-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766824423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824423, "uuid": "3269f690-8a11-4e29-af12-4d49e90f1ab6", "comment": "Malware payload", "value": "017c6171db430a9367d73c0f8064f87d", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824423, "uuid": "e1d99bef-a897-4ea9-aa62-3c4030054814", "comment": "Malware payload", "value": "04b6409151bbb94867aa39f7f09948dc580359db8c0ab8866da4e44cbabf6fde", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824423, "uuid": "111cb862-213a-4e0f-b4b8-099961dfcfcd", "comment": "Malware payload", "value": "ec11d3ab02235d202bb1fb94180770674214e819", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824423, "uuid": "3c322fea-272f-4da5-89ca-bbed4a4ac8da", "comment": "Malware payload", "value": "172d3879e3c29a9d3100063091e0b7cefa867e6dad9c6b2d928743b54f45792bf71cc7fb71018eb37efe6bd7f3c05c48", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824423, "uuid": "1bef3364-05ff-4b90-8c52-ce55bd794d84", "value": "T1D6E1F886ACF728186417905DCFBFA2587059A057874ACD5CFECC65A8DF0C2A89622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824423, "uuid": "52f17538-60fc-4fb2-81eb-a582443f68fa", "value": "192:OZjJ3IE/CTK/ecaB0llHYoHsfOBro2Tc/O6Smy:OBJd/nYoHsfO2/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824423, "uuid": "4d9aa49d-bd63-4cb9-9e5b-cd63f14dffad", "value": 7373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824423, "uuid": "3caa3e96-6062-4a00-9822-9778b97d4900", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824423, "uuid": "ca80e34c-b6f6-4c5a-a1e9-c97f83a39112", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "598a2779-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824679, "uuid": "23b43696-9694-4aa4-a705-a84d7cea729c", "comment": "Malware payload (Mirai)", "value": "f9ea93c7c8f40bf5a6742a1e5e39f727", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824679, "uuid": "0a6206dd-7a68-4cb2-bb77-9ddcfe6a3484", "comment": "Malware payload (Mirai)", "value": "0500b39b30d8b163db55a8c7f09328b9bb6c70a12bba9847b1817ba720f4cc28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824679, "uuid": "175e5ec1-0338-427d-a493-4ea670d0d8dc", "comment": "Malware payload (Mirai)", "value": "0e5b15a794a1cdf450621cc2044aae513ab2dd85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824679, "uuid": "59a14cd0-b9ad-4c16-8933-36b3c75a6ee8", "comment": "Malware payload (Mirai)", "value": "b04826535bfaf3b38beeff3e9edce01a362feba6c5ba5e87fc87c78341b80fa7111ad17bb2fcac37d0305cf117ff9e62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824679, "uuid": "c4dabc11-2183-40d4-85db-46684fbe67c6", "value": "T132933B227E325F27C0D2B4BA12F34A31F1B57B5B28B88A5ABC712EC9AF155D03107675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824679, "uuid": "110ae1ea-b524-4828-afd9-a7c9cf7539f7", "value": "1536:9lmC3P3wXTarYhIwXSshSIEtVUYM5UtkZI3tTfo9VNNDY:n5P6e0lY1TUY8M3uTY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824679, "uuid": "9ca4cc33-e46b-4c41-a4b1-53fcbdd83ab8", "value": 89944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824679, "uuid": "adffa77e-0523-4912-9422-eaca7e9d5ee1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824679, "uuid": "7ae8fb2a-ccf1-4654-9466-09b07cf8f4f0", "value": "nova.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7152417e-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825578, "uuid": "c0cf903d-5f8b-4998-95f1-ba61f04733f8", "comment": "Malware payload", "value": "7aad8338a307fd14b6fc441ae2d09b8e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825578, "uuid": "621c201e-016f-491e-adbc-12f53851e62c", "comment": "Malware payload", "value": "0563c2dea0ea6e6d3309849a93d6f8a99f3d342d5b274be5a2c471022bbdecfb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825578, "uuid": "b55ae8b5-9d07-4166-b345-8ad7d244f198", "comment": "Malware payload", "value": "ca848886397e2364d12436324f9d13c20df50865", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825578, "uuid": "c2e83f0a-9b0c-4cbb-80e0-95ad20fbefab", "comment": "Malware payload", "value": "e611a307c7ff07931476728bdb0f569ca46c2c335a7d4651e7dce1f8ae644bf18fbaa5e9230b7ac8b2319b2c3d390c7e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825578, "uuid": "446d68b3-7283-4ebf-9811-09a3225fbdeb", "value": "T130631D7EC527216D1978E851ED8231EF0D3AAC005FE1EBCCB1B974210EA8B056D54EEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825578, "uuid": "bf44730e-23c6-4947-a2f0-5bb4c7ae3eb1", "value": "768:I8w/h62/jWs6oS+xISN0veLIPma2J2XNIfHRpYFV8TXO97byxP2/12KpRNan+J4A:I9l/AoSSMtqXusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825578, "uuid": "934c8ec2-8179-4140-99ab-337c16faf0c6", "value": 70603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825578, "uuid": "009f4b32-1f5d-479f-9594-65e8fc2187f0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825578, "uuid": "ec368c68-81c5-4c4a-aa87-5a3e2f106010", "value": "invoice-1645080830.pdf (28).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e96b00-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854597, "uuid": "e729a91b-2a73-4934-a457-d723227c32ff", "comment": "Malware payload", "value": "c06d2cf5d9bcac58b5259e0e870bc030", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854597, "uuid": "1d254250-c9d4-41f6-8abc-8802403d0350", "comment": "Malware payload", "value": "05e34be14bc92fdebe4660d5438712ea9a9019d4cc963e9d9df4795b07f8912a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854597, "uuid": "bce494ed-e2a2-4b08-b7bd-94a1f9029290", "comment": "Malware payload", "value": "7c9637bffb41db6b4b3232860424765a14cb85bf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854597, "uuid": "15118716-5c15-4089-b3c7-8dc7d93cb921", "comment": "Malware payload", "value": "1fe8d967621566f26a868454936b9ecebec1c31d3729ecbd0ba5a580e7d12893d4cb189de89272000f91ba9bf890ca25", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854597, "uuid": "b2c27df7-ddd3-4422-896a-752b21e93794", "value": "T1FA730924DF25F8713D932A47862631D2621B9CCF89392D939FBE1E4EF0A57462C8513E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854597, "uuid": "ac399b2f-9bec-43ff-9cb6-755c808035e6", "value": "768:I8w/h62/jWs6oS+xISN0vs4yxwxdkfScBYrwz2y8kTAlGB:I9l/AoSSMImusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854597, "uuid": "ef69489a-1d87-49ac-bf60-de3ca3c3cee9", "value": 74438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854597, "uuid": "f6aeb08e-dffb-49f9-914b-461be46aaba3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854597, "uuid": "8c05450a-310b-464c-901d-2492e8b11801", "value": "invoice-1645080830.pdf (86).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20fc332e-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858085, "uuid": "9807aa6f-b560-43be-8b0f-d2d1ed16894f", "comment": "Malware payload (Mirai)", "value": "3b06dd5d619ba716036bca0b666df773", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858085, "uuid": "e346c3e2-4eb9-480c-b9f1-63a0f598f9b8", "comment": "Malware payload (Mirai)", "value": "0617e9fa489c1bfc65d776c30289aa617e9b51d81fcd1843579f3a0b54c0f3b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858085, "uuid": "58278f37-b7ba-4f28-9c59-583428e5f0b0", "comment": "Malware payload (Mirai)", "value": "7e8d9f7633e9ef3e360538c14f2cc599b2277591", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858085, "uuid": "20958232-a3bd-45a0-ad16-17058764486f", "comment": "Malware payload (Mirai)", "value": "75f33c2eb514c5d0d74dbaccb406900aa2d1f88e40e093d41b63ce090b976a79720330f843dfe95aed397a413d4f40b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858085, "uuid": "79cbe0cd-b61b-4d92-9c5c-9288cccc9ea6", "value": "T1CE03E12D9099D221C6375271077F660A1F08A99AB5450AFEBB58903E146BF7473A8E83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858085, "uuid": "d1acb2a1-5221-4630-ad24-d0c76b25c952", "value": "768:aTZKcDPniC4m5J+ccFtIWWptr7O4FSKeIJEswNElvlvHxo7ePnbcuyD7UHQRjU:2ZBfiC1R0ypR7O4UKBasAcv/o7ePnouB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858085, "uuid": "1a653f29-b554-478c-b08c-608e99ef8910", "value": 40408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858085, "uuid": "cf644723-7373-4cbd-b1cf-bceb4c8828e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858085, "uuid": "3c627edc-889d-4360-8254-875fbfa1d154", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab324239-e2bc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796040, "uuid": "acd79978-047b-4f3e-8e75-96795f42c3be", "comment": "Malware payload (Mirai)", "value": "87546341c84d1b07e931055dd22bdde1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796040, "uuid": "17d04957-5ce4-40ac-8b6b-839b6afcd1a1", "comment": "Malware payload (Mirai)", "value": "06674e99cf4deccf457af469a15f9ddd0e9ea237f9cde432ac021c6b8002b66c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796040, "uuid": "3133ff83-81db-4369-a64f-da2f0b8e7d83", "comment": "Malware payload (Mirai)", "value": "48c11b132f3bbd37946a7318f90119fca5dba560", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796040, "uuid": "d2fe3e22-c5f3-4202-b55d-2d4b20d48ec7", "comment": "Malware payload (Mirai)", "value": "d1fe0346f9b42b24249deadb8b1c5896353aa52848a8241562dc6ebe08c9822c6079e55a024a22efcbfb32d649c2dbc0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796040, "uuid": "d5b8b6da-0291-45ef-89e4-721d25d05f01", "value": "T1CB734B31F939092BC0D4917A61F74723B5F297CA20A8861F3E720F9DBF615403A57AB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796040, "uuid": "508b9482-3040-44ce-9bfa-064deec24e7a", "value": "1536:U2kN6QCXbqt5gu2QvF7tR7SYm5BHxS1H1tTxfT:HhiVL7SYOBR2xfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796040, "uuid": "19da8c78-a3ba-408d-8510-697a54bb3990", "value": 80032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796040, "uuid": "87584597-8fa5-4226-b7fa-46bd2b485ad5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796040, "uuid": "a22646dc-505f-4913-b466-972fba2130c3", "value": "Space.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "312446ca-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859830, "uuid": "fbc86fb3-7e30-449e-a1c0-846c6b1c3b67", "comment": "Malware payload (Mirai)", "value": "f7be6e027595647299f6b8d18823a867", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859830, "uuid": "a24019d4-ab39-4dc8-b552-0b835489a43a", "comment": "Malware payload (Mirai)", "value": "067e26d976b5a6d6262dcf2ecec74c3045ed9f653310a9e83c376f045ba11dec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859830, "uuid": "38a9f067-52dc-4acc-bb94-9e2fefa5eedd", "comment": "Malware payload (Mirai)", "value": "a2e3b1a80cd95d34c80804877e94dd4a936eba37", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859830, "uuid": "a1bfd0ab-b314-4ee6-a4a7-79d6ff3543a0", "comment": "Malware payload (Mirai)", "value": "dbb1152a0b6cee5f0343a65cf788483b07c840e8398bd72f7bf7d7f11361a33c981199dd1c08377e7e0b692120d22cc3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859830, "uuid": "c1d232ac-7fe0-4b85-b51d-93240fb6ada8", "value": "T197734BC6F400DD7CF84FE67A84574E01B625A3519A830F36E66BFD937E720988916EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859830, "uuid": "e11775e6-c656-4fac-8dbd-ebd5174113cb", "value": "1536:VCDu6DHWrEFrw0S8Z09mjcOmqJkC8umFPIxNe9mOD9v++Tv7TPSf:VCDuNEFWxmjcOmqO/EN8mOD9G+TSf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859830, "uuid": "666c7a96-5afb-499f-b12b-946daf6fd553", "value": 80528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859830, "uuid": "373d236c-f710-493e-b7a4-a9d9f7729065", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859830, "uuid": "6121d436-2e6f-4df8-8181-2523af2faae7", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "970fa863-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854847, "uuid": "2f2e18a3-909e-4459-b28e-d1e4b1aeee78", "comment": "Malware payload", "value": "834685c29107cf7b19920e131e9ec6b8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854847, "uuid": "0408d4c7-3888-4a54-a978-f45db7327946", "comment": "Malware payload", "value": "078a8036b85c0d9bb5319a03b13dcfeb3485154f68ee9025926e2d9f6059102e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854847, "uuid": "463a445e-0910-4378-93da-e936484908ce", "comment": "Malware payload", "value": "c8f8da0420252daf0730afef62d993e41694fbbc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854847, "uuid": "020c0e78-23c8-4866-9234-ea3de40bffd7", "comment": "Malware payload", "value": "0c8c444a42df82b2ffb49acc68174a822c0420be1560425ff716b7421e14b7ab9079a5e91afc3974ccdde4b8d4db2792", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854847, "uuid": "39003e08-3955-44a9-8a88-74b47f7b1c5c", "value": "T12C730AF9ED739A6F1B7B421D8E191082A60794C60E170EF5CF00B8E9DE999C71839E1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854847, "uuid": "6a9d2a93-ff72-4cca-bc9d-2ff6cf432e3e", "value": "1536:I9l/AoSSMkIZiusAY6665zeiQ8sJc57O6Ax0y0x08PjQOroOpMXSJXzxkEQIxBHW:I9l/5M/BusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854847, "uuid": "ab7ae1f3-2c97-48d5-acf9-4706ae9b293b", "value": 74440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854847, "uuid": "d47178a5-7207-45fd-bb26-f5cbbc6638ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854847, "uuid": "7e9efcc1-7c2c-429f-bc0d-eda286abe3b3", "value": "invoice-1645080830.pdf (32).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd973515-e33c-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766851046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851046, "uuid": "7ac1ea5d-49eb-4c56-ab38-2569c55b4ffb", "comment": "Malware payload (ValleyRAT)", "value": "7f9ede7f5d4038ae6d45faca0527fe97", "object_relation": "md5", "Tag": [ { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Dropper!MSR", "colour": "#C70CB7", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851046, "uuid": "f6030691-8686-443a-aa35-9db1064b4ec9", "comment": "Malware payload (ValleyRAT)", "value": "07b2d1ff03cd867be5b1b72ebcff955e6919fe9daf33cc572e6688ebb191ef30", "object_relation": "sha256", "Tag": [ { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Dropper!MSR", "colour": "#C70CB7", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851046, "uuid": "64358612-d863-4767-9ea9-5d20db431ec0", "comment": "Malware payload (ValleyRAT)", "value": "29c2f764317626a65a9b8964c63e2b9721b096d2", "object_relation": "sha1", "Tag": [ { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Dropper!MSR", "colour": "#C70CB7", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851046, "uuid": "96c2d677-1a83-4d11-9347-e32e94b0f166", "comment": "Malware payload (ValleyRAT)", "value": "55f57020118216d5053cb3eccf2292851ef7372dacc594e7773d7ec2abe93461336020bb1c78413b1f3d697c9434fd74", "object_relation": "sha3-384", "Tag": [ { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Dropper!MSR", "colour": "#C70CB7", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851046, "uuid": "9ce15eca-0b2e-4dc0-ad9a-970dc457e6d0", "value": "T13F773331A28BC725E19E5077D83EEE0EA135BD63033141DBA3F4799E1E718C1667E682", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851046, "uuid": "92524b60-38b2-4cd4-9fd3-30abc81c5fc5", "value": "786432:X14LppWPaOcV+hLb4c5iiKkjK0BHnvDOjogXBpFltC7A6pIvwD:X14KiOcV+hn+tOHLOcgBi7Ax", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766851046, "uuid": "6ad10ef9-008e-4257-8ab9-348ef1b32ace", "value": 33222656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766851046, "uuid": "0d6bea93-5125-4551-bf3d-5cf71679c4df", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851046, "uuid": "dad93e7c-c37d-48b6-869c-34d1ba479587", "value": "Bingguksiaru.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "933491f8-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830789, "uuid": "6d6454d2-8479-4078-a45c-899f7df6e3af", "comment": "Malware payload", "value": "b3fd249660d85a96fdf246ca63286f8e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830789, "uuid": "c0017caa-3332-4f8e-a126-f10837263cda", "comment": "Malware payload", "value": "07d510227957704ebcd1914e80c86ea3dd2ad22334aba910801feae6e6e6a97c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830789, "uuid": "8ec28c41-3820-4421-a1c8-856d8e4bc0df", "comment": "Malware payload", "value": "8a04a44562fe750704116305729de9e2709a9059", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830789, "uuid": "0311251c-b460-4add-9fea-05c54ab0c39f", "comment": "Malware payload", "value": "68b7a4954b5286db0a605734ba41941230e7771983a69a9b0d17748fe8838795068e3dbd3a9b3ab70514d1be5578f4b8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830789, "uuid": "cbf4ebd1-7957-4717-9d52-fa4278892690", "value": "T1FC634B2289950ED129079F10FDDF1150E90BACFC94F466953E66FC0D2C06F9A29FA6CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830789, "uuid": "ddc00cf0-5a2f-43df-8c3c-d25ebb8c365a", "value": "768:I8w/h62/jWs6oS+xISN0vyn1Sn5c++PnBf4lqLwBl16KT6GTXn4+ph1BToP5K64L:I9l/AoSSMzyDusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830789, "uuid": "92a553b6-94f2-4816-8401-8794abadcde4", "value": 72491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830789, "uuid": "72eefb33-61b8-4f2a-bae8-0b4ae6fac9dc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830789, "uuid": "bb44c55e-6830-4023-bf7c-679b97d4afcc", "value": "invoice-1645080830.pdf (23).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b13a35f-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830775, "uuid": "d25c9702-e92c-4c2b-a4ef-998cb23202bc", "comment": "Malware payload", "value": "ee2fe1bb105ad91ac15329243cc96145", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830775, "uuid": "55860b37-7d88-4f24-875a-b8cf85045410", "comment": "Malware payload", "value": "080bb0006c54fd9df4d13430795005193b28cd0dc4ffca7ae30f5993917fd675", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830775, "uuid": "4b6db7fc-5cca-4a59-aca5-6c89762426e5", "comment": "Malware payload", "value": "0a5d352c78dd977bb9d2b831b2a2319f444c683f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830775, "uuid": "a27d2d5d-9b38-4d3c-a427-1dd069d59e28", "comment": "Malware payload", "value": "410d21a7d5c0459297e8ce2c50f85e8b705c546d13f13fb9a972131b8275417377fda91a0bb47443a5a70db4c7c39f1b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830775, "uuid": "7e278570-f172-41dc-bff8-6f3466a51943", "value": "T158730B1611077968A4E68BEDB45D04F9BF9ECBD64F80569F2129E50285BF38C38F831E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830775, "uuid": "88cb46e9-4442-4628-a235-3d8b33c97c8b", "value": "768:I8w/h62/jWs6oS+xISN0vRr4Ch0aYIoneRYRveLerlYlyZ/sh9EUk4e18fV/KUtv:I9l/AoSSMXEusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830775, "uuid": "9a172bc6-acf7-496b-98e1-225c2a820a17", "value": 73442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830775, "uuid": "60a8f42e-928e-4f1e-b57a-90c6f6a82dbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830775, "uuid": "19939fdc-e384-4907-8e01-e033f351f4e4", "value": "invoice-1645080830.pdf (30).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b90101-e2c2-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766798552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798552, "uuid": "9ba30e8a-e0bf-48c8-b0eb-39d29d2df62a", "comment": "Malware payload", "value": "0414f7654c4062faf59c6895b5708505", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798552, "uuid": "980ac60a-75bc-4afb-8e90-d557f8acf11e", "comment": "Malware payload", "value": "086947a37cfeaba58c39d03be9a23daf9e0b73f320d9c3f50e0293dfcd4297f7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798552, "uuid": "0e991f60-c455-4b66-b2f9-17f539f0c8e1", "comment": "Malware payload", "value": "e0c81c16a7785887b3977f096cd3eed89e22070a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798552, "uuid": "16ffb153-f227-47b8-b323-1ef0025dec50", "comment": "Malware payload", "value": "81031193ba66169b77b4a2bd529409ba541785bb087c2dac6dedfcb820aeb7feac2be1f94ed70d7908e648aa3fabbaad", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798552, "uuid": "d9e8580b-526a-4163-a781-4ad3eeebc312", "value": "T1EA12968B77C1A2B66CA7C906D69382FE8D0481D07166CBE5D8F4A4B75B70CC8B05DB49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798552, "uuid": "f5002838-e965-4b19-b5f4-56d42c13db23", "value": "96:Ax0iRoLngD1JG59GSGjGcG5GSGfGsGeEGDGIGZGLGeCRGu3GMqGo+NGz:g0goLng2sCJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798552, "uuid": "12b8c65f-a8a1-43c1-976a-74f730183630", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798552, "uuid": "4778bde6-58de-4df4-b193-3d58ea97dd66", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798552, "uuid": "78075c86-6ba1-44fc-88c0-fa5146c37faa", "value": "rondo.aqu.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adeb6190-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830834, "uuid": "224c4b6d-3194-41a6-9882-4635f3ce6634", "comment": "Malware payload", "value": "8b9f044a02e7108dd6195bca73b8ce45", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830834, "uuid": "e34b7f4d-b63a-49ec-a431-ba86993f91e8", "comment": "Malware payload", "value": "086bce5ef7e2e0783f277d5d3c3aa1626f2f23d2ba0627eec3e12d0bdc937162", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830834, "uuid": "baa00f0b-d7a8-48c3-8e5d-8901d520c788", "comment": "Malware payload", "value": "2ab84b04e239a33687828bb32eb076ab71d99713", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830834, "uuid": "453c7168-bdee-4c17-9031-4757b4591baf", "comment": "Malware payload", "value": "746165936c924423816b5527cd98d1ec1e1c4724c66331e707311d4732e5e83290dc3f1b44d9ef1e96d054b46345713b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830834, "uuid": "bfb5f51d-7e71-4ef5-8201-3ca1ca361a36", "value": "T12D631BD736F93F1E211FA293367163522EA3FA8C5E5968683851B1E7BA025050C34BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830834, "uuid": "8c8894c8-402a-465a-b484-9cdff15b0ec6", "value": "1536:I9l/AoSSMtZPZmZvZUZAZpZiZTZVZKZiZtZYZSZvZHZMZDZ7ZTZNZgZTZNZxZNZz:I9l/5MjhkBe6PAFLoAjywB521NFDaFDH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830834, "uuid": "0913ccf2-1a87-4685-9566-5465110e676a", "value": 71499, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830834, "uuid": "aa0577d8-442a-4b68-b686-ebb3e120e01f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830834, "uuid": "0e33fa2f-850e-4400-88b5-0e9f3b0ad1ff", "value": "invoice-1645080830.pdf (13).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25475e05-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858092, "uuid": "0346fae9-da9d-4b9c-b264-fc20b0206f68", "comment": "Malware payload (Mirai)", "value": "e25b6fd7f5d19e509c97e523a148e13f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858092, "uuid": "99bcd8b0-1689-4dcb-acc2-c15fca87ae25", "comment": "Malware payload (Mirai)", "value": "095ac4c87d5b02b44b5f1316adf054ca8fe0a569993b1ff8689fd01bf16356c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858092, "uuid": "a9d89a16-2da6-444b-befd-5acb261c71f6", "comment": "Malware payload (Mirai)", "value": "b7e66c13d336ee98edbe81bca9410315fb97f702", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858092, "uuid": "f78ba47c-2f53-45c6-8914-613cec7b7874", "comment": "Malware payload (Mirai)", "value": "b0ba21dc744e16097bc868fb18ed810ef20b205fc88aed487fb10ef213549b998a7f14a890e35d5cdc4d79644ea330aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858092, "uuid": "f1c5e793-cbb6-46cf-8612-f948382eaffc", "value": "T1606302D0B793ABB09A2315B0DAB803AA67257BF9E1507F025200F3745C97ECA5BD8583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858092, "uuid": "0f6fb545-410d-4a7d-bdb3-4741f49522a6", "value": "1536:2raD7cpKA1KuSOyEBHWhaYnBcvDCwnOQU69L5NhgHIZvdLR:2GXcE2h9BmaY4mkOcNmojLR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858092, "uuid": "33a28bdc-3dd4-4767-a238-b0e255cfb52f", "value": 72144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858092, "uuid": "56605a33-5b68-405d-8151-bb50f4abf0f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858092, "uuid": "1f72e2c4-eefa-4296-aa66-10e08f6e4b3e", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dab6d15-e360-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766866267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766866267, "uuid": "2caa820e-696a-4749-8aff-b42028a00917", "comment": "Malware payload (Mirai)", "value": "b0b17df60269e1fe0e8370d4b744983d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766866267, "uuid": "42e549dd-75c8-430c-bb76-4acfd80bb095", "comment": "Malware payload (Mirai)", "value": "0a879de6af2c965d9080ab636677fd2f5a05c6697da2c5972f79792cbe5d08d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766866267, "uuid": "d7487c99-308c-4f92-89da-a4979736420f", "comment": "Malware payload (Mirai)", "value": "6c449e19870a07665da5735ea1861bec25e7af08", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766866267, "uuid": "df5930c0-bf79-4254-9a0e-843ce19bb2f9", "comment": "Malware payload (Mirai)", "value": "bcdcf278df74983991a2816369fa72b9436998bed37bd82ec4d66b27ed18e2ed2a892c32140105862ffc9be7b1491e84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766866267, "uuid": "ae2822f7-6048-4ba0-9d4b-9096cfa2b33a", "value": "T121636D31BD762C2BC1C4607B21E34236F6B7174A64AC9B2B7EB10EAC7F146503247A76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766866267, "uuid": "2f80fcb1-93a2-492a-a94f-e33816f6399d", "value": "1536:GVZeB4GuKNuiOuHJ9OjpRJs9IPYQYXlzA7uhF:6y8IOjpU9IAtzAq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766866267, "uuid": "972ba762-e63a-442c-9eba-27689ad8edf2", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766866267, "uuid": "a72e475d-473d-4f27-82ba-14b917e39f3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766866267, "uuid": "5fc37aa5-e42c-45f3-81b9-87be03507375", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9dbf1cd-e36b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766871226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871226, "uuid": "86d5bdf5-4f53-4ea3-867a-fd7b6c6577d1", "comment": "Malware payload (Mirai)", "value": "6161c3027035e6dd1105c69c4ad256db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871226, "uuid": "ed15dd9f-eae0-4e58-8629-060a45266068", "comment": "Malware payload (Mirai)", "value": "0ac663b01f2911059097f7497352f7477d8bbf96145501893be6ca286794ce5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871226, "uuid": "ef464578-12c1-42b7-a39c-5fbb4c432fdb", "comment": "Malware payload (Mirai)", "value": "fa293c7a645ad3818875794d9acb4c95a72a0438", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871226, "uuid": "30b6bf79-b990-4a87-b930-f10e683b222c", "comment": "Malware payload (Mirai)", "value": "d392659db0b84e438b7c1852c8c50a615e6ad437d6ef3301f79603830916d2cb9b22855f50468f0dcf016fa9b96df2b0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871226, "uuid": "b4233213-f06c-4f4f-a176-ecafdd1cd29e", "value": "T1C703F222E46BC901C02510F888E5F35A4465F90EB95ADB585D84373FDBE7231BA3B7E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871226, "uuid": "88a92859-5f7a-4488-86ee-2803feaa8f4e", "value": "768:O08AiXBZlfR9QavzASIAAZ6S6+hOdt3tGpDbnbcuyD7UHQRj4:O5AiX3lTQizGAA6f8e3tWbnouy8Hy0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766871226, "uuid": "43111972-59f0-4166-8e1c-fb1a74d4e4af", "value": 38172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766871226, "uuid": "0b3b22c0-f3f2-4085-98e7-12d2baa8d352", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871226, "uuid": "03fd4208-71bb-4217-978f-ee46008eebb3", "value": "ub8ehJSePAfc9FYqZIT6.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9464fecd-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811034, "uuid": "cb2da133-e3ad-424b-9e61-f2106e9ed4f0", "comment": "Malware payload (Mirai)", "value": "1d3a062d1aa8eb9d7aeffc16943e3393", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811034, "uuid": "67ffdcdf-a05a-4cc3-a3fe-8d7fa84518a0", "comment": "Malware payload (Mirai)", "value": "0b1001549457f292afa2d0145fa857eb37c84636eed7eaef4c204e16c29ddfc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811034, "uuid": "779c5682-4272-4fd8-a166-832de9a60a64", "comment": "Malware payload (Mirai)", "value": "d12d949f7e5482a12e4e7468b40605c2fbfbb5c4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811034, "uuid": "f6fdf6fa-cc17-4cbf-b7af-2054f659938a", "comment": "Malware payload (Mirai)", "value": "b929fb347dc2fc49926939876b304d792bbf606cf377dd3a69dd0f860fa309c74540577fbe7c69208cb1b5f2beaa1593", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811034, "uuid": "c000fc55-4fbf-40ad-b1f0-39dba5fbe5e2", "value": "T1F9232B42722C0A47D5A25AB0393F0BE093FFE99120F4B6892A1FD7468635F771586F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811034, "uuid": "46bf6f9b-0828-4c0d-a5a8-e5319bd9227b", "value": "768:fWLJhV3pc1tbRC+3u7RsGVBCnfd0aC3E+n8Vdk/fEXIZyN:fIRpc1tbR5kDPAMcXkI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811034, "uuid": "ed27b98e-0fc3-480e-aca5-a321b1b7245f", "value": 47140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811034, "uuid": "5de707aa-b3e1-4c7a-b631-1bb575d02105", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811034, "uuid": "f63e90cb-5c81-4638-946d-d7392c2b014c", "value": "hoho.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6547e228-e2fd-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766823840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823840, "uuid": "c621b46b-5991-4ef3-92a5-db58c6199f3c", "comment": "Malware payload", "value": "182f133df64a3bcabc21924aa2faa4b9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823840, "uuid": "bc53abd6-2731-4cf5-8b02-50036f8cfc42", "comment": "Malware payload", "value": "0b12f514d43a106951bf503b8fd6ebf57c099fd25f25faaa5568ebe5a973ca49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823840, "uuid": "a13783a4-0fd6-455d-bad2-a8fe7dcf9688", "comment": "Malware payload", "value": "1a30c7baea7241d0ae4e778efae46ab6a0dc0250", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823840, "uuid": "7752c133-54b1-4238-9656-d5c4759f0195", "comment": "Malware payload", "value": "908d55374439c2cabf09e29175bc0a29276b94e3b975c753defa8df01d1a891438f86ae8a9db26eea13009fc75f94798", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823840, "uuid": "8874830d-2e9a-4570-9417-cc775a5761ee", "value": "T14DE623D33EC8E294C0878E30A64E279DB0E1B7C54CB7681C3BC61D86D531E9B8799667", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823840, "uuid": "b8612ebb-794f-450e-9d74-74418c81b15d", "value": "b511e3b6e35db8befc32aa4ef030e66e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823840, "uuid": "0c0c2ead-6db0-445b-a3ea-996ff7c57250", "value": "196608:S/oIBVRqOoHB60aUdycQYDLIqPYv4roDr+G7MWyjsCe/QQFWenMz21Anvj2Aorh:GIOoHB6ZUd6ILnPqDXWj2UnbFor", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823840, "uuid": "3f76155b-340c-44d6-9f82-f6277a695830", "value": 14512128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823840, "uuid": "d3c26d56-e7ae-4c30-9ffc-dfd29351ff06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823840, "uuid": "6b110f15-845a-46b2-8bbd-853a9a5ee0e5", "value": "Cs2Hack.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a956974d-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873776, "uuid": "406d0108-f115-4883-a3fd-e9283c59e2e0", "comment": "Malware payload (Mirai)", "value": "c32fb9acb2e4ee3166bca030644b1ff3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873776, "uuid": "d489d061-48ae-417e-95c9-e2aceb96dc92", "comment": "Malware payload (Mirai)", "value": "0b323f8d0371d81fdef38be48ecc7babc491f283c056c90273bfd9a5330cafce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873776, "uuid": "665279e4-8221-4865-8351-b83b5bd14aea", "comment": "Malware payload (Mirai)", "value": "66e131ac36b878bef49931db610f45fbf70144b7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873776, "uuid": "22247015-0b43-45ed-97c7-99ec07bfbbc8", "comment": "Malware payload (Mirai)", "value": "f37d3b4cc66e592fa5175b4fbc500e574369ea9698ad6b85a2f34b5603a4f4892a9a1d6a79f05d1f8c6a5d8d42ab2bd4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873776, "uuid": "8565d590-a0b5-4e15-8f5a-12280a44f7bd", "value": "T16503F11E004A37A0E75500B1C828E98177AF17F951FF23A2F624D1FAEE8248C9E5F5C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873776, "uuid": "aece1c70-a59f-43f9-b75b-9fed14ac1fd0", "value": "768:XrQJ6T70t7DccXZU4nAa4IgWXKfYVPaLHcfbCl0nqy7mOt/d+Mvs3UozC:EMA7Ug2uVV0cmenqy6O9EMizC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873776, "uuid": "6050e14f-5a80-4394-b9ea-4c8e8fbd4266", "value": 40816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873776, "uuid": "0bbc18da-5b72-4a13-9586-0e6b4799a727", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873776, "uuid": "90c2eeb9-d675-4785-9b12-89751c756f09", "value": "ub8ehJSePAfc9FYqZIT6.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7224855-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825292, "uuid": "9be596fa-8d59-4e1e-a94d-6d39fe87203c", "comment": "Malware payload", "value": "108f04a824e93c851cef227214720931", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825292, "uuid": "b52b22cb-cec8-4710-8ab1-9082491520a3", "comment": "Malware payload", "value": "0b9bf34b8164f8aff758ef4e7001f13b1a5c366b3063feda3b3eca278b6d6688", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825292, "uuid": "174dd8c8-b8cc-4a0d-aacc-5d65940a92b4", "comment": "Malware payload", "value": "741a6d906bc8c653dee8cb32be8d9e23a756b0e4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825292, "uuid": "d347f67a-dbfb-4f5d-b64b-d9fca2721bd4", "comment": "Malware payload", "value": "72d1fc73bcb81d345e3837eaccc35f46c2d5c4ab02d72375ebed0924de3f5322bc21d524e61081b0e785043924eddd9b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825292, "uuid": "cf5a86a4-5515-470d-8c06-ba49e554b551", "value": "T146633B527833C18BA5C88CBBAF494BAE3F10579C1E69A0E265A1B0C5C1419E34F2F5FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825292, "uuid": "52bbf2bf-6d73-40a2-8a9b-79dabb8c0405", "value": "768:I8w/h62/jWs6oS+xISN0vmN3k3VdkfScBYrwz2y8kTAlGB:I9l/AoSSMmousrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825292, "uuid": "2bb97e2d-6040-40fb-a057-48330fa8c9dc", "value": 71631, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825292, "uuid": "74255ee4-2d34-4093-9da7-c4d305acd2d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825292, "uuid": "3c91ac6c-e254-4205-b392-4e88f28e5345", "value": "invoice-1645080830.pdf (88).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41741652-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830652, "uuid": "d156f481-5cf2-4a55-8fdf-60e5ec6ed30e", "comment": "Malware payload", "value": "6e42d20e3a3bdf2d67195cbb70bf203e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830652, "uuid": "562cdf36-ec9c-4c47-91f8-0f9f104d1e0d", "comment": "Malware payload", "value": "0bf9adb01a03419dc478aaa502befd463f83f515371d93636adeb1fcb89b20b1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830652, "uuid": "9b4526b8-bd59-4721-ad04-6e9b5ef2f9c7", "comment": "Malware payload", "value": "f86abace8ac9cbcf32a5189f6ab36f4aae4eb9c2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830652, "uuid": "70f7470a-1bed-4ec8-939c-15910bb8abf7", "comment": "Malware payload", "value": "4afe609f86574996b8cd9d44084070d7a7f23c0c1d2cfd9a67a5cb4f26161963ab517515ea7ec9d8cc20efff9e788c4e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830652, "uuid": "64bfe832-7b7b-40e1-9bc9-e82e385309c5", "value": "T13C632A4E2D3436361230B435AB7B0D0BC49B68849B955A3BBAF39114D4EC1ED3B683DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830652, "uuid": "992257f8-db0f-4a05-9174-27513d3fb49a", "value": "1536:I9l/AoSSMHkSekvkwkbkwkCknkQk5kgkSkZk9kQkskPkUkok8kIkCkgkSkakckfR:I9l/5MHEqnctVmjiHBOUbhgbzHlfXNNO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830652, "uuid": "533e9378-e023-48a0-ae2a-7a3c91f99f0f", "value": 71487, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830652, "uuid": "d57de9ab-56a4-4eb0-be11-f1a7df8feb86", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830652, "uuid": "b22d1169-c613-4f38-b8fa-1264c1814e97", "value": "invoice-1645080830.pdf (58).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b20d41a3-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793904, "uuid": "0c61a475-a2f2-46b4-8bb4-360949fc3f3f", "comment": "Malware payload (Mirai)", "value": "6333ae977da3233f9ffd6f1fa770ecbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793904, "uuid": "2cc5de7a-779a-452a-aecd-aa20236a6c84", "comment": "Malware payload (Mirai)", "value": "0c1537a01247411a60a86a90582577ef16e3db7927eef043dbfdbd89f7cf52a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793904, "uuid": "4e4f71ed-411d-416f-a28f-78196a5c7157", "comment": "Malware payload (Mirai)", "value": "0907767d1ebf076e096b8e512d251d56b316cb58", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793904, "uuid": "aae00e9d-e815-48c9-992a-0de87cfbe34d", "comment": "Malware payload (Mirai)", "value": "11c18b3ba5dd0362c2b3e45d707e9f16ec508c99b69548bf5864d6887fdb20af55a5da856ab99dd52ab4f1c6a6bb68c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793904, "uuid": "6e366044-2f8a-4afe-86ab-6481e4c46cc2", "value": "T1A25302CC9590615EC8ECFDBC7005911BEC6508AF666B4B49CF457D92E720D23EC9F829", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793904, "uuid": "22d806e6-d5d7-497c-8eb3-bbac897c1032", "value": "1536:0HHPUQ1R1C5QBY0yTqrlz8qugjRllaJglF0yJgCmefX0:xEC5QO0E+z8nSRaJQBfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793904, "uuid": "1dba4dfa-e342-4d26-a855-d089b6782f24", "value": 65916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793904, "uuid": "f2d8cf9c-d48c-489a-b376-424a0f1eb260", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793904, "uuid": "645b7cfa-c2ce-4e30-90f3-0d42188c636e", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7928a038-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823444, "uuid": "9831765a-2a87-4467-b9e8-558a1f92f300", "comment": "Malware payload (Mirai)", "value": "7087bd20415f4eace701783e1e224377", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823444, "uuid": "463784e5-70ab-4d4c-aa1e-f4df94f0055a", "comment": "Malware payload (Mirai)", "value": "0c1f0769e606cbaa2ea8dd7b58f1735cf969fa7c3d3200f263dedd4d9cdda7ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823444, "uuid": "cfb667b8-62a9-45e7-892d-4a3e1897c0a8", "comment": "Malware payload (Mirai)", "value": "27152f768e166b294fcb65fdc9cbc3298143cb5f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823444, "uuid": "0ec327fc-ab27-4ec5-a672-93c5f4aa3c75", "comment": "Malware payload (Mirai)", "value": "7a59ec3a2b33b083db39fdeb090151938e09e2ddbb9b21c635a30cbf9f7e1a1b09ba74ad07822fd5521a01fb3770bb8b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823444, "uuid": "84dc0ae1-7d53-48d4-9b6a-d5a97299b366", "value": "T167242B037A81C9FEC496D1F04BEBA5319978F82D0635714B3794FFB12B49EA02B6D618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823444, "uuid": "61d3060d-6e2f-46ff-b44c-00eb9ba15e88", "value": "6144:KBbbTJgbFZIeT6XlrPG2er/+PlNzx/4X9:KgJT6Xl62er/Q/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823444, "uuid": "e2f14686-945d-443b-b477-3b9cfd07dccb", "value": 213456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823444, "uuid": "a8239b41-ae36-4b8d-9d3f-97256efe3a36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823444, "uuid": "efe588ca-4b57-44e5-b2eb-6faf627b1a9d", "value": "bin.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775b6fad-e372-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766874121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874121, "uuid": "42e3d748-49df-480b-9f3b-11a78d79b9ee", "comment": "Malware payload (Mirai)", "value": "b7f74fd39e5a18ff9ba36af22dcbf6e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874121, "uuid": "f1320432-8ca0-4366-9909-a2551e2231ba", "comment": "Malware payload (Mirai)", "value": "0c4d4c934898a21b8c930925eb0e737d3b9a471542f1133ef62529ff2d6d062e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874121, "uuid": "ce0a0117-348a-43d5-8606-3f312df09616", "comment": "Malware payload (Mirai)", "value": "199c8ac6c3937cc09b7ca70e8acc25384ed54deb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874121, "uuid": "726a0fa3-82bc-4732-821f-6f0c96d1a272", "comment": "Malware payload (Mirai)", "value": "3f5b861c5978d418110fa029dbd6c620ab9888cd988ad4ca0c003983e2045954f0b0d8a6bb1bd906f928c1927a856ad0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874121, "uuid": "339b0752-0475-42cd-bda8-6e447a1fbf52", "value": "T13A53015FE3FE8F94E52A16384BFD8E6D14A1BF75106D582AC01CA81B38B1EF565284C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874121, "uuid": "12629c97-d4e4-455e-a332-882f4331dc86", "value": "1536:wkfDhq4mpdwtEjUqEwNVV2l+m1EtQKa5EPe3TJnouy8Hyl:DfDhuqtEHnV21EonVout+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874121, "uuid": "a80e26cb-d807-4f62-b6e3-a52eea03c8a7", "value": 64788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874121, "uuid": "08119690-0f32-4c8a-bed0-2a886534a4d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874121, "uuid": "d897d3ea-db84-427f-8154-268008bdb7ac", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bf2b7c6-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854828, "uuid": "f3cc6adc-d564-4380-9282-e5c1a4c8e6ed", "comment": "Malware payload", "value": "13bd659b7689b55fa121dd3520004f9f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854828, "uuid": "6a7e34c1-8ced-479b-8d00-442922dbaee7", "comment": "Malware payload", "value": "0c95c0e6d83e6d0208f665ae60bacceb43575e850c42b68e232e64ed2766b8b6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854828, "uuid": "4965f60c-38ab-4782-9081-44f5f9b49764", "comment": "Malware payload", "value": "9617ae09a70d606156a276a3b1b4a1a6835dde0a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854828, "uuid": "035bc9f1-5e97-4015-8841-bc8018baa596", "comment": "Malware payload", "value": "405dc5f08cc6d8f7da3aab9eceb06da488896bb027026f1b7786f16412145deeb3eaee8aa4517ee3defda95352a4c798", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854828, "uuid": "de02e0b0-61bd-43f9-a6b7-367f23b7745e", "value": "T15E63297B33137D5E227B5FD5C04E2F9A76437B7868558542AB0B2620302EF9C7532ACA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854828, "uuid": "706c308a-7e9e-43af-8d2f-171c24717c85", "value": "768:I8w/h62/jWs6oS+xISN0v85x3fMdkfScBYrwz2y8kTAlGB:I9l/AoSSMy0usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854828, "uuid": "3cab697e-a39c-4ceb-a910-61cb3c51d65b", "value": 66783, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854828, "uuid": "9abfb907-4074-41fa-b2df-bce056c8e7d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854828, "uuid": "3947fdab-faf5-4deb-8365-0b4fc90f54c6", "value": "invoice-1645080830.pdf (37).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab08b190-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825675, "uuid": "59d30936-9e46-47a8-8586-ceae4928412b", "comment": "Malware payload", "value": "34c713c49bf613895854bae32e2a9f08", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825675, "uuid": "ae49b343-8ed6-4fea-afc8-6d02ba0bcf1a", "comment": "Malware payload", "value": "0ccbdbf50ae8758707592d5a95473585191d3c45994703e4be4a198a89cbeb29", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825675, "uuid": "34347fa5-c0af-4967-83f1-b47c372ab834", "comment": "Malware payload", "value": "9262fa9c29b498e6df97b65c1441358b66005f19", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825675, "uuid": "76d61a6a-b11e-4cc4-bd91-6e08768832d2", "comment": "Malware payload", "value": "46fdc8675e811c83c3233935254e26b80d085e41de67546dab138fd1b12f0aa6087cb7f48fdf60a151c58b563a91cde4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825675, "uuid": "0824f94a-895f-45b9-8979-95b6aeda3937", "value": "T152731A361DB2600B66E8592CED8AF4B316F4A3F988175DB6953E68E730275133B2C1CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825675, "uuid": "acb7290b-ac55-4e0f-a43d-0f3fa63835fd", "value": "1536:I9l/AoSSMT5V5q555L5U5h5R565X545r5R5ue535P5c5D5a5V5w5Y5h5l5B5o5cr:I9l/5MF7+P9UXnuJodnNphcVO7AIXr3J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825675, "uuid": "fcec2b3c-4c54-4130-b243-6e897c56dc1e", "value": 74368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825675, "uuid": "f2e673bc-4a58-4e6b-9798-8ba982b4b36f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825675, "uuid": "5e60fe13-9586-4f94-a91f-144331c4116f", "value": "invoice-1645080830.pdf (8).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838dc940-e2c2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798550, "uuid": "fa5524f7-49eb-484f-b80c-f8b3ee703e96", "comment": "Malware payload (Mirai)", "value": "f2b4f44aa7297fab40b109e7079dfe5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798550, "uuid": "3c1e8cae-3b23-497d-99fd-583ee2cf6ac1", "comment": "Malware payload (Mirai)", "value": "0d2eba591edae0b0bee5dec42608bc763ba0d11e7ea006d1600d96b63925e6aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798550, "uuid": "7f6f43b3-7dc0-48b2-96ae-1f2c2e930bb3", "comment": "Malware payload (Mirai)", "value": "287b487b22d99183d69d269ad4a194d6ed5055ff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798550, "uuid": "bb991195-9747-4233-89fd-7f9044f57b1a", "comment": "Malware payload (Mirai)", "value": "282d294bc539a84add1d9bb939b2f9b0a82e138eec3b6ec37d1317a57cd10c4d385ddb761b92486fbc9062f76cd8f390", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798550, "uuid": "0b7f135c-7124-4700-8ae7-818567c9be0f", "value": "T1A583B80A5E228FFDF799833047B78F357A5823D626A1C741E15CDA012E6034E641FBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798550, "uuid": "4b75d171-bfa6-48ed-b8e2-99a667332293", "value": "768:GvgxwHXvyGI8P9lh6/3+6YhNCnHoqrQjbQNuqOYWUVpChgbjyAy8e5SXswOIEvvt:GvgKH/nI0b6W8WbVm1pCyblewXtOz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798550, "uuid": "cf19eac0-a9bc-41a5-a145-b2de06596089", "value": 85364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798550, "uuid": "09511bd2-a80a-4df9-bca8-2238704421fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798550, "uuid": "242f09eb-a5fd-489e-9bed-a089cb7f330c", "value": "sdxkzX_UXA229x.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c2b3e85-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Joker)", "timestamp": 1766797679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797679, "uuid": "c05e6003-d297-4756-a5de-844c01247d97", "comment": "Malware payload (Joker)", "value": "4fcd991b8458c9ffa5e77cdcaf814cd7", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797679, "uuid": "02d6de4d-4bd0-4004-9922-0222ea98a4db", "comment": "Malware payload (Joker)", "value": "0df24a2c830b1d175d0f317c32f4433fc5ae0f3ba7ebdfc073312087f23f25f4", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797679, "uuid": "67965f42-3051-42e1-95d6-6498ed2cf8e6", "comment": "Malware payload (Joker)", "value": "b7be9e17ba047b8204972842be1727a77ba12e07", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797679, "uuid": "de03e2fd-9193-43db-a46f-7263fc83e131", "comment": "Malware payload (Joker)", "value": "0d26785d614d15ac675e4226b29effb01d1c249787433c5a226a8a007acd43be4864f4d025ba2a9819ddc311f9fe4f76", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797679, "uuid": "c2a17ba9-b5d8-47e9-bb94-60fd9da7bb79", "value": "T144A6125EF31CA01FD877643248BAD135065B4D518E83AB672A48771C2AB79C42F9EFC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797679, "uuid": "d43976fd-bade-4ef1-b6a3-04d57d09f1e2", "value": "196608:iPCqDg3nTWOefYMcMBaValeXbjRHxg6e/I5puEeLI2jzvIHWHft:iPLgXTWOeTaElerlRg6Ze7IUuoft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797679, "uuid": "3333bf13-23bd-43b5-b18f-24beba1b2611", "value": 10313623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797679, "uuid": "e2eb919e-778c-4095-8941-5daf2394fc3b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797679, "uuid": "9f420f97-50c2-45da-bb16-6963d29ae2c7", "value": "Simple+Messages_2.9.0.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e30c4f3-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859583, "uuid": "48932f9a-f98b-4591-ac5f-799aec2ce5d0", "comment": "Malware payload (Mirai)", "value": "96a0530aafae3d6e71344996704d736c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859583, "uuid": "1be265b0-a45c-413e-be45-ac14d3e5306f", "comment": "Malware payload (Mirai)", "value": "0e0dd541d48ea4482a50c6dd5e8b542f16b9f3cc04a17307dab1cbf9b9dfcad1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859583, "uuid": "3a68bc04-b1eb-4fbe-b15f-e28c0c7ebed0", "comment": "Malware payload (Mirai)", "value": "071a186b9ae186d912bc1d17fbbea0d8f3585129", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859583, "uuid": "f596af85-4373-4a32-869e-be6074b11686", "comment": "Malware payload (Mirai)", "value": "5f6cfefd561d73c12b5de99c37a73937f566d7c4a2bae12b4899ef378241a39774bc5bc7160eef4e76f61bb8a6c1ceb1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859583, "uuid": "f721e1a9-d234-44fa-bedd-9b26306d0607", "value": "T185234AC1D943E8F4DD1E09B42272FB329E72F43A116CE9D3D769A933B852641E6071AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859583, "uuid": "7487fbda-5ed1-45c7-8391-f6407dc794ec", "value": "768:912GwgN//CUmk/xqM+JuetGWc7/2OntBztznC1M20W8PNmyXoqV9KB6:912GwgN3CUmkL+AmncbztznC1kWgV4q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859583, "uuid": "155875de-305a-47ac-a27e-4dd88928ba71", "value": 45712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859583, "uuid": "21fd164d-ba50-4876-bdc9-1b12b53268d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859583, "uuid": "e227a3ec-db76-4853-8af9-f1279b44eba5", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fd586f9-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854754, "uuid": "64efb792-17e5-45c7-b135-5507c19beefa", "comment": "Malware payload", "value": "a33757c1da26cf09cc05e10e89921775", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854754, "uuid": "64c4d174-239e-4885-b261-cdebdc99f1da", "comment": "Malware payload", "value": "0ee5cafaa8613cbc527549f0143664eef8fc438a47adb8e33c6fe50e7072a684", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854754, "uuid": "f5117d56-e8e5-4a0a-8350-b5ca5a5b88a6", "comment": "Malware payload", "value": "074882db267a7e71a4f5b2126a07fb8320780423", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854754, "uuid": "5ce1d35b-28d2-4cec-8c5e-ea229fb370db", "comment": "Malware payload", "value": "990dc548635cc2a750211565564659b86d6abe9325b2c1a8167d405e1d7408cf06a0077bfa9ae621ab52e3ec783b9b41", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854754, "uuid": "78691e38-4d5f-44f9-a956-098725830b8e", "value": "T1E363D9DAA863B453300A5657CEE42421FFE7FAC5DE5313D8953AB0CA9D0F6582069ACC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854754, "uuid": "972cf01a-450e-41ff-aef4-e8d6655f8957", "value": "768:I8w/h62/jWs6oS+xISN0vagcgNg+1gM1gtgIgigHg+gigzgPgKgcg9gEgE1gOg2P:I9l/AoSSMMsusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854754, "uuid": "9fa903c0-64de-4f02-ad96-daf3ef6cd4db", "value": 70625, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854754, "uuid": "9c283570-7bee-4fec-8b2d-a0a528c6201b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854754, "uuid": "f8d26ed6-2368-4c89-981d-b8ddb738834f", "value": "invoice-1645080830.pdf (48).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b52ffd4-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830749, "uuid": "2c42d763-c99f-464e-9af3-fdc1f06d8641", "comment": "Malware payload", "value": "bf857d9bd6027d86dfab26d5ea1c12d1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830749, "uuid": "46d64c7e-517c-42cc-b33b-a62a71e9602d", "comment": "Malware payload", "value": "0f3d5ced5e1b758866adefdc5c2ff187a1fd93f3af529335ab3d6e917febd9c7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830749, "uuid": "c1b8075e-0ad6-485d-9b0c-6d1f3fc6c19a", "comment": "Malware payload", "value": "01adda5326cafee9bc3bec1419e43b62ba175715", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830749, "uuid": "74f2438d-698f-4cce-9822-8a71010db031", "comment": "Malware payload", "value": "7f89efe124c20c584785b65993bd727bebb66165759c601c13d435dacea0927af8ee65b33b1cd1d6c2184f08e253913c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830749, "uuid": "2c44fe96-6dec-4604-b741-b6bca83ee40f", "value": "T101635C7E96C922FC5596129FE7871453830BC3C258E6BC4C8BB66D73A50FD26136A133", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830749, "uuid": "f00a3095-3e01-4bd0-8556-d6db789debc0", "value": "1536:I9l/AoSSM240n2BzoTJep0TluD98BeEZLYRLninWlLNIUzGAuUZO2sqy8/hdbhd+:I9l/5M5vusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830749, "uuid": "0430bf81-2bff-450c-8745-cccbc414aebf", "value": 72502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830749, "uuid": "5e73e1d4-b430-4c8b-a454-4e21aaa755aa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830749, "uuid": "34dd276b-29ce-4d82-8f5a-a6a9a4cc551c", "value": "invoice-1645080830.pdf (36).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261fa05f-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858094, "uuid": "d7375946-248b-40f7-97d3-5d6b470a8f95", "comment": "Malware payload (Mirai)", "value": "556127202af98be8693733875290e433", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858094, "uuid": "bf2501c3-92b0-44b9-92e3-11ca336fa905", "comment": "Malware payload (Mirai)", "value": "0fc8f3dee5769957c6148836fa9cf212bcc76c2e724afc954db7fb23acbd8aa3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858094, "uuid": "f6b35633-1a7c-4c6f-a9bb-a3642e743ae9", "comment": "Malware payload (Mirai)", "value": "2091d66f1c4b009cb2a7c9b2a07b67862b78ed02", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858094, "uuid": "5f402c50-6c93-4637-afe4-2e285088cb34", "comment": "Malware payload (Mirai)", "value": "7f8c754e0dd29053405f657798786a27c692adf38783e4458f2eeca8b4a5854db05cbee46893276f62b46c5c8dda4823", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858094, "uuid": "1cbbbfe9-aee2-4b30-a85d-5cd49ff35976", "value": "T16A24A60E6E228F7DF7A9873447F78E21975833D626E1D684D1ACD2101F6029E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858094, "uuid": "5a81b36e-7ce4-4201-9905-5a8e9bf3755b", "value": "6144:zZfSycXJk1L7sdFLQYLjvEksTPIzbtmVPj:tbP8FLQ4tVmVL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858094, "uuid": "1eaaab36-84e5-4981-89bb-3a4b96b5b272", "value": 218644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858094, "uuid": "cc6fa4ec-cdb9-4175-9708-a6ee8a171690", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858094, "uuid": "7e205fe3-e446-4200-bc32-d9e038495d9a", "value": "mirai.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d0eb158-e323-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766840200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840200, "uuid": "633f1e94-03ea-4f22-9cd7-345c19a7f314", "comment": "Malware payload (Vidar)", "value": "fdcaa7370f5c4593474df7363dcb3265", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840200, "uuid": "4237766d-ac30-4075-92d8-3a18b9093304", "comment": "Malware payload (Vidar)", "value": "0fcca6759eb01ee8ab17acf4de2c63e6d4a0e30e19dbd88e41663dca9ab53e08", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840200, "uuid": "368cc6a8-3196-4b87-80b2-a844db6b717f", "comment": "Malware payload (Vidar)", "value": "5b2b3c4f58b884a0623dff7d2a039a500a033a06", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840200, "uuid": "71090f21-8747-47d8-9eb4-54f54d912515", "comment": "Malware payload (Vidar)", "value": "a0d06db19c6e2a849c239a4ea9223693dbcfd239bad68e57977fb4380317983e512c72b23b999cc1bb238c19d97cbf99", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840200, "uuid": "e2a6767e-a55c-438b-b11a-0dae46fdff4d", "value": "T1F2B63AD2FE541755D79BE23AE9B162552230B184433412D7BBA80BA54C1FEC81B3FB2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840200, "uuid": "77e4920a-bdd1-4259-8f1d-1b82dfde7b72", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840200, "uuid": "543ae40a-dcc5-4d3b-899b-cf24455098f4", "value": "49152:9leLOm/Hrb/TGvO90dL3BmAFd4A64nsfJmjBq/jvAUIj6vocyEjOjC6LZK7tSgaC:9lAOTZNW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766840200, "uuid": "8c0905c4-505a-428a-ad7e-ce0bb9bcea24", "value": 10922624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766840200, "uuid": "dd3f622c-34fd-472d-8f57-8e32f00008f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840200, "uuid": "3f32e2e6-9d20-4293-b324-ca87f95be2b6", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34429d27-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796270, "uuid": "1af9e7e6-4a7c-4ef1-82ea-61ae69c81b8f", "comment": "Malware payload (Mirai)", "value": "2d60aa46a48c9016a3785f58ef365edb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796270, "uuid": "dab1b7e5-8fb2-4ebe-a008-8d9522aec0a7", "comment": "Malware payload (Mirai)", "value": "10602c152e4745c89100176a1454980e6c85f7c77687883548dd1c1ed1b12658", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796270, "uuid": "d01cb99f-94ba-4ccb-8174-03d85dd8aad4", "comment": "Malware payload (Mirai)", "value": "4835d39ebe4cca098dd449db14a679d30c46831e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796270, "uuid": "4dd1f087-2a49-4ca6-ac66-6cf04c997acb", "comment": "Malware payload (Mirai)", "value": "9604be3879d998528da64ac947447410539bf1552e10386d6b9692c5378ab5e3d3ff238962a3a82536d5b4ca49da34d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796270, "uuid": "0ca4b6ce-baca-4630-abbc-528adc084517", "value": "T1E563B44E6F619FAEF66C833187B74A20A75923D233F08685D36CE9045E7034D686FB94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796270, "uuid": "423342d7-676a-47dc-8b78-5ba9f73f8592", "value": "1536:cEpscOU7K7qeL1/vxCIaFLiF1TiFFLg0CpzxZcs2UK2bVRmi:cE0qeLu0zxZnK2+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796270, "uuid": "66db6eb8-362c-4d05-a5f5-746b684c5df5", "value": 73040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796270, "uuid": "e4563d6a-2321-457b-a3df-75058b7c608a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796270, "uuid": "4411440b-62f7-4377-86b4-ab01a23765df", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd343fac-e359-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863608, "uuid": "31729dce-a738-4270-863e-80a107858673", "comment": "Malware payload (Mirai)", "value": "cafb8de20b6c155c311b01b0f906e19a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863608, "uuid": "4485c285-75e6-482c-89a0-a8f4b5ca6c1f", "comment": "Malware payload (Mirai)", "value": "110a227b469b7a039e4c6905be1ae9637f90e1b38c200e72a95737eae62e7fef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863608, "uuid": "7466b07d-81ef-453f-aa16-76ddabc3e103", "comment": "Malware payload (Mirai)", "value": "4b21e78b5850df9e3fb5657a0c0c769f1bc4f46d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863608, "uuid": "103dea0b-66b4-4837-a9af-2b257847dc36", "comment": "Malware payload (Mirai)", "value": "313c550aeeabb8d4780ccee4c32d76dc2f253d041bb639075c174dbfd6e45c79da160d1836e8d38e5a9dea28eee6441b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863608, "uuid": "4d2d0484-d915-4410-a84a-b16f1e4dc7db", "value": "T19E03F211E44A4DF6C6F91672E8F883C71F142AF9C7D633B009243A5C85EB66F15296CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863608, "uuid": "7305fd17-f175-448e-a3f2-d6bdd593527d", "value": "768:ZgZiwSgazvVS9GF89fMClynd5UHq363UnYlDf9lwvnYlYs3Uoze:WZcg+E9/fMClyn7UKiOYlDf9iYPze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863608, "uuid": "fa16744f-771c-44bf-b058-0d4f0540fcbf", "value": 40888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863608, "uuid": "66bdd091-c99d-44ea-8842-562815742792", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863608, "uuid": "e15dbe65-a3bb-4cc3-ba56-cb814d7067d8", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea1506c-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830566, "uuid": "af29133c-8ed7-45f6-83b1-15c64dfa8d04", "comment": "Malware payload", "value": "da33ecc16573b1fbb5e66ec5cf1268fa", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830566, "uuid": "7d0b7ed8-5d16-4276-a129-54bddae948c5", "comment": "Malware payload", "value": "11610e5b3b4a6fce693c6aa6a96fc5a22c285ad78e4ae30c81a9243d780bfeac", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830566, "uuid": "332a6f78-d823-49d6-9b0f-c4a8b01d740d", "comment": "Malware payload", "value": "1762282d6e4a230fa8e2cd28662d5bff53c17099", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830566, "uuid": "985ac602-7dee-4e60-b58b-b2486860e559", "comment": "Malware payload", "value": "bf4a1887b29b6f84487d1ecb5ff1264c4a6bc632808fedd90a2d285df4e39b5e24112bfe2b6a468c6e404296c33c0d9d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830566, "uuid": "4bb62a6e-b387-4e22-ab83-8c5ce3ecb54b", "value": "T19363199046F6BAD4315C48F3191A249E3D7123DD806DA17A2729BC26F1EAF3BFB11817", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830566, "uuid": "9d35cd25-66a2-4c5e-8e80-5649573cb792", "value": "768:I8w/h62/jWs6oS+xISN0vhfs8U/djgM1Rkit5ZVG2y0RujZuy8HmNYTirLeABeuv:I9l/AoSSM1frUusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830566, "uuid": "f5487e8d-e9ec-4399-8b06-7d989002d988", "value": 71583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830566, "uuid": "28ba4a1b-a4c8-4556-bc08-7f74545e3b8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830566, "uuid": "d9ac0188-9821-42a6-824b-c9f6e8cbc1ee", "value": "invoice-1645080830.pdf (68).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ea3aa51-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858081, "uuid": "6322bb88-85fd-4b13-ad7c-2f96685c93a6", "comment": "Malware payload (Mirai)", "value": "2d8db006ed529639ee2d3f406e258ea5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858081, "uuid": "02678d6c-78e8-40c1-9bd2-8a4c7a2c6f85", "comment": "Malware payload (Mirai)", "value": "11756ba7ba295dfbc1b543c6d7b8023886cf841a97c7cdb681d2ff41655e1f0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858081, "uuid": "e732d5c2-00c4-4329-b84e-9e46b0d53d51", "comment": "Malware payload (Mirai)", "value": "30603c0bf2127bf6b9862a6c09d3f56764701628", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858081, "uuid": "8a0bcc4a-9202-49cf-8cd3-00852adb0d10", "comment": "Malware payload (Mirai)", "value": "a03aa5054d4cc66a865e55ce6a28f758356d602a68313547925880de4c8470bbd4fa1eb673742f293b6e12a6bb0278a2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858081, "uuid": "af8898ab-f12b-485a-9181-f402fed03397", "value": "T1FB13F110D91D2BA6CBE02D798830DD8A7FA019FCE4AC196222205A7079DF7513AB539B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858081, "uuid": "8d69dd97-0163-4774-b940-e90517fa7d65", "value": "768:UZN8BYxeXkiCrpg3Zfr2kF5t0U+60shggpKS5sLm2+zHiWdvS86nH6Zdm8vA4Opt:wGYerCrp292kFz0s0A46cZ+zH1dInqiX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858081, "uuid": "e9ea74df-33ea-4d43-8d63-a530db5578d0", "value": 44636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858081, "uuid": "4d38008a-0c9b-4132-92c9-0131b6e69cd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858081, "uuid": "f0df0e1a-4016-4183-8398-6b2947ce6f8b", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d9733c9-e2c4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799211, "uuid": "07204239-b416-435c-83e8-d1dce6b8d9d8", "comment": "Malware payload (Mirai)", "value": "8d776e8360e9ba66759f5f0ac0971afb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799211, "uuid": "ba850194-ea40-46f5-bb14-4691c4b1979f", "comment": "Malware payload (Mirai)", "value": "11935c08ce6a844ab0318f813397b1a16b5bcddff96c82e22c47e6641659ecd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799211, "uuid": "6af3f940-d6d9-4fd4-b74b-02fa409b4722", "comment": "Malware payload (Mirai)", "value": "e638bfcf53e9261b7573175cd29da4fe55a759c6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799211, "uuid": "c846fab7-6ea3-46c4-a8fb-4bb93cb652f0", "comment": "Malware payload (Mirai)", "value": "95b2f6c13fcd48b3ea0e613a37fb3ff8edfff1103095a558175b4e067d5465a38b367606a59f5263e632628993208739", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799211, "uuid": "39c7089b-a42e-4f47-b44c-f972300b59c6", "value": "T1F883F706BBA50FF7DC6BCD370AF8170130CD560A22A97B367574E828F59B25B09E3964", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799211, "uuid": "63bdbe65-5fbc-48b8-9f11-377cb62ed8a4", "value": "1536:NpzFeX5LSVEx4d3XMxU3ZeCsSM5dQhICdA:NppU5Lo3XMa3CYICdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799211, "uuid": "a03579f0-2f23-4bd3-aeb2-f1108e0294d7", "value": 87812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799211, "uuid": "b2813814-8007-442c-b64a-eb2eb087bea2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799211, "uuid": "286516c4-d49c-4606-a812-6d973770e49e", "value": "sdxkzX_UXA229x.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f074061-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Joker)", "timestamp": 1766797737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797737, "uuid": "1d7f1490-4fc0-4a65-911c-2dd1a382afa9", "comment": "Malware payload (Joker)", "value": "e1ed4d67dd3ccd6aab9703d1629ade79", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797737, "uuid": "ccb506fd-78fb-40b1-8f01-d4d85ed22871", "comment": "Malware payload (Joker)", "value": "11f1aff73c32d1f5f841fbaf49237ead909a7bd0a15896d6df9e6e5bf6ba3fa5", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797737, "uuid": "9cc842d4-52e8-48b6-8ddc-fbf8caeb67de", "comment": "Malware payload (Joker)", "value": "660575285f7112ee7bab5b00f3db0989874f3961", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797737, "uuid": "6e1fee96-58bb-4ed7-b63f-391ac48c236f", "comment": "Malware payload (Joker)", "value": "7b5b0f05e3ffacb03602ebf304c783958ff8201065010edaded934e0433b3931ab2bb907adf8a955a9f3b8d19dae45a6", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797737, "uuid": "c4d39ac4-1c50-4c08-a866-ca518426dffc", "value": "T1F2372346B78CA91FCCB3B079CD5E22B1A05A0C56E701AFD79901B25C7EB36E46E063D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797737, "uuid": "85bd888f-e7f1-4644-8ed5-bbba05b54595", "value": "393216:MPLgXI7Ns+CGq2IsPHtdIy2tjvY0N+etRk1vuGnxB1Gh/Sq:SL7hsD2DH/dIpBkYGM1Sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797737, "uuid": "ca2fe32b-ef67-4cdd-90c7-e85e4c537976", "value": 22395324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797737, "uuid": "02494b79-5df3-4417-8a58-7fd144a5d4d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797737, "uuid": "7be5ecdb-49a1-406d-a8f4-02a8ad3d625c", "value": "AI+Junk+Cleaner_1.0.17.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a099dc03-e33c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766850998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850998, "uuid": "9bbca9e1-66e1-42cb-ac27-cfa8dfa7e0b2", "comment": "Malware payload (Mirai)", "value": "b1d28fc7ce29e2a8cf4bb3e077b308df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850998, "uuid": "964b0532-1624-4479-a573-24aa842b3647", "comment": "Malware payload (Mirai)", "value": "11fdd4f478b9e6a17039bf34502b080ba82754becbbd6c9802b0d92c72332a64", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850998, "uuid": "2087cba6-3b95-4b93-8218-c33891aeca5f", "comment": "Malware payload (Mirai)", "value": "e43cf87a5f4509d4d722ea7104061aa86150f7bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850998, "uuid": "6d591437-469e-44a6-8ee6-00e99eb7ef79", "comment": "Malware payload (Mirai)", "value": "1d5f9cfbae05b2909288baee63200f20a256806b51e5e6006b72123e248bfbcf06041ba15d5a1262660fe2ec428ce54c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850998, "uuid": "484a8eaa-4a63-46c4-8c2d-9e3b197901e8", "value": "T1727312ECD6A46C85C5BD6E3A3D6816F98F42A143B34BF398F610F944A810C9B21CD45E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850998, "uuid": "43da33cf-7cfd-480c-b3a6-a17ab846d793", "value": "1536:4a1IUVmjclIsdK9cWhit5lVYdfFx9s4ORfT2FDRI1GLJXHW:/ISn9dMAnGdfFxS4w208LJm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766850998, "uuid": "af2eab0a-e5da-4315-98cc-6c99d5609a6d", "value": 77160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766850998, "uuid": "7f871add-e234-427b-a90e-5faa4b3f9493", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850998, "uuid": "d821ffdd-d347-499d-af69-a815c84c914e", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d81ee853-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830904, "uuid": "0bd09fb7-471e-4bf7-9d8d-a240f0b69d34", "comment": "Malware payload", "value": "6400adfd73957be72a6217ec476dc4ab", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830904, "uuid": "a58d75f3-73e3-47ed-ab3d-5316ad713669", "comment": "Malware payload", "value": "12050bc074e7c30d5620a306ee2a0d084f81d1138412bc4b8287b5680c51fd43", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830904, "uuid": "cf692da2-0bac-4459-8f22-441225fe0af3", "comment": "Malware payload", "value": "2d092237109ade2c8f62a9944f24166508200ed4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830904, "uuid": "2a2811ea-12b2-4d61-8a34-6f78982a82cd", "comment": "Malware payload", "value": "0520d5f2b4eabe0aa2c1171a978cb06031ecbe0514439ea9db07af298b7b74dbd48f1b0517d4806467c2c452bbef364e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830904, "uuid": "a8b80c1a-5db3-4ac9-99f1-823609aafed0", "value": "T1B9634A796AD0AF3D16873F54447364D2240BDB833C318ADE36B3E649C42ACF567192AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830904, "uuid": "5d786738-3d97-40e1-80fe-1a934e0aa377", "value": "768:I8w/h62/jWs6oS+xISN0v6qF4l85zxdkfScBYrwz2y8kTAlGB:I9l/AoSSM3FJusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830904, "uuid": "d6819d12-29fe-4265-a3a2-ba64fd46c45c", "value": 71521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830904, "uuid": "ec47f02b-e9b8-49e4-b072-6f5fa748695b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830904, "uuid": "687ab4b3-7893-4d12-9b69-f03155e14fdd", "value": "invoice-1645080830.pdf (8).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc6788c-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864982, "uuid": "766639a6-e26f-4acf-830b-7c0c3fd2f517", "comment": "Malware payload (Mirai)", "value": "5cff9834b144964e461b3aed407c4f05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864982, "uuid": "ee975577-e49c-48b0-8744-b7f638998fbd", "comment": "Malware payload (Mirai)", "value": "12d86f647e6268120efc765e2ad3a0311091e2fe78240a1911bf267cc1a2f8e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864982, "uuid": "3e405e34-1f07-4d03-bd10-ff0c9811b53d", "comment": "Malware payload (Mirai)", "value": "0afafe6780dc420c160d38db8f0715362e49fe4a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864982, "uuid": "60775c8c-ec1d-4ba9-af44-3476e930c795", "comment": "Malware payload (Mirai)", "value": "71d36d5b888829ea39b0853a2688c5efa41268936958889be030d806134fddb3df5d5c288868a1ccef36caa42cc3616f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864982, "uuid": "e3674683-dfbf-4952-b3e5-302db87162a6", "value": "T1BE63024AA3FA1DA1EB315C707DB966C96D5CEB35E08C66EB21A91BFC50B58021CD8062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864982, "uuid": "269775b1-947d-4161-998d-6be7ba9a16d1", "value": "1536:FkyrFYghrvhFSrSobwm9JmGw8gLDDmbULoQbB0xRJiMPBk:FXi+rv3yim9Jg8gHSbULoQbBaPBk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864982, "uuid": "a9ce5ce3-592b-47cb-8425-b651a9a2e8da", "value": 67848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864982, "uuid": "564344cd-b9fe-40c4-85e6-2b8ab7c47a5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864982, "uuid": "041b9a1c-52c5-4062-a370-a614e7d29573", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36f8b5b3-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854686, "uuid": "8b435b6b-8ba7-4984-b4cf-aedbf407d0f6", "comment": "Malware payload", "value": "7f998a9b4f98038a9bb8f9a81e784217", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854686, "uuid": "b5923d91-cf7a-4ae0-b83e-3a82a57bb6a7", "comment": "Malware payload", "value": "12f1c84dc240209212c0850f13fcfa12e3faa76b32631809a5fda71c08b4ccaa", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854686, "uuid": "e251686a-11e9-4c2a-9497-f3e617ba4452", "comment": "Malware payload", "value": "b4d2693fe6d56eade1cbaf9a9469a89de9bb993e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854686, "uuid": "85a2311e-595a-4dc1-b26f-5b10f07c2d5f", "comment": "Malware payload", "value": "5224f9308010e7ec26090e8c1686fbfe36acf63fd3f5f8134a8fcea00de27eca5fbb51d327f5fdc4a66ea0a9996d3482", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854686, "uuid": "03e91c0e-69fa-44fd-ad86-9e305ed3df63", "value": "T19D631BD549B268E4902B94C076AE760F02125ACF71863396560D7C7F2D0FA8DEFB1A37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854686, "uuid": "0ca99f3b-d515-4a00-b17d-6e2be1b100b9", "value": "768:I8w/h62/jWs6oS+xISN0vo/jrzubdkfScBYrwz2y8kTAlGB:I9l/AoSSMwMusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854686, "uuid": "5ae89631-dad4-4dec-b053-45a3f31e9bf1", "value": 72497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854686, "uuid": "79012183-eceb-4ab8-8f4a-48a9fed56032", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854686, "uuid": "c446fb7c-f9cb-4fbd-93d7-d853dd448c5a", "value": "invoice-1645080830.pdf (65).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05838ab6-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795332, "uuid": "ba6f3ea2-2267-4053-b0ef-a3bd0af8b348", "comment": "Malware payload (Mirai)", "value": "3552b606859b6abe82d5a6b07b9db6c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795332, "uuid": "80d9918c-3ff1-440e-ac57-e8d8d1fd82a5", "comment": "Malware payload (Mirai)", "value": "136331cb5032e33e38b42781bb2a062eefe41106c90abe90594b39adeed76599", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795332, "uuid": "6b958f8e-ec26-406c-8f09-a035c1c1eb9e", "comment": "Malware payload (Mirai)", "value": "0b963a21c50407630aabf768c7cef129c3d005d5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795332, "uuid": "d97be38e-f7f5-4d77-b6ad-735707c45ef1", "comment": "Malware payload (Mirai)", "value": "2f0d9436af0476af69a54dde35342d370e27dc4d3448a625c9cba38e21390c3f9baa5797212730db6b89409a6b79e613", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795332, "uuid": "e8d10f21-7d22-444a-8c39-8a2fdf92a59c", "value": "T103435C81B3088943E5572DF0793F6BD193DE9AA010B4B38A761FAB8D8376A325047DDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795332, "uuid": "28710899-1676-4714-9bca-aef471e35e5b", "value": "768:0rPO2QDCLoJu4GRkW+o8s0Gs4OxoHqZBLqhxrObVRF:CO2E2xVkrPsfs4OxhvLqqbVRF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795332, "uuid": "8f9ccf3c-09cb-4dc5-b4e6-8a06dd0e9013", "value": 55948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795332, "uuid": "d363308d-eb2e-43e7-b6bc-e850f71796b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795332, "uuid": "00dde402-7d16-482d-a203-edc5a0ff8e3b", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a19cd89b-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870327, "uuid": "a0da3ea7-cf21-44c2-a1ca-6d828c4f7ddb", "comment": "Malware payload (Mirai)", "value": "49979494855accdfd37d7fcbb8543e07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870327, "uuid": "bc5dccb2-48c2-4769-96c1-b0e9aac332ef", "comment": "Malware payload (Mirai)", "value": "1468bd64caa19b1be78c1715cc6198a176dbf4c7898640c102f04db89926f011", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870327, "uuid": "4a74afc6-af6f-4c92-8948-0efea29f270d", "comment": "Malware payload (Mirai)", "value": "e190786f1a3a1e440a2d501c25074a860a8817fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870327, "uuid": "916d83e3-a3af-4a88-9151-026c41a3264d", "comment": "Malware payload (Mirai)", "value": "66559b842e6d0310b64e31d69898a4ff573e0756d4a0b32638be8ea38623895eb0ffed890064e00bbae49439c8a77ccf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870327, "uuid": "d41ef8cc-ba00-43d7-86c2-ff1fb139acb7", "value": "T1EAC2D199AA7FF991D394283ACA6F4287BE8D94F4E4BC70156E005E8516F3D1312A85C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870327, "uuid": "c5a7c43f-aaa2-4f01-a081-ba32209835f8", "value": "768:7C9iRuIMHJBTXtMT987JfjpSw2C9q3UELGF:ewuI0BLta987J9S1Li", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870327, "uuid": "ee905fe5-9f75-49ee-969d-180cf90c15a6", "value": 27060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870327, "uuid": "4f21ffbe-459e-41af-8a2c-ee9ddf611387", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870327, "uuid": "b452432a-8bfc-4c24-8390-56c355115068", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02cef0db-e332-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766846438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846438, "uuid": "32a81a74-1492-4891-80fd-cc3a406cb239", "comment": "Malware payload (Mirai)", "value": "cb7925629a0f0178d17ec6aaa60217b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846438, "uuid": "b4872df7-e4b2-4511-a552-7eacceeb384a", "comment": "Malware payload (Mirai)", "value": "14709319225eff384fcf2b0ebc972552342cee3de82e5c3b13857da303bff2f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846438, "uuid": "af54e4c0-588e-460e-8a10-23694de46765", "comment": "Malware payload (Mirai)", "value": "faa9e82619913b3c4a9244a263b45158bec17496", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846438, "uuid": "08937cc2-6f2d-474b-b2ca-c051ac6289e7", "comment": "Malware payload (Mirai)", "value": "85e9b28ccfa3920d7a62c53c2b367792d10d1a59835fb6b91ba28f93ef72a3f98fc866a7a8c7a964e8df201b9a6128f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846438, "uuid": "e6f05006-2bb6-4e07-a42c-5ee3ee34a27c", "value": "T150041A46BC818B12C5D512BAFE1E118E33132B78E2DF72129D246F64778A9BF0E3B515", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846438, "uuid": "c27c64d9-a20d-4f02-ab4f-f59f91bbe91f", "value": "3072:L/a0jSMsinADjP1aa6SczKaPkeBMmFQMSPMXnnJU6yarkSEEnmRTy0:Ta0uMPnQ8aHczK2keW2H/XnOpa/7mRT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766846438, "uuid": "6e3dcf87-7aed-4af4-bba8-7bcef3189415", "value": 175004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766846438, "uuid": "0db51de3-c2b4-4345-b557-e58a12b79f29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846438, "uuid": "59cfc07b-10be-4f6e-83e5-4729c21005d4", "value": "mirai.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c5a4433-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855554, "uuid": "2cd2fe3d-fa3d-4341-a429-ad53d8bb0d44", "comment": "Malware payload (Mirai)", "value": "064ec0c9c62578ef27f63588f99f0d4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855554, "uuid": "8d98c84d-c35e-4960-ae35-61b2eb5435e4", "comment": "Malware payload (Mirai)", "value": "1485e12b6db6efa1eac5944f6af8f37acc210b545a65f32213920081071e3f8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855554, "uuid": "bac66676-8f2d-44ba-9a93-9449f0531eb1", "comment": "Malware payload (Mirai)", "value": "712199a2568ec8f78fa6a6518ff90b2fcd0ed161", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855554, "uuid": "611ed865-02c7-4d8c-ae7a-0a278e796447", "comment": "Malware payload (Mirai)", "value": "debe6838af45a53389d33429313e7c5da8d3da2ff0e96064a91930fb1963573c80f61b24dc584a14e86c0ec10bc5c085", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855554, "uuid": "20a7322f-af44-41ec-a5b8-3db89d3784c1", "value": "T12C5302F660D87DCCD19A5770020B06073EC5B7B960896536B6D4F6A84BB6340DFC8BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855554, "uuid": "f12fbcb2-8ecc-48c8-97f7-f22e2c09cfb6", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASAXnLkg4azHy:CM5az1Fy0oPgdZX6hTo8RULGazHy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855554, "uuid": "a8f6a39d-0e2c-4dcf-98eb-3c22a3eb2343", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855554, "uuid": "019d4e49-7bab-4754-a0ab-6b2c9a02ab00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855554, "uuid": "499e0e64-2309-435e-8867-61beeed27799", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d370086f-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830467, "uuid": "bc05720a-5c1b-4fc1-9dd1-70dbf6b09707", "comment": "Malware payload", "value": "27285580df2dd92b58a184203da91474", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830467, "uuid": "350e8c3e-7f5c-4959-b4e7-e07fced24cf8", "comment": "Malware payload", "value": "14c7609ceebafa85dd57746fb5789558142da7b2ba082fd34b4ed46d27e128bc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830467, "uuid": "7e8dc92c-e3ef-47b8-96a0-ca39e58cf631", "comment": "Malware payload", "value": "0a26300059ceb068ec4733c41e48db4a2e51ce5c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830467, "uuid": "63b55353-796f-469d-a3ff-938ae7eafc2c", "comment": "Malware payload", "value": "69f266d85189783c940eb995484ff679ab5cafe671180b604fecf63544552d9132112ec0dcfacbdce7482369ea37d4da", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830467, "uuid": "95342b2c-b56c-49c9-b459-ee8c940441ca", "value": "T117631A69DD708C3832FBFC0D90CE6B6CB25FE3A635A3DC3B0B91414A49945697A5878C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830467, "uuid": "b1e234f1-5f60-471b-9eed-393a9003c2f7", "value": "1536:I9l/AoSSMI5BsCDToSmKM49oxbI4sPk5U3Fpy4taO2TU2TvEmh0gE4R4Or4VoxRI:I9l/5MJ5usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830467, "uuid": "5cc57cd7-e157-48bf-b1cf-3e14f161bb6b", "value": 70616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830467, "uuid": "fc2ff203-f5f9-4798-bac5-42d8e6735d0f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830467, "uuid": "9110f37a-ca02-450d-a3f3-11f749237907", "value": "invoice-1645080830.pdf (90).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc5e6d83-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830858, "uuid": "c5cc39a1-9fba-4b4f-8436-14ae0332065d", "comment": "Malware payload", "value": "ce3941beac0660297bc73a75d6ef737c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830858, "uuid": "d4be416a-de2d-4a5c-b92d-a2ea77a5d5d3", "comment": "Malware payload", "value": "150c2d176d93d5fd4cc18a39b1cefb81ad67333cd84936890c63e3a291fde737", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830858, "uuid": "c071dfcb-c465-45bf-861d-9c4095a9e292", "comment": "Malware payload", "value": "daf7a344fd2b3184886ed0831b21ff86a4b2491f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830858, "uuid": "3e75223b-c4c4-4fdb-b1b5-cdb24694df7d", "comment": "Malware payload", "value": "0460c4df14e5744e8c84178c1ff7571dee4821bda459d76702262d6c2bd6d7dd71dbc9e6c619c44771b37872ca0eb8be", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830858, "uuid": "98adef4c-c83e-4eaf-b68d-7e515d8274c3", "value": "T1A9634B046A437D2F1FBA4C41CD6F76E2D87FC3255268F583894BAFB220EA3546A0457A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830858, "uuid": "8cdc277a-5967-4adc-b429-d31e179989dc", "value": "768:I8w/h62/jWs6oS+xISN0vs+C1meCCeGnwslQdkfScBYrwz2y8kTAlGB:I9l/AoSSMs+C1meCCeX/usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830858, "uuid": "d9c4e3ce-47e3-424a-b07b-95df4a75c572", "value": 70583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830858, "uuid": "60168c5d-83f3-4cea-add7-c9cbeeac95d1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830858, "uuid": "90104aa8-8cd0-43c0-b98f-d5bda1e92a32", "value": "invoice-1645080830.pdf (10).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c37aa850-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Joker)", "timestamp": 1766797798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797798, "uuid": "4fb45364-820b-4ceb-b716-320aa435d718", "comment": "Malware payload (Joker)", "value": "c94860005f446e93a7743fe8b445545b", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797798, "uuid": "c45ead0a-60e1-45bd-b2de-11b69ab1fb47", "comment": "Malware payload (Joker)", "value": "1550a86714f756fa4342cb995d5a92f94c8409a59c1638528991dd0823068e79", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797798, "uuid": "0650266c-3fbc-44aa-a26d-c06f59638e28", "comment": "Malware payload (Joker)", "value": "b9b8b063cb17d3e0c10695b0d99935eb81c991b7", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797798, "uuid": "b961a60e-89f7-44eb-adaa-2dc30ac968cc", "comment": "Malware payload (Joker)", "value": "b9a60be5379c3d6f3924b72c096bc83523f740be101d79e26c794657cb7b675efc96f22f93f3b37a281ea7c52d394d5e", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797798, "uuid": "3988099e-eb66-43f9-b7ca-65e0a874f972", "value": "T1B3E62212FB516E1BE8B6153596EA976902130E224BC363477D0CBB4C7BB37C02E5E786", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797798, "uuid": "c2cb6d6d-32a4-43d9-a176-eb38152d33b5", "value": "393216:N6ss0u9beVASL3FeaJkSRjVloA54oa6BQGAUH7CJkhqoGYUAt9xWv:N5svKV3FeaqEVwoa6BQG/H73qoGJU9a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797798, "uuid": "5601f8cd-2605-469f-8d32-190b93f014f2", "value": 14633947, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797798, "uuid": "fba79def-00fb-4b44-b070-438fad83492c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797798, "uuid": "2113648b-c3b2-4979-a65f-8738b55de9c2", "value": "Color+Keyboard_17.0.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07940e1d-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854606, "uuid": "fe2e8cb2-2233-4850-b5d4-9aacecdf0d20", "comment": "Malware payload", "value": "bc235868bdd1e9033105e61ffcf81316", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854606, "uuid": "7cc1ee6c-b4aa-4acc-bfa2-5ad962a44327", "comment": "Malware payload", "value": "155e0375d2581910ce979d854a2568005cbaf8f34aa2fda6c810135bcf09b634", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854606, "uuid": "297ac1e9-d757-49b0-b2df-71232e54e1f6", "comment": "Malware payload", "value": "e652731881c9e8c1d473df86f40a87d97d6be6b2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854606, "uuid": "6cdf172d-389a-41ae-8943-fde4dc0272d0", "comment": "Malware payload", "value": "6c4c07adb69ff604cc8390eb7f352e7c0b186c2aee1340f8ea59c4643b01e95157a291fe38d0ae59d1b3238f6d48ed33", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854606, "uuid": "2cf3d15d-7788-4f0e-92f6-2cdb8945157f", "value": "T194733CC50754B4ADC391326A3DDE4FE0D4B51AE26538A2A0BD179B0BEE4C5C43E218FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854606, "uuid": "309bf754-56c6-4446-9c9c-e0807591af10", "value": "1536:I9l/AoSSM/Rj6gEmtO0NZtU7dm5chJ9lhVZeVQr+QqCoRq4iEwX5wsuW4OiiLd3D:I9l/5M/Rj6gEmtO0NZtU7dm5chJ9lhVv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854606, "uuid": "1e00336a-fc57-4c0b-8095-c8e5a5e83a5e", "value": 74403, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854606, "uuid": "7a9392bc-14ca-4093-b90a-a09530c68813", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854606, "uuid": "8726d192-9ca9-4c66-8405-636388db42ff", "value": "invoice-1645080830.pdf (80).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2212961e-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793662, "uuid": "284671dd-3c4b-4181-abdf-2a2111de60ca", "comment": "Malware payload (Mirai)", "value": "d6bd13ae0f7641199155a1aa68728048", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793662, "uuid": "865ec9a7-8345-4fe2-826a-f8ea12a1d040", "comment": "Malware payload (Mirai)", "value": "1583c74d76fa262047d8fc3676bf488b17bbd3b2a11920a7a1b924ba4a206de1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793662, "uuid": "47773493-d690-464e-8b6b-098495bfdda8", "comment": "Malware payload (Mirai)", "value": "f12c87dba0a33f3914101a0faa07c9dc04490888", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793662, "uuid": "ac425d4f-7e8d-4f32-8b52-08249a36447a", "comment": "Malware payload (Mirai)", "value": "836c5cd88e6b839b46db7870aa7bbfbb4d3be8cf599512e9f026fb85833965f9a55418585b71fbb2f14157c865953be2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793662, "uuid": "8b1f71e0-b3d1-47ec-a117-a9f67d7c230f", "value": "T114F3A40E6E394F2DF779C635C7F78A209A6873D216D1CA49D2ACF9021E3034D641BB69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793662, "uuid": "a3e1402b-1afa-4d6a-84a8-581c14d7407d", "value": "3072:Xf5oxuuqFQSRC4tce4E0wavMvQZt/EYKKSvgXwknAFzNr4jaJuOaQG+zHg492slj:Xf5oxud+n4YRvM7tCIVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793662, "uuid": "e64989a9-abbb-45f2-a024-4e1704a9b0ce", "value": 160372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793662, "uuid": "69294f54-e24f-40e5-8288-f744c4cdfbbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793662, "uuid": "3b9f91a8-232d-44b2-a051-9fa33bb1c1d9", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae2c135e-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858322, "uuid": "c1516d7d-de9d-4c48-9f31-0c0c56c47a3d", "comment": "Malware payload (Mirai)", "value": "ddcc2f0268458ac70e0075ce9db5444a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858322, "uuid": "5e745271-2545-4d69-9276-2ad8baacbccc", "comment": "Malware payload (Mirai)", "value": "15aac9c45ea8f212f909bd1d45a206d082e25492d409440cea73b3676d28de52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858322, "uuid": "88832952-b8d6-41ea-87ec-b20096252f53", "comment": "Malware payload (Mirai)", "value": "bebd6d5b67361cfdb0873f28aae3c4a57e2c342c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858322, "uuid": "191cd210-7b5e-4a6d-b5d2-0c64661fa073", "comment": "Malware payload (Mirai)", "value": "2708513249c6bcca1d8ad4cb12ab97ba11fa0a332ff407a3dc3bf0bf173bbc9850504ceeec25394fac2d47546db79b3e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858322, "uuid": "3ed0ef62-ce6e-4405-86fe-30ce96d240c9", "value": "T14A934BD7F400DDBDF88ADB7744570A06B131E3620A831F36625BB927AD391A94D23F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858322, "uuid": "5855213a-96e6-4ae4-a8e8-9ff77af5760b", "value": "1536:YGRYaQu6l77VI5sfpBU532P4cqP8Q0Nr5YjaSNTfyhur0ERWvNEdUxCpavg:07pBE5mP4cq2rq/TKhsgEdUxTvg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858322, "uuid": "6a56d919-b03e-4b1b-81c0-d302c25e2e5e", "value": 92428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858322, "uuid": "e2c3ac51-447a-4524-a734-d2ee8f67117f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858322, "uuid": "542e2e7c-48a8-4374-8c84-12eab3ee2d32", "value": "morte.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85ff611f-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854818, "uuid": "c5156aa3-9461-43f0-97e2-68eecafe2ab8", "comment": "Malware payload", "value": "64cc93f0cfe4b9fdcb7bea89d5ee57c2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854818, "uuid": "1cd8a9a2-1da1-48c9-9ab2-445030d05888", "comment": "Malware payload", "value": "160e2a07bbb3b58afa780b0b8d22088940e7491f3ca63f2281b4ad2f6da1e446", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854818, "uuid": "56edc0d1-046a-478b-8581-0667d0520247", "comment": "Malware payload", "value": "47295d226fd98faf657f73b966fa0b58469a5596", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854818, "uuid": "c945b011-f073-4eec-8cec-a162017ee165", "comment": "Malware payload", "value": "ad88267b0e6968723a9184776c8e24f3927e70c1cb4c72ee7d9a6183899a68082defbc0822c3ad0c38a2c03adb53b672", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854818, "uuid": "69571fb5-2731-4ab0-ad1d-c8446fbb9f59", "value": "T1CD633B8B6E5154C0730E2470CC8CE54AFF2ACCB0CED152D409A2B19EEAC87AE5FD6657", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854818, "uuid": "c84395c6-3f57-4893-8cfb-72d844dd3ff7", "value": "1536:I9l/AoSSMXyS0s7JGIu4HzKjQHGdInfNMyNZHlDLuuJveDJkQtS4qAoO7qAoTv/l:I9l/5MXyS0s7JGIu4HzKjQHGdInfNMyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854818, "uuid": "31f1deaf-5b1b-4ddb-b354-84f02e4d3d99", "value": 72486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854818, "uuid": "db071efe-fc35-4c9e-8eec-7ad6591daca5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854818, "uuid": "d311863e-0edf-4c5d-af9a-3a6e1e057e48", "value": "invoice-1645080830.pdf (35).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a6c73b1-e2f6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766820788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820788, "uuid": "35fdd2eb-ec99-4767-a6ea-799793b83531", "comment": "Malware payload", "value": "4d0f969fa91940743e51f19b107b2726", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820788, "uuid": "e23ddd0f-e85a-4fb0-8435-d2befb081226", "comment": "Malware payload", "value": "1612723ed2d2ac88f3b8279948baa4db7824a070d3d0c5bc9182b03699ad2a9e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820788, "uuid": "12f910d6-67eb-40b7-ad81-d6d50f32de80", "comment": "Malware payload", "value": "fe483388b421ba72f4eafa4a5210c539e2e8f615", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820788, "uuid": "3dfafd13-3b4b-4172-b465-c2c152ac9036", "comment": "Malware payload", "value": "99cdb0782ad590ad9f7b7d17f2277208e404dd03610abea3f69de8ec9cc3a51ccd09232d24ecb3fc2d176eb264bab1ce", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820788, "uuid": "f8f6b6d6-1f2c-4e83-b432-dd1fab643060", "value": "T1BB413B000EE71258E673C7356BEDB3668413F852D97D5FE5014D8A446733641F4A6F3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820788, "uuid": "2615b506-3da8-45af-9fa0-20cfd5150e24", "value": "24:8J/BHYVKVWO+/CWoAt2VFv7kaHqaj5CCpgszzD3WQ4ZarabxJlpl9l:8x5aR2V9AaKaj5CCpfzrWQ4Z4adrL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820788, "uuid": "623924f9-cdfa-490b-b0f9-b37c87a7c9e0", "value": 2122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820788, "uuid": "63814328-0f72-4d0f-8094-28ed0980b606", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820788, "uuid": "45d7cd0c-fabf-436c-8ee6-61006f8392cf", "value": "3cxprov_105.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dd2205d-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830753, "uuid": "d7723343-316c-41c0-90c5-de40ad5cfeaf", "comment": "Malware payload", "value": "d264df8b3cd166126674cc593e3c5d1c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830753, "uuid": "71fadce6-3e48-43af-ba4f-93318f9deee9", "comment": "Malware payload", "value": "16148fd5b418ca7e9cc4dbd2c8eab128989d8e5f05e91e2fb9afdddeb12e1cfb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830753, "uuid": "cbdd7a45-50ee-48bd-8026-2c88ae813429", "comment": "Malware payload", "value": "c77073bae9c4139e8068a83b20cd4e9949193ee5", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830753, "uuid": "c7e52b33-7781-451a-bd99-301c24d69e11", "comment": "Malware payload", "value": "609ab9defcfc93689e854dd1048300f2cd0ed80cb4d0580cbde6ea0388c9c915e53ff601a09bde4fb02d3ca11aaef18c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830753, "uuid": "bf77d3eb-35d2-4467-b3b8-9fc14ef26066", "value": "T1C8634B9F9D4673FAE75A6DDE8FEA171221AC2DE4E5FC7D79910A7800B6700A33C81604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830753, "uuid": "00201537-c95c-4e8d-abb4-f9c115140a95", "value": "1536:I9l/AoSSMxrvY+qj98pve8X4P2dccA68zWsSrVOP5wvjkcFnGEnjdzVosOCk5fv0:I9l/5MJNdousriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830753, "uuid": "d4a5650f-f0bd-466a-95f6-13f1f4a05ea0", "value": 72563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830753, "uuid": "3b73978d-d8e9-4b29-adbd-0f00d5e18131", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830753, "uuid": "22aeaa43-cd15-44a2-98fd-7d8ad3c944aa", "value": "invoice-1645080830.pdf (31).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1321c06-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854864, "uuid": "28bf31e2-55b2-45da-af3a-ffa765cf1894", "comment": "Malware payload", "value": "84dd612a5647be9daf7e98ba0a7907bc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854864, "uuid": "326ab809-47dc-4f4b-8b42-7907d21bdec7", "comment": "Malware payload", "value": "166411dec67e6694d2a398d29e95201fc6474dcc7fef55b2d6d80fc43310b089", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854864, "uuid": "6f57d00c-be14-4ca0-9d76-81d01cbec746", "comment": "Malware payload", "value": "83fde2a7867e801e77710fce4a2e849a7988bd81", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854864, "uuid": "4692b8e5-175a-4904-aa2f-37d96def6661", "comment": "Malware payload", "value": "ec72672897c03e63237eff03edf726bcc171db5566de1fd4cfcfb786d3605187bd2c14b3713ec1ec66ef70c1efbf8636", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854864, "uuid": "12904cfc-930f-4704-949f-79290d6c1860", "value": "T16A730A2C1448BE394EA87398E12F6FC26BC7AF58E8580DE745594B00197B24EE4F96DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854864, "uuid": "630db4c3-0d84-465d-bad3-751e0acadc9b", "value": "1536:I9l/AoSSMRpKsz1FTo8J6ibOJEmcvTZkM7FMY8B3YOGUI5ytvxkN1Ndatdat6IYX:I9l/5MRpKsz1FTo8J6ibOJEmcvTZkM7+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854864, "uuid": "65ab3255-5244-4e81-86ac-0fb4d680c971", "value": 74398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854864, "uuid": "8190faed-94de-4495-bf25-0e1212e14d5f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854864, "uuid": "cb87a6fc-b77f-4ea1-9008-fd492dc15ac6", "value": "invoice-1645080830.pdf (26).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e729803a-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854981, "uuid": "6e9d3c20-4408-4f34-8572-18752543bde1", "comment": "Malware payload", "value": "5e24c2cb07f98fe021b3777cadfaf802", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854981, "uuid": "65d203c0-f8aa-482a-b661-83f11e5d3619", "comment": "Malware payload", "value": "1707ad36a792e397b0cbbe73f687338fab0987141a830b446e089996218dc2f7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854981, "uuid": "a2ac35e6-9f1b-4af4-a023-3d4ebfad27ea", "comment": "Malware payload", "value": "6b153f99a5e7c35cf83d9e740179cf17286344e4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854981, "uuid": "61c453a7-3ad1-4c2f-a44b-42f600f4ff5a", "comment": "Malware payload", "value": "43fb4df624f8661db7b4a4b0e14a464a5879ca94c80579e52959adbf38e3cb8430cf001216267388522a9c041385d756", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854981, "uuid": "f337ee79-a9dc-4061-bed9-9b61b025ad7d", "value": "T1146309CE7F50BC5305F99A416AB21A21455E4F8A5E27582CF8F8E821790CD6A336FF1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854981, "uuid": "04b3872d-f9ff-4dd4-a066-b9c5ab18076f", "value": "1536:I9l/AoSSMlkwee/PriUVVLLlXR3LS25M54bC4kdX7t9JDwSNWjXEdC6IfIWola43:I9l/5Mlkwee/PriUVVLLlXR3LS25M54q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854981, "uuid": "4a71f734-1fa0-452e-aed3-6b0d4a8ad2c9", "value": 71626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854981, "uuid": "067a6871-7bb4-497c-a1a9-acd423a5cda4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854981, "uuid": "c953d19f-69ea-49a6-b1ae-2283263e461e", "value": "invoice-1645080830.pdf (2).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a791c068-e2c5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799899, "uuid": "dfc64fc2-cfd2-4cdb-81ae-676fb904e6d9", "comment": "Malware payload (Mirai)", "value": "6b40eabad2f12101d9d3960884cce83e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799899, "uuid": "68e247c0-91de-49fb-8d58-4e3343250672", "comment": "Malware payload (Mirai)", "value": "179d52f0fea0c65135450a725a2f4bc0696962a17aac71212f33dbcb95ba7753", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799899, "uuid": "445e67f4-b02d-4411-9a7b-81f581ea81b1", "comment": "Malware payload (Mirai)", "value": "ee8fdac0f040820ccd8098d25e794977fb84fd41", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799899, "uuid": "e5aacdd3-9060-496b-8abb-d1d96f1f67b7", "comment": "Malware payload (Mirai)", "value": "3bc5a31ddc71bdeedb0ce3d501fc5fab1a7aa40ed47b84b998b51adfbfbf0cd7e64026320e3b354eb4cbf4354dce3a11", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799899, "uuid": "8c42e83d-bb50-4f1a-b845-7a40645ff240", "value": "T128731B81BC91D612C6D566BBFB6E41CD331653A8D2EF32039D11AF24378A82F0D7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799899, "uuid": "fa96998c-6839-4953-8b08-99efc221315a", "value": "1536:RCGaYdpu5REYwGwm4OXHCAgZOxuk6fdPAaPbVR:RCGaoGeOXHCAgMxR61PvP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799899, "uuid": "c72968d3-966f-4d05-bc20-18268b01c894", "value": 76648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799899, "uuid": "378ddc39-ae00-4522-b4e0-c8a62694beab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799899, "uuid": "4de61857-118a-46ab-b1c7-be497ce81711", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "882a81c6-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830770, "uuid": "e833b7c9-ffd1-4bde-a823-6724d7cbc9de", "comment": "Malware payload", "value": "bdc7bf94f3956bc4764b815984162f01", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830770, "uuid": "59863e1d-7752-4e9c-a14f-933f20e54886", "comment": "Malware payload", "value": "17a4bc80c6d5f1c304bea7051758d83fbf1d6361e086002491c2e372be3f998d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830770, "uuid": "863094c8-41ba-4a5f-bc87-937533e158e2", "comment": "Malware payload", "value": "070dfaf0029c55317f2ff8d95f230ffa357e2236", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830770, "uuid": "1c03f85c-0b74-40a4-9366-f1242ce89b0a", "comment": "Malware payload", "value": "45f963e2cac68245b70d025965f3b663a109c606ef38b32b7be8b4f88badda80192d0270b02c6e6db0cc1e73677b0cc6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830770, "uuid": "e68ef37a-705e-4d77-a297-5e216aaeb946", "value": "T14563095FC1939E0C0C9BA867FA3935B0DD455625DD63A2DBEEA6B3061B33A31C138270", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830770, "uuid": "7047ead4-4650-48b1-b03a-0b5977fb6791", "value": "1536:I9l/AoSSMx8m8R8H8I8d818B8o8a8B8V8q898H8E8j8M8b8v8Y8r8E838r8L8y8v:I9l/5MjwWusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830770, "uuid": "0d225180-c2b4-4763-ae94-92c254ba6e15", "value": 72431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830770, "uuid": "2609944e-9d2b-45bc-90cf-af9e358eda5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830770, "uuid": "3b8af196-90ac-4092-8cb5-dcee94f94d44", "value": "invoice-1645080830.pdf (29).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2459feae-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793666, "uuid": "b62d5c15-1701-4c1b-b4d3-cfb24219a50d", "comment": "Malware payload (Mirai)", "value": "2fefcb78ba961ae6426f39426d5b7f69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793666, "uuid": "7d54e665-4a73-4a40-8f30-93857e4f30e3", "comment": "Malware payload (Mirai)", "value": "17a8b8f492c6a28454e9674e24f4ae078a027c6342531b6100742669c825e53f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793666, "uuid": "14e59e47-8791-4c5f-af8a-3943d880e11e", "comment": "Malware payload (Mirai)", "value": "35b0a9ca9e7737d947ddcc27547cdd248d5094e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793666, "uuid": "9db05285-0a59-46ca-9923-2c723b0e0985", "comment": "Malware payload (Mirai)", "value": "55b140f036ec18e85eff117fb481d58e800abc2362139f0aea8c4aaed2383ceb606d8b28022ab66dccd36eca8b262a22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793666, "uuid": "3af24337-a11c-49a9-a24c-dd23971afedb", "value": "T137330A85BD51D612CAC56577FF4E82DD331703A8D2EF7303AA18AF24278B86B0E2B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793666, "uuid": "5c55d5b1-496c-40f7-a0e5-1f64ca35d73f", "value": "768:0PbbVEpJKVX8836MAigzEE/1NhXXZPcT/NWglkhNNEyj17YX9KPSUNprbVR:8bbg0JuigzEEvRXZPcoguHmcJS0rbVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793666, "uuid": "3e0ffba8-c03f-4b2f-a3ad-8b39de1c26af", "value": 54448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793666, "uuid": "6c58e81d-f125-4bc1-b666-585183f10719", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793666, "uuid": "292f3ddb-015d-40f3-ac29-ee7e37e559c4", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3398ea8-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854572, "uuid": "0b43bc29-a43c-4139-8e36-87a5f2300a6c", "comment": "Malware payload", "value": "97d7eaf928aa6b0102c570041d38cd23", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854572, "uuid": "cf7d6424-44b9-49a3-a526-3237f2446802", "comment": "Malware payload", "value": "189b7987203dd8d7805d988ea0f3028fc4ddb5a3282992d037291156465f2613", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854572, "uuid": "a4812d99-c96c-4db0-b9d6-9b603a8eecba", "comment": "Malware payload", "value": "eaad87a7ff65eda14186383d83495b6353f3f80a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854572, "uuid": "7c9129c3-c405-46e8-991d-f6cbd00a9ee4", "comment": "Malware payload", "value": "b7f2efd98d55dd474c0844a8a93019fd24ea6e8bd8061b1e568a9a0b361cbdf012c71cd275dda6934df41a06847b96c2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854572, "uuid": "6e6641be-f7f6-48fe-a850-2401da2f7ef6", "value": "T1A2630AC4050805D89E1AFAB7D53AEAED7F09ACB49C469573F8779F244A408D08D38EB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854572, "uuid": "926279fe-eb2b-4005-9d0b-49581f889523", "value": "768:I8w/h62/jWs6oS+xISN0vbjqA8JdkfScBYrwz2y8kTAlGB:I9l/AoSSM3YusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854572, "uuid": "d7b91387-7cca-4cbf-abe0-14a8a7340369", "value": 72489, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854572, "uuid": "11cedad8-e40d-439a-92db-12c8db4dc5b3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854572, "uuid": "181892bf-8d51-458f-948d-c3ab712a1291", "value": "invoice-1645080830.pdf (88).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4eb5c6b-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854951, "uuid": "5705c271-9026-45af-8ab0-c0ee230b2931", "comment": "Malware payload", "value": "fe3342d6b5f5872d46d47b75a81c25f5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854951, "uuid": "4518f415-c303-43ea-b1f1-a4a3360f10ed", "comment": "Malware payload", "value": "18a2abd572d5ab8d51e934221ac959563f637b2485f8e5843e0f813f7fd7db41", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854951, "uuid": "20ae708d-34a9-46b5-a01a-077de08cfa3b", "comment": "Malware payload", "value": "d3053d22b0c267a94f1b2717a0bb5308b176275f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854951, "uuid": "0d47ab81-bcc1-4d09-8ab1-75cfaa934d9d", "comment": "Malware payload", "value": "9757971a3e58a306df730faf8c443a52236a7840bcfae3120ce6dd3414ca58892be808fba7ab8655c3935a80dbf4d4cb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854951, "uuid": "00e7abb4-a6fc-4ab3-a169-b2f5737b8bd5", "value": "T12C632AAD361AACDF0AE7CE64F21F0E741D4E7ECE54593102DAB4D6B5C6482362E3244B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854951, "uuid": "8e165b7b-197f-401b-84a2-508907ac5ca9", "value": "1536:I9l/AoSSMHWZWpW0WaW8WtWhW7WHWXW7W6W4WhWlWzWdW5WFWXWIWFW3WZW8WZWs:I9l/5M9xusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854951, "uuid": "70569f3d-0ea4-43f7-a5af-5d0e9b9c1549", "value": 71575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854951, "uuid": "0f370333-39b0-43e8-ae47-9912d5a548ee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854951, "uuid": "246c436f-fe8c-4b6d-945e-79b2e495e53c", "value": "invoice-1645080830.pdf (7).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e4d26e6-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864979, "uuid": "bb9ed945-f353-47ba-be02-4dd8a85cae7b", "comment": "Malware payload (Mirai)", "value": "815b821ac5cd269f3e14fb8f96059695", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864979, "uuid": "85f92f72-fdd9-4a96-b2d1-53eabd6e163e", "comment": "Malware payload (Mirai)", "value": "18d12a077048b0038df4c1fa76156a80d061270836236da139bff3f6d9ad8735", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864979, "uuid": "f7b209fa-fccf-4c36-b0cb-29f60264d3b4", "comment": "Malware payload (Mirai)", "value": "62acdde3f88fa89755a388a60729b25a044034fe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864979, "uuid": "e279ec1a-5315-4370-a722-14ceaa521640", "comment": "Malware payload (Mirai)", "value": "88a6556c3aad30789569b67ac9c03db634572ab95d88a3837e831e803d5ee14b1d21aee7f0f39ba9e8466bf07acecb27", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864979, "uuid": "71a7f3be-b741-4170-b658-449c8dda100c", "value": "T172237D76C47EAEA4C54C52B4A9709E791F13F100C2532EBB6E8685B54043DBCFA09BF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864979, "uuid": "ea3bdd84-d605-452f-b44e-22d0f4000b06", "value": "768:1aDxwtjnCt6MekUhoLFc8z82mgD3tZOqIyNlFjUICjohKzC0CTO:1a9wtjG97hgVA3fOq5NUIzszC0CT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864979, "uuid": "c7ea8f44-52cb-45be-93aa-2014ac180a04", "value": 46916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864979, "uuid": "14214746-a729-4afd-a1d9-c8f39b0a3d15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864979, "uuid": "1a5a558f-4dce-45f0-951b-957e9c5796cf", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6e9b38e-e2c5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799898, "uuid": "c3f81bcf-d484-4e3a-94c3-be4b8e4cd539", "comment": "Malware payload (Mirai)", "value": "148995043c2d43d876c0c7595ede3ac5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799898, "uuid": "2d1bc2b5-da53-4b1a-ab71-a0a688f5a1c8", "comment": "Malware payload (Mirai)", "value": "18fb63acfd3effc50ce6ddb0588473d5364e0cdd8d18ce87f5228106efbeeed4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799898, "uuid": "44c641e8-7a54-4e1b-a4a8-3c14c86857d1", "comment": "Malware payload (Mirai)", "value": "9a6f5ae403bb94c90eec59324cc25165b72263e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799898, "uuid": "d0d7bddf-6ffe-485a-80c1-53d1420a3986", "comment": "Malware payload (Mirai)", "value": "b0e9271138bf3867fe63b3ca34c820df8b1e9b458266b07b03b343aab576a0f0fa466dcc0200a6619aabfacdd465c9aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799898, "uuid": "d797a7da-f2dd-4914-b535-79ec492019f0", "value": "T19943A51A2E159FACF76D873647B78E31A788339326E1C281D65CDA015E6034E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799898, "uuid": "f03b9d11-8e8f-46cd-b186-95dbf8d3d0cd", "value": "1536:OiFHM4B3JVu2aUnrx9svjMfjSRfjjvJp5Sb+W:OCs4B3JVvaUnrfKp5W+W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799898, "uuid": "d4816f1a-c19c-4c68-9ad0-1c426486911f", "value": 60560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799898, "uuid": "af895ac1-c53e-4a2d-a101-df14a37c5dd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799898, "uuid": "0655b5f4-cd3b-4640-b25a-0edb42d0840c", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a64f21f1-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854873, "uuid": "d4b7f27e-70f3-407e-a46a-b45030b940b3", "comment": "Malware payload", "value": "fab7101194da6e3d0c8cce78cdd67223", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854873, "uuid": "4cf324c9-dd0a-4a2e-9385-cef56ebe7777", "comment": "Malware payload", "value": "1a4caa5a6010a75459d3fc6cc5968f227a6332c5db15ebb3fcd88acf61ac4be8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854873, "uuid": "9017ff19-2ad0-4884-8411-4474ac1f1d4e", "comment": "Malware payload", "value": "fd063166764d4e4ebf6bb82aa0102ef453c6db68", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854873, "uuid": "d142add4-02f2-4917-9905-5282cb125ef8", "comment": "Malware payload", "value": "2daa640524aeedb4243de176938ba715c70b1af726879637bd596db5787989148d07c2f84c1dc244f5112e2613580c25", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854873, "uuid": "263239f4-78dc-400f-a26b-72fd7ddb1a50", "value": "T1A0632BA45F3085F2017FB158DEA26E6BCD27CE43497A3D93BC153E968D424678222CE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854873, "uuid": "b09da436-836a-4523-ad21-cffadbdb0da6", "value": "1536:I9l/AoSSMfs6Wk2DEyQh7UX4CFNsXvZ9WQ9Jt3c323+OBVs6bCRTLiBH4V7B+DX7:I9l/5Mbe/FusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854873, "uuid": "3eb11971-13ed-421f-af63-665ff4804b06", "value": 70546, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854873, "uuid": "5259776c-bfd9-44e0-bc12-f1b2e6a82579", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854873, "uuid": "8a9c68ce-2621-40eb-ade6-c3cb5fb4d775", "value": "invoice-1645080830.pdf (28).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eece1b6-e329-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766842620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842620, "uuid": "60609c2a-3fb1-49b5-b656-f579b10a2f82", "comment": "Malware payload (Vidar)", "value": "d0599b47cfe9324bccccb63a16777107", "object_relation": "md5", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842620, "uuid": "5a59cf1e-ccc6-4089-97c7-a2afb88e2468", "comment": "Malware payload (Vidar)", "value": "1a68b732efe2aba27f5c4e44fe9b40ad2a8d8bdc03c08af12c44fa7b0b959e81", "object_relation": "sha256", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842620, "uuid": "5a94190b-8f24-4a2b-8e2b-f21db2c72386", "comment": "Malware payload (Vidar)", "value": "38fcd1ba0d4eb637814f8ce666734aa9e05acfe2", "object_relation": "sha1", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842620, "uuid": "ba59fdf2-8869-4c65-9878-bf0b8df36651", "comment": "Malware payload (Vidar)", "value": "5785a8c12c24e00332186f65cc94c312b31b00cbaf6987df31638280d5548110b0c691af42604513e915da2d135d1a1b", "object_relation": "sha3-384", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842620, "uuid": "31f26c21-2978-4296-8367-6da9d2fcfd25", "value": "T13AB64BD2FE441319D69BE23AD9B1A2952330B144133521D7BBA917A94C1BEC8173FB2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842620, "uuid": "0dda806a-0d40-4914-99a6-d0d17ab1e0bc", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842620, "uuid": "3eebbc6a-5007-4727-a02a-3c3d1ade7fad", "value": "49152:0SwccFrb/TWvO90dL3BmAFd4A64nsfJI6wBl3tOxn4pTkd9m1/dd2LI9FncIij7a:0Sw+6o3O4Y1PwXv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766842620, "uuid": "74b168bf-4ed5-45ae-81a1-6f550795a852", "value": 11007104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766842620, "uuid": "4a72a45a-30a9-4ac7-a7ab-5241dec6ec25", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842620, "uuid": "00fb0173-c730-4929-92b1-1f206fd7de7f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdf4dcaf-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794353, "uuid": "044057a8-8132-4a7f-bfa9-dc0a1eb91371", "comment": "Malware payload (Mirai)", "value": "a0aa19e8aed230e6320b228c32afe3b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794353, "uuid": "d15c1e80-46eb-456c-acab-e9cd3630025d", "comment": "Malware payload (Mirai)", "value": "1b0ed03f63b6f17dbdf032533cef56f0a26141fe50d4d48fbd7519c5a489ff9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794353, "uuid": "7a1430a2-cf08-4bd5-8acd-18f4744fd804", "comment": "Malware payload (Mirai)", "value": "0b57ccbe9368fab71c8ca3936fb15e5ad2833d6a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794353, "uuid": "f3f9a0d0-2d12-4551-8be7-621943dffdbd", "comment": "Malware payload (Mirai)", "value": "ecab38eb75c44d63ba454a92200893fa44b1c695aa7a5243800db8f60a8ddf3c154959fe920cf255ea6273280b8cebf5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794353, "uuid": "26079f0a-bc5f-44dd-b238-83232bc0fdcc", "value": "T104A3D61A6E619F6DF768C33647B78E21A74833D237E1C542D26CE9015E6034D681FF98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794353, "uuid": "4f842523-90af-454e-82fc-80dd8131cafc", "value": "1536:Hp/wqpa+aUc2GjCPaaGLIS5uzJi+gy+e8y++6P9ARZMscoVOMrdlbVR5BT:JwsahItG4z8SJc7odl/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794353, "uuid": "21c52d90-a8ea-4d16-b4ea-1524c30a2da2", "value": 101208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794353, "uuid": "80e91f1d-22fc-4a62-b249-968e8036125e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794353, "uuid": "95876204-06ce-482b-a2a5-ee8a42d46ade", "value": "jklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7baa7a23-e311-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766832467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832467, "uuid": "4ad073ac-7e43-4b10-bcc1-d6446ba21503", "comment": "Malware payload (Mirai)", "value": "11fff09930a1e75c089dea7cc9b44deb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832467, "uuid": "72364933-1278-49b2-9a21-66c42964fa32", "comment": "Malware payload (Mirai)", "value": "1be040d01c21e27c76561122dec267e395e7b77dd3a3e73041f77116df777a1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832467, "uuid": "49e2cada-9028-4bdd-a10b-71ce614e2768", "comment": "Malware payload (Mirai)", "value": "f67e6f8bf7b1374cb0a9099af0b78f4c80ae18f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832467, "uuid": "c2946f04-4e6c-4562-adfc-1c74d8b001f9", "comment": "Malware payload (Mirai)", "value": "194dda78b5315768d835e463d47fca7526335b3a6cf5ead74eb19a288cd5907e3364ba37c1928ee3d7dbcd6325c17b7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832467, "uuid": "95d85549-ce0d-407d-89e1-49fb3584d8e7", "value": "T1A3B37288E968672DC3F176FEE79852CF333A1BD877A7713A8A31026537C8758A035524", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832467, "uuid": "70f05304-ae28-4b9e-b989-fc810006c8f3", "value": "3072:n5FAUtYc63Zv49n8tDGxkVwOl4m/sTVnFtcvZNc6LrQFObHHl:nzAU963P4LBFObHHl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766832467, "uuid": "dd95c873-d07c-428e-b566-c8dcef6b5802", "value": 114915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766832467, "uuid": "336c9c99-f8b3-4303-a529-cb772b1d01c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832467, "uuid": "b33aea84-01dd-4086-863e-4beca348cb99", "value": "nexuscorp.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e18acfd0-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879883, "uuid": "c0be940c-b104-4b96-a28b-d8e8f8518109", "comment": "Malware payload (Mirai)", "value": "9c023aa168a35502680156e5bac905fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879883, "uuid": "7973ba8f-fa9c-46ce-9e99-0abb8ee40b36", "comment": "Malware payload (Mirai)", "value": "1bf40c27369e41311d176018c6e9475d07d8c3b7072fb73ab84abd7a6017fed9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879883, "uuid": "becabaca-efd5-47f9-8e12-de49c798440f", "comment": "Malware payload (Mirai)", "value": "9bc183060fa133464819c949eb779e54814bbb29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879883, "uuid": "d5f6c390-7894-441a-98a0-61bdebf38160", "comment": "Malware payload (Mirai)", "value": "3041b04c620509e4d57b49afbf991573495024f1c7c19e1709e770e31a1090f6ea80f4c6678aaef4bd179534c7728e96", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879883, "uuid": "4c69ed44-671c-480d-97b1-736bfb288bf5", "value": "T114A3D709BB650FFBDC5FCD3B05B94B0524DCA60B22A92B753974D818F24B24F5AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879883, "uuid": "0568820a-1d0b-46a5-b2ac-e47f2bde74d7", "value": "1536:B144fCXQfovqw18MXvlbeDtjEHOQ8bNSczLy74+tGFWtp8pglBWtsuJ7Rd:B23XQQvqYGbSSP2WGuJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879883, "uuid": "6d856898-e5d7-4335-a4da-a7207a71b049", "value": 99892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879883, "uuid": "9b2e004d-581b-4685-aa43-8e1bb0ef5dc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879883, "uuid": "6d2674bf-af59-4ee2-87b3-4eb02324a1bb", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf1eb97e-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854914, "uuid": "2d47577a-e991-44a3-99d7-1e469e5977ae", "comment": "Malware payload", "value": "fbad66252e58640c5903d0ed55c40482", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854914, "uuid": "94c5b22f-2061-48e9-9e09-eca21cdc6a85", "comment": "Malware payload", "value": "1bfd2f8692bafece62be150d69e64e022d0fa6ed3c2f421b0dd8c3a204ca76bd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854914, "uuid": "850f69a2-b8f8-42dd-8aa3-b87818016fe3", "comment": "Malware payload", "value": "415af5fbd45c80ac86e4c19ca8d28807d9012c19", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854914, "uuid": "50e74dcf-c9b7-4cbf-a74b-0e402d6fe923", "comment": "Malware payload", "value": "369f28951b8d7b4171c61eb01176cec090a33e7ccbda628431bbfd8ef45250b18435e1e76b50e5d9e6d6f960f6d91a92", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854914, "uuid": "26bbdaad-d295-44cc-8412-6683bce54d3e", "value": "T194733C1E48DF8A8F102B8B73D81F61881066D73B257837D9A38C7719C2586B5BFE31A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854914, "uuid": "b97177a7-b068-4d61-b988-4ddbd5e4c49b", "value": "768:I8w/h62/jWs6oS+xISN0vmTNzFg4qnb+i6xp3UtK19KTML+bLHLiCwLueqe1e2vE:I9l/AoSSMayiusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854914, "uuid": "20f35dd7-8d2d-447c-915e-da06f3a68c90", "value": 74442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854914, "uuid": "962728b4-0460-4ad5-8abe-b099f441f8c9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854914, "uuid": "2d3da8e7-dcf3-4bd7-bbcb-246c6b99581d", "value": "invoice-1645080830.pdf (16).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f62e990-e305-11f0-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1766827158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827158, "uuid": "54809f05-406f-426c-b7f9-039513f888ec", "comment": "Malware payload (SalatStealer)", "value": "1ea760d59bb6b3beafc8af014d3c1a80", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827158, "uuid": "65ac4c31-0177-445f-8bbb-68945be87bc3", "comment": "Malware payload (SalatStealer)", "value": "1c2f8f94baf2807e017bd7d013047eca227abcfb754d5f428b55ead8a144ee1e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827158, "uuid": "a05616de-8f84-4ff0-9ba6-9c6e1d84a21e", "comment": "Malware payload (SalatStealer)", "value": "61e386833b085f35f054237eff67077dd7b3fec7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827158, "uuid": "ed47b14d-24f3-4c90-b36f-14397fd48f07", "comment": "Malware payload (SalatStealer)", "value": "e2f35e9c8ccd03ea53f3841ac532e6c379f7d9a97c162f9d76f29e36ed925f7ba35ffe2ef498feef87153bb02a3f0684", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827158, "uuid": "6d8858b9-c222-48fa-a4c6-2db2093b6f8f", "value": "T186B65B41FA8B89F5E9032832456BB27F23345D048B28DBE7EB547E6BFC776811C66205", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827158, "uuid": "73d3994f-dab7-4f1b-a1bc-311e5cf6858d", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827158, "uuid": "51f0bfa6-74d3-45ee-a06e-f242b1770d52", "value": "98304:eu63wmIvd0KSE2Ck6OzFk8gmhKv3W2tAJRW:l0rPPznfRW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766827158, "uuid": "b87821a5-abe2-439e-ae25-59039e8c7b0b", "value": 11404288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766827158, "uuid": "526b9340-ceb3-4829-9fb5-45d4cdec16da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827158, "uuid": "56fd24c7-eeb7-43a1-8d95-46ca81437a21", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e7738c2-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830808, "uuid": "48a6f14a-85bb-48a9-a91f-412e32329995", "comment": "Malware payload", "value": "11f4b26d436336d05017a0ac4d7fe169", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830808, "uuid": "fd78b4b0-32db-4804-91ce-5080d1588821", "comment": "Malware payload", "value": "1c724a7ee35539bdd8c937491cec72e14c0e2235fc6ae2b9139a4444aeeae039", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830808, "uuid": "54ca9cb7-8b12-4ca8-86fc-ef8ac7295b43", "comment": "Malware payload", "value": "99abb4a1197c96d06798e29768a5c8b59d29466a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830808, "uuid": "0ddeae5c-bebc-4130-9284-0bc63e3cc41b", "comment": "Malware payload", "value": "dd8960e6721637567039566f383a5c98e8ca64b8e8078dccd9846acfcd356fbb3a40101b89e6c4d73aea9e9be7c40050", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830808, "uuid": "c93f1edc-c289-4b39-bc3d-8ab6637d02a1", "value": "T11463C8F3FBE1B86A24EFFC069D7A32E045042A30CE2F878EA8D17191545967691A7CC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830808, "uuid": "6cf84e6b-919f-4ecb-b9df-9dd0f44e3d9b", "value": "768:I8w/h62/jWs6oS+xISN0vUNpKbDEL55ebOMHADeG4srSK4qRfJ4AUDyhsrhtR52G:I9l/AoSSMW1usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830808, "uuid": "efbc3177-cf19-40ba-ba16-12b220acf457", "value": 72494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830808, "uuid": "cdbcc814-d5ca-4528-98f8-0ed190372603", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830808, "uuid": "d0e80870-943d-459b-8ade-b98364089941", "value": "invoice-1645080830.pdf (20).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec814906-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830509, "uuid": "12e0f7bb-f63a-4aa7-a0e0-253e132edf99", "comment": "Malware payload", "value": "3cff387af8d91d46bdad971d70373ed0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830509, "uuid": "33ac6a87-6b94-4688-a5d8-91ae8436082d", "comment": "Malware payload", "value": "1d56acb64f83c6956466fad8ac6f41649ee0e02ef2603f5796c3c5ade418559d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830509, "uuid": "ba948882-fd49-466a-a862-c364d867ba35", "comment": "Malware payload", "value": "53d34cdc59a9b651e836a278970738ac4f060fe7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830509, "uuid": "d6ef6d50-e5c0-4a61-8716-5f06a250025f", "comment": "Malware payload", "value": "e1d795b08347bcf78e9c065765d9a4412b55ed9bf7592f7ba778586510d097242c9ea263f40b58df6f99cbf6ab15e2cd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830509, "uuid": "aa81b76e-49e7-4104-96cb-3737a4a30237", "value": "T1BE63198DCF83C06D56F9D0C95DACAFFEE06D92B8B528D42018A8B4D7E48514FE49ADC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830509, "uuid": "a6e324af-88a6-4de9-aceb-bdcdcef0db1e", "value": "1536:I9l/AoSSMVV4VCVqVEVHVdV+VWVUVxVoVwVxV8VaVZVeVvVDVpVbVBV4V/VBVNVi:I9l/5MDegYC17UcS3Om3qIv0NJ/xHede", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830509, "uuid": "78eb6a32-e78f-4e08-ba41-3886f890dbea", "value": 70630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830509, "uuid": "23d183c9-6ab0-4ed5-ac6c-9de0a0d04366", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830509, "uuid": "2ff970b8-63c9-47ef-b3a3-106523052dd5", "value": "invoice-1645080830.pdf (84).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c375daa-e33c-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766850910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850910, "uuid": "48ecde41-b6e6-4b11-a030-e1ea616f36ac", "comment": "Malware payload (ValleyRAT)", "value": "0fe8010697c81a96347f2ccf7a5d0c76", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850910, "uuid": "3d220f3b-681c-4924-bf55-eef3a9ad4a63", "comment": "Malware payload (ValleyRAT)", "value": "1d8293c80e7babab16034a4e41cad4e52f2e76c4be59add9a2599124e102f1cc", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850910, "uuid": "b406dbed-438e-4194-89eb-2a692b1c0673", "comment": "Malware payload (ValleyRAT)", "value": "822cf65c9e1b534170aa9230ec315f92685405a4", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850910, "uuid": "10145168-6763-46fb-b698-b8b70d441cb3", "comment": "Malware payload (ValleyRAT)", "value": "2a893d49aaa0d3474ccd79357c02d79d4c6a79713102cf2ac9afacf96a25ffedb5c1cfe9406c977583b53e9de28ee7d1", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850910, "uuid": "775b57d1-42f0-4bbd-86ff-13039a47084a", "value": "T1EC45F19361710055E1F6CC3DCA3BBEF032FA1A338E42ACB955AD59C61A619E0F317A52", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850910, "uuid": "2a69f1f3-acc2-4124-92e1-82a53d8d23ce", "value": "dd9853cde01ba28923c502ddf1a65984", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850910, "uuid": "d0f068b2-45e8-4158-a409-6dabaf9739df", "value": "24576:YlvGCPoVPDSoIrdMUFaz0BnXogrrt4egh5rRtXwkeP:YBPwbSvFK4ogrrrgzn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766850910, "uuid": "7a4fc252-1c47-4d50-8126-7ca5a377fe59", "value": 1172480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766850910, "uuid": "06110b1c-254d-46d5-9649-d008b07be9d5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850910, "uuid": "ed05cb49-79fd-4998-8e92-eb643899a979", "value": "0FE8010697C81A96347F2CCF7A5D0C76.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e136eae5-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854971, "uuid": "66fb1a57-32cf-478d-ad57-5e1b0c666364", "comment": "Malware payload", "value": "01e78c84f37918db4280d477b9b9d772", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854971, "uuid": "ddc30917-91d1-418e-b5d0-554a971d2f4f", "comment": "Malware payload", "value": "1e6bc4a4561cb0bcc8ba37c585066cd3806af9edc2ec8e2f0b7760bdfbfd388a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854971, "uuid": "7791c9e2-c887-49b9-a708-ec28d5605d00", "comment": "Malware payload", "value": "18a4d78af97d329430581f5441ba835d43317a7d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854971, "uuid": "e3703899-2a8f-4f8b-85d0-177622ebadf6", "comment": "Malware payload", "value": "477549c40e3935b859459675784edfaf810d26c075a9d52b3107615b270d2348e3fcdc543d81e703c81212cbfb08fcdf", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854971, "uuid": "ec5ed63d-9b26-45b6-a153-a549662d8210", "value": "T1416329E7EA39F11C24F585C8E6C720E81693B20D1FEAB04D97460EB1926EF5E12D425F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854971, "uuid": "9b1c5515-4ba0-4748-a4ca-c4071cdaa5cb", "value": "768:I8w/h62/jWs6oS+xISN0vWdda+ZKJOFwptxIpT/aQo1hohZUhoh04eKuHldwkfx6:I9l/AoSSMi4usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854971, "uuid": "4111f4e4-42a9-492e-97cb-d5e014b96a2b", "value": 69661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854971, "uuid": "568612a4-0afa-47ce-8383-6cc2987a1828", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854971, "uuid": "e7592f0a-2661-4d8e-8204-fba4dc6fc110", "value": "invoice-1645080830.pdf .js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a7f43e-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854601, "uuid": "8249762f-eddb-47b2-b43a-d4fe883aee96", "comment": "Malware payload", "value": "4c0ff2ffe93d1988d73f4ee95c840e1b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854601, "uuid": "151a8877-20f0-4644-8dc1-773dace9e022", "comment": "Malware payload", "value": "1f027b42163b5a584f2d657d0722101b2601db837ebf9c46e149c641662cfbc8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854601, "uuid": "ed2720ee-fb84-43bd-8537-0ddbcff7af67", "comment": "Malware payload", "value": "198fb19497710f35eb6e414a11e74ddf376a273d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854601, "uuid": "13e0aefa-879d-4246-8c72-0ff67a697802", "comment": "Malware payload", "value": "17fe6d4f57c90a4e7dca9c338059833e4bd1c76407f3fc60f567450da72a42f2e96f5d237683a4fc6939113236ac904b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854601, "uuid": "8e22fc68-ba76-471c-9829-3dbc922a8da4", "value": "T1C073FA0B0651EAA89D42D07253393438CF8A4FEDCCF66880BBD7E921A525E3F5711BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854601, "uuid": "3cef5a80-6cc7-4ba6-8c49-505360131a92", "value": "768:I8w/h62/jWs6oS+xISN0vMBARyadkfScBYrwz2y8kTAlGB:I9l/AoSSMr1usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854601, "uuid": "a7548ef6-fd34-4af1-9101-85fe8dd5b593", "value": 73426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854601, "uuid": "12424652-0f0f-45f6-9a69-5056311f55d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854601, "uuid": "cc7cb5fb-e350-4717-8460-494c87b48ed7", "value": "invoice-1645080830.pdf (79).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e04441fb-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766879881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879881, "uuid": "c0e6b67b-00ca-4d80-b179-aa1e620e9ac3", "comment": "Malware payload", "value": "e75e7e6db60f2e3a60b29558076d4900", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879881, "uuid": "b1f53eb5-d176-43a0-883a-2a9a85c9daac", "comment": "Malware payload", "value": "1f6b1387889a5a1c63dcccacb98778b1dcb52dff3d413732b6c7af763d43bc5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879881, "uuid": "959b097c-ea36-441d-a700-c70bf7d33b88", "comment": "Malware payload", "value": "4675cfa82a1df8d8f99c6ce4e1879c8e6ef125c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879881, "uuid": "02c5f523-926c-41c4-a00c-0dada26b1229", "comment": "Malware payload", "value": "660daf0d58c35aa5eb9dbfaf411623989fa580b665fca65f6cb507c2dd6dd486f428d88854e003fcb3d4c92ac4cee2cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879881, "uuid": "0fe1fa3a-bada-47fa-995d-0586da5309dc", "value": "T18253F153D008A305D8D7233E9C3BEA0C0668D242D639D9A7E9C7477A9561EF226286CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879881, "uuid": "86a698f7-e8a7-48f5-b99f-49c1656ca46f", "value": "1536:LPOp8VvTiC+t7s+57Kc6yyykonWKx6cIYfnouy8Gys:LGp8Vett7H7Kx6hswoutI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879881, "uuid": "5ebe2672-4b3f-4a7b-b3af-eeace61b855c", "value": 64404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879881, "uuid": "40cd3ab5-fbe8-4e39-9821-312719093350", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879881, "uuid": "d9708cdf-3617-46ac-9bd5-df13f64be125", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7ade110-e33d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766851493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851493, "uuid": "b054250f-db78-417b-9410-9be9ba4e8bdc", "comment": "Malware payload (Mirai)", "value": "e5541f8777ac5fc2b37c47afdcf4487f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851493, "uuid": "62d8dbf2-4ca3-4f32-bd3b-92c8de934ff2", "comment": "Malware payload (Mirai)", "value": "1fc5370d5bc692cc16889407844bf60cb6c6faa13ac8809ce68c7df20af68458", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851493, "uuid": "19400fdf-952a-45fb-a1f5-df2cb927b469", "comment": "Malware payload (Mirai)", "value": "d136c36a56044c6b7d206baf8431e1bd44151ee5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851493, "uuid": "5398bacd-c89a-4170-907f-384773ea6ae1", "comment": "Malware payload (Mirai)", "value": "be5486778f5ad244479033cc1b26905bc7e7dc8d0a618efef70ff07b17cc4b0bf3e4eb6ad15379059a095c439831c1c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851493, "uuid": "65d42215-7f4e-4b70-b70c-7186278a7518", "value": "T1D263021609626D01DB5C1434BB7B2AEA5EC7E3B0AC7E90761F822EFC58E29263137047", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851493, "uuid": "e374b948-cef9-4afb-a1d5-e6379cc73d01", "value": "1536:tIaH4e2p1a3Ntuqop0xaiiY672OYH/VvZ+QWo6C8EXynqjLi:74eU0KahtHK+X8EiqjLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766851493, "uuid": "ba40e258-6aa5-464a-857c-b0e594ec0e68", "value": 72168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766851493, "uuid": "655eb3a6-b1bf-402e-a193-a0e063d9f58d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851493, "uuid": "e02cb066-9a19-406f-853e-c4998fb20bca", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1bdfb18-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855804, "uuid": "34dd1f2c-493b-43e5-82f7-fe8e09155441", "comment": "Malware payload (Mirai)", "value": "d4e202e06389195f6b025f911494c10f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855804, "uuid": "41d64b91-868d-4829-9072-918a59b1b31f", "comment": "Malware payload (Mirai)", "value": "1fcc38485486e3fb24437dc758750a4bcb5faacf1f9ac5b4cfcdffd04f968468", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855804, "uuid": "6e5dbd63-e771-4c42-8a7e-791503825a40", "comment": "Malware payload (Mirai)", "value": "99e8e62e2f762693ae877ac708258ac6f67823bf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855804, "uuid": "e802f1bb-b4ca-44aa-a394-57736d402f18", "comment": "Malware payload (Mirai)", "value": "d9bde8c9dc790572f9c23e19e4754f29339ab1ce63e2f67b044d272524d9dadf26eeff26406fbd22f17e9d8e61d05542", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855804, "uuid": "f25a7d00-16cf-4bfb-ac9a-067380855be4", "value": "T130B3E085B210AE45C02672FCB187099093B17E7B4B9A150B44B3F5B46DBCCD47E0BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855804, "uuid": "52dfab05-76ca-4987-b520-6cc353568106", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuL:as5zqhr5Nzy7wQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855804, "uuid": "87639971-8fdf-401f-a72b-da93bee4a162", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855804, "uuid": "fede4de1-b5a8-45ab-8c67-c18446945a1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855804, "uuid": "9a914a29-142f-45ee-ac31-9f4b6966be45", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09cc877d-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825404, "uuid": "0c2051bb-88b5-4288-8d32-946471b3c01a", "comment": "Malware payload", "value": "7310e72e421332a82a522e72c9ca05d4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825404, "uuid": "4d63e9ee-6fea-42a6-b2b4-888b97025fb7", "comment": "Malware payload", "value": "1fd2ba5a147f4bd0cd28e51f8b8a653aba53a398a2a3dea7836ef14e7a7609a2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825404, "uuid": "fcf821ff-d152-4d25-a8d9-168d4a0955bc", "comment": "Malware payload", "value": "0d44055bccfcdd56f2c1f67434385aa9424acea8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825404, "uuid": "7aa2dfb5-c9eb-478a-9dfc-903d18c662a7", "comment": "Malware payload", "value": "35eee6872779e989dda6fa4585cdc5cab35d7110ed3405e39f1b24729b733bbe113c1c21cec45a8af81ef7fc8a612e38", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825404, "uuid": "341c0441-782e-4c9b-8958-9fae9a1de416", "value": "T1AA63190E4123FC2C29E2BBBD8A147CC7841D15AFEC58E50ED424A1FED57AC482B579AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825404, "uuid": "abde9c9b-d5db-45cc-9eff-62348d1e1873", "value": "768:I8w/h62/jWs6oS+xISN0vNxBmy6XbJ46Hg1L7Hua2XSaVohSmtKfe6n09Yn9ZV4w:I9l/AoSSMW6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825404, "uuid": "1659fae6-bc88-4c5d-8c17-3e93bb329845", "value": 69730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825404, "uuid": "c033a70d-5405-465c-9d95-90c929867fee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825404, "uuid": "70b69b22-cd4a-4cf4-9006-e1c8ad9c499a", "value": "invoice-1645080830.pdf (66).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40733bd-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861016, "uuid": "2b8742c9-3539-4810-b2e6-829d98201ada", "comment": "Malware payload (Mirai)", "value": "0dcb4cf04e391ccd7df1b437d49f56e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861016, "uuid": "09604a26-98ac-483f-a4ab-ac021de53870", "comment": "Malware payload (Mirai)", "value": "1fe60ba3b9e2b3f8695419c93e961d47ad43fde79e37a948a5cfbe6da69dc75e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861016, "uuid": "07afceba-9677-4ebc-a699-d72793e4b67a", "comment": "Malware payload (Mirai)", "value": "ac55997314015a14d77eeafca22ea994065f7a41", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861016, "uuid": "110fca6c-f054-49cb-b98c-a6a89332beee", "comment": "Malware payload (Mirai)", "value": "18cb516e93a29694864e1ea8194ef2f0729d04aefe806c5061474d53199be1a3bce859ba2cf8e0369e2737194fac9fe0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861016, "uuid": "a7d341c7-a8ab-4997-a662-d553272610d6", "value": "T1A8F31802B31C0947D2532DF02A3F27E087EFEAD221E4F645295F9A8A9271D37154AEDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861016, "uuid": "11b4ccb9-eda8-433c-8274-67e7bf0c35d7", "value": "1536:d+1EG3NadXbhyGK2N3G8eBSMExtOO9Z2KruZXDGf4inyvAwZZpqMhYpupqtJK/Eq:d2OsGD2hBSJx4aNWGgirwBmam7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861016, "uuid": "6be89eae-778e-4d87-b557-7431f675e457", "value": 160120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861016, "uuid": "b43e58d8-275b-4be4-b820-3ccd6860b7a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861016, "uuid": "d5d6b26c-f9cb-4cf5-a2a4-58bfb65c6238", "value": "yamaha.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72cc7a61-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823433, "uuid": "d6882582-b9c3-4e3b-a1f4-a138164b0ec2", "comment": "Malware payload (Mirai)", "value": "86493bd7642ff57e6614d5a0b3e7f9f8", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823433, "uuid": "93e91e26-4093-4496-9619-124fa3854595", "comment": "Malware payload (Mirai)", "value": "201160be2f3952a5f38d2b8f98c46b10326e3f7a4550ad66ecef9c8a1130d4a4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823433, "uuid": "0e58591c-1328-42ce-8ad4-d982e674b09f", "comment": "Malware payload (Mirai)", "value": "d6fd8028c862f6539b9e58227700cc7f674cfd06", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823433, "uuid": "8e0f021f-fc36-49b3-9a9f-e28ef79e552a", "comment": "Malware payload (Mirai)", "value": "0182f42115a4e4f268aab531b3efd3f9674798c1f9faef41279d713625ad413a1dee2f5e82b59507e664435b281e4947", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823433, "uuid": "4eb95a9e-5e03-48c8-adc1-3875988900d2", "value": "T164413FC881B579C2E8DD5D11B0BBCC857090E5A1AC9B8F1AAFDC3975CC8DF09B46A724", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823433, "uuid": "2ec2a650-9ad3-49ac-a346-2072edb1975d", "value": "48:9XMXzXrXUXdXeXuXGuXIXZXFQVXgXlXsIX5iRXSXc:9XMXzXrXUXdXeXuXGuXIXZXFQVXgXlXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823433, "uuid": "b2241f4b-cdec-4895-a620-dd8e0ef5d5bb", "value": 1959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823433, "uuid": "8cf84781-3960-4ad4-aa96-fe7bd1b02123", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823433, "uuid": "537e47aa-9090-4d23-a61b-2ef7a215345c", "value": "bins.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa9a828b-e2c1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798320, "uuid": "2c41a90a-8f06-4267-9dbc-ba5b8945174a", "comment": "Malware payload (Mirai)", "value": "b1510a6d650752dda998ddf0bd837220", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798320, "uuid": "08289144-744c-419b-9fdf-76c3e103209c", "comment": "Malware payload (Mirai)", "value": "201b7db80044c98c177697799f313bb400afc0dab9fcf11c36d4b4a594a9f976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798320, "uuid": "c4f92ed5-9027-4a06-ae1a-4dac411af69a", "comment": "Malware payload (Mirai)", "value": "7bdf4ffbbac9a9c4ec85b3d85dac4f8a93952268", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798320, "uuid": "999c2049-ceba-47ad-af2e-687e63305405", "comment": "Malware payload (Mirai)", "value": "ac1ea8f52b7080ba877544bb97f56f450b4932157d4c81f0d6f335d02e89f10da4ac62e75c4bd1aa8e4bc8561cffd1a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798320, "uuid": "80dfc739-275f-4ab1-a777-46df5508f566", "value": "T145630849FC819B11D5E822BEFA1E018D33536768E3EF7212DD215F25678A91B0F77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798320, "uuid": "af9e87ff-fcaf-4fd7-af33-f54f95a882bd", "value": "1536:Cxn1CZWEMnIBymh+LOmfatfjLBud0FCOdlQLi6dVDT:l8ExykmfatfjLBud0gzdVH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798320, "uuid": "97a6a462-db62-449f-8524-016710f52f37", "value": 71008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798320, "uuid": "3293ac9d-4354-4078-8c40-28334a158647", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798320, "uuid": "b006f930-7beb-4e7d-a00b-a778ac87d58e", "value": "zerarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7649deba-e33e-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766851786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851786, "uuid": "be199252-f271-41a2-b918-0a663fb8a519", "comment": "Malware payload (AsyncRAT)", "value": "71eb02bd673125c69b01326ca46f0b78", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851786, "uuid": "d0f7e345-ee66-4d9b-a933-ff72310f68b3", "comment": "Malware payload (AsyncRAT)", "value": "20273db5940fce780b7fb5576a83d47ffbac4014f280653802e1e1a0b9cad4e6", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851786, "uuid": "26ded4ad-6fb8-4fda-828a-d279aa84dffd", "comment": "Malware payload (AsyncRAT)", "value": "83dbf10befa22adb9cf35f862887fea5bc75bba0", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851786, "uuid": "d1cb9dfa-473e-4b12-af6f-af7ea83c079f", "comment": "Malware payload (AsyncRAT)", "value": "30eaf9559b3c216be1304e1909315cb920d0afbab3ec7a9639262bc42d09661d9bd90ee49f6a5e7aabeb3fcf36dd792c", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851786, "uuid": "86b37996-9add-49f0-876a-376cc372eef2", "value": "T111232B003BE9812BF2BE5F7899F221458A7EF6633603D55E1CC4419B5613FC68642AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851786, "uuid": "4417c9c6-ae6e-427a-baab-de4f2bd4fd9e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851786, "uuid": "72e70945-2d29-4002-a7aa-d1467e864cc3", "value": "768:uuVVMJTksBUwWU6J12mo2q9e10G4hBYapPIqzjbdgX37Gbr9YN4BDZS/D:uuVSJTkKt2X0zWaGq3bKXrGbr9hdS/D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766851786, "uuid": "837b8e64-8463-4ddd-9a5d-82aa517537d8", "value": 48128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766851786, "uuid": "5d510029-2a48-4c71-9d77-f11e00a10a8d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851786, "uuid": "81ee2f11-e8fc-45cd-8385-7227020c99e3", "value": "SentinelIntelCollector.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0efff64-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870325, "uuid": "9b01c880-afdd-4854-8a50-eda738a218d7", "comment": "Malware payload (Mirai)", "value": "7690d49a8a99c2620d20b9944872bc38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870325, "uuid": "58d08e90-5a7b-4ac6-9140-62e69b15dcb2", "comment": "Malware payload (Mirai)", "value": "20ced58e98df8038e44188e575c4ce01876705bbf937fdfaa34d55c05ffe562c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870325, "uuid": "f7f04993-e440-47ee-9915-7182e4a6fc4a", "comment": "Malware payload (Mirai)", "value": "192a8834ed27cdd7236d268b7cbb5d5a8df7b3da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870325, "uuid": "f65603b3-538e-41cf-b7d9-da008abb4616", "comment": "Malware payload (Mirai)", "value": "fa2c89808c18f8d9021c6330fa7490b90d11199db74b1aedcc494c21eeccf06bd22c314afc6a69d0acc7aeb9a3eebd58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870325, "uuid": "6b7f5207-03aa-4d2e-95cc-3b0bc965d58e", "value": "T14543099AF802AD3CF80BE6BE54164E0DBA6167D151830727677BFDE37C721986E02D81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870325, "uuid": "76286014-48b7-48f5-bf92-3f29f830fb96", "value": "1536:iOXadAPHfS+FYwYWheOu8o6MtQbMXGL1uM:iOjfRFYwYQpjM/GhuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870325, "uuid": "d7b3bfb7-980d-4e60-a7d0-d105e9c95d90", "value": 56968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870325, "uuid": "ff1a51aa-2a50-440e-8cc4-5599336f95fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870325, "uuid": "19dcc483-4016-458e-86f4-728aee97375a", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e2ea46d-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861731, "uuid": "827757d7-8a5e-4e97-a933-e2ce51d513ba", "comment": "Malware payload (Mirai)", "value": "663ab63a9ffcd0c37623c81df9139090", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861731, "uuid": "9e42db1c-d64d-4d27-8dee-b303deae34f4", "comment": "Malware payload (Mirai)", "value": "21893a01238d5bd0f1171703388a94d9de17999aa1ef234fbf52ac1a3ae2e1a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861731, "uuid": "dc667a9e-f052-4a34-bf74-3921c40cc320", "comment": "Malware payload (Mirai)", "value": "82106c053b315b287c3bb1b822edcb9e3fac1e44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861731, "uuid": "7883bb33-d698-4465-8e33-c7e280cacc93", "comment": "Malware payload (Mirai)", "value": "3473ff2bca7e7fdacd1bdb221689fa2b4db8a9d94d867f34f9f3810957ba2a872fbb3e52ac23729837b5dc835bf10789", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861731, "uuid": "c5e1280f-e23d-4521-823a-291cc878584a", "value": "T1A3735A21A9791D2BC9C4B47F61F30331F1B6174A26B8CA2A7DB30D5DFF15A102117ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861731, "uuid": "cfa23e5a-7c94-4111-811b-a870278b3cff", "value": "1536:htzSi83LrpeF1FYwfu6AjNuQHjGS5jCeGMto9Eqwl0vo7V7uhY:nGHdeaDH52+Fqodn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861731, "uuid": "3fae4dba-ce2e-4b82-9d6d-1dfe6f10c42d", "value": 76700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861731, "uuid": "1c55a233-f8a2-4367-ab44-73cc9e67ccc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861731, "uuid": "59faea88-076c-4cf4-a984-5b3b8cde8f36", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18a5c41a-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859359, "uuid": "a62d629d-abbf-4e3a-89f9-8a4509c6fab7", "comment": "Malware payload (Mirai)", "value": "02e300523e7f245b8e8830ec1488e066", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859359, "uuid": "3e96e6c1-df00-4350-9f60-f928254c07b4", "comment": "Malware payload (Mirai)", "value": "218a7a2e209e17ff7dab54c214c2144988b6ebeb8595224d2cdaef009f7a279f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859359, "uuid": "90631204-97c6-4236-a328-a0dd429fc178", "comment": "Malware payload (Mirai)", "value": "0b06770ed3e7a7ab9e80a647288c61cada6c423e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859359, "uuid": "7f977b3c-ca7f-4d85-ae5d-84b51c1461b3", "comment": "Malware payload (Mirai)", "value": "83ee4354f274e8d00b4801b0e2fda2eb0271c176c607eeda02212ebb8b02779412d88f690c74e9b9e8ff78eb45569f9b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859359, "uuid": "c5ebb7b8-3e12-4d84-a1e3-55fe0bd358f3", "value": "T1B253F17A58F50255C8BE60B8D89D7B1B3430B07CDA30C9C5E744707B8682FA67E6DB81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859359, "uuid": "c462c65a-a483-4e08-a225-ff6eb8d78d0b", "value": "1536:P8bbvnwBtUXtkUIR38+G5IEty8BRhRujMPd4NEfEJPUVoGJhnouy8Hys:U3nEtUW38+G5IEty8BDRiMPC/tyLout7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859359, "uuid": "6b6a08e6-9084-4f0e-81f8-ca9dbc830039", "value": 62596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859359, "uuid": "9bde53fb-41dc-45e5-bb19-d92bf550115d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859359, "uuid": "78c3bea2-424b-4eb1-8796-81e75356f0a5", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe25781e-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858885, "uuid": "e236f2d3-0ebe-48e3-a790-de4f0c187ecd", "comment": "Malware payload (Mirai)", "value": "d253262b871b021a66c7ac28f0c4ee8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858885, "uuid": "cd9fe801-6732-47f6-8994-e9721141ad2c", "comment": "Malware payload (Mirai)", "value": "21a7c07cccd6d7ad138d49beba14c67ae46489d14983fd5304ef618a557d6e00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858885, "uuid": "2832ed66-25a2-42e2-a1b0-ec562893351d", "comment": "Malware payload (Mirai)", "value": "5d61453ad617406dfa5a37dfefb3dece4169442c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858885, "uuid": "aa118b52-07c6-40e1-b2ba-09c759554a5c", "comment": "Malware payload (Mirai)", "value": "9962604e26b4f9ed6510bab5f5f6596140c0ab3316337ab1e636d31d44aab2a36fa0886e16bc8ad663349dada228af83", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858885, "uuid": "e99490b0-be98-4f3e-a8ca-4a789bf7a212", "value": "T157F31945FC918B17C6D552BBFB5E428D372667A8D2EE32038C256F24378A95F0D3B242", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858885, "uuid": "91a70e8d-7c14-42b1-a5e2-1971fe771304", "value": "3072:N73sbC7sSnFMmtEFCAMOuyKeYwAl8G0D4J38ypkM4ac:N73sGChFOy+fexD4l8Yz4ac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858885, "uuid": "50f034cf-b3f6-419e-9c6a-f15a6866e467", "value": 165280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858885, "uuid": "d9147161-dbe1-425e-bcd6-0a7f438ecc67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858885, "uuid": "27033bab-d354-4505-ba24-fb87274d243d", "value": "mirai.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c43ad1c9-e30f-11f0-a129-42010a9c0007", "comment": "Malware payload (PureLogsStealer)", "timestamp": 1766831730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831730, "uuid": "fdd596e8-9e8e-4f0e-8b6b-c35e1d5b110f", "comment": "Malware payload (PureLogsStealer)", "value": "c06bcb24d8a0b0952a9dbf1cd1deca5e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831730, "uuid": "a8720b88-44fb-4685-b6ed-ebcc00a97cb1", "comment": "Malware payload (PureLogsStealer)", "value": "21aa58fb5016581a2f766acf0288377c584b602f735cb28197c1b3a4b1383c73", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831730, "uuid": "60f3fdc0-e8be-4280-9cf9-923b93e09250", "comment": "Malware payload (PureLogsStealer)", "value": "09bbb05e5bde97f6b8db78417f28376504d7997d", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831730, "uuid": "7e444255-3e33-4a96-9203-b6d31ced700d", "comment": "Malware payload (PureLogsStealer)", "value": "84fd61190118b8960db80507ee9d982a7342ec3392d3f8e22b9f0069b1501c696cb806a07f4eb048ae768c1df02dfe37", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831730, "uuid": "b27f8eed-bd4b-4151-8288-7ce356993ba7", "value": "T122541230775F93E8E54ACA3B8AD9D28412B5E355F81ADB7A990E035AEE93370C407F14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831730, "uuid": "1f18694f-aafd-4437-8c82-ed0c933d01a2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831730, "uuid": "218cfe67-994c-4053-8151-c098ff74ddcb", "value": "6144:j+1z3QgzQg3a+58XA4ZN4QSPf2KhGM3+FiiN4jnDxu6LgTVx:j+dTq+yX1Za2KcM3+Fii+n19gR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766831730, "uuid": "fc93f86b-e0f7-4eba-9f7e-2bab69b42af0", "value": 289792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766831730, "uuid": "6621419b-c2e1-4d9c-a10a-f0cd7343cd4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831730, "uuid": "c91a42de-3473-482f-927c-ce8db34f0713", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaa5deb0-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873778, "uuid": "f14fd16d-78af-4c84-9edf-282ccba67bd7", "comment": "Malware payload (Mirai)", "value": "de7cc98e1903dc1419e7be8791ae5daf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873778, "uuid": "6dcd9c6a-f095-492f-9ec8-08eb07cd4780", "comment": "Malware payload (Mirai)", "value": "223f09a812d57f4d809928a9369655eb731f10ef55886179ad3020cac8954cec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873778, "uuid": "0ce1e0c9-afa3-4237-9d91-eb5675473355", "comment": "Malware payload (Mirai)", "value": "245cb09a6c9b33e75e1337efc178e27891a73686", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873778, "uuid": "311539e7-b8e9-43c4-95d4-9fc51864a949", "comment": "Malware payload (Mirai)", "value": "57e21d8d7ad8e7e2145bcae03a57633918675e492d5135de596a8c4f8cf789353c79174e4179cf2750f0a717b51a1681", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873778, "uuid": "6d95d88f-587f-4ce3-93fa-5922921a77f5", "value": "T1CF931ADBF800DD7DF40BDB7A4463490EBA30E3D10A924A377767B957AC760A50827E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873778, "uuid": "6cdd3e1f-a5d9-4b13-b011-123e0ca98c4d", "value": "1536:esktul/WIXiBdoZ4SdlVrMde1tMD8dk2YxASRdnzyijf61qkOEs+2tMyRx3PK:es/nh4de1tMxhRtzNeOEsLtMyRx3PK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873778, "uuid": "48a10c4a-b22e-438e-a274-b4bc45955d2b", "value": 96832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873778, "uuid": "2ba51d07-e41f-47e8-aeb3-e5833b0c23ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873778, "uuid": "137dd339-6d5b-409c-81c6-bb9313a6c41e", "value": "ub8ehJSePAfc9FYqZIT6.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4a8760-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870556, "uuid": "8b252e21-6182-40fc-942d-68f364db1b69", "comment": "Malware payload (Mirai)", "value": "58758b5f7f6004aa2c4c646ad0b7eaf4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870556, "uuid": "33a4f757-fae8-41fb-ac7e-8a709ec26f9c", "comment": "Malware payload (Mirai)", "value": "22a0c58772581d8981ec35fd0f37d6f1b98c0ede33022db280c15d2b5d117898", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870556, "uuid": "583b29bb-272f-46e8-82b9-34e8bbc6b143", "comment": "Malware payload (Mirai)", "value": "592017f6aeb3a78606b7a531d16b6674f2a368ba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870556, "uuid": "1a18a21d-b6b5-4cb3-907b-5dd3970ee96b", "comment": "Malware payload (Mirai)", "value": "b935d790b626037bb1e46fd772eadbe0c45cb50fdae0f4d0136e0ce509e409801f837eaa755051033d43377e43fc1972", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870556, "uuid": "37e3baf9-8e1d-4d46-9d64-3d0265b9c02b", "value": "T1AF432981B8819A23C5D4137AF56E55CD372427E8E2CF7217CE225F5036C692F0CABEA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870556, "uuid": "0e3ae624-d892-431c-8dc2-1cc2b9f1d0c1", "value": "768:dqduv9arYpwqiqBhYUpe4TwlGTlHDNtOTd7c6VKjtzR/2f1mA2EDEy0eYjW9THvR:ou2qiahYU44TxTl4dGBzwsVhBtQP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870556, "uuid": "a19e9790-9ab9-4055-88e2-5c070b08760f", "value": 58704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870556, "uuid": "163d1032-6734-4595-8eb3-3316209ca7cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870556, "uuid": "ff414047-d242-43c8-a5b2-75a799c74808", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54beb67a-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mozi)", "timestamp": 1766824671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824671, "uuid": "19060655-123b-4f0a-bc58-417841714475", "comment": "Malware payload (Mozi)", "value": "0d7e64fee6af280cb683474bbb35d691", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#AFD6C3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824671, "uuid": "bba96591-d014-4c57-ba68-d01499b2a131", "comment": "Malware payload (Mozi)", "value": "22ea54360f7b59f926660f70b05b11f6b00bc1519b5114df06176d0c53003e24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#AFD6C3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824671, "uuid": "8a763ebb-bdb6-48b8-9141-291e4c40b757", "comment": "Malware payload (Mozi)", "value": "2ca776376db88a613e6ff0bb56b537a4778081be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#AFD6C3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824671, "uuid": "9a9c2e03-1610-41a7-b28d-7795e8c7f071", "comment": "Malware payload (Mozi)", "value": "247901063af09fd511cc84b27a6b63c6d3ff9bf5f8a763b619a68d27a8dcbf29852fdd2f53cc745cea2d30afcf27167e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#AFD6C3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824671, "uuid": "3bf05dc9-f6b6-412d-b784-9472eeaa60be", "value": "T10DD3128BEF36DC1ECF001EB22ADA5B9E9C6D756B41CBF4A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824671, "uuid": "0ed8471c-4fa2-4e97-bbb4-c3dcbef86e50", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOeVo3/4sxLJ10xioP:p3lOYoaja8xzxe0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824671, "uuid": "3d10a889-8442-48b8-8a45-f16a0fb7971c", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824671, "uuid": "b927a5ba-19fa-4356-8be7-3f5ae0291273", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824671, "uuid": "f301f8b3-e8b2-47fa-85d7-a17d8d014505", "value": "bin.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f702a4c-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870511, "uuid": "b86c45ae-1d5c-4e25-a0a4-4bf9f1535a61", "comment": "Malware payload (Mirai)", "value": "3312de43376c5d93ed2ca5b60776637f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870511, "uuid": "44ccaba2-ee4c-4db3-872f-a6768a9e6a92", "comment": "Malware payload (Mirai)", "value": "23a8625071aa80c87e79a4ca68ba2ef02c0c061164c64bb2c84f88bf249d6f8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870511, "uuid": "bac96750-5245-4821-befd-b6d6d7e98392", "comment": "Malware payload (Mirai)", "value": "082b05421a20600eee608d958da3852f9e417716", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870511, "uuid": "29624074-82a2-483b-8b92-de21ef2fd078", "comment": "Malware payload (Mirai)", "value": "9543865a8fa7ec7e1bae6e302b78764dd55f1608831c8f6f9fd9056cd436a1f72d200591973263e33cf84a9c38abf67b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870511, "uuid": "74bd2f7c-0304-4dbf-8fdc-a64b0190391d", "value": "T113338C36E82E5D94C5574134B4A88E391F13F0C493136EBB2EEA82B26493C64FA15FF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870511, "uuid": "90da34ed-c862-4115-8a45-f12cdc103f4f", "value": "768:Gaqjedededeoe4o9tULrmZULfgatfTrZbw9R0H1qYCH1toOdq3RCzww4:Ga8QQQTeluzLft1H4q1VI1iOyRCzx4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870511, "uuid": "dcf92b0b-3f6c-466d-8361-07e539896186", "value": 51196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870511, "uuid": "a4aa43ac-6568-4e4e-a040-765c73db720a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870511, "uuid": "9a5e8abb-9690-4adb-8655-cf92a6058f9c", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f9f356a-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857841, "uuid": "6e64d344-a74f-48c4-85ea-5a94fe7eb73c", "comment": "Malware payload (Mirai)", "value": "89c25d425bee0d9ea782a6bed1b6b8f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857841, "uuid": "798b0b0f-e362-4c54-9f63-1efa371f95ef", "comment": "Malware payload (Mirai)", "value": "23d975e22e222bfbc77beeef2f1dd2fdf99777bcf2694b7101036b166d260b30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857841, "uuid": "32422d3b-d6de-46db-8e51-82254c2c06a0", "comment": "Malware payload (Mirai)", "value": "a6e605659875e715e71909482fb5d87f94a62f23", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857841, "uuid": "996b3956-dc35-4d8b-98e2-ad0f890fa94d", "comment": "Malware payload (Mirai)", "value": "76d709effc54760ad33049a984b32789c864eabcceee95f945853b674574f7004d60676f917ae5f22087f990bbcd50b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857841, "uuid": "b713544b-abc2-482e-89d7-aa4651ba0a0c", "value": "T135634A21ADB61C2BC1C4653721F34735F6F6034725AC8A2BBEB20D9CBF65A503217A76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857841, "uuid": "4c5c4dc0-4240-4263-8d6e-15d0c313c76e", "value": "1536:h1ZejsbaNsNu4ayAyNo+2aRtZzlLicMBXf7uhO:FisuKhp2eBlLPcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857841, "uuid": "935a1856-75d9-4272-a8f8-6f9c89dfdf6b", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857841, "uuid": "e87e3343-6b84-4ce9-bbd5-36f64e3f16ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857841, "uuid": "b316a554-5e6d-4be5-ab4b-21f012d1380c", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a4dff9-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864312, "uuid": "8c4e3a4c-48fc-4539-8f22-b4dcb3c4fad8", "comment": "Malware payload (Mirai)", "value": "f43a55f77383efb9e7d06c71bb73ed26", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864312, "uuid": "58794df2-ca84-4e3d-baaa-f196c812d5f6", "comment": "Malware payload (Mirai)", "value": "241acefdf12e6ff7cb2eb5209a5ce09a8b894c40dbccd480d54fd94e32fd4bb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864312, "uuid": "287453bb-9dad-42b8-ad2b-0916c6b2411e", "comment": "Malware payload (Mirai)", "value": "27a5415bab140fbeac28e9867bf297254cfde306", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864312, "uuid": "b40ecc12-df43-4f60-aa31-270def196132", "comment": "Malware payload (Mirai)", "value": "285c1064970ee563d9b5c71cb5f13d643885f756b2106feddcb6074ab4af9224acd1436ffb76a6b2e1db6037fa14ef0e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864312, "uuid": "704a8409-fd5c-4cdc-8b7c-2fdb6d1c07b7", "value": "T1B0A3F78AF8819B61C5D422BEFE1E418D331357BCE3EF72129D215B14778A92B0E7B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864312, "uuid": "ce25c790-7512-44ff-888c-ede346579aab", "value": "3072:2NA98y0zEwC//2p+VFL1p2roTg47RRPcjTA:2NAeymEApQFL1p2rOg47jP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864312, "uuid": "812281cf-fa73-4859-88b9-b57a9b8b0a9b", "value": 99680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864312, "uuid": "068dea74-74f0-485e-9e81-5357ddea18e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864312, "uuid": "4a5789cf-52ee-481d-813f-b31d02f00752", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57bfc52-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796486, "uuid": "1fdc7960-6fde-4f23-8292-700f6a07cb70", "comment": "Malware payload (Mirai)", "value": "0099ae36248031699170ed91050d01cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796486, "uuid": "aa1473a2-7d81-4daa-bc06-f8390b496610", "comment": "Malware payload (Mirai)", "value": "24ea3561a2fd1a34a065d63f27f4933f585c35b1076c86178bcd8ac0fb5d21eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796486, "uuid": "8a2ba611-941d-407b-9406-c2b33a15c105", "comment": "Malware payload (Mirai)", "value": "835151792867718dfabfa8f09284ed927d640626", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796486, "uuid": "e59dc502-5382-462d-b5da-f9e8014c8852", "comment": "Malware payload (Mirai)", "value": "361f5e315a96b30cbf8038214ea3dd97157bf33a3dcbefb7e092cb39bd5e990163933558ad1ba1fa95fc562d426232af", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796486, "uuid": "201f1124-8076-4612-87f0-6626db2dbabb", "value": "T1B5639E16D82509A9C28685B471ECCE3A1B13E5C063837EF71A7AC375A067D9CF849FB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796486, "uuid": "ede4ded3-3cd2-4798-852b-204da92d86ba", "value": "1536:daT/uMkOtg9wYv2ZKsT5Z7BPxznCI0sCp8ud4:dWVkwgyYugsz9xznsxrd4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796486, "uuid": "6afe54c9-8084-464a-9545-970e02229f2a", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796486, "uuid": "9a5aae16-4ae5-4984-8c1a-2581495c6fdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796486, "uuid": "7e774126-3440-40cc-957b-456766954d1d", "value": "Space.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49ef2cc2-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854718, "uuid": "5551d68a-474e-4f44-bca6-879c65674135", "comment": "Malware payload", "value": "8c32062d5d25a04e90790368b29f1afb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854718, "uuid": "3dbf50d4-8202-47b5-adda-27e5ba4a055a", "comment": "Malware payload", "value": "2511799c2f95cbb02325dd5dc926dfb742e99d9b2f7c8f6d8ad20ccb6fc2e797", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854718, "uuid": "7b447eef-0ecd-4fbe-9cfd-f208de4eebf6", "comment": "Malware payload", "value": "e8b4c41b87347d005722ac51d63a924bf841dae2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854718, "uuid": "57b06005-7b2c-4a04-9e57-2251d1ec3fbf", "comment": "Malware payload", "value": "a54f9a95272fcb7bebb7728453a66808b57f91569e6dc842f944eef859d32bba1a73e3b2adc650de35bb7734ef5bdad2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854718, "uuid": "c4ded54e-9170-48fe-9419-82ea79481418", "value": "T152630ACE3ABB28C959871E2BBC4595094523A6215FE1DE605448D0F04FA8B73AC5FBFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854718, "uuid": "c8194276-4edf-47ad-b6a5-69cdb67126a8", "value": "768:I8w/h62/jWs6oS+xISN0vUGMGAGBGGGeG7G3GFGrGyGjGUGwG5GjGRG7GqGkG6GM:I9l/AoSSM3HjusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854718, "uuid": "22502c49-ac34-4ddc-855c-ea346c742560", "value": 71574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854718, "uuid": "fcb5bc3a-cba8-4d5d-948f-5c11f62381b0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854718, "uuid": "e830fd1d-3179-4415-85ba-28fbcef07242", "value": "invoice-1645080830.pdf (56).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9b7b272-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854905, "uuid": "9420d7fb-2de5-41de-a17d-609f01888e9e", "comment": "Malware payload", "value": "39912853d52e8051d1b935886dec2e10", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854905, "uuid": "9efd04c2-4b4f-4072-8b4c-527d11dd09d5", "comment": "Malware payload", "value": "2521352f93f5cf7dc1f99f8612bbee71d8acf90e1d6eb2913947c27d1574fc13", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854905, "uuid": "bdbd8a52-48f0-4e1b-9776-8d00cc462276", "comment": "Malware payload", "value": "517db5102ee1dd3cb0c22fdf47e6d0821cc36ced", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854905, "uuid": "8bffcf91-0be1-4311-8cb2-ad5969f64cd3", "comment": "Malware payload", "value": "c7ccf2e8c486f324212280d1cf2bb722ba74a033d33056ce6790f597a4f4baff1f61d792efd8836267dc7e69b52ffc8c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854905, "uuid": "158cacf0-fce5-41f4-b697-4aba62db8b9f", "value": "T1DE733BC60C8D04BE9473BB9D89C25F89A17393F293B4B7D342BA63B1DE6D1030D185A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854905, "uuid": "7918080f-40fd-4c2b-8234-b8af94e23f2d", "value": "1536:I9l/AoSSMQj6vqa9RLinjFyu60Eyh7THUx2PZ2qtxFZgQf9Chff9wDJgr88gw8rC:I9l/5MQj6vqa9RLinjFyu60Eyh7THUxH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854905, "uuid": "70c877be-46bc-409f-bc1a-c3402704bb05", "value": 74453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854905, "uuid": "502b9354-60f4-42a7-9c7c-70fb461b3db9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854905, "uuid": "2fa2e29b-2c80-4ad1-ad78-037bbeccf660", "value": "invoice-1645080830.pdf (14).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f6f7e7-e328-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766842361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842361, "uuid": "9c73d096-a12f-4a5b-9bed-e4f0f99e19bf", "comment": "Malware payload", "value": "d2328d95eb12887763a8aa03892c4a16", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842361, "uuid": "bcc1c0c9-ff28-4ab0-a3f7-1c02e6524346", "comment": "Malware payload", "value": "2619bf2a2d9152bb81a318cc6006e2c04b3e7830496d52b9e2866f39184d6e26", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842361, "uuid": "8d8f79d4-c8f8-48a9-8775-7f0fc778e395", "comment": "Malware payload", "value": "b8641e358290a06998099821d232efc94006389b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766842361, "uuid": "9dfcfdd8-4456-4d71-aea7-9af83a740dc3", "comment": "Malware payload", "value": "783d45782408ac0f0d23c8952e7c75ec38f89d3d07339a758f397ef99d7ae4bb4f77e95232c1211c5ecc2377707d62b3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842361, "uuid": "4ab62896-b8a2-4736-a937-25e7bace9ff5", "value": "T198A65BF3E85155E9D1AEA235C9A2927EBA717C480B32E3C72A50B27C2E777D05DB4340", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842361, "uuid": "74d03ab8-bbd9-4dcb-88ee-16de589e6354", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842361, "uuid": "998229ce-1ac6-4968-b0ea-8914ec2587ec", "value": "98304:ay4IzIwCr6ukA4twOC4ldFEQsJlwDes+O+SP9qow3vyEi3+rXy:a7IJi6uV4tv/Sv2ecZ1qLq+rXy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766842361, "uuid": "e61f2518-6020-46ce-9847-7ca51e88c332", "value": 9870336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766842361, "uuid": "394deaa6-86fa-45df-849b-562d17f085f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766842361, "uuid": "b3dc3d75-6b47-4ebe-a129-f7cd553a7202", "value": "Muviane.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d12c760-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Joker)", "timestamp": 1766797600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797600, "uuid": "97945f4c-829d-43f5-88ed-7e0bd6583320", "comment": "Malware payload (Joker)", "value": "4ba4dd1683d2781ed2cbc4fa61c14e43", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797600, "uuid": "e8029b9a-b8be-470a-b5c7-00ed69048764", "comment": "Malware payload (Joker)", "value": "264fea3e0d81d1268e1cf474cfb0bb89889ff35367592b59bf05abeca300303b", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797600, "uuid": "08bfb4e6-c49c-40c1-a6ea-84d31709c5ff", "comment": "Malware payload (Joker)", "value": "ac97f9e7b2a214d4ceedef2e763b88ba3e709db8", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797600, "uuid": "c2fda118-a716-49f4-89b9-6cfd0b5af0ad", "comment": "Malware payload (Joker)", "value": "bd55b6b860abc297edce6e06a740fdcafc86e37776a78a0739a30a7cfc5746848dafea2a8bcc50aa0f4ebd1943b48ef9", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797600, "uuid": "d42139be-190a-4d4e-8f14-439888903937", "value": "T166E7124AF60C992BDDC6B07CAD9B07C3B9226C456710D28B2921B11CBFB77C49E167E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797600, "uuid": "37b8aaa6-1817-4976-8036-74e9a578a6d7", "value": "1572864:y5s1N8FgDaojuRbLhzUlguFqkrR25S93NiKSAU7dnNaWW:X8GDqd6gTkrwc93Q/aWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797600, "uuid": "b45890e7-a79e-4e73-99de-d4817a81c49c", "value": 68588212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797600, "uuid": "053b4992-fc88-4792-bd4b-0d3e49a60ade", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797600, "uuid": "2d2560b8-c4ea-4a33-b533-e4615e755290", "value": "Style+Messages_1.5.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3596e3b9-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766797131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797131, "uuid": "d87edae5-5be6-4652-b4b9-c0850d3d1963", "comment": "Malware payload", "value": "894587d3f2fdb2fada27cb0730ef24ec", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797131, "uuid": "5d59d739-8fb0-446b-b7c5-2965c746f386", "comment": "Malware payload", "value": "26850cb5a2af14c3ee3c9f0f5716ce523d49cea57d3d8327585c97a7f5c60bb7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797131, "uuid": "1be8483a-dfd4-481e-aa0f-37edfb20e3c8", "comment": "Malware payload", "value": "424955f80a51da86431c56b51c066ce288b2304c", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797131, "uuid": "54b962d1-e72d-442e-a334-479a394c9d44", "comment": "Malware payload", "value": "c7c7da89313b52d89b53f4ed27357601ad0a783c46d5da4a0cb0bfe52382212039447d358d45d96f1c1647512149e863", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797131, "uuid": "2cc8dcd6-1b74-48e9-94bc-96486a6ae90a", "value": "T15AC63332F5A15067E2F10477E834A4307DB8F3282BA0D8ADD7D4E9693EB54C267B7612", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797131, "uuid": "6c554edd-3ce2-40d8-8fff-b99000a083f2", "value": "e277f1464e7729ad9df5ec047611738a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797131, "uuid": "36b370b9-753a-465f-bcfc-260895c1e44f", "value": "196608:/LZR3LBSTuSzwCjG4l+g2/0Uakqj9NTnxa9Zr3LhGsLnCHb24EB8awxhhnQ4PhYr:FRbgTuq1x+1OCZrbnLs24nJRQCyAont", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797131, "uuid": "c6614062-96df-48e8-9d5b-45cb7be22339", "value": 12599949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797131, "uuid": "1aedb13f-7702-49f6-bbbb-3717a7de6a27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797131, "uuid": "40544328-3aa9-474d-ac97-4e692bf6b83d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5281d9a-e340-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766852777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852777, "uuid": "19dd88d1-1c18-442d-b54e-42a39e88e77b", "comment": "Malware payload (Mirai)", "value": "ae5e461b20ac9f0fdb1f4d6ff369989a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852777, "uuid": "51667260-6e2a-4c4e-8d59-731bf59841e7", "comment": "Malware payload (Mirai)", "value": "26a1fbb3b5f8a69baf9cd668fc1235af96f4b5e093795b36618c87865aecbd91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852777, "uuid": "d8523c1b-d480-4c43-80ce-d86c70865c7f", "comment": "Malware payload (Mirai)", "value": "a9345a3bd149e34138370e89613a3236e851c2b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852777, "uuid": "7ed1ee43-78c4-408b-90c1-6355075d6ab5", "comment": "Malware payload (Mirai)", "value": "2077974fcbe2b9b5a454422400f7af4ca0bf279f32f7d23b48a241cebe82234e76890f33089d5000cca8cf75e4c87749", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852777, "uuid": "73594d35-0b9d-45ec-b75b-539f244177dd", "value": "T156F38DC5E683C0FAEC164571217BBB365DB3D13F662FDA82D3BC9A31E841540C616AAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852777, "uuid": "2e93bc6f-b865-484e-afda-329094f27187", "value": "3072:MqFOZr5xD5X9iQHyqTtj1uA2OoZUPT3CulzD6fHc6hGB1Kl+5osNnssssssssssL:Mp1p3ig/TSa3FlXeHc8+5osNnssssssD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766852777, "uuid": "8cdc9c15-22d6-4475-9118-d9f036453841", "value": 162248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766852777, "uuid": "65ede57d-6c98-4149-84b6-07bf3ea4af34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852777, "uuid": "6350bc4b-77c2-4593-b30b-5c22213b8824", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ed91318-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854645, "uuid": "b6dbd921-8660-410f-9549-8de1bf01bf83", "comment": "Malware payload", "value": "4d5539ac53b5fc998628016b5f777d6c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854645, "uuid": "efffa7c1-a17c-4f67-8805-d97fa3f20c5b", "comment": "Malware payload", "value": "27536937e235b48f6528326a2b1af7ca4ad438eb076aa9392030c92b2513c521", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854645, "uuid": "951ed9a4-f18e-46ec-aee4-a2729375e76e", "comment": "Malware payload", "value": "fb466adea0926b8947bd30676c87bb391d61b5c1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854645, "uuid": "340a7361-c0fb-44ac-95d4-f99b7dfdc435", "comment": "Malware payload", "value": "2b8d2312962aac5f78d8e864164eb50af4a9f80d7a622c495cebca02b64dd8583cd649b18ab76204f730e5ec486fd57c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854645, "uuid": "ab37934a-15de-4c68-abb2-7965578a91a2", "value": "T1E3732B4FFEAE414C586A3791B4CF2ED073EAFF1AA8957C90252321194F48EDC6E14663", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854645, "uuid": "bd19415e-cbb4-4c1a-9815-ce66220a398f", "value": "768:I8w/h62/jWs6oS+xISN0vsWsQNAdkfScBYrwz2y8kTAlGB:I9l/AoSSMsjusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854645, "uuid": "0f01d263-20f1-4b77-8413-d42d79c97270", "value": 73539, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854645, "uuid": "c69cba3c-bf9f-4fae-bb7e-e022ff738524", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854645, "uuid": "3e4983fc-d8dc-4d2a-9e53-0cdc805041a8", "value": "invoice-1645080830.pdf (73).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97188397-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811038, "uuid": "3d502ddb-e49f-4440-84cf-7cefc34e8743", "comment": "Malware payload (Mirai)", "value": "95be04c9a5edfeb04af0715bd0e9081e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811038, "uuid": "621c50c7-6f52-451b-b902-80af6683ce50", "comment": "Malware payload (Mirai)", "value": "27a15bcd04645dcb4f8af2f32d64e152c050f18bbd30329e6631baceebb7144b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811038, "uuid": "1c856ed4-d2c7-46fb-b3ce-1a473a392742", "comment": "Malware payload (Mirai)", "value": "e2b5d95d7fde93a22be467f843f41c997cb674c4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811038, "uuid": "2167ac4f-ace1-47bf-bd67-062d7bdf1742", "comment": "Malware payload (Mirai)", "value": "a9db963755dc661b484ff1c94f33c67843bd85a7986ff98b5d537f02b0ff333bb9931139ff908b055a19442d7fcc3b22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811038, "uuid": "62001630-cf97-4852-be04-1d2ff8e5ae89", "value": "T1DD639409BF654FB7EC6FCC3749A91746258C641A21A93B397E34D828F24B24F09E3875", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811038, "uuid": "4a1385d7-adb2-4377-a9db-1410a6f76864", "value": "768:K+xGiJEEYlDIR99LYkLUAJtw6OC5f2eaeyWecfkoN3pkavdE5tXirnM+ufp:K+xGiJxYlkTpJJOCgvjWrfgrAu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811038, "uuid": "8462faf0-a7a2-4665-af58-d30bd5e5fb2f", "value": 67484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811038, "uuid": "437967ba-9da3-4351-a227-9a8598121986", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811038, "uuid": "78299818-03c0-405c-8642-494235e5fc0c", "value": "hoho.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1f42a7d-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825311, "uuid": "abea78a5-b557-4eb5-84b1-315047f002f7", "comment": "Malware payload", "value": "e339d3663a8f0df16935c83a33e5a27c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825311, "uuid": "e71d709c-b20f-47a3-a345-9cf3a56ed6a7", "comment": "Malware payload", "value": "27a7ed5aa7f905161c1a0cc65bc0b66439cd06cd253c6c0f9fda1344cb2e0410", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825311, "uuid": "9d14a436-c387-4881-b0c4-bb72c62bd810", "comment": "Malware payload", "value": "c006b3a40193f332f08e578e2a981721e2169d02", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825311, "uuid": "eb0f5c83-a1a2-49e2-8aec-423b063c298a", "comment": "Malware payload", "value": "56e6e3c9098c0299390ce85e084880b215172f15baaa1cb8d833065121b4f3a3be7c9bafca3f1dc23447486c44110721", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825311, "uuid": "8470cde2-2f23-4a7f-b459-37b88b0e2dc4", "value": "T10B733B837F3D687760FDAD95C5E883174816269794B87D1481888CC0E3ABB3B8DE53E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825311, "uuid": "663deb8e-2823-4f7d-834f-9dacd70dc4bd", "value": "768:I8w/h62/jWs6oS+xISN0vaZ3QIuJdkfScBYrwz2y8kTAlGB:I9l/AoSSMYmusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825311, "uuid": "0c20f1f8-45de-4d65-91f7-686f2dba2867", "value": 73411, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825311, "uuid": "f299f239-baa0-4c11-a79e-f4b48ca6d299", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825311, "uuid": "bb77ece3-f40c-4c0d-9f11-b190d572d033", "value": "invoice-1645080830.pdf (87).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e3c10f1-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857839, "uuid": "9350e179-dacd-4227-b3ba-ed5e78120463", "comment": "Malware payload (Mirai)", "value": "73e81ec2d954099d916e5420237c7c31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857839, "uuid": "ed077e6a-bd2e-47c6-98fd-2a7794c54df4", "comment": "Malware payload (Mirai)", "value": "28d86aee17e696ff83aad0c550380cc28a923461fd5bfdf16f70f4b406412eec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857839, "uuid": "e1224c36-3a9d-41a5-800e-49af4b394431", "comment": "Malware payload (Mirai)", "value": "3f20ee7468fbcb1cdb62c59eb4b8877cf7b0bf16", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857839, "uuid": "70a51090-4f14-4662-9555-e7a19563510a", "comment": "Malware payload (Mirai)", "value": "a07cfee234fd788a616595d856a03186ae9c9c1fd98f2b7abe9b27a6f748af84c165a177c9db7da44df9d2728950f5a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857839, "uuid": "5822567e-d0ea-4c89-8434-e7c947007754", "value": "T1D073094AFD819B55D5C665BAFF0E518D33530B68E3EE72029E14AB25678B82B0F3B401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857839, "uuid": "525ece71-98bc-425c-b104-d3b75b18c646", "value": "1536:P9nKdnqWhlMRsDX+fTOQuj+wcT2yJMgGAqmll4ciS0i+7f9CZkYmKBbVRR:MdqWh97SHuj+BT2yJMgGpQ0t7fQmGB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857839, "uuid": "6bc4d9b1-4902-4a29-969a-42d85ee5488c", "value": 79744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857839, "uuid": "96759d6a-43b5-4625-8c3d-5376a28d7b1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857839, "uuid": "e7f1ac5d-a7e2-48c2-9ee9-2caa4794b611", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf2cfef8-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825735, "uuid": "cd26cf96-866e-41d8-b651-62f5fb07cdf3", "comment": "Malware payload", "value": "4fb2b28bfe5a0452c20124b8802bfa75", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825735, "uuid": "1eac8dfa-dc3d-42e3-9422-6f695497bdb5", "comment": "Malware payload", "value": "290e5e51e4583e60875ab6a063ecf6437b15ea75deb57a2e47eec907e8a762b3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825735, "uuid": "cbee7822-7a83-48db-9abc-4db2aedc8f86", "comment": "Malware payload", "value": "297a162946269093f8668257a8767a4d7398e048", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825735, "uuid": "dd6f996f-daa1-4656-83d4-86954dfef2d6", "comment": "Malware payload", "value": "3ecbeec5886897947cfb434140a4a93d7de853944fc3f48c62783840ae4bea6179d425fd5831648eb033fecee7b7f731", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825735, "uuid": "a531c90f-7e3d-42b8-862f-d48a6337d359", "value": "T1E2632C6E1EA35E9D07E775410FBA2D5A4C79FFE3DBBA9047410BBC024B85B49BC60284", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825735, "uuid": "184d7908-d246-42d6-86cc-120583be42d8", "value": "768:I8w/h62/jWs6oS+xISN0v02dTysdkfScBYrwz2y8kTAlGB:I9l/AoSSM5/usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825735, "uuid": "4aa285c9-b0f8-47ac-bf6d-999e2ae5128c", "value": 70581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825735, "uuid": "13b9bf1c-6c81-4894-a092-30623a5a0d8e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825735, "uuid": "af8fa562-2954-49d1-bea1-a3517764dd7a", "value": "invoice-1645080830.pdf .js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7daf9ac0-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854804, "uuid": "0a153bc7-d7b3-4b7f-8c9b-33e55460e4a9", "comment": "Malware payload", "value": "c6d9c19df762180d943b58ff8a497228", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854804, "uuid": "04bdd790-7733-4bfc-b7f4-dba957580465", "comment": "Malware payload", "value": "29565a26689010fb086e9c3613626c604bf0f9487f4df8126265429d4dd5038f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854804, "uuid": "157dc0d6-b3eb-459f-8e5f-5950392db8fb", "comment": "Malware payload", "value": "fb0cbd88b6fe71aba82dd9176bf36a70456f6a11", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854804, "uuid": "b0de2f48-34b2-465c-9d7d-a9d2b320a347", "comment": "Malware payload", "value": "503f732553a13e5b079a19755442bb17518da8e11591fdb7e3e834c7bd6d7a4c016e122a89e4f1324b56126fec9d3a4b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854804, "uuid": "28b9f64b-9849-47b0-b0b6-d9ec51dcf8dd", "value": "T1E3630A923D20BEF74C7F5D65F87A129844D68E8DC4B290D2E14846D0F86CDAA8471FEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854804, "uuid": "955fa738-2548-4e08-a71d-564635d2c138", "value": "768:I8w/h62/jWs6oS+xISN0vc0tPo40V0lYyoDbXPZVH0oN2s87Zv+QAMBthIPqxHNf:I9l/AoSSMVOusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854804, "uuid": "a878d50e-ce8f-4664-8930-a4d580d6d4fd", "value": 70637, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854804, "uuid": "d50fb19b-0f0e-43db-8125-44fc830f9c90", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854804, "uuid": "818fbf08-04a5-4cb0-b4db-4b2b7d9c4c14", "value": "invoice-1645080830.pdf (40).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e609176-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854859, "uuid": "f10e7ae8-2164-4afb-81b1-6512bff6040e", "comment": "Malware payload", "value": "2eacb17d62a053a803910bc61cf42521", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854859, "uuid": "282fab69-ee15-442f-b9e8-5caf7562a7bc", "comment": "Malware payload", "value": "2963047f821ab595018ab67d30885b674516ac2405a7f62e45b86b5357693578", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854859, "uuid": "67259b74-c5f2-468e-a2fb-0bd06e22d63b", "comment": "Malware payload", "value": "05eb604c7b7e8c01e367eca5964baac9c7da84ca", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854859, "uuid": "527f89e2-5381-4d92-8212-1323459b9fd6", "comment": "Malware payload", "value": "4d704f5ebb4476de4439154beaabd2d10e3d88590fb93a31951af7893dc68df0338672414e2eb48277131ba029c4e834", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854859, "uuid": "864707d7-96a1-4460-bf5c-291ec45073a0", "value": "T1DA735B8608347E5F46BDE60BE71D258B886576AADD8D76CCD000EA0E1338FB781D788D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854859, "uuid": "3e57c4bb-0516-4fff-bd8e-10d28722e2f1", "value": "768:I8w/h62/jWs6oS+xISN0v2chlNy+d5kd+p+0cDKIModeirSiu39xqrW8SIo8SJKr:I9l/AoSSMLk0usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854859, "uuid": "c182473d-bb7b-4860-a565-f0e899363e7c", "value": 73437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854859, "uuid": "6d58b2fc-7332-429b-b278-8d30574acc1d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854859, "uuid": "3aaf49b3-23e4-4b55-8652-569ed82fbf1f", "value": "invoice-1645080830.pdf (25).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c59c8687-e366-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766869099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869099, "uuid": "d2bcb414-fdf3-486d-9b25-8ffb029d0a78", "comment": "Malware payload (Mirai)", "value": "2c96bf8cb0944eae65b8226e19abf4db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869099, "uuid": "f40f0a05-9ab0-46d5-aa6f-590aa4d4de00", "comment": "Malware payload (Mirai)", "value": "296a9faee9dfc5e509c4ecac27d51faae3ab78df1262e9c598aeab395c3fbf2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869099, "uuid": "c02a4d46-51a0-4a9e-b353-5fda1e624777", "comment": "Malware payload (Mirai)", "value": "4c61925495d228e8ff72a46efa6bcd02b0b26709", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869099, "uuid": "c183e869-5b4a-41d1-8105-512dfbb67447", "comment": "Malware payload (Mirai)", "value": "386a97f87e43f1e88da333ea5a629679154499080e7ea0e882262306b029ecc84dd3bf06184f056e265497e016164681", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869099, "uuid": "0728ae62-d62c-4c4e-805f-40c6ca3b26f3", "value": "T1D634E60AAF610EFBE8ABCD3306E91B0124CD641722A97F757674C514F14A68F5AE3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869099, "uuid": "2e8a1811-60d1-4bd6-9299-3beed9be3a9b", "value": "3072:9FP77xAxdEK9Wmn6Wrka4I1OFSx1YYjLv1Gd9bZlaora06hh1pQ+:9VBAxdEKwmjrkadPYYjLv1uXlelQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766869099, "uuid": "2f8c5ba7-12bd-4dd5-9bed-419d316d54c9", "value": 250460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766869099, "uuid": "7b4dd65e-d762-4c8c-951f-02ab9783fe95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869099, "uuid": "4608ecee-3211-4cd9-8b90-e547eec1d04a", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48cbe3f-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873767, "uuid": "33809cec-6457-4528-8137-f33d23b61387", "comment": "Malware payload (Mirai)", "value": "3ff718fb3940e904778e1e1c0cb13c9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873767, "uuid": "1ed2843f-4673-45b7-9ce1-39560b72e510", "comment": "Malware payload (Mirai)", "value": "296b9d642fd14c84fe71576cf454dba42c1934fb9c7776dcded93dfa8227b415", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873767, "uuid": "d2bf4141-d45e-42a5-8445-edc39d7a5069", "comment": "Malware payload (Mirai)", "value": "a905c7a8fb07c86b725af38603e1a7d295106cbd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873767, "uuid": "ce96a9a6-1413-43e1-97db-0f0779e32344", "comment": "Malware payload (Mirai)", "value": "502d9ca3de3f018aa20ebf46e29cfaaed79d8b92c37c05d9248178ee293a7654a07340003902ee12a2f170f16dbaf82c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873767, "uuid": "0bf4f75a-fe2f-4c50-b664-8cd8ae72caa5", "value": "T10803E13FCAC1C38DE7DE4DB9843C3B9B1400E85E211882E1D8D9E6466474355383E6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873767, "uuid": "f6885d27-969a-4037-96d1-664fe3994c74", "value": "768:2ZJlrWnz2VKAanz2GDVNPreij+1mH0KvwkuebagVnbcuyD7UHQRj0:WPrWnz2VNazvBZreYNHnvwktb9VnouyS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873767, "uuid": "d51853d4-baa4-46bc-816c-bd389598e853", "value": 39240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873767, "uuid": "cfd917c1-5ac4-4204-a6db-4c9e3b6d2fd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873767, "uuid": "6304f20c-66e0-40b5-81a4-f48ff17fcd33", "value": "ub8ehJSePAfc9FYqZIT6.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a06a477-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825619, "uuid": "f294622c-817b-4990-947d-dc01b6b55672", "comment": "Malware payload", "value": "b2f06917777827c676e0eb67e7f5460a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825619, "uuid": "41d06290-4685-4424-9e18-1ab1b1e6aba5", "comment": "Malware payload", "value": "297afc2e5c06ee6215de315a60ab15cfecfc4241b52bbe82f8193be43f1364ff", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825619, "uuid": "22c5e85d-876b-40d5-bca1-357bf7539252", "comment": "Malware payload", "value": "3b42e295e9753c4806350a61099f6899b6c2eb05", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825619, "uuid": "43a6198e-9b32-4a9e-87b2-18a384f8598a", "comment": "Malware payload", "value": "29137d3fca8367c13420186be46262ddee2c4d9bbb0c5b7ab7d87a2116216e1c1d6c0cbd73be93df43f97d9a620601ff", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825619, "uuid": "ab5128a9-c90f-4f2f-a24c-945266f13bce", "value": "T175731AC67D56FEFAD9C6A86E26CC73C6D81C403B67D15E1998E3F4388CCC6207561AA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825619, "uuid": "8575d998-cf87-4301-a8f5-c9a407be0c5c", "value": "768:I8w/h62/jWs6oS+xISN0vBEsEWEdEvEvE9EbEBEbEvExEDEjE1EBE7EkE+EtECEE:I9l/AoSSM7pusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825619, "uuid": "123ce2e6-dda7-42e0-bacb-17a8fdec9a02", "value": 75339, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825619, "uuid": "c1416926-163d-4d08-85c2-001f19a627d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825619, "uuid": "981aa837-f227-41bc-8cf3-d7e92cbc6927", "value": "invoice-1645080830.pdf (17).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d27fa9fa-e364-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766868261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766868261, "uuid": "bcc9b298-8c5b-4a1e-8b94-4680645f720a", "comment": "Malware payload", "value": "0f25594c91b3cc3f69a11075c6638f7b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766868261, "uuid": "4a1bb7b0-2f04-4960-94b4-5a1229697c54", "comment": "Malware payload", "value": "2a7df03e3756608a7e7f93c6aef7b5bd937523f44105d224c0f716d1a52acb7d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766868261, "uuid": "fc331f50-5a44-4949-b0a5-791a7e1fa9b1", "comment": "Malware payload", "value": "e394c60a4eb438390c4888f67e7feba2269d1ebd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766868261, "uuid": "30c7f9e3-6c0c-4269-a3fd-e813c64d9cec", "comment": "Malware payload", "value": "204b0d7b16bddd1950c0fe4033e4cb496eafe163195200f06a413622a4115d71c9573085ad0790816936c4bf9690850c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766868261, "uuid": "e772afef-115e-4baa-8f74-cf144f763f32", "value": "T1F7086B4262EA05C4F9F7DA758AF65617C673BC122F3095CF221C17291F336E09A76B22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766868261, "uuid": "a4ab8cf3-c902-4303-a3f7-b067e9b1bff3", "value": "e05e31a5063c852520cc6950fe83ad1a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766868261, "uuid": "6469b8e2-61a0-48fc-b061-8527aee3b7c2", "value": "393216:XIFqKb+iUHdZQKPAg9hAJLPU689cN0DshEQu58EASEhoIaE2lShUcBs4DJ7G15PA:XndQmQJhnVn0vSa5rs3wbPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766868261, "uuid": "b17df65a-54cc-4013-8e13-aa280b5a9f71", "value": 82352091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766868261, "uuid": "434602fb-7dfa-4334-a197-cb0e8a1e85f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766868261, "uuid": "0055f4f4-70be-42a1-a73e-0006540a478a", "value": "Game.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40bb236-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870358, "uuid": "dbec068d-c64c-4325-9e10-0f603ffe9d80", "comment": "Malware payload (Mirai)", "value": "a73431cf3ade59b2636e216fbc7bce7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870358, "uuid": "517da7ff-50cf-4bf4-b8c7-8491d0e265dc", "comment": "Malware payload (Mirai)", "value": "2ad14eab963e376f4e0ef9a6a7176727841cb4914d1b2fb98a1019782acea8ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870358, "uuid": "a06f057e-46b3-4cb8-9d8c-0648fb7251a3", "comment": "Malware payload (Mirai)", "value": "326a43b6b79ab6b393a0fa08b7e35e4422b7d75c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870358, "uuid": "696517be-caed-40f5-b628-8e2e98f4f10d", "comment": "Malware payload (Mirai)", "value": "3cb5dd6585f41f2178478c9f1f787da40eb3e3d4d848e6fa9c5af226d7ae9f67938c4bf13743501afc4c2d5e567c8829", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870358, "uuid": "80bc43f4-13cd-4f2e-b8d2-e2e122b0fe80", "value": "T1C4D34B42EA408F13C4D5177AB6EF42493322A796A3DB730699289FB43F8675F0E63905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870358, "uuid": "99f4ba5d-9e0d-4584-b112-8ee8b8802696", "value": "3072:nMgkjCK+Efs4hj3nO1styKTRlTyHRo8KDrYM/9paDY:nMgkjCK+EE4hj3O1styK1lT8S8KDcM/H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870358, "uuid": "04c925ca-260d-4f8c-be8b-6cb5d1c1a75b", "value": 132472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870358, "uuid": "fc0aa6c8-514b-4074-a708-7819913b65f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870358, "uuid": "be9df107-c21c-4a0a-a387-c3b8b7b99ddc", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72a51fff-e36f-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766872825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872825, "uuid": "dfabab11-0c4f-4a8b-9d52-09b682bb1997", "comment": "Malware payload (AsyncRAT)", "value": "01e5611d723ee9bfca31a6af0feff3d0", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872825, "uuid": "e8923af8-a752-405b-ae05-67868909d53e", "comment": "Malware payload (AsyncRAT)", "value": "2b31fb4d7e7623778a5175bd1716a555b59859047a602eb25238aceb584cc84e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872825, "uuid": "0436d077-4487-422f-9655-c26b6898669d", "comment": "Malware payload (AsyncRAT)", "value": "859c6e1c8ca474dbbd138bfc75e8f8633d9b7e1c", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872825, "uuid": "5724c0c8-0533-4518-a481-7b080da31648", "comment": "Malware payload (AsyncRAT)", "value": "37ad6fd0b9d120aecaf16203fe266e9ca8fd5d5858b9db11010628eeb4491920921581101ba737b8305588b4a56e8ba6", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872825, "uuid": "a7335fed-174d-4e94-a2e4-5c8406ccc9ff", "value": "T150232A103FE9812BF2BE4F789CF26145467EB6633603D58E2CC411975A13BC69642AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872825, "uuid": "bcc75e1c-9640-4bb5-90c7-c2ef4f0f4e0b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872825, "uuid": "4d7b5773-c20a-49d3-a4de-6b067acf3cce", "value": "768:vuGE1THwoPNWUtHT1MHmo2qzpAlldGsIPIPzjbUgX3ikdI9gs6OnWBDZ4e:vuGE1THbF1m2sA5RP3b7XSkdU6On4d4e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766872825, "uuid": "824343a4-7c4a-4031-ae4c-682de4e1bd58", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766872825, "uuid": "473813cf-393b-43c7-8355-54fedf4630b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872825, "uuid": "57069f57-0ed0-4694-8ff9-cf4ec672654e", "value": "Skype.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29ec6a98-e2c5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799688, "uuid": "a31d6f38-9bf8-4c5b-b739-1329f02ba334", "comment": "Malware payload (Mirai)", "value": "30a9c2a1a6d1453b6e64de1cbeb82ea0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799688, "uuid": "7d892253-5b41-4193-b3cb-0945f76d98b0", "comment": "Malware payload (Mirai)", "value": "2b642c403b08a984f077d8a73cf64396cdd6b2178ea8f6359c9e0027a4310b45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799688, "uuid": "9503c460-8af4-455b-8e72-5ecb63c72cda", "comment": "Malware payload (Mirai)", "value": "520c3c31fd6b041f71fdbcb58262bbb8edf3b714", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799688, "uuid": "33682ef5-2813-4c53-9a08-42d9b7100909", "comment": "Malware payload (Mirai)", "value": "25d10ea48d2a46fdf352ae08a0544bebef57abb69316b0e9ffdeed84d823424a22eee4963ee880be3110dafb76e70f9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799688, "uuid": "8c13a34e-e58d-4a75-a299-9c2529074315", "value": "T1B383E896B981CA16C6D552BAFE1E51CD33131778E3EF72139D106F247B8A82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799688, "uuid": "e986422c-e887-41c3-b9d7-c2bcb7cb1cd4", "value": "1536:7RnTVkEkONYnjlit+qffSH3UUVQodFOZMT7apvE3JMMCiTCYmF9woy74PYnbVR:paE3N4itTqHV1cZ6aaCYmF9woykPW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799688, "uuid": "799b3285-4821-4fe0-a3e6-961f5f00893c", "value": 87224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799688, "uuid": "005ba965-2b81-4a6d-a246-3e7125ad56cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799688, "uuid": "5186173a-628d-4a5c-adf1-e1ae8b2199e0", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c35f3c-e2be-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796700, "uuid": "5bbe1c20-b189-4173-b0a6-07a6567e9eef", "comment": "Malware payload (Mirai)", "value": "fa72b7302176d3e1e014e37e48516f9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796700, "uuid": "ed1b6879-c384-4e8b-b337-4480948d0bc7", "comment": "Malware payload (Mirai)", "value": "2ba895dfe3c6716d9bcc17e4f88748cd12055965c083b863947e7ccc16f28744", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796700, "uuid": "e952d840-57a3-46d4-9ecc-49e6cf1d1d7c", "comment": "Malware payload (Mirai)", "value": "b1209141381bdbd8610aba5205fd667f40745097", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796700, "uuid": "95068b8c-fbea-440c-bd10-e721463e5ae4", "comment": "Malware payload (Mirai)", "value": "dbb13dfafe47feb8964685f9a7f20f902b00a5cadb656c978af9ef749de789f028591fcff629e48276c3cd9305047d44", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796700, "uuid": "49efb1f2-02af-4b65-846e-addec392f66f", "value": "T199835B2168792D1BC5C4A57B21F34331F2F6174A26E8CA1BBD730D8DFF156502217ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796700, "uuid": "e66a3d5d-5b8b-4e6a-a36f-b660c06406a3", "value": "1536:hMYoSCdjEsdCHCrX0fxZetcVWzfpVxZ3tfXrp17gZ3k7uh6:httdBiCnY/dDfrN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796700, "uuid": "ba5cac21-7c31-4851-8a53-3f88dec88e09", "value": 83148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796700, "uuid": "2ef9d15f-5ff3-40da-8701-b5bed717732d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796700, "uuid": "632718d6-58f1-4fff-9c53-553cc09edfc8", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5032359-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830899, "uuid": "5dbb94a1-8ed4-4230-a784-9bbc81ccb919", "comment": "Malware payload", "value": "08056ab8934d9fb7cdb21d8213ca05b1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830899, "uuid": "3698fcb4-fe47-4118-bab0-faac706380e3", "comment": "Malware payload", "value": "2c23317fc7ba441d8dfe9f6541b65088ad1340d7296f929ca595e653985f9249", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830899, "uuid": "d3467284-6076-47ba-ba89-b989fa4b890d", "comment": "Malware payload", "value": "6ad552c9b4cecdc93b66117b707f30d5f95bb2bb", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830899, "uuid": "8e8611e9-3b2b-4f8e-8181-db67bbb942bb", "comment": "Malware payload", "value": "705468e130bba36e6fdd2300c1ea26d06ce07b8115fa5627ca48ae281946bbc8c4c806e46c3c0b36e7e26a4a694c1b66", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830899, "uuid": "9956f4bf-aade-4f3c-b63a-fdb78180e38e", "value": "T1E0631A64E74C25F7231CBDC66D8D826F92013C72CD410EE01B5B8711F95CEA96AA6ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830899, "uuid": "e398a25a-eab3-4580-ab1b-ed44ccac159e", "value": "1536:I9l/AoSSMCzumMk1kpSUz/SmRgIM4mM95E2k3i7fEPGV7oZazua2hD/mDYOs0fcm:I9l/5MQtusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830899, "uuid": "c9d3713b-7148-4acc-9e59-7c6df2b6d179", "value": 71555, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830899, "uuid": "708a7eb4-89c9-4e81-89e6-69ef60a2cf4a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830899, "uuid": "a35c56b4-0c41-43b0-bafc-bb0645fdb055", "value": "invoice-1645080830.pdf (7).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85d0e7bb-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860831, "uuid": "9700adfa-3375-42d0-ab90-5c73a0eb8181", "comment": "Malware payload (Mirai)", "value": "91f89fba5adf17abc67490fa2d57edc1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860831, "uuid": "bfa5684f-cd00-418b-a712-1320af818fc9", "comment": "Malware payload (Mirai)", "value": "2cc7c75af27452771c7b19a3630a8245c7322b89f9ad5180b499a2cc25467c79", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860831, "uuid": "cd650cff-2140-437e-94fc-8e3bc181320c", "comment": "Malware payload (Mirai)", "value": "ae2ecbf64db1d77f501f8e5d0e5b71fab62b046d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860831, "uuid": "272cc1eb-1830-4c03-ac6f-d5710f5bca7a", "comment": "Malware payload (Mirai)", "value": "113bcc071bbfe71885af79ff008cf77bd2efa08b35b875e1254f2281cdf07ddd43a053a519991ed2d13ab08f3640c2e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860831, "uuid": "2d1de577-27a3-4d90-a23d-95b12fa3034b", "value": "T10CB3F809FF610EFBE86FDD3746E90B0525CC651722B83B3A7574D828F54A64B0AE3960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860831, "uuid": "cad93688-212b-4a7a-a8e0-3d467c2ea38f", "value": "1536:+qyOQnGSKen2t7a0e1hQikpfbiiMLjRtaWA8KIPKzMs14UIaZJiAtzL9U2+FShgO:+qyOQnGSKeke1mfHISzMFUIa5FfgEEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860831, "uuid": "b4059cc3-9610-4357-bbd2-423279620fdc", "value": 114196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860831, "uuid": "10cc1855-03bf-4f3a-9d7f-aa9b14d6145e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860831, "uuid": "97d152c2-1634-45fd-9e3d-bed2e297006e", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b76fdcd7-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825266, "uuid": "457f0121-1248-4c61-b042-358cf9104af2", "comment": "Malware payload", "value": "549c2a72a42a9fe2bc30307fa74f0828", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825266, "uuid": "5fcc4284-fab7-46e0-b1aa-f75167d92b16", "comment": "Malware payload", "value": "2d32063459b3dbe518e35adb98874b1d5cbb963e998dbbb4cfd8ce836612decf", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825266, "uuid": "9d413ef0-c820-4d7b-826c-5ce24a2c7a3d", "comment": "Malware payload", "value": "a063d12b9df4de33272902cd629139733aa9ec14", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825266, "uuid": "aeb0875e-4c86-4d1b-9761-9769370d00c8", "comment": "Malware payload", "value": "a64706aaffcee5178286b90d6e26322b9fa035e3c513ca90f29f1920cc2f2c7f2669cabdc98cc3839f24d4b742f51112", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825266, "uuid": "78792fa5-e923-4bd2-aa11-7b9a7604e55b", "value": "T1D3632AA83FD05ECD11B996D0DFD090EE40CAD0B235FA94BF196A77290E1B90055BF72A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825266, "uuid": "11c15b18-3523-43cc-a254-e4e78d41a396", "value": "768:I8w/h62/jWs6oS+xISN0vf32efN+dkfScBYrwz2y8kTAlGB:I9l/AoSSMffYusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825266, "uuid": "119bc5f7-292f-477b-9f3b-540146ca1275", "value": 70626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825266, "uuid": "bb2cdd0a-be1e-4fcf-bbb2-d6bcc74ce5f2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825266, "uuid": "f78fc1ff-fccb-414b-9b2c-bc1a7b63a134", "value": "invoice-1645080830.pdf (95).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac8803a7-e2bc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796042, "uuid": "95b7ddd1-dc74-450b-adfa-2af8d4f721e9", "comment": "Malware payload (Mirai)", "value": "5e966238a2ca06fbcb93a4280aac9de7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796042, "uuid": "ac31220b-024a-484e-b8dd-4e9c8322c6be", "comment": "Malware payload (Mirai)", "value": "2dd382c9883048d752af92acdae3fe78e0c205993c9fba2a9c96c2f39ece9724", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796042, "uuid": "a458330a-8fdf-4e6e-a0b5-47ef8352fc7d", "comment": "Malware payload (Mirai)", "value": "351b40f9331f9f7892e1a3cd60e58a175a35457a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796042, "uuid": "881779f6-7beb-4a25-b2d1-35c97f6fbc74", "comment": "Malware payload (Mirai)", "value": "bbe614acb8beac82d6ca131bda4c4c9e4de8031a3bfad3775e56ae823b5667372280b7d88a83061143e45ca4ad31561d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796042, "uuid": "95b6c678-3a13-4b45-b91f-7c19a436c313", "value": "T145D39ECBB74B9894C8A046F007C78B8E2B5322A58F53C9E73E2A15363A7D6CF15157C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796042, "uuid": "fdd61cd2-5a1c-4067-bdb4-60341b0ce323", "value": "3072:LJnEM1SvoZt2gaqNDpQcpgQPK1/f5sMIoZMpS3TgBndAq:fkvo9/fpK5Zeslq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796042, "uuid": "6ccaa38c-597c-4a05-b1da-e57f73f52ff2", "value": 140656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796042, "uuid": "87c46c5b-096c-4e49-9745-2bb4283f42ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796042, "uuid": "4b1370dc-e8c3-4b11-9e2b-a4f64177fff7", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3c169a-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859577, "uuid": "f1515351-444d-436b-b35f-6e920ce32582", "comment": "Malware payload (Mirai)", "value": "229d8f3dca596423c5c5a201f49aed79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859577, "uuid": "07769e5d-56b1-4cfa-8a9e-aa6085008f44", "comment": "Malware payload (Mirai)", "value": "2dee1758aa268c69dc65ff081d31b697a235c058fce95b22fa04d0720bd03354", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859577, "uuid": "c3d32b2a-0368-4065-90ab-ff44754f4234", "comment": "Malware payload (Mirai)", "value": "b9232c7e81638ed09c8fc8497a872285fcc207bb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859577, "uuid": "52639fda-7402-4350-88fd-17579a6bb2bc", "comment": "Malware payload (Mirai)", "value": "f64f3291d6e4597ede9ee284506a552bfac486048dcc148bfa9f37c0fa8fe85c7207009adf6a05b13d89df43772b0054", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859577, "uuid": "90280b3f-f83e-46c0-ab94-2835473649a5", "value": "T1DB836C21AC791D2BC5C0A57B21F30336F2FB574A26ACCA1E7E720D8DEF152442517A7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859577, "uuid": "d41cd3cb-4f63-4721-97ed-a58298372ccc", "value": "1536:AM+Stfco6FyGihlGagCpZeXPPZNuSFuAGa2CGEtKK66RdAb/xDd7uhO:Jf3d9W6snjzTD4dJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859577, "uuid": "6a4747af-0348-40fe-8e28-2d29937eaf58", "value": 83236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859577, "uuid": "9e5c405e-75f6-4854-9db4-d0f7561f2b85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859577, "uuid": "e54c4d82-94c6-4b34-a51d-348371de8a2f", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4e3c328-e330-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766845958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845958, "uuid": "7cf006c1-afe6-42da-bd9c-2f6131e58a49", "comment": "Malware payload (Mirai)", "value": "46b50c28dee23c752a2090e8a07d4596", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845958, "uuid": "2d451196-bd37-4348-b509-1a28e7df5ee1", "comment": "Malware payload (Mirai)", "value": "2e76e979d35f79dc402ae81ad1beb9d82d789914ff670535265a136a3db3aa81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845958, "uuid": "25abf0a7-b183-40aa-a496-66c3ac10fd51", "comment": "Malware payload (Mirai)", "value": "e4e0b8e723efb80e79884b4bb5013f5175c686fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845958, "uuid": "ca66e20b-33c6-4ee8-8116-568ac0a12e1f", "comment": "Malware payload (Mirai)", "value": "696633e363ff670cbb07b2e15b0055ca9125063dbf653a79e7eed94d8ca4fb67b0b6067a0776b4242276d283866c8a77", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845958, "uuid": "1b725796-32d1-4f43-ab73-74cd92cd8d85", "value": "T1C224C71AAF610FFBDCABCD3706E9070529CC651722A93B357674D528F54AA0B0AD3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845958, "uuid": "cdfabc83-1ad9-4336-b958-3f4583170e81", "value": "3072:3+zVKVlj9FIDVX3j0jfdZ/MKDyoUrn+q:3+zVKVlj9FIh3j0hZMKuB+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766845958, "uuid": "286e1213-8e22-4367-b07b-4c2fc40b83d5", "value": 210376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766845958, "uuid": "c8f7be25-303f-4dac-953e-5d61d1c08202", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845958, "uuid": "f1a68d34-1079-4ae8-b652-81b062a92965", "value": "miraint.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a30d63e-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830693, "uuid": "11ff96aa-b8dc-4a4c-87f3-eca8860ce8e9", "comment": "Malware payload", "value": "bc3f76dcd266aeeb5140e769ac92944e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830693, "uuid": "c117f143-1447-42b8-9b50-b0ee2e33df73", "comment": "Malware payload", "value": "2e8a494f959c82bcca7d22c3c085abfd80f70b67816d3e06c759bb3fedc6066d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830693, "uuid": "22514bf8-796b-4146-a780-5ead69469591", "comment": "Malware payload", "value": "69ddd53a71bcb7e359212eb30048f6359ec0e931", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830693, "uuid": "4532e6f5-6ee0-4cf3-b868-33811087c06c", "comment": "Malware payload", "value": "02f331b422e1d22cb76b814fe00370ba83fd1b9bc531bc00d15035e5089d673dcbb6b5a588369b1d933fe0e46c6d4dcb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830693, "uuid": "9ea4fdf8-6582-4e33-af68-41e40e8a3ba8", "value": "T11A73F94B9A32F1EE968BE73463900D02F7D3C69B84A4D38D7C97A2D7CE3D9108456636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830693, "uuid": "e54f51ff-816d-4a0a-850d-e7f479debbcc", "value": "768:I8w/h62/jWs6oS+xISN0vh8weLXdkfScBYrwz2y8kTAlGB:I9l/AoSSMipusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830693, "uuid": "57f4fc85-8332-4594-b993-9b849a0823fc", "value": 74416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830693, "uuid": "745d5ad9-f4b6-4496-8a7f-6897a6fbcd7d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830693, "uuid": "e4e2cd51-64d6-4de8-89bc-c2f4b691028c", "value": "invoice-1645080830.pdf (48).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a60f930-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858664, "uuid": "8e6f6968-ce8d-4515-8988-3214033e9b44", "comment": "Malware payload (Mirai)", "value": "37da48b0c38dc60414292e1951b2f46e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858664, "uuid": "bfa041b2-82c4-4e54-8fd0-a471be9ba37f", "comment": "Malware payload (Mirai)", "value": "2eb763a65a5ddbb2663ff54876fc0ec87bed5a19223cd9f08f8abfb96c85e125", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858664, "uuid": "6e1cb357-7b91-4c96-a9c9-4dc714b5eab2", "comment": "Malware payload (Mirai)", "value": "66b799a4c71b0ff37781a5e642fa7fdba466ec31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858664, "uuid": "1f7efb4f-aec2-4c75-9b11-4945a930c19e", "comment": "Malware payload (Mirai)", "value": "f6ba38a6f6ba55ac23b82c5c8cb28fc896d1ed272603e80d51adaeeb757eb6b4657452898b85d5c67c4d825671e1f2cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858664, "uuid": "b278ae79-3245-49cb-a847-b360b1bf8816", "value": "T160734A0379C080FCC49AC17553AFB636C863B53E1239B19B63D4EE267D49E512E6E9C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858664, "uuid": "15c61a90-756e-46cf-8140-40589542e34e", "value": "1536:qVcOjiTSY1TyqWSqGyOb1kCL1G1kJnmZYTqNbZCh1PxIGMG:qvjiT7Tb97b1D1G1QnmyUbZChIU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858664, "uuid": "15fc1dd3-6960-45a5-8836-5b38afc7cb58", "value": 80672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858664, "uuid": "130ed03e-c939-44f0-9034-d902fda0540e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858664, "uuid": "2e945a4b-b69e-4264-bbda-122895fd4a2e", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f9ee02-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825646, "uuid": "378aee6f-61ca-4a54-bfb8-651000e188f1", "comment": "Malware payload", "value": "ac60888995a44f72ef69c7375824fcbd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825646, "uuid": "715b2994-51a4-4029-aee4-5f193c1ef66d", "comment": "Malware payload", "value": "2f1ef0866006e7360a562cb373dfda747f581348fd71834e8096c808cea78be0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825646, "uuid": "5ee7c79c-5e72-4b63-9901-f7223ac3291a", "comment": "Malware payload", "value": "fad0dbcecce36f73d4c3f30e93babb16d7a5f0a2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825646, "uuid": "97b8c0e5-551b-465c-93c3-e8713b4cd093", "comment": "Malware payload", "value": "9248d7eef90c670a86ff69df7147ac0c01650677d5c6cda1bc132bfe65b6492e80aee633b4795d1285dc35a1259407e6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825646, "uuid": "e8f69d73-4529-462f-ab34-d71c23aacdd8", "value": "T189631ADB82464EDA1B9440B4CEBB159B1DEC16319F31FE3C28D276E9710F69A8874F84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825646, "uuid": "c5c1aa41-5c21-4178-8896-57dd68b84215", "value": "768:I8w/h62/jWs6oS+xISN0vDt3Y3WNnZ31ORdkfScBYrwz2y8kTAlGB:I9l/AoSSMR3Y3WL38usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825646, "uuid": "5529328c-9525-4e3c-91f2-0007597750c6", "value": 69685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825646, "uuid": "ea629aad-8c0d-4e16-9eec-879b5ed772c6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825646, "uuid": "7fa99efb-eff8-457f-8a25-2e7412fd53bd", "value": "invoice-1645080830.pdf (15).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "443773bd-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830656, "uuid": "d628b277-a90a-4321-b17a-12dba207885f", "comment": "Malware payload", "value": "25a1c6ace76a77dacb41da5f019ae8f8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830656, "uuid": "2796f188-a03e-44ea-a11b-51fdaa5dfcbb", "comment": "Malware payload", "value": "2f41904478e5543ae7c5bb57a6a50535e11ae235025c842fb2a2201a346ed357", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830656, "uuid": "17f11e23-ff15-484c-895b-38f3f819b125", "comment": "Malware payload", "value": "4ccecf164f64965b5d48a1fbc7d8dafd47731c27", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830656, "uuid": "a2941339-6a10-478a-a2f8-9321191bec11", "comment": "Malware payload", "value": "10e0e75268d7b23996817dbd9e472a49f59bac3b330ab6329df35e53b84ca61e4fcc91242f9fd53dcef87508d931ae5d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830656, "uuid": "24418335-2a96-428b-a806-c85526d1fc95", "value": "T13673F961A0BB59F758E4D7CAEC87F8452D488F91BB8C12112F00E363C945EDF6DA292D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830656, "uuid": "5ec1a21b-3461-41a5-88a9-7d37d6311ea8", "value": "768:I8w/h62/jWs6oS+xISN0v8kTKuSDdkfScBYrwz2y8kTAlGB:I9l/AoSSMNqusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830656, "uuid": "5a314382-d00b-4e8e-bf0f-83f47771a123", "value": 74403, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830656, "uuid": "cb65a83f-c1f8-42f4-90ff-3cd15552a8e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830656, "uuid": "6fde5ea0-dbb0-4238-bd8c-a82acb1295d8", "value": "invoice-1645080830.pdf (52).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3b93643-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797423, "uuid": "71d5c5bd-03d2-4f83-b3a4-da6305197aee", "comment": "Malware payload (Mirai)", "value": "4df733e2a2ac080b5319503b61343703", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797423, "uuid": "5812b9db-9be6-415f-b8e1-7c67d345f32f", "comment": "Malware payload (Mirai)", "value": "2f798fb4840574d0bbd7407947c98f0c40b1d81a056b8a7d8f4025b63e3481a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797423, "uuid": "c0aa0b9d-f538-4a59-91e8-f022aa51f5c3", "comment": "Malware payload (Mirai)", "value": "0f93c05ce44d2a5ef533bbd7412475741fae1b81", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797423, "uuid": "862d1950-c1a3-4d6d-838d-4fb19ca7009c", "comment": "Malware payload (Mirai)", "value": "b051da20902fa0da0051ea736d774321122fa7425b58d9698343caf9be8394bdd437142c161514ba7680d4bd0b0748f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797423, "uuid": "efabdf84-1eb6-4769-b58b-99e7d339364b", "value": "T1F9634BCAF983D5B6F8970930107AFF639DB3D6BE21A8DA43C3A455369D12502F412E6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797423, "uuid": "374689b6-6720-4503-817e-39fccb14e33b", "value": "1536:TtWvgcAcQQsTb6vF7lOvZOWsIyq3XkZSQd:TtDcAasn6NJOvwfIyq8d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797423, "uuid": "4fc2a7d0-1f97-4780-ad8b-2c26ab2060ba", "value": 70740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797423, "uuid": "b0c6c1dc-f852-4967-9416-a7e4d40b978d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797423, "uuid": "d70548ea-6da3-4cf7-a5a0-7cad952d4051", "value": "Space.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ede75a-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825270, "uuid": "bb6927d7-dab2-430a-b046-e968d85bfc7b", "comment": "Malware payload", "value": "5e2a4cb1b27506e27f04b97ac15a16b9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825270, "uuid": "5677860a-015d-43aa-a896-58a9f1426583", "comment": "Malware payload", "value": "30102c8f2933a69cd8433228b4ce660729b8ecef6fcec5e9f1bbdf9179199403", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825270, "uuid": "af6c05e6-e4f0-4ebd-a22c-c1f097181073", "comment": "Malware payload", "value": "e01b6fb0296575434e62d49cc39581c812ef5f5e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825270, "uuid": "43ec3ea6-b7c1-43e6-bfa7-de20dad7634c", "comment": "Malware payload", "value": "5bcf4c39a33aabe5362326a9950e985d63d2cac38cc762212132fe022c985cb4798500ebcee610e319e8ea7dbded2a7c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825270, "uuid": "988d50b9-8e82-47da-a1a2-061d1ded1d55", "value": "T136631BEA5C427DB229F43F098702177B2E8C6F0D1F7E4C63C50974527EBDA8A61295E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825270, "uuid": "e2870deb-356e-478b-be88-20520de125ee", "value": "768:I8w/h62/jWs6oS+xISN0v1rbNI+dkfScBYrwz2y8kTAlGB:I9l/AoSSMlNusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825270, "uuid": "8fefb52f-b80b-493b-9e60-5e60eb9a4bab", "value": 72569, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825270, "uuid": "4840f2cb-a50e-4610-9f56-6147024f7570", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825270, "uuid": "7ad42701-161f-437d-a022-1037582a9c01", "value": "invoice-1645080830.pdf (93).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2b0838-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859390, "uuid": "7c492435-0ef5-4760-9c9f-4c81e36c30a2", "comment": "Malware payload (Mirai)", "value": "0b55e5b33df6551959b24c9d37019978", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859390, "uuid": "53fda235-6cef-4caf-a319-6d8ea4135594", "comment": "Malware payload (Mirai)", "value": "305b3d191511505f486e0e018b22fa9320b3d6ea6a4f598086aec2af4f4b946a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859390, "uuid": "fe846613-0125-4c64-9298-86ee6feb7271", "comment": "Malware payload (Mirai)", "value": "16a3138371651d28ab4c06e6fbaeefe960ccfa5b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859390, "uuid": "a03c5218-1f98-471e-a7ee-f63dd7558873", "comment": "Malware payload (Mirai)", "value": "cd9ce7c011211dfc62c54222ab65c7810f2328d0be1f7c836e54f627a7f99d44199133ced6b6352c470ab92a2d0e6f2c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859390, "uuid": "3fb0994a-b2d9-42b0-91ed-e0c9fad4b3c9", "value": "T148E36DC5F783C0FAE8560571107BBB36DEB3D53F102AEA82D7B95A31EC51601C52A6AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859390, "uuid": "d3fae066-ddfa-4963-adee-9a36990cc4f2", "value": "3072:GMSAME1z4XyMqmrgKRKXMDel+17lr3QN/MbOyzTshOB1mXs:BSANZ4XyvKRHZ3gkCyzTAXs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859390, "uuid": "d800e2c4-9fdc-439f-b42e-8e08cc0fc6f7", "value": 154056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859390, "uuid": "b6a75db4-a81f-48a5-8ff8-1fed5fb99f75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859390, "uuid": "27ba8025-544c-4b3b-a2e8-4b74b4576296", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca91ed0-e37e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879338, "uuid": "c7f4dbba-b1d0-4238-842d-c6fc478a682e", "comment": "Malware payload (Mirai)", "value": "cbb18496017356bba0a0011520898ada", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879338, "uuid": "c79ecfd5-59a6-4896-a532-cf228980c6f4", "comment": "Malware payload (Mirai)", "value": "3061237a898739ed72e5258ccda3418ef8c3f1da578a2828acadf3c44462aae7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879338, "uuid": "4dc57c46-b7d7-47b7-8b20-d1deb7d9ad1a", "comment": "Malware payload (Mirai)", "value": "e2bd617303293e5daf3d96cba24a42b113def12f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879338, "uuid": "b1d5e52d-4bc2-4096-b35a-38d660427228", "comment": "Malware payload (Mirai)", "value": "f75ebae8fa9d6306870b505e8a90fb2f5c31e4cac6851ff8c2ca7c8c77a3835811f6555793cca4c58f4aa0d2abd7dbaa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879338, "uuid": "878d2234-19ae-4da8-a4e7-d9cdc8493b1d", "value": "T11883F886B9818B55C6D512BEFE2E418D33272778E3DF73129D106F247B8A86B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879338, "uuid": "55120df8-6f27-4255-a564-a117a53782e0", "value": "1536:2tnJosRF0F2Xn6w41exXvobPqcb0Gb2iMtiqMUCtYao57+eYpuJ7RhM:L8FV36LaXAbPqcsMUCtYao56eyuJjM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879338, "uuid": "5c7de92b-52bf-48f4-a479-2f3944894cc1", "value": 83132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879338, "uuid": "efa66b8a-3cd8-4224-b2d1-6d63c35f49ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879338, "uuid": "baafd422-6e6d-4f3c-aac8-855bb1d727c1", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bac1edb0-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766865215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865215, "uuid": "a475152c-bf68-48f1-878e-07f8afb1644e", "comment": "Malware payload", "value": "d8f6ee680657a3c979ed3b23f0379b99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865215, "uuid": "4f975830-3541-49bb-b0ea-0a96f582f807", "comment": "Malware payload", "value": "3088c26285a66c4639b30a932962f74c844f2d2c84edcbe80b02a790a351c598", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865215, "uuid": "6d0399eb-4b95-47f9-b7c0-71eba87bae93", "comment": "Malware payload", "value": "231b71464bb31919eaae653724a0233f1aa5812d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865215, "uuid": "195c4b4f-addf-4445-a48e-60cafdd94ee1", "comment": "Malware payload", "value": "5b0ddede55cfd2d64f3aa5fd93084d8c889bdeef49093ecbde031a918880d6d31a52d7b6090995b98f20d0485c73794d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865215, "uuid": "d0009473-dbe2-4cc6-a665-e872c71f9065", "value": "T1F2332884B8919A13C5D4227EFA6E418D332663F8E2EF7217DD225F15778A82F0D77602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865215, "uuid": "3b22094c-0092-46d7-b58d-d66764b1baed", "value": "768:rQDMZYe7ynBxBgKnYsuMhiFhm/PpwdJTpUIo93KMD/CNFBtqjAetKIT:SMme7ykMhIhGhwdJTpZo3/ueJT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865215, "uuid": "df2d4188-8f65-4163-b008-97d9282d503f", "value": 54456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865215, "uuid": "17e9c7be-a81c-4ff9-9b03-f10766510162", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865215, "uuid": "a1bfe363-9497-4502-9300-962df94bf6ca", "value": "zerarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51f60255-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830679, "uuid": "2cfee941-bd14-42e8-a895-a4737022e3d6", "comment": "Malware payload", "value": "1aec3db0ad07b3c893141ac3d0d39e04", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830679, "uuid": "8dbf8cab-e027-4c60-86ea-860b98e4c40a", "comment": "Malware payload", "value": "310fdf8b8f286d972fb4e65491df3956d88c4c445eca8be1754177ec6cbb3dd7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830679, "uuid": "04bdd37e-b381-4f25-a4c8-e6dcc243561a", "comment": "Malware payload", "value": "a49c92b869ac4c14e389d60234f3e889ae7bc612", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830679, "uuid": "556e7ce0-0889-4ccc-a372-25bb30bc9134", "comment": "Malware payload", "value": "cd76618a935d152c3eee6f0e30d74a8b4c86da3ab93efe833df7ae3152135ed5e8cbbc5367035d2c01b5b1c0efdba361", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830679, "uuid": "bd9a7dbf-8467-46a3-820e-773902cd2bfd", "value": "T1A0735BD56EE08DE200BD0A5463C62AECB8278DDFD09A61222C31D5A384D51BDD16FBFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830679, "uuid": "85d72bbf-84fb-45a0-ac3c-0f15f3fd7bd5", "value": "768:I8w/h62/jWs6oS+xISN0vxe9D6XHxTdkMbj7n0hyZrRk/R539m1OBOe5AbHAUNGy:I9l/AoSSM9cusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830679, "uuid": "8f6ce7cf-3028-4e35-b2d9-f1f6688abcf6", "value": 74409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830679, "uuid": "b8e85727-e548-4d94-bb29-b8360bb2bcf6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830679, "uuid": "4b3c60c0-8051-47eb-95f5-782cfb3d8051", "value": "invoice-1645080830.pdf (51).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8acb62b-e35c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864755, "uuid": "8b770e10-b851-4ac1-97f0-70e631493e99", "comment": "Malware payload (Mirai)", "value": "1fd0b39d36aaed0ec9c31e609642ed4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864755, "uuid": "a977fe4d-db76-4a5e-ac5b-b2cfd97f0b97", "comment": "Malware payload (Mirai)", "value": "3114eed00cbf45a12fc0e7731eafd60589efef209041667b77b373b325be4527", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864755, "uuid": "937941ec-ff9e-4e53-9a6a-6dcc60c2b41c", "comment": "Malware payload (Mirai)", "value": "cdbc74107ac88c5105b96ab2bef1a8cd861e3675", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864755, "uuid": "0e6ffad3-b1be-4bc8-8820-beff022bdfe2", "comment": "Malware payload (Mirai)", "value": "9659f2ce9f228a30c4c4e465867619b07d250489f5d6b766d96e5ac6e3fb92fb246204e33ffd13954e945d0a3e5708c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864755, "uuid": "7b07335f-55a5-4c63-8864-6c04f9a5770b", "value": "T15EA3F886F8819B52C6D522BEFE1E518D331357B8E3EF7202DD205B24778A92B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864755, "uuid": "1d5249f5-113d-41ad-beb8-e473cd331739", "value": "3072:Tc2iC6PKvmUvH4gDs6yAA6703CX7gG/TaTA:Tc2B6PKeIo6yAA67CCX7h/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864755, "uuid": "8a0befe1-5005-45d9-b71c-bec0b6bb3794", "value": 104496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864755, "uuid": "a98286b8-2e10-4b16-977f-3db628a1ab64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864755, "uuid": "50d93177-28e6-466e-926e-6f4e00428b33", "value": "splarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cd15efa-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830590, "uuid": "77217e0c-4a5a-4888-85cb-91cdcbbe17a6", "comment": "Malware payload", "value": "519a5bbb4c5b77e0a6cd63d7f64aaedf", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830590, "uuid": "3fcb1496-3490-41fb-8592-28a5abc41c57", "comment": "Malware payload", "value": "311546fe061fb0dc8f6b402f4b67620b2bb34fa930d7e4c60bc8d2dcfe9045be", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830590, "uuid": "90a0c9e5-1997-4a22-b026-d1ff9461a056", "comment": "Malware payload", "value": "151df4a29efd355f8404984e29439251515f1a65", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830590, "uuid": "540c7454-0a1b-4328-afbc-1259696fe7aa", "comment": "Malware payload", "value": "98ff126099a3dbf3f5227cda6a734ad55ee5f32a3cce2856c1ad1ecdff0810111f2b6d6734ef887375a10b0f3906e1ab", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830590, "uuid": "93edb602-7fd1-4dbb-89ab-4ce0a5e91dd3", "value": "T14963F87A1B3A937250DFF0E1D4A83DAB513AD73D59B1214E5373BCFA166A02003B265E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830590, "uuid": "1e44cc3a-896d-48df-a9f0-3806df103b59", "value": "768:I8w/h62/jWs6oS+xISN0vLLR4vbdkfScBYrwz2y8kTAlGB:I9l/AoSSM3eusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830590, "uuid": "be475fb9-7be4-433d-9e97-039ae1002bb4", "value": 71506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830590, "uuid": "3d099f8a-8c16-4d59-a424-0616e295c4a5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830590, "uuid": "eb5b595f-5000-4823-8ab5-ad78045a101c", "value": "invoice-1645080830.pdf (66).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8afe72f-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873774, "uuid": "09db440d-73e3-4dec-baa5-9fb505766714", "comment": "Malware payload (Mirai)", "value": "9d4b4a1429b48b738eed296c9db5cf4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873774, "uuid": "a4bc1817-de6b-49a6-acd5-0f93192b024b", "comment": "Malware payload (Mirai)", "value": "31a6d0894dd233291719571849c8767a7d238328380ed119c6fb202f2c37982c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873774, "uuid": "35238a7a-9548-4fe7-b7a5-cfbc21e62649", "comment": "Malware payload (Mirai)", "value": "5912acad3c311b060945b05ec874f60fccf9101a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873774, "uuid": "078ac6a2-8cf4-4aa7-86a0-fe6716209891", "comment": "Malware payload (Mirai)", "value": "c8943dc84e0013e90307c3cfb795457d621f57b284d7bc345ba60643255a7eddc8f908604180e406282cfa29ca8f84c8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873774, "uuid": "6656b49a-b39f-4fda-84ec-310fd6ec2486", "value": "T1DD92D02036699DF0C2B258B3F518CD5B67F452ACC0D7267A361857746EC988E1E78BC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873774, "uuid": "3b8cac23-ecae-4681-815e-6a42dcd89658", "value": "384:p78cMjA1trZtZCfJZl6AduHLulqd2Wn5fqcHIFCgn/9xCgrhymdGUop5hKdyT:p78U/rZtZQZU2eLu8xn5ScoFTn/9xCAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873774, "uuid": "347cccf2-4640-4094-9673-e122d5dc14b4", "value": 20596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873774, "uuid": "6a77245b-fd32-4321-9927-8495d19d6aed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873774, "uuid": "5a48b07d-65a5-435c-bf9c-5d279010e89d", "value": "ub8ehJSePAfc9FYqZIT6.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9510205-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825350, "uuid": "da744664-f4fe-4104-adab-9c42302b06e2", "comment": "Malware payload", "value": "3c14ef052e41f80623cd229e0a73b30f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825350, "uuid": "68c9f386-bade-4049-b8c3-0297aca6df87", "comment": "Malware payload", "value": "31b370b2d2fc7af34cb81cc240ecddd03f3e58113962d6525b256a48436d491a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825350, "uuid": "cdfa7590-0241-44c0-b0c0-d977859750e4", "comment": "Malware payload", "value": "a9433bcdbcdfecf5134d1ccf8f5f82d5f994038b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825350, "uuid": "a02df59f-d97a-4c75-82ec-9261372de026", "comment": "Malware payload", "value": "49079c0579784928b9b029e73014d7fd869b2d0315a5828a9d66b47ab47f70823ec3a316efb0f509315774600151ecf0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825350, "uuid": "86a72e82-a734-4879-acf0-f5394bd5e9a9", "value": "T130630B401E8E68AC735A7BF609493B88D41F7CBD0C41AD073AE57D7AED4F9886724782", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825350, "uuid": "6aabbf37-fa7f-4aaf-a566-e04bcad18bce", "value": "768:I8w/h62/jWs6oS+xISN0vvrKZs7bLtEmEpUCU6ORrMrJuPZu6iXkHvSXstBeXrYl:I9l/AoSSMDAusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825350, "uuid": "9dcda492-562f-49a9-a1ca-2b518f658098", "value": 71577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825350, "uuid": "7b189e30-c4c3-46d6-9dd0-d20a53d20c84", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825350, "uuid": "68c39a62-ceaf-483d-be76-fd38d00b648b", "value": "invoice-1645080830.pdf (78).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eb8acd3-e35a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863638, "uuid": "0308ad49-6c03-40ff-93d1-cdc75a7a6f2f", "comment": "Malware payload (Mirai)", "value": "e0406df1b5cd5a0f1f63491718f11e62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863638, "uuid": "8e6d0a29-2758-46fd-9b61-b8912f263c2e", "comment": "Malware payload (Mirai)", "value": "31d41fd9e4b377ccc4a009c417c9af81c1d87569d2f87f20ee56572fb0569bf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863638, "uuid": "f52d543d-68ec-44aa-9155-57b7ab2a2f93", "comment": "Malware payload (Mirai)", "value": "2521de895ece6a264c1277e266b6ed5d7846bf28", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863638, "uuid": "ad4fe942-5a7e-41f6-8122-74239949eb55", "comment": "Malware payload (Mirai)", "value": "04f6003948e64bfc7d24f422134ab00fbfcae10550476e7d4b808de4efcfeb80ed8a852a8939109950549997a342ce58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863638, "uuid": "4fc08349-008e-472a-8efe-45e4fdd2f926", "value": "T1FE833A52FD818A22C6C512B7FB6E428D372713A8E2EE7203DD256F21338791B0E7B555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863638, "uuid": "e6a27f27-f7f3-4d87-b35d-561dd3878bd6", "value": "1536:edQSta5HZ8Z4onCPYl9KMdWnwvlenq6ts81yHL2Jvv6h:edQStG8Z4oEYl9KMdU4leG8s6I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863638, "uuid": "e61cd394-4093-45ab-8a3c-ee64f058291f", "value": 87764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863638, "uuid": "a27ef4cc-6ae4-4789-8fa5-3fb27f6863cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863638, "uuid": "e60ed306-f92b-4cc3-8ac9-68ed3f5a2223", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708309b5-e2e9-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766815269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815269, "uuid": "9eccacd6-1a71-4546-9c76-0eaf75963d0c", "comment": "Malware payload", "value": "5f42eeb9c3cf37ea79d0a43647cf2af4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815269, "uuid": "27801405-e9f0-4341-992c-40fae8dfca6f", "comment": "Malware payload", "value": "32a4995f5f0b2313a26ea9417a13577073fbd822f9bf98c918a9d3462aa0c345", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815269, "uuid": "0794af46-99b0-498a-b83d-3e26391fcdc9", "comment": "Malware payload", "value": "152f265adaa4cf74b8a3726da525565217896f17", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815269, "uuid": "56fcc294-09df-40f0-9734-45c9098b62fc", "comment": "Malware payload", "value": "975c79a88f72d976a310f95c312eb7c880811f5165211f6fb06ee6b40388a9183d0602b27a3702479c1f469b760fa62b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815269, "uuid": "fba6ec18-ea4b-4aa0-8429-3186f2ae82e7", "value": "T1FBD3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A11C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815269, "uuid": "b43a41d1-5510-4e1a-8170-5aae00b71fda", "value": "3072:phNlHuBafLehtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYQaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766815269, "uuid": "e57a2696-907a-4f4d-9153-0f5ef293d0ed", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766815269, "uuid": "63f86029-674b-46cd-b3c3-d1b5aae6dc21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815269, "uuid": "2d533a28-e223-419a-947f-b41e34fafc72", "value": "bin.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28f7be84-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825457, "uuid": "ffd7c8e6-04cd-40c8-8b62-e61a5e44ec73", "comment": "Malware payload", "value": "d6f5ab42fba141021b3677f6cf5f3ae9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825457, "uuid": "f9ea6e38-a133-46e2-a5c0-2e81f19f89c7", "comment": "Malware payload", "value": "32ad4988d73c072534c960e717a829878b338e13afae7e0cb436779b07c8ef98", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825457, "uuid": "cdc9095b-8f62-4114-aacf-1408354fc8b5", "comment": "Malware payload", "value": "f163501e1d24eb1ef63ce6688467e9db391d3a40", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825457, "uuid": "3eb4a9fe-9f6f-4073-9e81-0e5164663011", "comment": "Malware payload", "value": "5f1197517b0336e6a33a3832a37059f614ae616aafb0380e3b98cba3a42d1fdf3ce333906c253c21411ea6a8109bc1ce", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825457, "uuid": "78ae898b-aa17-4548-833a-6d04afc41f82", "value": "T115732A94FEAABA4C517CEB84CEEDE40EC011986BE2FE643E524146B40153F7E1363766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825457, "uuid": "3a56dc50-e902-4cbf-9ebb-7dce89487a42", "value": "768:I8w/h62/jWs6oS+xISN0v8O11IXdkfScBYrwz2y8kTAlGB:I9l/AoSSM7yusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825457, "uuid": "ec5e843c-cec6-4980-aa7d-478be5d27623", "value": 74423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825457, "uuid": "5b72580d-9309-420c-82fc-d0a46ff563d1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825457, "uuid": "cac1d550-15b4-409b-a2a1-5683bac45eda", "value": "invoice-1645080830.pdf (56).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad7c1476-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858321, "uuid": "89f03443-9f76-43ac-8425-b628bb2781b7", "comment": "Malware payload (Mirai)", "value": "ebb760cf7c2166684522f1debd0b5688", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858321, "uuid": "fa6f85af-6ce9-40af-a0f9-7490516cbf9f", "comment": "Malware payload (Mirai)", "value": "32fc8e3eb46c1001901b323ec447d982a6319f2fa73556ed4a3bffbbef5e0016", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858321, "uuid": "664b5fba-0ee2-4c2a-b5d6-b0406904bada", "comment": "Malware payload (Mirai)", "value": "c077c340038bac303a4eaf4621ba9d4595a88326", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858321, "uuid": "fd4139e0-cae7-4a96-80bb-6b93b448563e", "comment": "Malware payload (Mirai)", "value": "02599fe24ac32f461f02ee6ff764b1cad688ce4604c112a0894670bf5815f9456b7434f0c54e8712acbd4d756096d909", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858321, "uuid": "b0a825ec-fedc-4c7f-9177-9af831c62f00", "value": "T1CA53026241954A14F90E87764CEFEA033390A3589A43C30F07C5F9AB4DA6EE0967DFC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858321, "uuid": "486fa438-dd9c-4d2a-99a9-8e36c02436dd", "value": "1536:mry2tKG7Xs067xfw09JcuglRckZNT4AnYFvMW2rnouy8Gyd:mrpt5Xs067xfw0arNb15zoutJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858321, "uuid": "0459aff7-d9c2-4555-b765-dcb84a473ebc", "value": 65172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858321, "uuid": "37970866-139f-488c-bcfd-dfd34f691c6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858321, "uuid": "53969a53-ec01-4fc7-8f49-9afd05817c08", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04400d53-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825395, "uuid": "5ffd3827-093f-45d9-90ad-6f0ffad99bfe", "comment": "Malware payload", "value": "93407d1fe43cf79731de89dfacf00d2f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825395, "uuid": "21ab2298-077f-4a02-b5f1-d01458e7b802", "comment": "Malware payload", "value": "3316de481b5a64bef07e78eac495dd94515a4e7a4324c8ee48167f8d6a4006f7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825395, "uuid": "afce12bd-73ff-42ab-99d2-a8bc2eb3a118", "comment": "Malware payload", "value": "cbbe4053b2485d989adc6ad681bc1b3ab1fd8cbc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825395, "uuid": "03a1226a-a1f7-4bb8-b2b3-972cd192f897", "comment": "Malware payload", "value": "9e10cb66d291fca6d1384391762ba0c6c388cda1fca06a7d5306c643623b57b4e61ccedbcc67f7f6566e6c52b30010fa", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825395, "uuid": "5de09432-e247-47ad-abcf-df23ceff48fb", "value": "T1A063F82BE2FB3C1DB85BF6440214981F9453DFCA95C7FA99580335296D05B8EB3A98CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825395, "uuid": "e89f2298-a042-44a3-8797-72e451630cf7", "value": "768:I8w/h62/jWs6oS+xISN0viEWfJw1nzEeiUf29NvihmwxXwE0po9dMwafufKaaW67:I9l/AoSSMGtCr3RusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825395, "uuid": "a81bf49c-f889-4e84-9f47-8b89ede74d00", "value": 72455, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825395, "uuid": "d4efde88-3dc6-4727-99e1-d1da356683e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825395, "uuid": "5eeb34e9-a7ee-48f7-818d-b354fd1b7910", "value": "invoice-1645080830.pdf (64).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ccfe2c7-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864977, "uuid": "95267f0f-8570-43ea-880e-d236e21f78f5", "comment": "Malware payload (Mirai)", "value": "d95c7e362ea19268fa926cc4462ed0ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864977, "uuid": "8bfe4f1b-a57e-46de-98b4-45afc75d26c3", "comment": "Malware payload (Mirai)", "value": "3358435465ab5c5f493b7cf993e917e2dab10f34e766c34e4cad035e1fb2cf1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864977, "uuid": "cd0bfe11-0004-40c3-95b1-b2640664644f", "comment": "Malware payload (Mirai)", "value": "e64a201c00749550efe195a87eff9f5cbb1f1cdc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864977, "uuid": "1e28a697-2901-452d-b719-d1d9c9605275", "comment": "Malware payload (Mirai)", "value": "a6d4932a965b3ec95e80d9f58c9b94c9eb9a0ae5bd37a182d5f1dd68ef4ee397f31f8fca45ba74e521816e775fe7f98e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864977, "uuid": "9ce5b02b-5660-4a8a-b41b-7145700ba2c3", "value": "T1ED832A85B8818A23C6D422BBFA5E41CD331653F8D2EF3207DD25AF157B8682B0E7B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864977, "uuid": "7439541e-b901-4f32-9e50-0f0b7e3f4291", "value": "1536:Qy9krhPMjh31k9Rcy9a0KYgrKMbsF/WO9Udxk+djGY1v8TAbVRE:Qy9k7aysJKMbiWO96D3N8TAs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864977, "uuid": "e8cb191d-87f3-4203-b0fe-c99e993950c6", "value": 87232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864977, "uuid": "9b7425c0-f244-447c-ac90-680772759ec6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864977, "uuid": "08009ce2-8fca-4831-acbb-3f8048e5f627", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae0b5a4-e32f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766845485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845485, "uuid": "d91afad6-3e4b-43b0-be3a-53effba6b8c7", "comment": "Malware payload (Mirai)", "value": "b85d28226c8262d395d3fa0bea4d5f06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845485, "uuid": "56c4acc2-0736-47b4-a2c0-8b08bbba73d2", "comment": "Malware payload (Mirai)", "value": "336819f677c52194f43b6e8a6ff66971bbe097861bc4273b83899f00f273fc10", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845485, "uuid": "99db47b9-64e7-40a9-abd0-580f966e3270", "comment": "Malware payload (Mirai)", "value": "195d41a028b87dd0c955d81a5c9a4eba3662662f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845485, "uuid": "66e20ead-2311-4760-9770-324c10bb2792", "comment": "Malware payload (Mirai)", "value": "ea1613939ab65cc87fd659c20f5bccacc7889c7b7161f4202fba18e8ac4963547178b284b024f286979fccf591d4a88e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845485, "uuid": "c47745e3-3a76-478a-9d78-5a0454d9dc62", "value": "T100F31A46FC819B12D5D512BAFE1E128E33131B78E2DE72129D246F60778A97F0E3B506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845485, "uuid": "15241fdc-350c-4178-900a-d53b55f5f156", "value": "3072:T3tKyww4Y4sxwFnczK7FTUQFjPPXQfFgkaaCOfJ5QOdycK:T3MTVH2wFnczKJQG7XQdBamcOd9K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766845485, "uuid": "7765e2ad-0857-44ba-a6ea-61dba635fa11", "value": 166524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766845485, "uuid": "afd93008-4df3-45f9-b626-ba1bfd1527b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845485, "uuid": "aeb4aeff-f028-436e-9159-9d6b72290982", "value": "miraint.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d6922e4-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823451, "uuid": "d4d7e665-1f1e-4729-a79a-37516b67e79a", "comment": "Malware payload (Mirai)", "value": "1fc46b6c7fe572b4ee3fe24798a90a31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823451, "uuid": "fea9505d-7b17-4392-82e8-c801d192a8c5", "comment": "Malware payload (Mirai)", "value": "33a1f2df340217ae4459e32cd35249b0f6a18b1600c4a41b70a3fe6c4a02854d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823451, "uuid": "64aab75f-769d-42c0-9a9e-b13244206aa1", "comment": "Malware payload (Mirai)", "value": "078a1a7cad3ed21ad45e2a12349f5f7276b8d314", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823451, "uuid": "86dbbb1c-1c0d-4b98-831a-c4c4a6a60be1", "comment": "Malware payload (Mirai)", "value": "18ca05e7334c6b8c8a7a75e4b305a6ca0df827fc0eded795f0b4fd48de134ebe95b4dac6862c94f566514920b35b3697", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823451, "uuid": "f23b9318-dcdc-4014-8649-ab20e7f5ca5b", "value": "T12E043802E603C9B2C01301B212B7CB764E31F9B7AE25D452D3FCFEA5AD656D165093AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823451, "uuid": "53aac53e-770c-4e86-bfb1-a6ccf9085d3a", "value": "3072:6pvxSRDkg9jwwcV58ctaiJE7/CRDh7qU83elpm8X:yv+pf1ctaomi7V88m8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823451, "uuid": "8450b4e9-73f6-4816-96f7-3ebfbdfb3bb7", "value": 184484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823451, "uuid": "d0a3bf96-4f40-4419-b7e6-0f88d8912c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823451, "uuid": "1a60bd9d-ea96-4f8f-a957-e0de23737368", "value": "bin.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e28e5df-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825546, "uuid": "1e02b2a2-1d8d-4fbb-adce-e53cdb78483a", "comment": "Malware payload", "value": "5a6e0e3797296b3dce7164df551b597b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825546, "uuid": "be4dfe1f-6047-4aac-aad1-efedcfd7ac74", "comment": "Malware payload", "value": "33e72c1c1f8c2db6bf7a6915a88879ab69b36512c99a032876a8feda130d463d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825546, "uuid": "dc2f24ba-3532-44aa-9143-b841bd90acb5", "comment": "Malware payload", "value": "c616aa5f9d94811d7f26482de87ce9492aafe0a7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825546, "uuid": "665239ba-ab8c-4997-b230-a5b5d9ec0a58", "comment": "Malware payload", "value": "d56550a687fad1d4f66fc19d59bb3b0889e460142f9ff2ca817239c765670d252fc9acf285a8b6dee6c9f0a3da58d360", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825546, "uuid": "eb5963f1-449e-407d-a1c2-641eb45a9216", "value": "T116632A013A12BBC92A17B14D9A83155B0C57F8D0D4B660BE98771F1C9C89BE9EDF343A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825546, "uuid": "d9defc7e-e3b5-4634-b17c-5e612246202a", "value": "768:I8w/h62/jWs6oS+xISN0vVQzA0VPHPFOMnDxl7p8iB5vISP4MmXU6iTyqTv/LXwV:I9l/AoSSMWhusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825546, "uuid": "49f85155-a841-421f-b2e0-345cef38b372", "value": 72451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825546, "uuid": "4d133452-31fa-49ac-96ba-c932ff4f8050", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825546, "uuid": "8a21e738-f93b-46b0-8f80-24e11bff68c0", "value": "invoice-1645080830.pdf (33).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8b65c5d-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865211, "uuid": "cc4e4b65-6536-48b6-a508-fa5447904975", "comment": "Malware payload (Mirai)", "value": "08c816bb99d32f76ece21ee128920338", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865211, "uuid": "9d8d2ad6-ba47-4826-9aa5-9261426e695c", "comment": "Malware payload (Mirai)", "value": "342705fd18ff03f51fdaa856ed0914e76197dcf96b99e82871ff56b623cb2a28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865211, "uuid": "08665162-7dd7-4f72-a5e1-63272cd6a3a1", "comment": "Malware payload (Mirai)", "value": "28abe22bf89542c4eee7527168bcda5e4240cd05", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865211, "uuid": "cebc45f3-275f-466c-83b4-fb28384afaeb", "comment": "Malware payload (Mirai)", "value": "826e1c91869c6ee592ac04a6319c2177b39847027757b0c37ce0c8ce99fdbb53d4d865ded6709d09b4221c52e2a2b91f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865211, "uuid": "03c6e11e-3840-478c-9614-0852f3520db7", "value": "T1A8044CC7F800DDBDF80BE73B44230905B130BBA254925B376157B96BED3A1D9096BE86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865211, "uuid": "990f062a-e821-45ad-8273-8e3fbc21cbae", "value": "3072:L6cRLLdaBtE5hHuO90+evvkUrV53TpI1Io3bVSjbi8LhjnyB2mpYfHw:LXL8BtcrcvkUrfTG2o3qLByBnpYfHw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865211, "uuid": "73d5181e-63da-4aa7-91b7-ec267debfad7", "value": 179904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865211, "uuid": "ccbb5624-cadc-4a78-a9b2-ed95fca6ed77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865211, "uuid": "97e311f6-8b94-45a7-8ca5-3a202839fe2a", "value": "miraint.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "044e83f0-e336-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766848158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848158, "uuid": "60d7cbda-f381-43cb-8439-05b1d7d26747", "comment": "Malware payload (Mirai)", "value": "e02194db65b659f60de69d5212528ca9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848158, "uuid": "10c9328a-1dc3-411c-9a2c-fb4147a93252", "comment": "Malware payload (Mirai)", "value": "34299eb401d3573ac44a80f7dda161ec8c230261ea6d8d6248636bce9c149868", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848158, "uuid": "b8789c66-2a5e-4969-8fac-c07bad2c454d", "comment": "Malware payload (Mirai)", "value": "977e63d43144d72f420e04f4786616bcde6ffca7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848158, "uuid": "525ba4c9-3ec8-4360-a80d-1bc9bf636714", "comment": "Malware payload (Mirai)", "value": "473aaaae6ddf93fa015ea71b7d5010513da8ff76fd6bed140147631fafad6ee3df1bb4e9acf9edd00e25c988e1911fcb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848158, "uuid": "1da2224e-dea6-45c4-8d0a-a052107600b1", "value": "T13B043946ED418F11C4D622FAFAAF414833536BB9E3FA7102DD246F6023C6A9F0B76552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848158, "uuid": "170bab6e-3a05-4685-bb3d-d595ef7b09e3", "value": "3072:j3Wg64VCnG3IUgzmWM+xNs1KEasrSj9InH9KS+QeK9+ge6hh1w/1iW:j3WgxC+IUUG+xOMEasrSj9IndOQD0gun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766848158, "uuid": "0bedea56-4ae6-42ae-a427-17cf9ab10c1f", "value": 182704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766848158, "uuid": "5c22f3b4-d347-4e3a-9f10-0cc7e55843d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848158, "uuid": "1a3e97e0-73d4-40c7-9efd-773472843b44", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e491e8a-e2c8-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766801118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766801118, "uuid": "d305b571-a8f0-4b9d-9fe5-ea63bef7c78d", "comment": "Malware payload", "value": "85875e12771709a664875b911feead67", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766801118, "uuid": "1b6a29f9-3839-4d7b-8f3d-1cd2392d80a9", "comment": "Malware payload", "value": "34c6aef5c54e030706f600161500f8f482979316681c80662c526214e780ad47", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766801118, "uuid": "0e8e729e-78c7-480e-b2b7-b1a0775e3d85", "comment": "Malware payload", "value": "8b8da893675f2e96b2081b50438d61f9ecaef6d7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766801118, "uuid": "54be78b0-0d16-4467-ad4b-111bbbe12b27", "comment": "Malware payload", "value": "9d76047da33473889116dce064b270bec647d9f0b17c7b22720617dd34d84e7b4ca8e7d66ff7c5cece5505e6e250aa1f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766801118, "uuid": "7e978433-8b7c-46a4-8a42-756774692590", "value": "T15A8633007BD409FEF9A3E23FC952CC32D371751257A1CADB47A496221E733E5293AA91", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766801118, "uuid": "3d0375d6-6559-40e4-b0b7-d1411411501f", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766801118, "uuid": "86d1b13b-bf5d-4444-b798-54f7ef2a86df", "value": "196608:219uurHeD9BKG+5fc2S/ErXKEtw+RSEWoz8MsqfNmd:2euyDvV+53SM8+IuzD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766801118, "uuid": "f7e5d188-3d15-4688-93d6-9347616d1e9f", "value": 8038002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766801118, "uuid": "086baefc-1bb3-4b0b-bfab-e2ea51b88345", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766801118, "uuid": "bd2fc9a8-7f9e-42a5-b193-269977c92817", "value": "Installer.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29235664-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870554, "uuid": "601ae482-2260-47dc-94b4-c6b66c5f79a7", "comment": "Malware payload (Mirai)", "value": "7d63d25eef5e1b73e21bd976de0fd49d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870554, "uuid": "9616ab39-5d30-4f59-a114-9298dd6a12f6", "comment": "Malware payload (Mirai)", "value": "353a1629b9da0584fc2d671c44fc1ac53d6f71525336f0bc2f7414670b90a6b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870554, "uuid": "1dd763a2-6791-4fc6-832a-ba350f47a8fc", "comment": "Malware payload (Mirai)", "value": "30d5bd4eed733fcf41ce30997d7f6246922320bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870554, "uuid": "9932cb6d-dce8-45c7-b67c-e8e27c4c9b98", "comment": "Malware payload (Mirai)", "value": "3535ade4a8e193714e3686143aede779ea46576fb1ab0ff2560e25d23fa38e4b2c44746f04af12bb63b90a6a05465300", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870554, "uuid": "4fe37ef5-fe1c-4d4c-ae56-93718555f078", "value": "T1EB433902722C0E17C4A309B4243F1BE587BFEAD122E4F646655F87A68A75E371486F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870554, "uuid": "ba59e694-4bea-4fe3-bef6-a9090a5b8958", "value": "768:uN9Ujk0LT6pwhRX8q90SgdGtr+8I2yJa6VRRVDF2hs+wCjDhm4DOgI2xp4NwC:+WX6pOiSgdW49YqRXTyJmhgISp4mC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870554, "uuid": "703046ea-67a4-4f23-8ce3-8ef4feb66c2c", "value": 55316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870554, "uuid": "b3302e02-c55f-4478-aef3-e2191c58f7a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870554, "uuid": "3bc1f04a-7f86-4780-95fa-163a8acee34f", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c862ab8-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854695, "uuid": "1671fbab-1186-42f7-85b8-b648b941c0ed", "comment": "Malware payload", "value": "b3b44c13ba61d7e753d91563302a7545", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854695, "uuid": "fd81fb19-e989-42b9-9a80-355cf7375494", "comment": "Malware payload", "value": "35a7e31df90f7dd01e6fd9153b818dcd648b3c9cc7e91523d1ba51322a469cc7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854695, "uuid": "c645dfa9-cf9e-489e-ba9a-67408f1757f9", "comment": "Malware payload", "value": "972ded814d7c1286f7ecfd885c18feaf058a0f64", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854695, "uuid": "0e7f1635-68e9-466b-82fa-f884e06e96ad", "comment": "Malware payload", "value": "13e599b573627b9399ff8aaf1c9b495c828b9fa1e7b041f127441d07c2766aff900136e0ffe6cc2e63b9283e8455845a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854695, "uuid": "63912e00-e6c7-4ed5-9661-bc05ce8d300e", "value": "T152632CDB6854BC12421256EC6A0A885905FDD90EEB8941BE798F9351CC38B173D33EEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854695, "uuid": "9bc8429d-6be2-4cc4-b101-13b1bdefdd86", "value": "1536:I9l/AoSSMHmFmsmFmRmLm/mfmomHmcmzm+mkmVm6mTmKmkmrmlm4mHmMmkmemKmt:I9l/5MHWliGgaCra3oJ/mNCVHwix8/tu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854695, "uuid": "195a7adb-3ad0-4c9e-9b48-43eb65913f3e", "value": 72466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854695, "uuid": "cf751d37-d283-4f28-89d5-993820f7f123", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854695, "uuid": "c2b2aae6-456f-4799-91d7-051ec4900039", "value": "invoice-1645080830.pdf (67).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c4b8107-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794136, "uuid": "70394a7d-b7a3-4711-a38d-3b9fd5243e30", "comment": "Malware payload (Mirai)", "value": "3b083a35ab4ab091b83a95d91c5614a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794136, "uuid": "342b342e-9fc3-4756-badb-f58371d5dba0", "comment": "Malware payload (Mirai)", "value": "36b9d3336faa629614102f0cd89b4686f3b5d0f9b63ec5467946cf7b65e4a8b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794136, "uuid": "985bb42a-444e-42d5-86df-57c51d08bf76", "comment": "Malware payload (Mirai)", "value": "1d292426a329ee0a5af96979a427894f1186f8c5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794136, "uuid": "0e4b1e0f-1df5-4dd3-b78c-724ec6dd2ec2", "comment": "Malware payload (Mirai)", "value": "a27d6780bb8f916b355e80438be8d907694d359e51464f953fe17a703c3bc73ce407ceee4438a7968e3b5c04139f95c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794136, "uuid": "d2da142e-e1ce-46e0-8b75-789ce60b8966", "value": "T163634A21BDB61C27C5C4653761F30735F6FB434625AC8A2BBE720E9C7F54A102217AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794136, "uuid": "a0fa2961-fe19-4d0b-95eb-538e4ca4cab7", "value": "1536:WFZeh4VWCrq3GeUktrbbhFEAvXQp7uhRp:4fc3UkfbhGHpup", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794136, "uuid": "bd8b797f-2eb9-400a-ba81-1d5890ab3354", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794136, "uuid": "341d1c89-b82c-4d22-a065-3fc09bb3932d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794136, "uuid": "572d5fda-72b0-4c89-8c6b-d362fb2ef604", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eea3f61-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858135, "uuid": "eb46d93e-edea-49e8-b540-1358ee4efef8", "comment": "Malware payload (Mirai)", "value": "2806cdcefa9374fe2b313126107d5dc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858135, "uuid": "78ffe1e1-7dfb-4223-9f6f-5cb38bde91f1", "comment": "Malware payload (Mirai)", "value": "36eca7059428b27e28d3d69151134c9608f25e717ebbbcc7a31f2607d9326b19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858135, "uuid": "b3f34c9c-ce09-4f19-a09a-43b471024c91", "comment": "Malware payload (Mirai)", "value": "db048685b6a3103fc867dab078b44a17983a8707", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858135, "uuid": "3dbfc65d-3462-4e5a-adb1-53d66d7e1b10", "comment": "Malware payload (Mirai)", "value": "335201655f9c7685a67d6bb7bb7b51916db288dff0f2a06df05b16fe95b845336cbb33b0180eed54a4705949c8b93519", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858135, "uuid": "1252bd30-bc54-44ee-a7e8-a7463208ee46", "value": "T110141942BD518F53C6C722F7FBAE018C37166B6AD2EB3103DD25AF60378659A0E36251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858135, "uuid": "3c1cf237-92cb-4716-8cef-e7cfcc6a8815", "value": "3072:a99C4x+co9THD6UHzlCwAii4r+fXS2FmsZz9OB6hh1CbgE9G:a99C4oco9ychVri4qfXSKxR9Oxbg8G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858135, "uuid": "61b2d08e-5505-4eb5-82ca-4bd4f5c18b79", "value": 196468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858135, "uuid": "07fd156b-7525-430a-8016-65c1d136f1a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858135, "uuid": "a679ad1a-3dcc-4f86-8a3b-f5a8d78369e8", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fdebeca-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855560, "uuid": "27d9ab6d-3b17-4363-90f6-9d764eefe409", "comment": "Malware payload (Mirai)", "value": "51f20b52532eaa53b66c9d0c1ae3ceff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855560, "uuid": "49d9413a-eefa-46fa-9363-07fe7640be81", "comment": "Malware payload (Mirai)", "value": "3713e270e32a05e3313e1eb506cba63f1854297efdbc1dfa8787888ef2238f53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855560, "uuid": "6c1e0216-52f4-41d2-9c6c-68067e6227ea", "comment": "Malware payload (Mirai)", "value": "58e4bc4801c5b558ffa37185d73422010b23c671", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855560, "uuid": "59646f61-ff5a-476c-86f0-a7e09fdb70a3", "comment": "Malware payload (Mirai)", "value": "4cdd96e97a31f04426b06271fe7c6777343b8dcf427959755f6dbd484de0a392588ca980a8053f02d04b7d9cda629e7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855560, "uuid": "abe9b7e7-f2bc-4f46-9cd3-72056fb606b6", "value": "T131D3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855560, "uuid": "4d980838-7e72-4b5c-881d-e7394d5947be", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Z46:xOFgpOEoVv3MXL5NhGO46", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855560, "uuid": "03afcb0f-1c5e-4b25-8b6f-b8a5073acb6c", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855560, "uuid": "b5ab8750-5d4a-469b-92c6-0e6c74918487", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855560, "uuid": "f1e37aaa-6455-4ca7-89e3-c5a8a622e58a", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea97d358-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854558, "uuid": "75798dc2-063e-42e9-93ee-7e5153e619f1", "comment": "Malware payload", "value": "aca8db0d0b4a0acf7b856636cb6858b9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854558, "uuid": "2c826805-3627-418e-903b-dcd6376d13e9", "comment": "Malware payload", "value": "379e52b742021b5cf04029f0fcc3ed3cd6666f8193b35ab7872f5a1dd0ea5f94", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854558, "uuid": "510d1fed-8df9-434f-9488-102d430490e2", "comment": "Malware payload", "value": "10c63624d6afeb401011885615462e2da0b82592", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854558, "uuid": "81e59644-7772-43d7-aa9e-789541a64842", "comment": "Malware payload", "value": "5634d451d0ecf81b9e5efcffaf977d59e13118f2fc4147d46c4014198496e64660c54b9a0a6fdf50021206dbeb9a8a7d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854558, "uuid": "bf3bf80e-49f7-4ad0-969c-5408e326d423", "value": "T113631DCADAD34D9A3516E3704D8A166844F668E3449713E071F2FE3A3D8EE923374A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854558, "uuid": "4dc22c2e-d553-4c50-9197-fccc857c4933", "value": "1536:I9l/AoSSMjScaN5ZceqWQEKfiX/X1cx6Axt/CJX6TmKDkmKaJNp1uuznjJvGndqx:I9l/5Mm3usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854558, "uuid": "d1877985-0cff-48f5-b550-66caccb4ac16", "value": 73373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854558, "uuid": "1ac38a41-284e-449d-957b-987d8ed45f08", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854558, "uuid": "128bb715-dccc-42ee-894a-c98e251c53b1", "value": "invoice-1645080830.pdf (94).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f16b9674-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825363, "uuid": "29adc788-3649-4275-b4cf-6ff810975b21", "comment": "Malware payload", "value": "3da3c9342052e725c82f2f59dcc8cc22", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825363, "uuid": "3b92d9a0-ebec-482b-b173-ed44009994a0", "comment": "Malware payload", "value": "3806548e342390e9d8fccc08548a1937f0043bf9eb68b0bd1e2ed2be450e335a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825363, "uuid": "edf6c895-e2b2-45a0-bad6-472784940538", "comment": "Malware payload", "value": "b0688244ea013c031206c36220f1d35435fbcd0e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825363, "uuid": "c3314786-78d2-4198-acc9-fb246a3c6c83", "comment": "Malware payload", "value": "6e952e4d7e04afc74b1cc278f81e08d6eed36572ef244f7f731815d7d26ab95cfc1ad815093d33fb181b6ce628f98df5", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825363, "uuid": "b3915c4f-05ae-4bb8-b829-9883fb956f38", "value": "T100632D92B7253E8F56BD822D0A33709FE864204953C3527CFD17929F4B6460BC5BE1AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825363, "uuid": "bf3fdb88-725b-46db-a27c-ee15cdb2f3f5", "value": "1536:I9l/AoSSMMLtmBiCcaj+QHzbXfKsXW9r7R/mKJje0aRgTRlZhWDSDzimIjIVaNux:I9l/5MWmusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825363, "uuid": "ce541845-6a99-4bcb-bd94-be6eec0a5dc2", "value": 70623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825363, "uuid": "5ff2bb0d-f947-452f-b30d-db044a435221", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825363, "uuid": "b4904e17-dea7-4c56-9b4a-148e4abcbb52", "value": "invoice-1645080830.pdf (76).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f6b4bb3-e2cc-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766802838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802838, "uuid": "04989f40-d8cb-4368-a51d-a316017c8d07", "comment": "Malware payload", "value": "ace591b1faa721fa211c33baab72ce40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802838, "uuid": "01769c39-6b53-434e-b536-15038420ae9c", "comment": "Malware payload", "value": "38188365a204f7b72bef1e6a9a7d0868f4290d35d086f39a268f5bb71841f624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802838, "uuid": "dc9c2ec2-3846-4090-a847-cf2860541dcd", "comment": "Malware payload", "value": "5d7a48eaf757f26ab69cdf0655c19224da4f633c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802838, "uuid": "bcfe17ca-126f-42b4-ada8-6751adf60da3", "comment": "Malware payload", "value": "47c8eb3c9a339332fe1e35685f6968d1c35f848e13639373e58f58790330784b86dd1b377571ac78ca0647da7fa06503", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802838, "uuid": "5b67db96-c132-473e-aa7a-cd1af198eab0", "value": "T1E0C36C5AB70D0A43E39709F0673B27D6C3E96AD070E9E6483509FA4882B5E379146FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802838, "uuid": "f7ed0b85-5e82-4c53-ae67-9c06c2904d14", "value": "1536:/X9Nn1d5xEvsnQSH3NdOFAFqgMSsV9ozdvI03THqEfwwnKWDMpAyr960S4FD7b6j:fP13xxbOCqfYdvIam+KWvyrqQbxr98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766802838, "uuid": "93de6d7e-8212-4efc-b68f-c3c7396ee706", "value": 121772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766802838, "uuid": "0f63fd49-1866-428f-8f55-e08397229459", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802838, "uuid": "0b8aab91-0e2e-4bbe-abe1-04168a09eba1", "value": "rondo.powerpc-440fp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74e2b324-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879700, "uuid": "c22103d0-af12-43d5-8f5c-4589a78300f4", "comment": "Malware payload (Mirai)", "value": "612d5ffb5aad136bc5fd0abdaaffe856", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879700, "uuid": "6aa95750-568e-41a1-9605-8a9d452ad9a6", "comment": "Malware payload (Mirai)", "value": "38412dd0d81c04a0873ffaa629512f0f383a7528cdfb221d579ce901595e3931", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879700, "uuid": "77a827fc-c96d-4f90-81a4-6a09bc5fd3d1", "comment": "Malware payload (Mirai)", "value": "8bb4a1559f437978fbfa470e6e68b8adfc571240", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879700, "uuid": "3e852f42-cae7-4749-b727-fedd24a1207e", "comment": "Malware payload (Mirai)", "value": "a2c3fbd361952e110d54dbdfa7ce31ede3e479f48edb31465ebac67baa7ab80239e92e0111d945cf386ac130b641db80", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879700, "uuid": "f8b1bf0f-0f8f-4449-8392-9a747adfd8eb", "value": "T10A835C22B97A2E17C5C4A57F21F34334F1B6170A26A8CA1EBD720E4DFF25650221BA75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879700, "uuid": "19ee9142-9e98-4958-89c3-41db4a0eb7b1", "value": "1536:FntSvA/HNZLzLs3vqZeihiaNuG2Mi3+j1/WIe9vGgyXR0D3eEexchg:R8YbP/t5wcOImeRiex5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879700, "uuid": "b451fca6-9b6d-4117-bbbf-20646f9ab59f", "value": 83148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879700, "uuid": "8398e6e1-b7c2-4a1b-9b79-e18d069020f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879700, "uuid": "16156dea-fd30-46de-9bda-d05a4a2da222", "value": "jklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a904dfd9-e340-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766852730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852730, "uuid": "2fa99217-c890-449a-9aa9-6a3bebbb2cf9", "comment": "Malware payload (Mirai)", "value": "da31015aa8654d3911a710c6fe74fff4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852730, "uuid": "a28025b9-5119-41af-a9e4-8262f128c488", "comment": "Malware payload (Mirai)", "value": "38807dfce9472b655a2012e808f2b351dca6c4b0a6eac4dd52bb1120f0368417", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852730, "uuid": "f623bb85-1238-40f4-8b4b-3db1c125fc55", "comment": "Malware payload (Mirai)", "value": "ded51aab72c98e8dfff764ada47209e1fd647fbc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852730, "uuid": "edf2b632-308b-4ecc-bb55-b625e0042731", "comment": "Malware payload (Mirai)", "value": "32bc94e3be5a48f0a899202f351040bd1165fc0a68872f8081fbafecec83563a94bf1963cab5f46283eda8412c6bc7a1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852730, "uuid": "90075a0d-7d3a-47f8-a6fa-b1240466ddcb", "value": "T1C8336B31F93A2E17C0D4A47E12F74724B2F1675E25A8CA2E7D720E4EFF14A40A54B6B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852730, "uuid": "9948acea-6a3c-44e1-8005-2a14a8075152", "value": "768:t2oVxxtq9KqLPbMl/ekt1DYZYl6yaf4TojaibO+ypGvzYw:t26xxtSFPbMl/lt9Yqlps/yKkw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766852730, "uuid": "cbe77f51-5076-4b27-8c66-20214bc5c39a", "value": 52292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766852730, "uuid": "1b521bb4-4365-4879-994e-aa54acf3f9eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852730, "uuid": "e1f7c1c7-f1a1-47e0-b21e-a85cb915693b", "value": "hoho.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870e6940-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825614, "uuid": "87af7464-1c93-4149-bd51-b19796ff1313", "comment": "Malware payload", "value": "c41c099657c179371dcbd72f66320d46", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825614, "uuid": "4470be3a-411f-4031-8cac-51ca4393aa9a", "comment": "Malware payload", "value": "388c80b9e4206a80d13609e057d14dfb86425cf9eaf5bf57061fd4c543937fef", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825614, "uuid": "5cbdfae2-4e17-4231-a9ed-3d80d3ceeb2b", "comment": "Malware payload", "value": "8ff0c929d6648667db2760121450adcc2dd204ab", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825614, "uuid": "9a8b10dd-6095-493e-a768-d5f1351b95c6", "comment": "Malware payload", "value": "a43c1e414e0ef27d644203bcd0169d574c9c5b41017c78203865899077a497af2cb83598500a3c97d86188f7ee976bc0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825614, "uuid": "fc791aff-32d4-45b7-b552-e3481b7f8f29", "value": "T162732A1FC52AEEDF185B4BD2A93D8880CD6E00652ADD7855A514FFF098026B135FBA3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825614, "uuid": "27f6c234-bc35-457e-a4d5-36b867639876", "value": "768:I8w/h62/jWs6oS+xISN0vLIYdeImiVLCy6oCJjdkfScBYrwz2y8kTAlGB:I9l/AoSSMd6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825614, "uuid": "b015bf36-ece8-47bd-b45f-978eebca2559", "value": 74374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825614, "uuid": "f6df6c2a-9192-499e-a40e-0be32d436368", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825614, "uuid": "6af47e8d-8e03-4e4c-ac92-49f87a4ed7c5", "value": "invoice-1645080830.pdf (16).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91d50033-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854838, "uuid": "c9d9c57f-2400-4e8e-829b-58254509a371", "comment": "Malware payload", "value": "8568d00c653a55cb77ed86a1b3d0b0f3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854838, "uuid": "36775af4-7c52-4e97-8d9a-c12941a6d84e", "comment": "Malware payload", "value": "38dd5d5bcbe752401c1c921726f278659976de5012570eda875c3a2b2c77707f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854838, "uuid": "760416f8-4900-4c82-92e6-e290fd6c35f1", "comment": "Malware payload", "value": "f2b9b0c26e582ede863d792138aec06bca5a7281", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854838, "uuid": "e564b9f9-680c-462d-b5cc-eb7fdba2ae25", "comment": "Malware payload", "value": "855e9832929855458d62c4ed7de21539fe35993f902ebbf11a06a31907d19cb7313d052ba6703a09c8e616d2e4b3790b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854838, "uuid": "1a3b864e-b6bb-4d41-8d9c-06b10026d3ce", "value": "T199631B3F8D3FA8B6443799CAE7713AACDB22C52655B0E88C1105E5018C1ED5A73F7B64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854838, "uuid": "b214e576-1268-43ae-a36c-50003c89ff79", "value": "768:I8w/h62/jWs6oS+xISN0vbOddYwdkfScBYrwz2y8kTAlGB:I9l/AoSSMcPusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854838, "uuid": "34276385-af7c-464b-aba7-0f3d74fa0d88", "value": 72478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854838, "uuid": "1fe9f199-e65f-485d-b2c4-6175b955489e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854838, "uuid": "be843605-077c-409c-a862-e1a15b237420", "value": "invoice-1645080830.pdf (30).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93a2d607-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811033, "uuid": "f0adb285-8d6c-4c60-94a4-c737999346a6", "comment": "Malware payload (Mirai)", "value": "48a0de3e5cdffbf40cd0eabfbe59b6e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811033, "uuid": "cc10ebd6-009c-4b75-9d06-9e2419a96e05", "comment": "Malware payload (Mirai)", "value": "3948c7cfbd7599471d2ee357fff47999e5a82cf8a3fc99e1614a6683b56dde33", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811033, "uuid": "a5f91204-25e4-446e-84e9-21ca5eba983b", "comment": "Malware payload (Mirai)", "value": "edb0064564a2b3cd0e9374b166e54ec3c640e07e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811033, "uuid": "6c65c896-cc22-491e-997b-ed493317e344", "comment": "Malware payload (Mirai)", "value": "085dc524fe0067138a103e10c2416b4aeb4fd89f1d8deaba4adb620059ab4a58f5d592c5c60e578d89c2def534fd1508", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811033, "uuid": "2bddac57-616f-4040-a9ec-776564b2ce96", "value": "T1CF430852BC818A05C5D412BAFE2E11CE33176768E2DF72139D106F247BCA92F0E7B956", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811033, "uuid": "15ff6cbb-8b5e-4b39-9627-6109c0cfd505", "value": "1536:ZVnsP+SiPuXJEbiaNV82/rKGpoSEpLWIxibJgwKWFz:6kPcmi2V8M3pZJgwKWFz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811033, "uuid": "72992d72-a2e6-4f33-a37b-52445e3f846b", "value": 59680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811033, "uuid": "ca4f6612-1425-4511-969c-ce00f4c4779f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811033, "uuid": "8f7a8616-fac8-462b-ad54-b0d12574ba45", "value": "hoho.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "327bc176-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859832, "uuid": "5bb3135d-099d-4306-80f0-453f2bb7ea44", "comment": "Malware payload (Mirai)", "value": "74c12c18accaa3e433f015d08a121981", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859832, "uuid": "49d5a9ba-7f5f-4952-ac0a-0b80bd932244", "comment": "Malware payload (Mirai)", "value": "39e9d732cac35dcfd743f3e57c3195bab79398030a923e9be0555e4cbd64f007", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859832, "uuid": "e81d43cf-ab2a-4404-aa00-bb41ad6be860", "comment": "Malware payload (Mirai)", "value": "9f428092af51d17dd93cdd14e1d95deac6639f43", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859832, "uuid": "aea3879c-cc7a-4bf3-b6fa-727cd0831c2e", "comment": "Malware payload (Mirai)", "value": "bb305b0bb09153da4db4cfa0b8c8d203dbc17d89b88cb86be325869363a7a30e052a492fff0af32164939f5087b22948", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859832, "uuid": "357f7298-78f4-4667-949f-99b48c5beb05", "value": "T13EA3C41A6E419F6DF76C833547B78E24A75933D63AE0C641D26CD9005F6034EA82FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859832, "uuid": "062e55f1-53b3-4924-ae00-afd4e3790a67", "value": "1536:OHSkOeYmDDoE+DR6miIji2hskKmPemy8emm16irGw4Evg2Rk5CCRbVRL:fkOhmgPiIjDsk0fvpnCRT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859832, "uuid": "735d5a41-2fca-43af-9b75-7951c8fcd267", "value": 101956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859832, "uuid": "1dd4e8c6-01de-45ae-b7d2-c311c9b89b1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859832, "uuid": "8f6e064b-8684-46c7-8736-0ba77b530d0c", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d50762e0-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854521, "uuid": "747d12c1-fd18-49e6-8a15-cc6f995a1c27", "comment": "Malware payload", "value": "102c5e9c7f0170e6cd9f7f9a65f9aaa1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854521, "uuid": "030de3a3-4c8a-45c5-821f-02c3fe05b0ce", "comment": "Malware payload", "value": "39fd02530b4777751bdda59956c9d16bd7de49b166d5186f9d1c7b62db391125", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854521, "uuid": "5428920e-8d23-4df0-b6c0-de499cb31da7", "comment": "Malware payload", "value": "86c391364baa8f8a664c175ccb45da774699336a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854521, "uuid": "bda83fce-ff4c-404e-90e1-ca36f54d269c", "comment": "Malware payload", "value": "c3df280c511c4ae4988f26fc411f5a06f4b5996d2a7eca4d69a4ead5834dd0f155a15d516cf371afd9243d20eb2b0d1e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854521, "uuid": "5c90aba5-ba19-40b9-b35b-f9e1d8d2f8e1", "value": "T1B8631DCBCD30118F6CBAC8358AF611D53C58061459D6E7E17AC9A0476E38A0EFAF8B5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854521, "uuid": "14383526-1de1-4b74-b5be-e96b4ba48bc5", "value": "768:I8w/h62/jWs6oS+xISN0v4gWl0PdkfScBYrwz2y8kTAlGB:I9l/AoSSMaeusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854521, "uuid": "c96c0631-d18a-427f-b610-f6da4bbfb2f6", "value": 72498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854521, "uuid": "b2dbfa20-02ad-4207-9e96-99d1e2afc1ba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854521, "uuid": "095ee38b-bd63-4d18-a996-2fcc5624cb42", "value": "invoice-1645080830.pdf (99).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e7e35d1-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855557, "uuid": "6ebb5a0f-8c11-4170-a445-4e1a075f803e", "comment": "Malware payload (Mirai)", "value": "77a025166b42a4c1c53fb7686e4c79e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855557, "uuid": "224a0ce5-9f35-464b-9a98-6871a743d1fe", "comment": "Malware payload (Mirai)", "value": "3a3be5c430963b4bb8aa5fc3571ae991a2f34ec976e362d77a0e06b4f2918efe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855557, "uuid": "b9a9c617-f41a-456c-bb79-d6796511160e", "comment": "Malware payload (Mirai)", "value": "5dc5a662532145ea917e89a9e8807aaae6d22f36", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855557, "uuid": "ffe6d774-47a5-4a3c-98a1-23bdc8d5e968", "comment": "Malware payload (Mirai)", "value": "5b1b23179bd6f58daf44f91f01810c6dea190d77a20d4937c6668473d0fc5d4a4eac928a0156da437f55b9143e93d9bc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855557, "uuid": "b07b3cb1-1de7-4a62-a3f1-61abd1782d4c", "value": "T193148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855557, "uuid": "35865712-cc7d-42ca-97a9-9055565923a6", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRpUKG:IcY5JpMByVs9jSsf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855557, "uuid": "421daf84-92e7-44e0-a045-0986a3b2d516", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855557, "uuid": "1ff93f9f-67dc-4199-a8b8-3fad95d5a6d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855557, "uuid": "ca86bb57-056a-43f1-9c53-29ffc5630a13", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5ae6299-e358-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863113, "uuid": "5c9c6134-44ec-41b4-99fd-7a315786b4e4", "comment": "Malware payload (Mirai)", "value": "97a91acb83c610fcfb5a7a5ff612827a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863113, "uuid": "39cb1e24-dca5-403a-b69c-f94bc931fa0d", "comment": "Malware payload (Mirai)", "value": "3a67b5ac52e2d17e0ebb4cc2ff6c430c95e707d9f6aeda5fc48b87c2d6b3dab2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863113, "uuid": "5fa9d7a2-e6a8-4531-9542-789fef99a679", "comment": "Malware payload (Mirai)", "value": "24eb1930d30aa6f069f97f9aeb8ae7764da43a55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863113, "uuid": "335ca5d5-1295-409e-85b7-44f7f62d4c06", "comment": "Malware payload (Mirai)", "value": "660c65bf69e3882e696be75224d53419878280d00e062d5e6ee162c64d1fdd95ece894f0eda0812b760f6ebf5d40be19", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863113, "uuid": "51aec5a4-7de6-42ec-9f11-fde71db099d8", "value": "T15EA30886B9819B51D5D926BAFE1E518D33131B68E3EF7202DD109F24678A82F0F7B601", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863113, "uuid": "ee9b34c8-7aca-406e-bb21-348d0b21e3bb", "value": "3072:/3BarYwhQh4wtqapVNKJkk9Xeno0f0R24ch:/3B8YwhQuMpXKJkk9XIo0fa2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863113, "uuid": "6ce20369-cad6-41a5-b50c-ed55de1db2a5", "value": 103784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863113, "uuid": "93b2ca55-e05c-41cd-ab41-86501c593dfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863113, "uuid": "e01fb7fa-ccd0-4d12-bfd1-9b15b66b29c5", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c023c62a-e378-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766876820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876820, "uuid": "10900c22-1fd9-4262-88cf-fed1066c3e3a", "comment": "Malware payload (Mirai)", "value": "bb97d8ab19fb0adf23641115b0883238", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876820, "uuid": "c3ac287c-6136-4875-a8ad-7bc4aa92978c", "comment": "Malware payload (Mirai)", "value": "3a7f5449e315cdbec6be5a7a7a4bcb69067fd99a7a9f09e35e5332ca014b9a6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876820, "uuid": "4fdd729a-68fd-45fc-8275-89bdf7a884fa", "comment": "Malware payload (Mirai)", "value": "ffa145e30408f407cfd23a852e404da984f32266", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876820, "uuid": "949235a2-5f27-45c3-bdb8-02b03bee30bd", "comment": "Malware payload (Mirai)", "value": "5a98833630a82b4b3f6ea4c06adda57cb7da332a0f79664cd9e983d508c1613ee2d8dd48b7ed3b237997b6b850b81bd7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876820, "uuid": "4ccea42c-ee9c-40f2-8854-863540bee016", "value": "T1223319A9B401AD7CF80FEB7E84170E09B931371520931B3A66AFFDD36D722954D16D82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876820, "uuid": "3e429d08-7da3-498c-b5a9-f249e3df20a4", "value": "1536:8PLxJfVLo/89AacoFMtaEol0gbqG8p8ueZq4SEv/jBVj4Q:SfVLJREo5qniw4RjPMQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766876820, "uuid": "4232bb03-79b9-47e4-9c67-b2d6f9fbad08", "value": 50572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766876820, "uuid": "6436234f-66dc-4556-97e5-264329ffe382", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876820, "uuid": "eac7a464-63b3-408a-aaf8-be552c8fe75b", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806e7f78-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830757, "uuid": "7c28963a-e0ea-4724-9011-f2155111dc1b", "comment": "Malware payload", "value": "375d564214bbc5c020808f881ac7a845", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830757, "uuid": "d0f99ed7-7036-4029-bd8c-54ed99ee6302", "comment": "Malware payload", "value": "3a8d25ee9173cb65fbc7d03062492582a9d7f655be405100a7ba43bc64ef7f99", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830757, "uuid": "69188a78-62e5-4e32-b50e-7052ca93df9b", "comment": "Malware payload", "value": "c7830d6155aab44b60224700833747544cfe0a8c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830757, "uuid": "54209a2f-9552-4076-af1c-1f0451253593", "comment": "Malware payload", "value": "1465155d05289c749b02bca4669413a8b869f56728e8d4b7cb1a17d10cf0ef6707454c2e0e2b490b7e9bb232b5a99a6b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830757, "uuid": "06261a45-3d29-4732-b06b-fb6c33a229ce", "value": "T14A633C2FFB0325F563F8BD41D21E75A3A5D60CA466FAE049F0036984142B6933B786CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830757, "uuid": "3d73c14a-bb02-4fc0-b994-041c89ee9cef", "value": "768:I8w/h62/jWs6oS+xISN0v/834VnoZ/PjBv3wOqdkhyE2xp8HCTs58RCRtCmSTN8Y:I9l/AoSSMJAusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830757, "uuid": "ba29c001-bceb-46e3-a768-927d43bb5208", "value": 69649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830757, "uuid": "2818fbc2-e141-4fec-a883-355b336a2090", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830757, "uuid": "b893ebca-ed27-4c2b-86cf-75f3f9eb606c", "value": "invoice-1645080830.pdf (32).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a7dc351-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854772, "uuid": "01619962-ae8f-4e83-a629-eb19b8d5d18d", "comment": "Malware payload", "value": "7340612e385c6339438df16933883b69", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854772, "uuid": "c5fb9de9-3741-4895-b1e9-8e8794ffc827", "comment": "Malware payload", "value": "3aa2b6dfbac45b9b6ce3fcd8d809bd440c78830d985f42efb07f56e2e5e02f0e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854772, "uuid": "f6b1dc93-527f-4115-b1bb-695a55710992", "comment": "Malware payload", "value": "d914f79519ba44463ea973b1c3cacaeafc4b528c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854772, "uuid": "9ea11555-a2a6-4bc6-a5b0-7966ea098759", "comment": "Malware payload", "value": "aed4842707ee314531812e7c2ce41585ec8a6f176f0e4ce2e99a73eb573dbbad511dbbf91c157ba96e90c6f09a8d5916", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854772, "uuid": "308adb7b-c3af-489d-b58d-28f92917c9c8", "value": "T14563E8D2FC80EC7DDBCB9B418B7C22AAC55BBC3218F693CA5A4679140E55CCC8146D6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854772, "uuid": "14ea8e25-a4d6-49a2-b40f-e1e1bbaf6eaf", "value": "768:I8w/h62/jWs6oS+xISN0vKqSTTI4fPdkfScBYrwz2y8kTAlGB:I9l/AoSSMjITIIusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854772, "uuid": "8f86bfa5-26ce-40b3-807b-a6352cbb9d41", "value": 69603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854772, "uuid": "08777185-e875-435e-80ff-07a9066037e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854772, "uuid": "4fec2e67-004a-41ff-94c4-76ac1e301e71", "value": "invoice-1645080830.pdf (42).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b028aa8c-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793901, "uuid": "a178626c-d680-4b90-b388-8391202eef82", "comment": "Malware payload (Mirai)", "value": "3e9b2d9219fbddb9aeca9355b6661283", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793901, "uuid": "5a03325f-8344-4cf4-9982-4a31a5e5dc56", "comment": "Malware payload (Mirai)", "value": "3af1707cdbf78a32f41c458424b2ecb7c631b17b79da8dae2dd51e6a9297462d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793901, "uuid": "667b1bac-9e7c-44b3-848b-dd62e6c1bbc9", "comment": "Malware payload (Mirai)", "value": "4d0a801e9823d15fb955143669bac2b5b26f8ab2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793901, "uuid": "294a58a7-193c-43bb-94fc-3f7f9910c401", "comment": "Malware payload (Mirai)", "value": "7fedfd1f25fcbd99f5dab6daa452b4d281ef9dbf6556a1ad19f8e23992da40fa211d0304effd47a227860fbd66bcf85e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793901, "uuid": "adc0fd33-fe4c-4fe5-94b3-2ec43dded2c2", "value": "T1BED3F79ABC919E62C5D216BFFE1F51DD33231BF8E3DA7103DD082B20768691A0E7A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793901, "uuid": "6ca97153-ab38-4202-8fc8-17eb546b2301", "value": "3072:hyHSIt/QmxAQYtYNdD8D+NvUUMzZ2qElOyWSKzSKiXiJEKHJw1xn53k:hyHjt/QmxAQYtYTD8DGvUNd2X3noiyJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793901, "uuid": "e66b2176-df8d-44c3-91f1-2bddb1bd5a27", "value": 140020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793901, "uuid": "a5814574-fb91-4648-811c-f0820b2a65e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793901, "uuid": "99ead1bf-daf3-4375-bed8-1e775115f510", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31d527f8-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854677, "uuid": "3d3354e4-899e-4013-8f46-290c01c9d837", "comment": "Malware payload", "value": "9d0d3342a35deda99ab171a86f44a75a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854677, "uuid": "46abdab7-5b12-41cf-84f8-435c58a05be7", "comment": "Malware payload", "value": "3af944a5465fcc98978fd6e22efba3fd6d8c64ffd492a0fa28c26b8615d8f879", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854677, "uuid": "90e64714-93b0-460e-9d8f-dfc9b6691152", "comment": "Malware payload", "value": "430daa05365c529a1e0d456eef615c53ce753e59", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854677, "uuid": "66ab7efd-6695-4971-bcc6-08d1b38af0f3", "comment": "Malware payload", "value": "ffba9d523fa0747da1781257621fe2e4393898a6fd536d485a8e1f81c130e8a730331ee613f5449f2eac91b2954e5013", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854677, "uuid": "3193e180-b760-4067-882e-eb3a5c9a944f", "value": "T166631A1C0B4578384C9A753344EE0A3B1C6DBD121E92CB7EB3F8B45695BC399E3A7246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854677, "uuid": "c79877fc-53ae-48ba-9a49-8fefc110b2ca", "value": "1536:I9l/AoSSMAU+IHKYt3msx8fvhlAf7JVSz0BfLxfVvOETDEwtLhL+rLtmGFOkLEtT:I9l/5MqDusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854677, "uuid": "6c1efedd-ac4e-4195-949d-4e8c8a31f043", "value": 71533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854677, "uuid": "34ab0291-a472-4c98-b26b-c564e772ca3e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854677, "uuid": "d8349301-f8c0-43ef-ac6b-2ef6c22838f9", "value": "invoice-1645080830.pdf (63).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c83585c-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825624, "uuid": "d0219e3c-09d8-4683-a38f-cd2eeeaf01f3", "comment": "Malware payload", "value": "6d04a4dd04fb23efc329b34f0514a4bb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825624, "uuid": "fa4efd59-404f-44ad-ab6a-e913abd74e3c", "comment": "Malware payload", "value": "3b10039fb3ba2bf0cba419f8309c9f602933e2d0524e739d0e9bad64a5828e0f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825624, "uuid": "48b6ed4b-272c-4e9a-aa4f-d860f90962fc", "comment": "Malware payload", "value": "d8b89644b0972402ba794abfd39931125e32394c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825624, "uuid": "ec748377-4f00-4f4b-b862-d14f1d4cf748", "comment": "Malware payload", "value": "4564326856a649cb702aa8d9b7a603ae237cdc57384a1a98a11f64833c6a6fa5516e98bc7d0a226197142e001c2eddd6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825624, "uuid": "4b9cc430-1ff3-40fb-a324-6b0b49512d4d", "value": "T1D863FA5939CC31DAD45995869F2E079B328D299F2F4406923D226F38CDCBD1B3BA3253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825624, "uuid": "6e5ace21-3340-4e86-8666-22083ee66f93", "value": "1536:I9l/AoSSMvzaz8zhzlz7zZz8zUzLz2z2zkzxzqz2zIzGz9z+z9zWzWzwzCzIzyzi:I9l/5MnNusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825624, "uuid": "54a64dfa-232a-4097-acb5-f2fb8c8bebc6", "value": 72575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825624, "uuid": "c1845b3d-6dcb-4a15-92ab-753842e4c920", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825624, "uuid": "043d006d-da00-4c56-af67-b42c3eba1099", "value": "invoice-1645080830.pdf (18).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bb59e7a-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830561, "uuid": "a771ec70-6559-4f8a-8652-b8161e12dc40", "comment": "Malware payload", "value": "898ca6667eb52e0f9b5617871c653291", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830561, "uuid": "4450284e-6c02-467a-9991-61421dfdb4bf", "comment": "Malware payload", "value": "3b3ca0184fd98de5f648428912d37f9db6c5e289d4b9409a0f55310b83bb9b7d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830561, "uuid": "c00a4ec1-decc-406e-87ea-9bef44ed7070", "comment": "Malware payload", "value": "5957f51a5333b07012d9d7fc4daf9d2a05f2a7f2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830561, "uuid": "4635d6ee-c8ca-4af8-8d43-6ea640edc279", "comment": "Malware payload", "value": "b21544edea8971cdba1251332b04942e64d2661f7581a6a7477b304c1e5b169deff4548a2dde94c5fc72d3d3069cf76e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830561, "uuid": "d0f18f9d-916f-4574-87b0-75fa9c4c5f41", "value": "T1B5630AAACB31A67C0F7A0F86CB082947DF8999971BCDD40509D4F3C96CE4BD7A9494C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830561, "uuid": "81b1c0a8-e3fd-48c5-a8d8-ca23560ad98c", "value": "768:I8w/h62/jWs6oS+xISN0vUKLNJ8dkfScBYrwz2y8kTAlGB:I9l/AoSSMv4usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830561, "uuid": "8ecebd6e-b323-4009-8ca0-de4ea1be5ec3", "value": 70678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830561, "uuid": "892a651d-7d57-4537-8b85-9d25bc857b9b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830561, "uuid": "dc4f8c5a-c7e5-40c0-beae-31ca75620848", "value": "invoice-1645080830.pdf (74).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dd7908a-e357-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862455, "uuid": "c8cbde6e-4839-452a-bdde-6e6b026638c4", "comment": "Malware payload (Mirai)", "value": "00c4edfafd3e97380b156f70b09a5969", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862455, "uuid": "9e903790-c97b-47c2-a1c2-d1b59693dab8", "comment": "Malware payload (Mirai)", "value": "3c20f1c9c96ad87add38873867af47274afcd5bfbf9c910d2d7a0e431e7e61b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862455, "uuid": "2a02aafa-54f8-4834-b5f8-61acfadf664d", "comment": "Malware payload (Mirai)", "value": "1e5567c8ad40fe1317d842d6a366137cf757c444", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862455, "uuid": "59851c6a-303e-47ae-85b4-b6b03ea644a0", "comment": "Malware payload (Mirai)", "value": "76a5e61a59cb38c4ed640ef726bb88783b6de48f46a2891cdb5623290a6224de9e0e4dfa648f0a3b4910f9fc08dc18ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862455, "uuid": "4a793929-25c1-464b-a957-ad46610aa9ae", "value": "T1C0635B4272184947E5AB4AB0293F1BE1C3AFE55120E4B78A755EAF5E8332E334447ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862455, "uuid": "101bc3f4-199c-4939-b128-1599438046ae", "value": "1536:SYxuyuDLzSI7k5QJuUz0yEyWbISgD6QvfQ9voNbVRqJ:LP15QYUgvGSgRw2iJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862455, "uuid": "d94df2be-0b92-48a0-89b1-55bfbdbcddb9", "value": 71476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862455, "uuid": "88776f7e-f2b1-48ae-865d-4a596d59e716", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862455, "uuid": "6abd4426-ba7b-4607-adb3-b304b186871a", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51a1d3a8-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854731, "uuid": "0a1be8a7-6ac2-4f58-803e-7c378283b06a", "comment": "Malware payload", "value": "e67775a3a33e81c51349b7b820213073", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854731, "uuid": "b115282c-2183-4437-b547-3c5d0c349929", "comment": "Malware payload", "value": "3c4f56abfb82bf62579658b1860eda98368bc7560b6985a6fc4328d66ba3ede1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854731, "uuid": "91d531be-b455-438a-b8dd-ee973664bc4e", "comment": "Malware payload", "value": "b536ea99ccb1f223a70e41e1dda29d40b563cb86", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854731, "uuid": "e8e6ceeb-dd20-4571-acd0-f0a61a87711b", "comment": "Malware payload", "value": "89fc937676ea6ab795e7fb78eaeed177c163332e11fd881fc2b2ba965bec20767ad7e9a6037fef63ec7f4272e03a79dd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854731, "uuid": "196a7b1c-8339-41fb-af35-758ae2bbfec5", "value": "T1827319BB3A74F4FE647EE17B4F09F611359C09165A06C484E34B466C3FB99E1B27A808", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854731, "uuid": "a12c2ac3-d840-47ad-8f0f-25f9eef39e40", "value": "1536:I9l/AoSSMzc/DGIcONmNVarRux4S1Nq6YhVtp9pGL4mYVpK5pdM6GIeCoIKOovn2:I9l/5Mzc/DGIcONmNVarRux4S1Nq6YhC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854731, "uuid": "56bff2c2-8562-4758-8701-fba23aed8c16", "value": 76337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854731, "uuid": "7433d583-4168-482d-b46a-3098949f0414", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854731, "uuid": "f55ff983-1657-4f64-b4eb-87b19e312cb6", "value": "invoice-1645080830.pdf (52).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e0d4168-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870509, "uuid": "aadb0933-aeb5-4dff-b319-65e657f428d8", "comment": "Malware payload (Mirai)", "value": "3351880f9d0957808ea4c4f198936d10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870509, "uuid": "484ce06a-3584-492b-ad09-f9ecd96f4ae1", "comment": "Malware payload (Mirai)", "value": "3c712758e2a1576fcafb5db61f2673f1ad09ed23ba4345d544e6cfc20881fb7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870509, "uuid": "5a80df96-b54e-4ba9-bfb7-47ed39bda63e", "comment": "Malware payload (Mirai)", "value": "5b5cf9ca4fa8eb69e328ed4a5c939838ce9db1de", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870509, "uuid": "4b09d4c0-64f0-4d23-94fe-df2c3dab73f5", "comment": "Malware payload (Mirai)", "value": "c1c6cc5071340bd8d9d85617529682b04c06952947d5fec6a7c1c70144d2400c8c2b51d5a7b9e64c0a56361ce500cab8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870509, "uuid": "c09a3612-66a8-4ce8-a1b3-655bec0cbc31", "value": "T184A2CF2B31CE9A9DC529A776522DEFCEE2DD1A8087CEC366B105C2909757407D935CCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870509, "uuid": "bf911357-f515-4e89-9e55-12101e020155", "value": "384:MGcLNZqyIddfNZz/uFr6xQQUrRyAp6UZEGAvctRJN5Jri6RtwJ+v1Rpx:1cLNZopDz/K6xOXQCSv0JLgq9px", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870509, "uuid": "2e88673b-07ab-4151-9849-c45ee87188ff", "value": 22292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870509, "uuid": "19221843-e60f-451a-819a-be4bcb46e47f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870509, "uuid": "f6d1d6de-d188-4a7f-917a-08a152bf1d18", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3a92775-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830843, "uuid": "7b0abbcb-48e3-4352-846a-c3267379681a", "comment": "Malware payload", "value": "45c5551ec659126d00427e11225dd763", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830843, "uuid": "3c442607-412f-4001-8f6c-65d69a695810", "comment": "Malware payload", "value": "3ccd60f6e56be36a61cab0792c4b769cf6fad400a2ea51b5035e4781cdf58cd1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830843, "uuid": "e2d207ab-b72b-44c7-a0c0-48eff44ec30d", "comment": "Malware payload", "value": "48a5e2f398a0425c3667dbc2acb21f2dd4ea1083", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830843, "uuid": "6fcbb081-7dd0-4c50-9cb7-457deca145d8", "comment": "Malware payload", "value": "895daa752cac95c8571d9fac3df1e8d29b476f3c13ae3b2ed990f04b3bbd7da177c653279ffb7aafb89842e85475011f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830843, "uuid": "41adc274-f4f0-43f1-bbd1-0e902f8dda26", "value": "T116631B25E60314FF37BBBB6CF1989D6F42129CF1D9DE12A5C594212D924FE32846026F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830843, "uuid": "dd5b9e8e-03f7-464f-a117-40b8aac8189c", "value": "1536:I9l/AoSSMpBuFrHpJBxe0Yi8/S/AL0USIECViCuHfK7+s715toTFNAf0SmRfU5P9:I9l/5MaDusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830843, "uuid": "69e1e555-ddc7-4309-95b0-8e80b6fed1ed", "value": 72567, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830843, "uuid": "fd759878-d644-44c7-b1af-45a035197367", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830843, "uuid": "a14d74e7-4edd-4280-9336-1dcb214d31fd", "value": "invoice-1645080830.pdf (15).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a8b955e-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854799, "uuid": "0887b5c4-057f-4525-a57a-bfa480e0f792", "comment": "Malware payload", "value": "21e4b4f9b05652c027dfffe97948e209", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854799, "uuid": "a2dbc48b-9f70-431d-a2dd-c5f25c012fca", "comment": "Malware payload", "value": "3d0309cd88cfb2f7b6a48a28f49017e618db82ac968ce86c2d2d38a442fc0f12", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854799, "uuid": "ddbcd4a0-4fac-463a-a089-b217a0e20254", "comment": "Malware payload", "value": "5e9b4f7eddba6cd63d3294e9d48ad5ed56512334", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854799, "uuid": "38f21f44-b56e-4edb-8c46-8e709e914bfb", "comment": "Malware payload", "value": "e6170a24b4cf769475443bd39d57fb0a52aeac440cd376851149efc953b54daaff71b2b60de39f56746422f7632d04f4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854799, "uuid": "c3af234b-30cd-4504-bec5-65061ab0ac9b", "value": "T1B97309FFEC717FB9D19F70D44B24522B1DA9E206EA7E637A4EA494E004041136EB0A77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854799, "uuid": "be59de90-3d53-4943-8fd1-62f55c64ee1c", "value": "768:I8w/h62/jWs6oS+xISN0v+hY0M3yldkfScBYrwz2y8kTAlGB:I9l/AoSSMP8usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854799, "uuid": "0b8d55fe-6a5b-4e1f-a1da-7b4a799211c9", "value": 74392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854799, "uuid": "3e3d13c5-cfa9-4a65-a171-1f0c9f65f6e4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854799, "uuid": "d9f31b62-cdd9-4270-bc4c-03f48362a9fb", "value": "invoice-1645080830.pdf (39).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "171f6f34-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854632, "uuid": "3c430cdb-d894-4002-9e6d-28c97d199766", "comment": "Malware payload", "value": "8847882b5cd36a7f7184d0722cc5867d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854632, "uuid": "8774e012-7a68-4821-97ff-0b7f9c6ba1b2", "comment": "Malware payload", "value": "3d9d2e46252a52f76516fc154f90c9e723d2f6106cb55c0b0759b51907b9b6e2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854632, "uuid": "148609f0-94f4-47f4-a42b-060eadc3eab6", "comment": "Malware payload", "value": "af8b819a31e8632923231bbdae756f5ae1f02965", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854632, "uuid": "0a35d6c3-3845-4a3b-bd19-42c1dd80fb58", "comment": "Malware payload", "value": "b91e89f828d7189477578f147428e15192c4c8c97c842834133d6ae6ff9dc9286512e6cbec63343b257dd247475eb5bf", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854632, "uuid": "e231d1db-a4f3-44b8-a700-6f377e432a9c", "value": "T15C731B66A93726F5203F2532A66D20C59CED59B4CD5A1C08B3F9F67CC2440A4B7E84FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854632, "uuid": "a800ecb8-fe40-4d85-ba88-23c45450d94c", "value": "768:I8w/h62/jWs6oS+xISN0viQrIvjqGqCkSrR4NI67VqvhFeYtl4izty6bmFdNelnt:I9l/AoSSM0susrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854632, "uuid": "2550fbd9-c8a4-44fc-bd79-9d5308de23a2", "value": 73480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854632, "uuid": "c4a56e78-f2d3-4749-8794-510b7832b391", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854632, "uuid": "ad3d6178-5b23-4d0d-b4c8-4b1c293da7cf", "value": "invoice-1645080830.pdf (77).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04c0d13f-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795331, "uuid": "29f82e24-4b2a-41b9-9ec4-13e705a36096", "comment": "Malware payload (Mirai)", "value": "41bb4995dcb7759c030afefbaf81f173", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795331, "uuid": "5ef6148c-1e81-4451-83ec-2c61fb37d4ad", "comment": "Malware payload (Mirai)", "value": "3db589e12dbe9231853afa90ce893c21de9d8736892620111a73ee64d785b451", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795331, "uuid": "bea92051-18fe-4eea-a432-50a0a94bb74d", "comment": "Malware payload (Mirai)", "value": "1ef102ed2d016407008f3b4e2cb47edbffa6a1b6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795331, "uuid": "9d2b7b68-10e0-4006-8c57-facfced531b1", "comment": "Malware payload (Mirai)", "value": "563f1ca055cf780c4effbc3cee58639fa96a17f07418ee8a6419ad6dd4c8e24f0e67795273f2ea208635e168dc75899d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795331, "uuid": "952577f8-1d57-424b-bdf7-087d3115b683", "value": "T12453E781BC819A2546C90777FE2F108E33066799E0EE7352CD141FA47BCED1E0E6B65A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795331, "uuid": "d0b73faf-23bf-4bd3-8241-81d9c174bcaa", "value": "1536:dtn4hRfby0yZAui3V/S2I6G+unXo/VdOU31MorFnBPyl7Iz6:6RfOBARdtXGH49dO21Mo5Bqj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795331, "uuid": "2afcf630-a24f-4982-a62d-2284d37faa35", "value": 64973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795331, "uuid": "b39e130f-d837-40b8-add6-0c33c5fee5c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795331, "uuid": "6ec098f2-5038-4329-b645-f1f49e031333", "value": "Fantazy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee8e83e-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857840, "uuid": "758907c3-0f6c-491e-a65e-826495fb76b8", "comment": "Malware payload (Mirai)", "value": "9807b6a7a09ff4047812134efea9ce6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857840, "uuid": "b095acf2-5f07-4d96-9f6a-1fa844b30ba2", "comment": "Malware payload (Mirai)", "value": "3e5425149e4db51986245328f098453f55416c99f1c60e40acc354cd4fcad259", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857840, "uuid": "4bb1c240-7661-4354-9428-e009561e3f9f", "comment": "Malware payload (Mirai)", "value": "c2d3651527573c4cfbc0232f8668852a811d9e14", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857840, "uuid": "f4225958-61e3-4e05-a454-79031ef941a6", "comment": "Malware payload (Mirai)", "value": "1409e488c7fe034dbdf903a3e3241ab59605d442b1a15dac8d545093ec8b15c2bbb45b79841e3681b5bee15ad4a6112e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857840, "uuid": "3fcd86db-7a5b-470d-9149-8b5c50478c46", "value": "T1BCB2D01069D59D76DB20C638FBBC1A802FA74AFC928A317E1954106CF34A68705FDBCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857840, "uuid": "96d5fd16-2b2c-44a1-ac0a-80be6152cc03", "value": "384:pSB7BcuLMg1OW9difyFNkzAfKZGt/r/S7Hp0z+KMdEimsRgcm1QR2hphhymdGUo4:8bc4B9dtNQAMGtT/S7JdKMdVmsRc6epT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857840, "uuid": "00cb8d56-59ba-43a8-932a-4f60f0f9ab68", "value": 24496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857840, "uuid": "88359b69-d3c6-46ec-b087-53f082176882", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857840, "uuid": "0b494805-c542-40ad-b6ab-6ad525ec5016", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "763b8f90-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830740, "uuid": "ce698354-f287-4cc9-b9ff-03a2c4268dbf", "comment": "Malware payload", "value": "32d8871dd4997f6afbe6f9615afacb7e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830740, "uuid": "ed080c5a-b1e7-43e1-860f-7d85b04804eb", "comment": "Malware payload", "value": "3e5e85bea1e099ef7bed16cb0d8e06503c3d33d6a4eef048a4459afc3aaf949e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830740, "uuid": "4e95e96a-096d-4f21-8fa5-6087f7928151", "comment": "Malware payload", "value": "3b8fd8fb86fda7097ba7983b14bc513ec4cce882", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830740, "uuid": "caae1441-5ed2-4e55-b4e2-c741030cd24d", "comment": "Malware payload", "value": "98ea692d257ecaaab7e50aa233aa861acb7d3dbae760c639c6b029276530759bcc62bb0e4ffd0960c1a871eda7bb3f93", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830740, "uuid": "62e77e45-d807-4b48-a5e6-e43d6e3cdb78", "value": "T163732B3CCA924C2D1DF3B5A25BCAC6215A5E1A06634EA8AFE84713B32754AE77214353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830740, "uuid": "f7c36e7d-b3d0-4055-bf58-ab586be8478a", "value": "768:I8w/h62/jWs6oS+xISN0vLG34hyKHdkfScBYrwz2y8kTAlGB:I9l/AoSSMFyEusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830740, "uuid": "21025889-1a97-4f1f-809f-2ff829bc956c", "value": 74383, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830740, "uuid": "0c9247a8-7348-43a9-8541-e913c70e5ff8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830740, "uuid": "8be77119-2578-4667-8d89-7af55a4c9cc2", "value": "invoice-1645080830.pdf (34).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b22d54c8-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854893, "uuid": "e62d99fc-db34-48c1-9cd1-b10292ce85b2", "comment": "Malware payload", "value": "dfcc0ef307480517a80ba6df0191a2b1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854893, "uuid": "dd9b675c-6991-46bc-93c9-356aa7bad01e", "comment": "Malware payload", "value": "3e82ff4cff45cf03be746fd26b6f199ac35c4da3d4ba32dde1a30210fdbf4db6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854893, "uuid": "6f9b8289-a4fc-42b9-8ff8-d9d4cd8b0775", "comment": "Malware payload", "value": "c8ba2b30bb80e0adda659e870b0a87b1c6d7d281", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854893, "uuid": "6f2b7ea1-e278-4ca3-a8ae-429faeb1bafa", "comment": "Malware payload", "value": "121c77cf807dedaee07ea2a8208a78acdebbbf2241009dcf73b7ec5df64614690ab8c9b9841039fc2c4d5b8e6c95a105", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854893, "uuid": "18327728-d84a-41f1-a34c-cef74dcacb2f", "value": "T170733B528E663A7F61407FE22CF509C9F503E79F8190D37A08B84262559C52FDB12BEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854893, "uuid": "ebfd32ea-ae89-4aaa-a1d0-0e5d7914ff41", "value": "768:I8w/h62/jWs6oS+xISN0vX/TboEdkfScBYrwz2y8kTAlGB:I9l/AoSSMXhusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854893, "uuid": "e98da641-ac0c-457e-be2d-e0d74077d267", "value": 73411, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854893, "uuid": "4a4343a6-c3fc-4040-8d2d-1c72629b68b2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854893, "uuid": "0ddd153f-e0cb-4cb8-8899-74761bec1a14", "value": "invoice-1645080830.pdf (22).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e70becbd-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830500, "uuid": "425fd4c7-765b-4284-afbb-8af7cebb04fb", "comment": "Malware payload", "value": "cfe05e4735bed7a85bd943209b05c4a4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830500, "uuid": "cd81c357-3767-4ab7-83af-cda765150e14", "comment": "Malware payload", "value": "3eb6865622855e0c6309b58ae4cc6562bab0cf4ca44c98af23e5803f75951bb0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830500, "uuid": "87801811-23f2-41d2-9d9f-b69c7c533310", "comment": "Malware payload", "value": "c279d36278878238d779319cbc484f9979053cca", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830500, "uuid": "7ad1ceae-2a1c-44c4-a55f-dc685a7ea871", "comment": "Malware payload", "value": "59d2af7f6d9c4e7107bde23add3598b98171a95858d7117e5ba70b9a518337493b39b4e41b5abe27543b137de2359664", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830500, "uuid": "4f5fe781-cb8c-4e67-90c5-6214ef112071", "value": "T1CD632BB24A08B6BC03AB5E343874135FAE264F45E9A585FDDE1B97A145182CEC0FB760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830500, "uuid": "88deebd8-03ac-488d-a53c-d045381368e6", "value": "1536:I9l/AoSSMiraEXWk4ke48Bm4DiNYLpyvlzn+RcCifNEvrCb6lslDIlslwq/G7p1Z:I9l/5MhgusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830500, "uuid": "390fcd05-8b8b-4a34-90c8-ce3a4ae86e78", "value": 69671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830500, "uuid": "aa0edb70-681f-4514-922e-c3e9b2cc180d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830500, "uuid": "ec487ca4-c3a4-4316-99e9-aedefd7202b5", "value": "invoice-1645080830.pdf (89).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6474e89d-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855621, "uuid": "d3460358-23a1-4b59-aef6-60efa4ed5540", "comment": "Malware payload (Mirai)", "value": "46c405ddea26e1341734741fbe6bdc73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855621, "uuid": "85a035c6-e8d3-44b6-8011-5de258a28227", "comment": "Malware payload (Mirai)", "value": "3f29d5177254a07d5564eb36cf1dd10eeaee3f8d1f9d1c016131f1327ab55e89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855621, "uuid": "cbdfeabf-d4ae-4cfc-991c-9ad7166ecdbb", "comment": "Malware payload (Mirai)", "value": "72b79e9a2c2adfdad8731b1658bde70f447c987d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855621, "uuid": "13788758-2e93-466b-be37-1f595bb52da4", "comment": "Malware payload (Mirai)", "value": "fa89b6f626ab45cac35670469d31fda8dd5515f45ff0585d50a353f5ddea4b35233245361b58013eeead8a64052c5724", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855621, "uuid": "c791bf55-0dc3-4344-8df2-aba65260362c", "value": "T1F6148D68FE4F78D2D2C7E37DAE4A0FA2302779749565C0B51A00A29FD5EAFD488D0613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855621, "uuid": "32c09f83-982b-4755-824d-bed778e120cf", "value": "3072:badBpAIWIfbEdOcdY3rZiigZ2eNRzPx9:bOVfbEdxm4iubX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855621, "uuid": "e3c163c0-d76e-48cb-bf48-a635aa393015", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855621, "uuid": "15bfb132-eb4d-4efe-8220-bf4bc443177a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855621, "uuid": "f4c8e4a6-d0cc-46ea-a00b-4cdb511c0220", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82cbbb8d-e2c2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798549, "uuid": "01bf20c0-42fc-4b2d-b057-d46cd62af2c9", "comment": "Malware payload (Mirai)", "value": "30b8d4777e88adb1fb1ce6f31ea21016", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798549, "uuid": "e8df9617-5633-487e-9393-2587e52c170d", "comment": "Malware payload (Mirai)", "value": "3f9c3473894ca5ce5444ba46fc74b8455c635d5ae49316d276493eb68f64c127", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798549, "uuid": "16be2844-f749-4ac3-a0cb-419e9d08e75e", "comment": "Malware payload (Mirai)", "value": "53fca677245a2c51a5cf576110d0e8993c238142", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798549, "uuid": "feef6e47-279f-4f2c-9257-c5c81bca53e5", "comment": "Malware payload (Mirai)", "value": "39bc1b9b8d8752a444bdf2013416312b0212a9cece1181180cf83dad90d26f7861710a1e501ae95b4c43902b7f9ad9dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798549, "uuid": "608cfa8c-de9e-4c69-90db-21cc641e8337", "value": "T1C9430885B851C612CAC56577FF4E82DD371713ACE2EE3303AA19AF60364B86B0E6F541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798549, "uuid": "111b3a53-b64c-4e6d-a62a-8d444ee9c79f", "value": "1536:seaTUTW8Y8CtCTJF+txTYR2D26b48vNbVR:seaQWx8CtCtF+PMRXrKN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798549, "uuid": "3a05cc80-a65d-4a83-9552-54f80d0a57bf", "value": 57016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798549, "uuid": "2f8e8289-1f16-45ce-a1df-9ca83640dd4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798549, "uuid": "ce587f2f-fb3f-4e9b-b9c1-4e2dbf92482b", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc7509ac-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854963, "uuid": "8f8b3540-ebd2-4493-ad56-43f72c77b5e0", "comment": "Malware payload", "value": "ac97c2313c282f52128cb4134cdfd0de", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854963, "uuid": "6d832c16-9a6e-4b83-ad54-8b2bc6c8426f", "comment": "Malware payload", "value": "3fe820894ca9544cf1251cc36f01b9884bfe0b6d84932656aefb66fb5186ce11", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854963, "uuid": "d24caa7a-1332-4fc8-b65a-8791da94ecb9", "comment": "Malware payload", "value": "b0fcae4e19d70c9c07012114f44072966a103df1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854963, "uuid": "c728e1fb-669f-48e0-b8af-3629f303832f", "comment": "Malware payload", "value": "6a8d92a89aa61525089c4ebc9cb880f6c8792214cbcf4e6822fbfa8ca3ed09859c7858f5406c3b7470c1b6070920f397", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854963, "uuid": "23b7ca06-467e-4a5f-9268-e62c70cac8ec", "value": "T1E8634C4B228BF5801A856A4546CF227CF096FB957EE2C341D482BDF1836D5E617BFB04", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854963, "uuid": "df34de65-aa7f-4338-adf8-0145ba049e3d", "value": "1536:I9l/AoSSM+GiGCGUGmGtGgGxGYGlGqGiGoGGGiG7GUGXGCGKGEGNGkG2GGG2GwGl:I9l/5M3AusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854963, "uuid": "942274e9-2cde-4d80-b751-6f9a811bb636", "value": 71597, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854963, "uuid": "e4ffe3b5-c260-4321-a898-c46929262051", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854963, "uuid": "f444dd35-a5f3-403c-b72c-01e54da7d9d8", "value": "invoice-1645080830.pdf (6).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c98dc99d-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825726, "uuid": "e20ca652-66a1-4cc3-93b3-6f15a74173d1", "comment": "Malware payload", "value": "af2746bc3e0ff1d96facc401e49552ba", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825726, "uuid": "c5a24c37-9610-4f8e-85d4-cf463469ca1c", "comment": "Malware payload", "value": "4025738193087dd7bbde1ed48389586b5764480f6c4a16ddf483070be8c92add", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825726, "uuid": "8cc0f3c3-cb14-48b6-a346-a806cd67e6b6", "comment": "Malware payload", "value": "86ccd63388e3f8d89ac9917c9c3246bf3782e02c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825726, "uuid": "2e483cc1-ce9c-4b4e-823d-1a20ae10292e", "comment": "Malware payload", "value": "ff5bd558d7608726c022bfde5d86dac14d2198223279c8613fc621cf85c671dd503ef31026c7500c98daab41f4a80fc9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825726, "uuid": "4ea76bef-9aef-4d4b-a02e-85593c58ad1d", "value": "T1326319E36E6D6CA82D16F84DC22E0441B8353FA6D0564D4A192D9E4E940BCCBFF37786", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825726, "uuid": "bc2c5e20-6ddb-4afe-927c-345118e25775", "value": "1536:I9l/AoSSMevvq+uHInFhlUkleE+pBnjAK4QBWt+jMAvJiTgi+9siS/cQwjF/j7Vm:I9l/5Mevvq+uHInFhlUkleE+pBnjAK4r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825726, "uuid": "1fbe4906-6288-4aa1-a908-649f489fa24d", "value": 71639, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825726, "uuid": "2fed418e-cd73-4ea8-b33e-b08f3380d3e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825726, "uuid": "823949b9-f7b7-4551-b595-d48e009550ae", "value": "invoice-1645080830.pdf (1).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b51133a-e2cb-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766802294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802294, "uuid": "f622d3ef-1de9-4cfc-9e4e-2f63db8b2e01", "comment": "Malware payload (Stealc)", "value": "9290d651546193b2b3bfea5b1b51219c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802294, "uuid": "1a663466-90ef-4900-b26b-3b3db54a8c49", "comment": "Malware payload (Stealc)", "value": "40270000aee777f2e04221195bfbf5cec694bd0e54df1897cbc4b16f640cbff0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802294, "uuid": "fbd7ffac-9b2d-4173-923f-a3d872040326", "comment": "Malware payload (Stealc)", "value": "f77697ed1fcf0802b42d20cea7bbd553e84e4cc4", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766802294, "uuid": "e99af74c-d434-444f-b5b2-097ca03471bb", "comment": "Malware payload (Stealc)", "value": "ee66999e5ef14f60d23467d0fd4a8a80f4e7db541bec40a80e60124da0410a968e3cb8b5ea0cf6e8eccd1a89c3da5056", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "TWO.file", "colour": "#2E1DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802294, "uuid": "998872e3-8a18-4f91-991a-d8f587c3782a", "value": "T1B1963AD2FE441659D69BE23DD4B46196B230B844133819D7BFA407AE481BEC41B3FB2B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802294, "uuid": "9fd0b692-f8e2-4c55-8de0-f270ab25f33a", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802294, "uuid": "5138e757-2e58-43ef-9886-79a39f45774a", "value": "49152:gpilO1d7Q+sOz2zhj21Wna4Qp0OfwPlbh9NTscg87ht/w/+dUDiBYIxW3s1678gj:gpi0TxFxfwbEcJkkvJkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766802294, "uuid": "a46f05b9-4ec8-4a99-ad90-2f2ad40b749f", "value": 8690816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766802294, "uuid": "661aca87-ddc2-4a5d-8b01-bd8be0f3c1f2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766802294, "uuid": "d0c26bf5-5a11-4c2f-95a3-fc6980a16ea0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a80b5ed7-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873773, "uuid": "28eede94-1b81-459b-81b8-27ef72263b73", "comment": "Malware payload (Mirai)", "value": "2bf130bc15459552cd91876f7598786f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873773, "uuid": "51f8ed1b-9308-4e96-aeb7-eead20691309", "comment": "Malware payload (Mirai)", "value": "40736168a60cb2d14efca3a246f416fd651f1189c4541d0262a4f0b784fe3c4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873773, "uuid": "da09358b-417e-45c9-b191-0931652bcdac", "comment": "Malware payload (Mirai)", "value": "ebb54eac2b0c3743e530ed16f0c8f4dc60e89186", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873773, "uuid": "78f88f00-68be-47d8-8ab5-88927591b82e", "comment": "Malware payload (Mirai)", "value": "ab059f202144b3946083fac11854f5716cad132fc4f977dc3e90c59ee02a9f6da4de7e19d71c4f368d41ceb55a2ac44f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873773, "uuid": "f62311e9-359c-4559-b723-d5daecb3d209", "value": "T1FA73AE22D4221D5AC686857070F8EE3A1B23A5D063876EFA537AC3B9A053D9DF405FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873773, "uuid": "0874b26f-711a-4d0a-a00d-f071292c7b43", "value": "1536:j/rrGRxNegatEDtfFZb8m8aK31auw7hUF3DC1gxspP852g:jXGrNeg3Dtfwm893RwKF3DT282g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873773, "uuid": "7b633d7b-79e5-402a-a0d4-85c2db2b8829", "value": 75096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873773, "uuid": "6aa3c29f-4b71-476e-88bb-5c00813a115d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873773, "uuid": "54147242-79e3-4044-b292-c52423d2811e", "value": "ub8ehJSePAfc9FYqZIT6.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26e6290-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854947, "uuid": "d171793d-bac9-42f4-bb96-4f8bf15ecd1e", "comment": "Malware payload", "value": "df5df1bdbff173c284d3abbcb618ae1f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854947, "uuid": "dcad5aaf-347b-4952-91c4-cf5e6e9933f0", "comment": "Malware payload", "value": "40a98af644864706594316503f30827aff5681ad160d460635474e37b928b3d6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854947, "uuid": "87f7bb32-4f4e-4cba-aa70-97dc24028390", "comment": "Malware payload", "value": "d0e4ec43120c22706c1503fac73d01c327c8d2f2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854947, "uuid": "ab6a6cf1-5bed-41c4-8039-c5a54b0c00cf", "comment": "Malware payload", "value": "19c781276cbef2c0e89b3df021bb064d0f3cec31680dd986fcfab730b0d790cf80845ca2a99cb320ce74b22a456e46a0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854947, "uuid": "f77029d5-ea2b-411e-bd6f-b921946f38f9", "value": "T1DB631BBD0C5AFD8C2C959BDDDFB005161289283F25FB62D9CAFB1B44CC6D762122905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854947, "uuid": "15e268d1-1beb-447f-a638-ecdf1d923805", "value": "768:I8w/h62/jWs6oS+xISN0vXLpLqL8LhL2LyLLLBLELliL5LDL0LJLZLKL9LALdL6M:I9l/AoSSMgE9usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854947, "uuid": "f74719b7-b27f-4f9d-9fb2-ce8903c752e3", "value": 69667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854947, "uuid": "50463d53-fa39-453a-8022-cb3d100c112c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854947, "uuid": "948c4862-f398-4f6b-8d7b-654f261610fa", "value": "invoice-1645080830.pdf (13).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d5edeab-e2be-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796634, "uuid": "82794173-3d19-4812-ab2d-ed0817c7577f", "comment": "Malware payload (Mirai)", "value": "f484e7c287c8ac8eadb919015a1e30f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796634, "uuid": "b6098902-6afd-4417-9473-b71c7f9c3a6e", "comment": "Malware payload (Mirai)", "value": "413701e40e69f7e34cf1c95facfaad5c4b6c3da6cc6571580dbca4c5d1012545", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796634, "uuid": "0d6825cd-8f2b-46e2-9fca-f06532744e14", "comment": "Malware payload (Mirai)", "value": "bfc0908b9ace79da65d66a26447b18a3bbb6deb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796634, "uuid": "24c8119e-b6d1-4316-80bc-0059b0a4730a", "comment": "Malware payload (Mirai)", "value": "92d4fc02cf9d8107c1b3e9aef774d126857bca14b2020eec55d6080c0e78ceb6d0ac99ef3820c891b97dccafd52bbd93", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796634, "uuid": "b8d3327e-52cb-4d47-b115-fc2657cea912", "value": "T18CA3B44D7E318FBEFBEC823447B39A12A65927D533E1C585D2ADD2011E7024E681FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796634, "uuid": "e8d93829-658a-493c-98a2-bcc6c4950809", "value": "1536:WpaZOuT/Q3CSQXa1r3J62yqPy/RWLW0edmpwjeENY0:lZzTDa1rZ62yqPy/ULWzjeENP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796634, "uuid": "c1283d28-0320-4055-84cc-e7574cdea0c1", "value": 101188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796634, "uuid": "e948af25-d8c4-4a3a-af0e-5a79f888e9a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796634, "uuid": "31ab470d-361d-4664-a672-145a999d79fb", "value": "SecuriteInfo.com.Linux.Mirai.9816.24975.25520", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33c4dd7c-e325-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766840937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840937, "uuid": "d5998339-f786-4793-afd5-3e99f4bd0fdd", "comment": "Malware payload (Mirai)", "value": "e849649717bdb9d0a093cfdd7035d1fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840937, "uuid": "26513ca4-31ce-422e-ac01-c3b939fb4a59", "comment": "Malware payload (Mirai)", "value": "429b1c37426271754c6659012e9d24726dfa3a4dcc0b45fa1c137e2c1535fbb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840937, "uuid": "6e0d5478-cb86-4b3d-a0cf-6db0db497d64", "comment": "Malware payload (Mirai)", "value": "27376dfed95f6a69a9ce9b7c72c0fa114e0f1893", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840937, "uuid": "acd22367-df9c-4399-aa39-5d24bfecf77e", "comment": "Malware payload (Mirai)", "value": "3a9afd90949de11e9bc782c10572cf16dda6bac42d69791d44fddaaec7708ff8a5b900e9823e3beaa45e0c9f71c36ef1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840937, "uuid": "9313169a-2083-43d3-b23a-aede9cd75381", "value": "T10483080273080F47E1532DF02E7B1BE087AAFD6219F5B685A51EFE854231EF22546F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840937, "uuid": "49c97789-817a-4459-84d2-ad1b0a2b261d", "value": "1536:0KBE+QGfYYRnpVHpONSbS9tZl18OJiFruDUQAl61d6X3vQ:0NDGfVRbJOpb1LJr04+3I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766840937, "uuid": "56437c84-410b-4005-be41-5493311f9d97", "value": 84356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766840937, "uuid": "a01acb06-2eeb-4059-816d-c2a18d41135b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840937, "uuid": "2cf671a0-15e3-4eda-b670-55da0883f067", "value": "nova.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c2c20c5-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830643, "uuid": "1aa908c8-0b27-4948-b350-8eba0d5617f1", "comment": "Malware payload", "value": "fcdcb23ea6b01d76288d2ecfcdde1cca", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830643, "uuid": "4b2b2d95-7ac0-4bb8-8b89-9484f42f7bb2", "comment": "Malware payload", "value": "430bb6a9ce51eda0e119e83dabdd5e2bb1d61423789e28ef0e48e7971de657ed", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830643, "uuid": "809820fe-03fe-4566-9d17-f5560a854b65", "comment": "Malware payload", "value": "3dc4ad829d5b75b94b4f8444f68a30e5ad772626", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830643, "uuid": "bcba0e1c-2c35-49cd-95a4-e2861713e81a", "comment": "Malware payload", "value": "6d1d99363b29e2ea3d606e37629ec539237336794c9f29196f2064f9c0c93b145656b6a2861c6ad50eafe321824a4dc6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830643, "uuid": "bb458fc6-8868-4048-ae07-7ad73872c6dd", "value": "T1BB632A397637607E1A2A7D7E4F8014ACCF3708A09C7B49415D7B19A3FAC4EE36920D5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830643, "uuid": "277356d4-6118-40fb-a712-310680d75cb1", "value": "768:I8w/h62/jWs6oS+xISN0vwjRPdPdxPymNnsjWK2dO46puJr/lsp30nCFlmFnUzKS:I9l/AoSSMv6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830643, "uuid": "a2f94fb5-a6cc-4590-aeef-af3d01ff1ad9", "value": 68725, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830643, "uuid": "8967e8e6-722a-49e4-a1ea-44aabe060ea6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830643, "uuid": "691eaa37-1e30-44c4-b45d-43a1a83add43", "value": "invoice-1645080830.pdf (56).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a79005ff-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857881, "uuid": "338b29b0-0e05-4c60-a122-24a6e84e4f9a", "comment": "Malware payload (Mirai)", "value": "5ac8e4da51552d1b6b93fa0c24b19232", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857881, "uuid": "731bd756-8e2c-44a0-a931-19f459d17a27", "comment": "Malware payload (Mirai)", "value": "439e63f45f04baa13bb162dd541d8bec63156e71fa421f24c1620601789e2310", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857881, "uuid": "29722ecd-c46a-4432-a3d1-65aab530be93", "comment": "Malware payload (Mirai)", "value": "815eb7cd3c16e55d275b57d072c27daa235d09f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857881, "uuid": "202eab8d-d6a4-45ec-8f77-1e2edb3e8752", "comment": "Malware payload (Mirai)", "value": "0206cd436713cb7a5b03a59d596bd48dde53efd53abf3295f6224cb2a06abb82a341030cb154b1f754851f7434e387c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857881, "uuid": "82359879-62f6-415a-b1df-a946d4621c3b", "value": "T1B333F792FC928A9AC5D027B6776E6689336263E5C2CF3353D8141F503786A0F8E67E41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857881, "uuid": "d58dcef7-086f-4134-994c-aa2f8b6cac73", "value": "1536:9rOV1GBGOKWelSXpTO+DNoIyWFrBLOKx:9rOV1G07WeUfNoIyWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857881, "uuid": "0b5392cf-7a18-4d64-a08a-4b9ef4565362", "value": 50996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857881, "uuid": "2007e86b-6bbc-414d-9445-561d369a3dea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857881, "uuid": "891bc39c-4d2e-4e42-a97a-84d44ffb4cbc", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8f71206-e357-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862689, "uuid": "f8edb888-c68d-4e85-9a4b-7f3152a2aef3", "comment": "Malware payload (Mirai)", "value": "a3ad941d8595b6ee169df4f373c2efb1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862689, "uuid": "3d215ccc-5eb1-40f6-8213-10dbec1b7bcf", "comment": "Malware payload (Mirai)", "value": "43d3d70d1b56f7e06fe0ef916ad4c947dcca3be3aa9ff9b17ae296a849081226", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862689, "uuid": "63f37b5f-0fe6-4f75-9ab6-a8c68b0023eb", "comment": "Malware payload (Mirai)", "value": "9db3e55dbbde6acd4514a6540721450513ee5b88", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862689, "uuid": "8deac058-df99-482d-9be9-2eb05c4e85bc", "comment": "Malware payload (Mirai)", "value": "fa63d75d3aa16527f95592c3f627402b1e7c4f05c8122e3219f9ac7c3fa4e9209c3a9a77da47d4e8815e00cc080df1c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862689, "uuid": "80b1cb70-b326-42ba-b3d9-ffb7b9d4d123", "value": "T15F43FA8ABC51D712CAC56577FF1E82DC731613A9E2EE33039A15AF24768B42B0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862689, "uuid": "87112696-ca63-4ae2-864b-fc5c772f4cf0", "value": "768:Zqm/kSl4l7IUB0im3IMbDAzHiEmMySgYelEAN3+40MNpodF8ZyIujPaPBhlVTbVm:AmMSl4lMU9zHiPYelX+GugKQBBTbVR0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862689, "uuid": "b79cf908-0bee-449a-9cc5-82ad4a196aed", "value": 58544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862689, "uuid": "a915e5a8-5033-4806-94b6-439e8a86d82e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862689, "uuid": "77a6b071-6c9e-47f2-968b-5b12c4353831", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07db56a-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854568, "uuid": "43413400-c81f-40eb-9d6f-f75520d820ca", "comment": "Malware payload", "value": "103aa3795db3c071611671ee9ce1e26b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854568, "uuid": "1f807354-58cc-4cb2-864b-1e666dd7838b", "comment": "Malware payload", "value": "44d788f484cb52f0120c59102f752f25a52ba0a73f65160238ab278980558e47", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854568, "uuid": "204d0944-4b3d-4d2e-9c4e-bd26cc49fcd7", "comment": "Malware payload", "value": "255534e662f49b770e766463546144f2bcde31dc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854568, "uuid": "107c75ff-9e16-4d56-9a09-e8874b98d55e", "comment": "Malware payload", "value": "cf7c862c3c41bb87e1e12e07d0613eb2f3dbe8929ca0522b2e3ad7f2b3c9b032b3e431d03cfe2b7b0df2cdab860d1da7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854568, "uuid": "9a15344f-1802-4c19-b247-3e0b95c9a396", "value": "T15E630A543D05DEEF253368AEBA792D4634ACC7E854427954704B620FAF40E92EE21FBC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854568, "uuid": "6641f0b0-24e5-4ed3-8fdb-819c138e0d48", "value": "768:I8w/h62/jWs6oS+xISN0vP6j7myK9Xx+EW+nexKSsXLIloI0sZ6OLXHXWz4LS+R8:I9l/AoSSMWPusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854568, "uuid": "657ee5a3-4989-4e7c-8cd4-5514efeb6e99", "value": 72502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854568, "uuid": "458e87ab-4dc4-49aa-949d-3a7ec937f510", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854568, "uuid": "62c8d7f5-916e-4d9e-b6d3-05219cc7cfb2", "value": "invoice-1645080830.pdf (87).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "723ff234-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854785, "uuid": "e85dd3e3-1e7a-4d27-9a41-803c0e9883fa", "comment": "Malware payload", "value": "4f921920545d6a49d8e2587ef47943f6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854785, "uuid": "95735ccc-6f0b-42ff-92dc-da7f5e1cc397", "comment": "Malware payload", "value": "44fdbaa3ae6236bab4929e053fcfdbf989a67cd50b7ec5a79ce75bda45df6df4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854785, "uuid": "290f72d9-636a-474a-ad30-7a9acfdd3d31", "comment": "Malware payload", "value": "36a39b1331397c4f5d471bcc725a54c38d1e3089", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854785, "uuid": "3d157e35-96c7-4e7a-ac6c-4236555b2e51", "comment": "Malware payload", "value": "a63d2c65aa340d6fb76fc7d15af0d214090326946379706a57ae75a93da2e50bff1d15c48fb40afebc3c25cef06b2988", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854785, "uuid": "270412f0-1c9c-4881-9a7d-1f6dd9af85aa", "value": "T1BB6339CD8C18EE08137853D91836D3CD6A43EDD56158393ED7AABD71CB06E8A6FA2704", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854785, "uuid": "86de0936-1fbd-4fc8-91a3-26ac3157c605", "value": "768:I8w/h62/jWs6oS+xISN0vv6NJnr3NdkfScBYrwz2y8kTAlGB:I9l/AoSSMiNvusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854785, "uuid": "8d2d9bc0-178e-4a61-9b3a-ede8872203f5", "value": 72513, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854785, "uuid": "bfeb2e41-be69-4ae2-a917-2c83db4bc44b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854785, "uuid": "c2db3681-bb3f-48a8-8048-85b4bc4f50f8", "value": "invoice-1645080830.pdf (45).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac580a62-e2f5-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766820523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820523, "uuid": "56153c94-04dd-42b7-b6d1-6b572d156e56", "comment": "Malware payload", "value": "6dd7ab0271f8c681af0d18aee78c38d1", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820523, "uuid": "8bdf956f-da29-4149-9dac-18ced683781c", "comment": "Malware payload", "value": "45211fe257ad5e4d1a2abc6220087d679d03604c111373db690a3937546809ec", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820523, "uuid": "c7d95405-7e2c-49f4-81e6-92f147dbc9e8", "comment": "Malware payload", "value": "30e2efdc63ac5d14ae8cfe52b092c66164963d06", "object_relation": "sha1", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820523, "uuid": "0ff3b7f5-023e-4412-81c3-57de28ae2785", "comment": "Malware payload", "value": "d1e009ddfdd42bc2c135b82335eb8a7d7e54c578aa74dd0355bc175a982789ac5773f41d3f02999f220703ef88b23dcf", "object_relation": "sha3-384", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820523, "uuid": "10359068-9560-4457-a96a-9f9e858b9991", "value": "T12D01CB17CD23A5F44634C5F9C7604A0ACCD2E4A392565C38BA4CCC125F724BDA8A41FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820523, "uuid": "4bfc5b09-97dc-4ecd-9cf1-bf698ff7b5ea", "value": "12:9vWdb6K1HeIThhi88Ot5JbHLpffFqCDi+ikixik+KwS0lUD:9AW2jiV2brVNDhWxiqwK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820523, "uuid": "b6b05ee1-efb8-4d76-b56d-f7b839d3ef86", "value": 771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820523, "uuid": "f67a179f-5270-4d50-85f5-73f4eb359019", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820523, "uuid": "d2a451a8-db7e-430e-befe-2d983e2f6335", "value": "dd.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62236873-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830706, "uuid": "4ffd84b1-acce-4764-8a9e-fa427fc2f4c6", "comment": "Malware payload", "value": "0f1183ef5f24996184e163e4c166d042", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830706, "uuid": "29bf663a-b042-48bc-a31e-9c0ebf9b2a68", "comment": "Malware payload", "value": "452b2aeebd53f85d2a32a9d30c5c53f68f52fe4342509115cb3bdbf1cb30ee4f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830706, "uuid": "8542345d-d000-4bb4-afeb-8ae5496c0b6a", "comment": "Malware payload", "value": "6e1e1d1b7e61c53c6e6bae8aba3d79456f8fc359", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830706, "uuid": "d2e9c19f-6ef2-4db8-8387-9f8ca6ea37fe", "comment": "Malware payload", "value": "af74a223d96d98a3112bd75c927c61a30daefc686c1d6f23624af93164950edf9d856725b955785e97c44da795d2e6f8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830706, "uuid": "36a0e908-a8d8-415f-a9e3-9541f3990eee", "value": "T155632A145E43F5E8668910AEA54D203C331F31E998B55EA32ED6F2D6CDB67C3C0E90AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830706, "uuid": "36773484-0c69-48b0-8f8d-c7937c4a0c8a", "value": "768:I8w/h62/jWs6oS+xISN0voK9YJngDqmQcWwX2PTsSavPPVXTNzH+0N6oNZrEQUqn:I9l/AoSSM1YusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830706, "uuid": "8828f567-7016-4b54-8857-083ec0d67721", "value": 68633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830706, "uuid": "beb070dd-c484-402e-ab62-0ab88d8f6ba2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830706, "uuid": "14406797-915e-4043-b50e-73a362196562", "value": "invoice-1645080830.pdf (45).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc8e5173-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830885, "uuid": "4ffe5bc5-516b-42dc-8ca2-d1c8e0f8837e", "comment": "Malware payload", "value": "8ef86d80c4ad385143d197a2f8c5d571", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830885, "uuid": "5ccc9309-4f4c-42f4-b842-3944b8bb864b", "comment": "Malware payload", "value": "456acd3345d06fcf11a60bdab50da6500ae72e3c243945600eee0e057bbb89e1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830885, "uuid": "69e3f91c-8134-4746-9dc8-c27430c59dec", "comment": "Malware payload", "value": "dbef0091330676c369d5cf2aa8e6160557db0971", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830885, "uuid": "763e089a-3fb4-456b-9fd1-993ad43281b4", "comment": "Malware payload", "value": "5e1488b4bd9905af808e3ecffa2c94be99cac7d0b7a973e4b193d2630eb16e0bb3d61dbc316b58b11fbcc1564b670934", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830885, "uuid": "c4d7cfc8-6163-4370-b23e-e40f8ab879d1", "value": "T186632B076335352E1E58E0D0512E8E54896EB73FD032F829BBA6FE00D9DDC1E59DA389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830885, "uuid": "62a8fda4-1626-4db7-8ea4-2d6ca120ec5d", "value": "768:I8w/h62/jWs6oS+xISN0vUxZNpI/dkfScBYrwz2y8kTAlGB:I9l/AoSSM06usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830885, "uuid": "f8cdafe6-0b63-46a8-aea1-ae3b6369ab42", "value": 72533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830885, "uuid": "332eefa1-14ee-414b-ab16-b4bc431f4a46", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830885, "uuid": "ebbcc608-3f57-4300-83c3-41a7f9b3eaf1", "value": "invoice-1645080830.pdf (4).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a6c9058-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825513, "uuid": "d46154d4-ae04-4b89-977a-08aa0a6940f5", "comment": "Malware payload", "value": "4be4c2743a4f31c0c82de8fe7fae88df", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825513, "uuid": "e3a41926-4673-4730-be27-081622acda08", "comment": "Malware payload", "value": "456af941d631bfc32b4e7f41874e80fb37ed0355dd08b088fd971f2326c0e3aa", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825513, "uuid": "f4e24370-a23f-435f-9aa5-04c7a51b7673", "comment": "Malware payload", "value": "9a967fe29588f33b6e9901c9b9124b951fb5545b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825513, "uuid": "5c029ab8-322e-483c-9c1e-91cdb44d9b04", "comment": "Malware payload", "value": "097a2d4cc85f5c3f9cdec64eb94810ef77ae2e76ed74e7527ed2b820024cb71a968360aa330f142fc3029e0782f65f3b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825513, "uuid": "c8f42d51-eeae-4ed5-acf5-0edbbdd17620", "value": "T12D631C6077F319AC3855477E491446D0A3BEAD000C6A8771EB905FACE8FF1296621FEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825513, "uuid": "8faee18a-d5f0-4980-9f34-da0bfd6efb7e", "value": "768:I8w/h62/jWs6oS+xISN0v1pUre9M0x9wZhZddkfScBYrwz2y8kTAlGB:I9l/AoSSM56usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825513, "uuid": "7b21fa00-8387-403f-8758-9ec2fd82e192", "value": 71562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825513, "uuid": "b664c45a-ae85-4036-a2cd-592187195de8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825513, "uuid": "bbe2c928-e680-4129-898f-8ade1d11c06b", "value": "invoice-1645080830.pdf (40).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "998c5a6b-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854851, "uuid": "18f0e415-977d-4ac6-ad5d-cf86ded993f5", "comment": "Malware payload", "value": "988d677a1dba648d9105c7c1ce9c2e5b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854851, "uuid": "34c9f95c-cb82-4c1b-ad73-9de0002d6fce", "comment": "Malware payload", "value": "463aa7267c8ee1a4600c4c95e9ce2e354248df576350b00dc7f0678618d30817", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854851, "uuid": "e9e95722-9544-4830-be11-fc8182496e6a", "comment": "Malware payload", "value": "73e3221b58d836b23895b4c6aca2e28c49a5d048", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854851, "uuid": "4258f156-5ce6-46ad-acb0-a373125d1d27", "comment": "Malware payload", "value": "e45ebe527d6b691cb26df11a2a943175f0c4d7651c594c703881d0c4c23565d27ca93b01fa65d4e9d67e845bb64822c9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854851, "uuid": "b3c70dae-3e80-4321-8f0f-9159beeb56b5", "value": "T156631B6B36B2FCC12B6AB835E9F517D454076FCFB5A762EC400831CE262C1C7A99506B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854851, "uuid": "45bd9e0f-3748-4013-997b-71830c357227", "value": "768:I8w/h62/jWs6oS+xISN0v01e14xxyGdkfScBYrwz2y8kTAlGB:I9l/AoSSMMeKusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854851, "uuid": "3774853a-2f97-40c3-a8da-9ffac8878d28", "value": 71568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854851, "uuid": "240fcb1a-efd6-465f-8913-ca5c2e3fb792", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854851, "uuid": "7328b5f4-5667-4a92-8940-38ffdc66719c", "value": "invoice-1645080830.pdf (33).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "758cb54d-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879702, "uuid": "c551d5e4-d11e-49d2-aa64-c66f57557118", "comment": "Malware payload (Mirai)", "value": "08bad00156f6836c116f7f88db8a0bb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879702, "uuid": "3c406f15-cc56-495a-a25b-38cfc23aa5e1", "comment": "Malware payload (Mirai)", "value": "469e762d0391e837ca7410c64cff145ce3de0407c7d7e6866f1e49db1aa19071", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879702, "uuid": "76211f3a-d68f-41ee-b3ec-6621cd4cfd1e", "comment": "Malware payload (Mirai)", "value": "410d1e0a7a854cc755b6772cdf7170da3f22117a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879702, "uuid": "ce66d27b-c621-49f3-bad5-0d73e03ea063", "comment": "Malware payload (Mirai)", "value": "ee9b6bcbec97f7c8f7c5a3f586dd9d6f1785bc2e96ef02779d83d38ce21a167f5cddda71fa8eb1c1926cf9f792137536", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879702, "uuid": "34072e97-74a3-4d57-8c98-f4b22bb03439", "value": "T1D27312584280A8D0EF256470D968DA8B2D585FBC5670ACF397CD2FA0B6D2CF15D7B0A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879702, "uuid": "4c1e98b8-d71c-493b-8ea4-9e3c600586cd", "value": "1536:TlP4mxNOgBLFfg1lfIpz4m1EWFSbuaytUOG+Ot/oVnvcPLk:d4U1fg1l6z4aJI/34vGLk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879702, "uuid": "d6e0aa35-deac-43b4-b964-6c74ce2e03b2", "value": 74196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879702, "uuid": "8f9fcb27-5c3c-43e5-ac7f-95af47f6ab0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879702, "uuid": "ffd1d20c-9720-4b39-828a-1ab3df4f5342", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92ee1258-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811031, "uuid": "cedde1bc-bb48-4571-a7b5-0a4f78d11ff3", "comment": "Malware payload (Mirai)", "value": "1bad2a1b655f18638122d3b63aa969e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811031, "uuid": "dcb73c5f-de5f-4425-af79-04eceaa771b9", "comment": "Malware payload (Mirai)", "value": "46a8fe21469b219c9e407c49c1b7b6f79c1c0139a74b0cec3318e8bca8097f88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811031, "uuid": "233b3e38-6191-4653-a302-e93b6408360a", "comment": "Malware payload (Mirai)", "value": "e9738684bdcdf855f8fa337522df5dcc6398855f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811031, "uuid": "89f0842e-1d63-4e05-b9a4-c63909a75e82", "comment": "Malware payload (Mirai)", "value": "3ae1eb4647a0c2ce84fe87c01ebb9a241c03754282274d7179fae614dc40782a6d13b0b33c1476698e5aa069d9eec134", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811031, "uuid": "708fe06d-76cd-4cb4-bc51-f0ea95514ac0", "value": "T156331A91B8829A12C5D4537BFA6E41CC331563A8D1EF32079D266F507BCA82F0EBB651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811031, "uuid": "f8001f0f-8fa4-4bbf-b419-d35e02d24875", "value": "768:w7Mc+v+wcWDEKmxmmEBa4OmdiC8saEbwzRgBCEVeHmYMvYPfjA/hcl3D8NRRZPND:lcBnWDFx8sHeHbMIfU5tGlu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811031, "uuid": "cea0d3d0-8eb7-401a-b4c3-500d6cdb324b", "value": 50316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811031, "uuid": "71d9415c-0f3a-4f96-bfba-e3b0d1d804ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811031, "uuid": "ca9d40b2-a51d-4d68-82a5-f5a77c8861c6", "value": "hoho.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fae192b7-e336-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766848572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848572, "uuid": "0bb7a338-9a33-4295-aefe-4dc17fa47502", "comment": "Malware payload", "value": "87e323117ace8cfc39c474d00b674895", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848572, "uuid": "802f4aec-86ac-4fc9-85f1-c7794b5440dd", "comment": "Malware payload", "value": "470a49ef8af5044943be991886e13a59b27182f7bf655a1de99f4e26ae5a52cb", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848572, "uuid": "7739d59c-85b1-4904-803e-8cb540a2d767", "comment": "Malware payload", "value": "c9d699fbdd9628fdec1f0c3211d1c6ccd0ddaf4c", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848572, "uuid": "5105178c-bf80-4157-b8a7-d79d22bd58f2", "comment": "Malware payload", "value": "2812232cc3647b074965e0bd4c1a294ddd045a174bdf3554aa0a66c0f6063ab2eb82c4a7ff980c3177a1362a67de659f", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848572, "uuid": "6647f034-08cc-4e67-8776-6bd39bc1dea0", "value": "T199B5334697F6C40AE0F7A7799AF19A838671BC704736898F43D5913D1B226C0ED70B27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848572, "uuid": "ec14f127-d9b2-47a7-b914-322c57bfc688", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848572, "uuid": "21c99354-3265-4f98-9d71-6ff2fef4e604", "value": "49152:DmfLqdNE0PFkeuWhKOXpnIlwFPFPqhMUlrGHz4b6+svEE:DsGCJEpIls4Iz4Ic", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766848572, "uuid": "d403052a-5f2e-40cb-8d56-5dfe65670e8c", "value": 2476544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766848572, "uuid": "6e041db9-efd0-4859-b28c-e008cd81460f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848572, "uuid": "8ca5948c-da57-495e-8774-88d59aaf141e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a341963e-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873765, "uuid": "95bcc496-28d4-48a1-90da-b6153961cc5d", "comment": "Malware payload (Mirai)", "value": "669b04796ad6514acd6ef69f20ff8254", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873765, "uuid": "7c9bc9fd-81d1-4961-b089-add9022de1e8", "comment": "Malware payload (Mirai)", "value": "470a57a0a7ff7890c7b8e828052943ef4446f3277b1149be208ce379d5f78f88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873765, "uuid": "74274a8a-3297-450b-a3f1-e10806f6f520", "comment": "Malware payload (Mirai)", "value": "4186324fc3a8c3259a383e709a92cb71d8448458", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873765, "uuid": "d5496306-2a6d-476a-b633-023603abc4e8", "comment": "Malware payload (Mirai)", "value": "3354f4c1f025fbc2b8eddb56c34f540843f6d69063c98ec86e5e4263ba2032d8a5d0d66daf19a2eff043f903f4e37860", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873765, "uuid": "1793166b-c3c3-4e7a-b38b-32aaee308347", "value": "T192030264D3301AE9C5579EB41E0D4FE533910FABA3EDC88A39929F123389DA4D140FC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873765, "uuid": "d126c178-d113-4058-abf3-d175b87559dd", "value": "768:MQM/tlTiJRB6I61e9moaW2q+D56BonQsQwAaMjLKtqQjU4uVcqgw09N:MBt4Jr61kf2q+96uQkAd1X4u+qgw09N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873765, "uuid": "50b62765-e93a-4d53-974d-3b5ff723df60", "value": 39232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873765, "uuid": "df833e2c-7f5c-4b5b-8ca3-8bfaa487b0f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873765, "uuid": "fdb8f940-80e4-4bc7-baa4-9325681e5cc3", "value": "ub8ehJSePAfc9FYqZIT6.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a761478b-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873772, "uuid": "e863025e-e4c7-4dfa-bc02-c1490e51ca65", "comment": "Malware payload (Mirai)", "value": "6b27e63b0108264793d7ea7ebaa73da4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873772, "uuid": "32a430d8-da60-49c6-a763-99f3a2f4d656", "comment": "Malware payload (Mirai)", "value": "473101f6596ed6fb52803e8df558136a7218e631db448994ca518c893d91b7eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873772, "uuid": "c148ed00-96a7-4f82-996d-e58a0a50739e", "comment": "Malware payload (Mirai)", "value": "bd2fbdf68ef9b9fe4bb0615804354a41650f1c1a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873772, "uuid": "6cde3df2-77ad-4a5c-832b-2db1457a848e", "comment": "Malware payload (Mirai)", "value": "66fe85883fc9241c45f53954dd461cb843324ac670efb5e4f9db3d3feb400f70d3fe601061b6fdfae93a0cad6da6ab15", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873772, "uuid": "55b9f06c-a515-4dbe-993d-4a671a18c0e7", "value": "T16513E1AD030349A6DDB6403063944BF25B284964BA430E0F590BEEBAED771FD2C839F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873772, "uuid": "9eb83012-b1a8-45a2-b4c7-9301a9478e4b", "value": "768:ciElEaSbiJB0v1temzN4mnEw0crbId8O9qmHN9bxznQYOC0QzQmr3LOJgGlzDpb7:ciED0Tem5ZnEIZIphzQYW6Qw+VJuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873772, "uuid": "3cfd5c60-8090-45ca-b237-4deed9d00aff", "value": 42516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873772, "uuid": "59d54f26-3347-4490-ab53-6e5fc4467583", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873772, "uuid": "511ade48-5035-4072-a526-39a3c56a8ce5", "value": "ub8ehJSePAfc9FYqZIT6.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c041036f-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796505, "uuid": "dc4d42b7-e010-4109-9f3d-1e87b2c411fc", "comment": "Malware payload (Mirai)", "value": "1f8382d4bc24f62d4136a02b97c1e933", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796505, "uuid": "318d0933-c299-4940-8df0-74336c761c72", "comment": "Malware payload (Mirai)", "value": "47458c622a7d93a58476dd202da1566188c05285b1cb1b804b269d918a77da70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796505, "uuid": "1eb38b19-ee55-47b1-8c1e-17073d305484", "comment": "Malware payload (Mirai)", "value": "1e5436edcfd1cb084fe4fbcfbdc4efadcdd47009", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796505, "uuid": "43419199-3b12-4b66-abd6-6f4edcb7262f", "comment": "Malware payload (Mirai)", "value": "efe524444efd96a893b99189f4383f11b838504cf445ef5cdb64308d4dd709c71a5c80d0e74a6e389c972fadcd3447a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796505, "uuid": "b7592caf-8f80-493d-9c1b-d0c13f485373", "value": "T1F4F32902731C0947D2A36EF4363B27E093AFD56124F4FA44291F9B8A9275E335586ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796505, "uuid": "41f7bda0-3ea6-4280-8d3e-b93fdb95997d", "value": "3072:xgssdHJfm8WK8z3k7fPaxMbYLUDSRwsrEA:ys4Jfm8yk73axMbYLUDSusgA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796505, "uuid": "231861f1-5f1f-4890-bbf3-259aeca406e3", "value": 166404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796505, "uuid": "0e66b2e3-5579-4dac-a2cf-c7665666671f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796505, "uuid": "ef0785fb-4569-4833-8fbe-b7a464f68f00", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "921bae13-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811030, "uuid": "4c137ba3-9338-45f0-844c-74de50a08593", "comment": "Malware payload (Mirai)", "value": "d0a868d7828d4ce37c6d6d6c1043374d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811030, "uuid": "25959034-0734-44bd-a7d3-21f28ccaffb9", "comment": "Malware payload (Mirai)", "value": "476db801af7f54bccca9ceb3071063c8840d6b4e985fded9643ad299155013a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811030, "uuid": "d4bc2776-068c-4371-95cf-a14541d1964a", "comment": "Malware payload (Mirai)", "value": "f8d823936c5f102c02d8257f7b396c7e0870fe48", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811030, "uuid": "bc71838d-35b9-4769-84fd-a4ec539feff2", "comment": "Malware payload (Mirai)", "value": "8a3dfd81027f6e848502080982b2f28022f1906826dbdc79544bd0582c3e77146f5aa8d8952915727650d5f339c2b3a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811030, "uuid": "a2550446-39f0-401f-be57-01a13b272888", "value": "T1B3233BD9B801AD7CF95FEABE8016490DF621335051930B2B63B7FD936C321A4AE63D46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811030, "uuid": "ce7f0896-d6b8-48be-b90e-d1b61ace6e77", "value": "768:yLeD1MYbZs5paE+IXEM110+fmdbuzWenXpIWxJTBE2Lc85a:GAaY+5peFu1hmdCzp5IWxJ1E2w8U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811030, "uuid": "e0e0ebde-f75f-4d77-9ed9-4fbaa58a587a", "value": 49804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811030, "uuid": "1468f94a-854b-4003-9cba-ffa0403c74a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811030, "uuid": "c5cddb97-0689-453e-923b-693a44f707b5", "value": "hoho.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f760cd-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855845, "uuid": "728984cf-0e08-4c6f-a7c1-5b33e7cb2737", "comment": "Malware payload (Mirai)", "value": "d0180a4f2b48fc738362fb55208f4a84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855845, "uuid": "2791a15f-94cd-48e1-8cbf-80427e6c148e", "comment": "Malware payload (Mirai)", "value": "4789596a02f679da63289c925df54db17d2250b0f642d55d6a6fd431ffb3def9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855845, "uuid": "3c624ad3-f1cc-441d-b23d-d9516766a30e", "comment": "Malware payload (Mirai)", "value": "e9856c8ec2751ec1ccbe44e8974d9c518798a4ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855845, "uuid": "e63c9868-cccc-4ebe-9738-484aa586ff82", "comment": "Malware payload (Mirai)", "value": "1477836b126a21b5e3dd45637e7c6f74ce2a987fa502312aea7da091e2558576028154e5ecf6d16dee3fb6c00880cd16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855845, "uuid": "426e0f0e-7128-4e7c-8ff2-06cfe83dac90", "value": "T141D35C0A79D270FCC687D170926E9F61EA3A745C02183DBBA3C2AE711937DD05E15FA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855845, "uuid": "f9bcf943-ff44-46c8-a2f1-0f39cd190709", "value": "3072:lAF2acRfkY6z3xv+ErH4vk9954rlvLFZW8YYQV:yIRfe3xvvSrlvZZ7UV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855845, "uuid": "18a69eab-b727-440b-8509-0856e50f304c", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855845, "uuid": "306ad101-5cb8-42e2-904c-2a1be53e382f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855845, "uuid": "b8ebea98-8d84-401f-b92a-0c9a0e9d8e95", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db10954c-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854532, "uuid": "a029ab06-5272-4fbd-a286-3c6562797d45", "comment": "Malware payload", "value": "be30747fa8f6c310c22409ab7f0fe126", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854532, "uuid": "7a1ca7f5-e560-41da-9e5d-996a9ee5c1fb", "comment": "Malware payload", "value": "47d2d557cf86a4eb0e2cae22702739f336224079d32f9c1d1ac094d4fa8073f2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854532, "uuid": "f7b275a0-30f5-4697-9028-19eafcc627d9", "comment": "Malware payload", "value": "083bd3356245dfe3f5816a99bd890bf5ed67a3bc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854532, "uuid": "e83e4d36-55b4-4651-93a2-c2d45e91b07d", "comment": "Malware payload", "value": "28d3f1c69a9cb8b044e89eb9303396aae350dad655052e231760bc69f9254a2a75370040a5b82e64c6f999e31d3a66c7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854532, "uuid": "aee863c1-c4ef-4099-b178-96db9a1a043b", "value": "T1AF63295F1E763DDD229D16C8DE6982148013A2D3EBA0BC6CD90D73FBDB44BC99A70960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854532, "uuid": "bd9fa567-8126-4840-ae37-b490e2da6b46", "value": "1536:I9l/AoSSM9p+uVc6sxnHwpIuYi9DbxJ9M/Ii9/fzvUdaRAsdeCdxvt0ji/9XIvux:I9l/5MHBusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854532, "uuid": "1070e758-ef9d-48b4-a84c-2a2edde56b1d", "value": 70616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854532, "uuid": "5b806cfa-5be0-4392-9ad6-a56286b06c49", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854532, "uuid": "7ee02c6c-994b-4fd5-bf14-782d25e7df5f", "value": "invoice-1645080830.pdf (97).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c05f1e-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854548, "uuid": "892110a7-edc3-412f-ad18-eb83246980b7", "comment": "Malware payload", "value": "c8517d97a47c2f9c9201bc29f7bee484", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854548, "uuid": "c7141281-67b8-442e-9c96-8476c8ae35d4", "comment": "Malware payload", "value": "480e8e1d30ec6f5d461c31bf1763b9c3542801d4f7af89e40e676b0cb2900ffe", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854548, "uuid": "42e2fa1d-aac6-4d76-9e8f-5d2f73596fe7", "comment": "Malware payload", "value": "79c24ccf9f48c011c82bda7e79bec184f38cd31f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854548, "uuid": "9f258a2a-3fcf-4c70-b636-2563bb0ad727", "comment": "Malware payload", "value": "e6a32ed2c0f882962f72d40bf596e5f29d77a4457a2db18f5d0afb4b4a5595114c6eba52e8f2b3ea19c10ab941ccb6bb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854548, "uuid": "52046f44-578d-44ea-acb9-6f657fabaebd", "value": "T166634C0B9FB2659F0EB7F6197E4FA0156BD03024C823727F15677623A4F659A6C238C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854548, "uuid": "8aa4a2af-48a2-4409-bbfd-07d0d2e313a5", "value": "768:I8w/h62/jWs6oS+xISN0vq5n1J0Jm85XXtGhz0DrhvpyU0fFtsQytNyOoHt1OMI/:I9l/AoSSMIPusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854548, "uuid": "fd037213-cfce-4103-a23b-419d122d3239", "value": 72538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854548, "uuid": "f828fbce-79dc-4af1-a9b6-254b11ba0130", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854548, "uuid": "1e8735fe-4171-4b8e-898e-1988c5ba865a", "value": "invoice-1645080830.pdf (92).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df9b86b7-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879880, "uuid": "9573a29c-d356-4746-8b13-dec1264e46a1", "comment": "Malware payload (Mirai)", "value": "40308bc4d21418a53034918e8344fb7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879880, "uuid": "cd0d1ef6-e85e-4d20-9884-96f20f760ada", "comment": "Malware payload (Mirai)", "value": "48161ec91da483198f098d7b38866c5245afe46dc583e6221dac5d58937c7873", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879880, "uuid": "32a2cbbb-a7f5-4efa-acb7-ee88d35f4844", "comment": "Malware payload (Mirai)", "value": "a055590ffabfc43e69a03922ce63e7198fb1887a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879880, "uuid": "a7ad435a-f8aa-44b7-88e5-d319304a20bc", "comment": "Malware payload (Mirai)", "value": "63f44de446eccd6708cc984c0ddcd20ae00093979b4fd3fb36629250b8c9cb3c46d085481ce2f94e7e404f68f7106d58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879880, "uuid": "5b3aff25-aca5-43e1-bc14-e067dc7a1fa8", "value": "T11B531223EBDA00A1C2DE63B1C01EF14566D0EA45C67D9AD59A0831641934EAFF34DFE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879880, "uuid": "8da66d1b-4071-40a8-b29a-158f68570399", "value": "1536:a46Kon4VuCMJE8yq2U2Grnx7zC4PwEj+If9nVWiKLthovnouy8Hyh:arJqu3ERbjKxPZ7+If9oLg/outG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879880, "uuid": "37c1fe92-f2fb-476c-8334-0868438e04c0", "value": 61980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879880, "uuid": "277d4168-803a-4850-9697-659d22eddbd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879880, "uuid": "413da642-fb44-4174-9125-c1992d83ee1f", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8658fd57-e372-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766874146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874146, "uuid": "a09cc32f-8081-44fc-a7e2-8d059d1ad767", "comment": "Malware payload (Mirai)", "value": "74ce6e6e8544f899fa10b1ceb3d442bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874146, "uuid": "89a641bb-800d-43a0-acd3-e864583e1bba", "comment": "Malware payload (Mirai)", "value": "4866e2df4b5b391fe468dfc6fe5ad911d7d8170bae279d1838ed9f48d0ebd690", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874146, "uuid": "dc55dc72-a7bb-4d45-a13c-0dbe44928c41", "comment": "Malware payload (Mirai)", "value": "4ac5a6b18500a9ac0e244adedbce32359422f0ef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874146, "uuid": "dfb59a18-66ac-4e92-88db-065060fb9f7d", "comment": "Malware payload (Mirai)", "value": "9070fc94aadb84c585c71716b96858542ed41ee34ad80cc71e3e969446e4c88e76c70855de8af91f604c7bee3cbb4d73", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874146, "uuid": "48ebd8d4-51ad-4774-9651-662e7b17d8c9", "value": "T1B7F34A41F687C5F6C80749706067B73FCB32D82A8077E69DEF999F32DA236419217298", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874146, "uuid": "695cfbd1-91af-480f-9dbc-579530aece12", "value": "3072:boUbkhw+drKa4ZbJxnq/PSqHUBPazhErRRcJ+PPPo0hIB1mr:9bkhwurKaGxnq/PS8Crg4PP7r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874146, "uuid": "73ebd00e-27e1-4d75-9e75-29d29da820b8", "value": 163688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874146, "uuid": "5023e407-cccb-4d2d-83ed-be6dbbdfd71d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874146, "uuid": "feaccba7-670e-48aa-9d0e-fce3cbc271fb", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b648c268-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830848, "uuid": "99f1e278-ee91-4623-bf07-3301d58868d5", "comment": "Malware payload", "value": "72863bc8a9cff8f1f78e2477ef30967b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830848, "uuid": "4d939081-2390-4da7-bcd8-40820a7b1cd4", "comment": "Malware payload", "value": "495165863c094a23b1d4df40d11179d153a673e4176cdff614a8434ebf4910c6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830848, "uuid": "b48d40c0-ef4a-4e90-b7a0-9cd0cdaf2425", "comment": "Malware payload", "value": "92daa765e91fe06701cf9972e0035f44417f5870", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830848, "uuid": "32e4ea76-e88f-40c3-8812-3bb87c8ace2f", "comment": "Malware payload", "value": "7222ae01348873cdf7baf8135f35d80aa70f02d458779a3a6c2429794d310c6252d2e996aa93b7dfa8bacb23daa3b638", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830848, "uuid": "a0c986de-57f6-47df-81f6-bcefb9722808", "value": "T1F8732BDB8ED888CA1D9205451E343782BDF85B7081EAC057B5A07BD572AC492733EEB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830848, "uuid": "490247c3-b3b9-4ee4-9287-fd2da92a2b4b", "value": "1536:I9l/AoSSMhZgnadJ1td8Ds/rHYDhnGqHAdl4ze6h3jhCMNyM4JzmdPJ2ht2htgdv:I9l/5MhZgnadJ1td8Ds/rHYDhnGqHAdz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830848, "uuid": "16e632a0-2414-4484-969f-c1a5f085ab72", "value": 75360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830848, "uuid": "7424e145-fded-4136-b9f1-0926f8c34d6f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830848, "uuid": "3316d257-1fb3-4b38-93b3-4ff23d4d7e71", "value": "invoice-1645080830.pdf (16).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55adc012-e358-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862898, "uuid": "48efe9b6-a083-4ec5-9931-70d3c16076a7", "comment": "Malware payload (Mirai)", "value": "cb62a3857e13740c39754f0dd1ffa776", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862898, "uuid": "ff836b01-5571-4b6e-9b75-d71d8955f7c8", "comment": "Malware payload (Mirai)", "value": "49748203e4c2b289932aea98da716646397fbc71997398ae41c685a2f29f2e1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862898, "uuid": "7157a5e1-6702-42f1-addc-fbe31bda7cd3", "comment": "Malware payload (Mirai)", "value": "f8397b29541215c023bfcbbf88ed430ef90e9bf4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862898, "uuid": "1228ee2d-57a4-4196-8f57-3719e1a5b65c", "comment": "Malware payload (Mirai)", "value": "4c34c32fe2dc8b2a6bba687c696e72c675889b805acc2b2d1ce068e15943a6083f5c166f305a43230bdf30ec744b9606", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862898, "uuid": "521ee20c-95f6-4ff4-aac1-2b6afa8a8c8c", "value": "T17B639EBAC96A9DD8C54C55B4A9318EFD2B13720096432FFB5A8AC9654083EDCF60D3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862898, "uuid": "e8e6314b-7039-4870-8b17-337ceddc996d", "value": "1536:Laewta8Z07vGIAY3cS3wJ2UzMRDCDbk8PTbVRP:LxMZ+oCcu4zMRDGIwT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862898, "uuid": "7f88c280-e25e-4b4b-a1fa-7a845733ef62", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862898, "uuid": "ae85e46d-7681-438f-82e5-023666152a21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862898, "uuid": "886c64da-31c9-42b7-ab1c-6a8f1ec7c62a", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1910c080-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795365, "uuid": "da9c6023-9d9a-49de-b772-668775598fa5", "comment": "Malware payload (Mirai)", "value": "da199333e1ae16207a785f2c9a996070", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795365, "uuid": "0512ce75-1ef6-4af1-8516-040f8b7ffa54", "comment": "Malware payload (Mirai)", "value": "49873ff1141b5ed59d65ffd2dd03cdcfd713dfd62cac482acb3bd6007d4eb086", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795365, "uuid": "e08a7ba7-a6ff-4a6c-9e8d-9673ecc51d08", "comment": "Malware payload (Mirai)", "value": "b24320ed8987c8c28488be9f3bdc50e80bc39d12", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795365, "uuid": "708b6e2c-37f3-44a2-9751-7d933ffcf1ab", "comment": "Malware payload (Mirai)", "value": "20aa7ba1e611b620301fbc70d1564cffb6104575074df171e1ee927a90f25b35f6334ef1b4a5f9f5750290ff92499857", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795365, "uuid": "24f1bf93-b86c-4984-9a84-8e083d338219", "value": "T1F9735C41B38C0D43D1971DB03A3F2BD5D7AFE9D122E4FA852A5F9B8691B1933054ADC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795365, "uuid": "4411bc27-b4c6-4648-aa91-8c310bcb09a8", "value": "1536:k3fm9vWGC95CFwUzQz4ln7IHl+94tCy/fVA6t:IfmhxCuRkg7IF+7SAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795365, "uuid": "77ef4777-10b1-4195-9bdd-f18c2ae4dd77", "value": 75184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795365, "uuid": "a5a75a75-a19b-43c3-916e-b05ef57014bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795365, "uuid": "031b37ba-80a1-4d7d-b744-c76129adc642", "value": "Space.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02e52bcc-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830547, "uuid": "6bdcc384-a446-445a-84f8-4feb1dcd9e42", "comment": "Malware payload", "value": "43f997878ebdf34ac50be15be20bebb7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830547, "uuid": "f5dbd077-d251-4a8e-b2e5-63c3c43fef95", "comment": "Malware payload", "value": "499ff32506d0e3b599e7ca93e66d2614f09bfe483061b39d92d5ddba2c5d5747", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830547, "uuid": "ff128620-b757-4948-8b2a-2d786a259893", "comment": "Malware payload", "value": "2145fce875ec86de2890b0034cb521733c3971e2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830547, "uuid": "d9a00800-ea4d-40d1-a547-bb05c0377699", "comment": "Malware payload", "value": "dcaea9f4b42e908bf280880d5015b0ec2f7ca5cdd213e5a31fe2743730eeed65d329a20540f06cb7c18d011fd241c2e7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830547, "uuid": "01f00d99-6f0c-43b6-a70f-a36b36b90806", "value": "T17163FA5AD711CC0E4AF8A5D294BF9CE03BDC071920C6A0F4EBE822514C6DAE925757FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830547, "uuid": "9cb0ed33-d3ce-4f8b-863a-6d161ad56048", "value": "768:I8w/h62/jWs6oS+xISN0vKaN9LydkfScBYrwz2y8kTAlGB:I9l/AoSSMH2usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830547, "uuid": "de641297-fb26-4d64-947d-453953849eb0", "value": 72562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830547, "uuid": "e3fdebd1-b150-4bc4-a885-897ba10b1ed7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830547, "uuid": "05a9fcee-acbb-4187-8c19-4894822d2636", "value": "invoice-1645080830.pdf (76).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ec43b1c-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830647, "uuid": "28b845b3-9d03-4cb3-a2ef-276e04a64ff9", "comment": "Malware payload", "value": "4b9d88e32a7ce72f1251aade3bc41e64", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830647, "uuid": "36981632-3f16-4f98-98b5-ce2eaea59524", "comment": "Malware payload", "value": "49e3e092049a9fc78e5f4f61a2d159b04f66a654e906e57323323a07497c5a62", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830647, "uuid": "c405d29d-f470-4b68-8364-de5ac89408a8", "comment": "Malware payload", "value": "7e386c4df291b6207f89c580a40e69ffe77f1424", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830647, "uuid": "0614cdce-e122-469b-9612-51e9aeb37081", "comment": "Malware payload", "value": "8de616a60086e14ac055b10f6b072dbbc2d1d1cba2e9c734b76dce84cb9043e92caf0b03d9cddc1652b2e049d3868c61", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830647, "uuid": "1b3fe8df-4793-4c38-bfc0-78097050b8b5", "value": "T108632902AC7CAD4B61F2B2773B295D830ACF5008449918735B8AF55AD38E81F677978F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830647, "uuid": "22c598d3-1d7f-4726-be94-a7d0f26ca4b6", "value": "1536:I9l/AoSSM3d6gP5XwXJIXSu45bha8D1gzdhNfGeb6hiDhNiwgWG12aUyCx2CZusq:I9l/5M3d6gP5XwXJIXSu45bha8D1gzd8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830647, "uuid": "7fab99b0-398f-44aa-94f3-8ae06450ee4d", "value": 69634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830647, "uuid": "f6f89108-2af1-471c-b01c-9a91130f61d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830647, "uuid": "d153f7e0-e64e-4635-b157-ad5d33994328", "value": "invoice-1645080830.pdf (57).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e761c2-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825284, "uuid": "39061748-6e75-4d28-8823-b9d6b924dce5", "comment": "Malware payload", "value": "8dfe4366158db15d65ebc2f6a347f09d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825284, "uuid": "aca33cce-73d5-4f34-b6ca-ae4c68bd35ee", "comment": "Malware payload", "value": "4a32ece24d7cc6392fe733755df066a60952315c7f1c2fc8621c4dbd6f9ccdf0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825284, "uuid": "f4aa4b8e-3f3f-4946-9549-3105c7f8ae20", "comment": "Malware payload", "value": "5c50c4c17b397427db29ee8dc322aa0c4d140674", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825284, "uuid": "69720c3d-c103-4e64-9c55-678e5b65bda0", "comment": "Malware payload", "value": "dc68d89797e0f730e6994cc06a883b221b297d7ee67974da732bf784a1ba91ec96fd2ee3e94a1636b340085825eb0361", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825284, "uuid": "17369776-551d-41b1-bb4b-95376b078031", "value": "T1A9730A841A6D658B096AE9AD72F14DDAB94EB701540D04F93D02311EFA08F94BFDC7CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825284, "uuid": "53d2e792-7d23-4a26-858c-f865eb80ff26", "value": "768:I8w/h62/jWs6oS+xISN0vtFh5C/BmIHsgqtg/IEpuTHjhCidoVqU9YSx9p8VLmLb:I9l/AoSSM+ApusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825284, "uuid": "1e42718a-c4eb-4eff-a445-85a6488e5311", "value": 73544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825284, "uuid": "b877451d-cc82-4998-a581-371b5eb1d126", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825284, "uuid": "f5570f1d-f329-462b-b259-bf10cb94d14f", "value": "invoice-1645080830.pdf (91).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dd604e3-e2f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Rhadamanthys)", "timestamp": 1766820311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820311, "uuid": "0f1bf148-cd12-4d21-8cfa-66fcaa8e8fd8", "comment": "Malware payload (Rhadamanthys)", "value": "127983ae70660fbae0cbedb2a9e242d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820311, "uuid": "fbf41ccc-5797-4dee-bbf4-2d32e8ac1ea7", "comment": "Malware payload (Rhadamanthys)", "value": "4a8b1df1313336b9650cab4da715a8cf2910caca7e8d98faed12ce9a8f6538f9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820311, "uuid": "29319974-44df-45ad-9fcb-51e49399f765", "comment": "Malware payload (Rhadamanthys)", "value": "04880756506b081fe0addb926a66fa5936524482", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820311, "uuid": "99cb7e01-2ff9-4dc2-8f90-83d24685d684", "comment": "Malware payload (Rhadamanthys)", "value": "3f37984cc23b3e86e4b8c0ac56c9081b2f0495a8ae33b6e9882aba37495e7fcb4f17c7ebbffc8124785b86410545afca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820311, "uuid": "0e3f889c-e2a2-4c45-a197-363d4683feec", "value": "T1AA56CF83FA830043F7E345B07B69C9A1C4295BA77A292DEA80188184D4FDDEFD5B3567", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820311, "uuid": "5a6d7710-aad3-4af2-be42-f2a0f9d517f5", "value": "ff906d5ae0d3218e00c9d571874cb7f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820311, "uuid": "bbff0861-b970-4429-81c7-492162f679d3", "value": "49152:GKIIMkNBcg8a1xtS2zXJE0sK/i3u+Y/d8e6hbe/9f/r+ujIVDOiEIIUIS9Uq6gr9:OScm20seB6yH8VDDEpWUqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820311, "uuid": "bc54da4f-3289-4528-9040-1476c0256196", "value": 5927424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820311, "uuid": "8d2e4a6b-5682-4653-8f95-ee2228e76072", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820311, "uuid": "4ca513a0-c382-4b02-bdd1-86888947f8b0", "value": "4a8b1df1313336b9650cab4da715a8cf2910caca7e8d98faed12ce9a8f6538f9.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30c47f18-e2f7-11f0-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1766821175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821175, "uuid": "1eeccd08-4da9-4cb7-b0a0-cc3b061fc3af", "comment": "Malware payload (OffLoader)", "value": "ff9a581dc999411eda70acdb416db634", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821175, "uuid": "65b7f174-00dc-45a9-aadf-eef121c95ca9", "comment": "Malware payload (OffLoader)", "value": "4ab0f555ac8911ea94a6ea072a2b1873a7a026a0e0610bfc89a0a743a04040d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821175, "uuid": "dad29934-4ad7-4eb0-9980-d3b5660b6ebd", "comment": "Malware payload (OffLoader)", "value": "0e19abf7cee396f567e50d2f00cfcac5f309f6ae", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821175, "uuid": "05b096aa-3c0c-4f52-8afa-d1c7585ef880", "comment": "Malware payload (OffLoader)", "value": "03603c9cbd7b887cb54adea6c8780edddff9e1b67977d2fe8a1382c64cb36ac769d7ea2e1a19cc3f88a8fe75225462b6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821175, "uuid": "8b8983ec-b20f-4b6d-99a6-7ba986b58498", "value": "T1DB95CF13F24E673EE46A5A3649729A50443FBE60641A8CA3D6EC3E4CCE391601D7FE47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821175, "uuid": "71ab1a69-a510-4916-b2c6-6d84bf4b24c0", "value": "e8ac1646024d52d1534a88da2e8037cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821175, "uuid": "8261fdab-083e-48ba-b626-b4edb80f3e88", "value": "24576:pXkwiiUWhWXKaOEMrN3Nf+xOCyF7KDFbJnPrUXsazZ+Jsp1B34FGohdN1YL/iM74:pDXrbGOCywnjUX9zZ0U12GIyNtS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766821175, "uuid": "947b9d07-8836-45bc-9b33-8ad942171446", "value": 2041587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766821175, "uuid": "d2dd513f-1817-45f0-8fd2-9ec1d0f7b97b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821175, "uuid": "6463c43e-203b-4fee-bd60-4735bbee1eee", "value": "ff9a581dc999411eda70acdb416db634.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a2ea87d-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797165, "uuid": "d18fb864-4c7e-4e1f-807b-b5e061e6059d", "comment": "Malware payload (Mirai)", "value": "95814b76a9f7c6975b1a4fb71b212a60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797165, "uuid": "19654593-6dfa-4252-ad23-ce2b816013c6", "comment": "Malware payload (Mirai)", "value": "4ab2555bc10734a004b3f09aeefb78c4d86d359cad14bd3d78b69136b4b9005e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797165, "uuid": "cb04c641-97a7-47b2-a3d6-b40f2a8fddda", "comment": "Malware payload (Mirai)", "value": "ea227a1e95566ec638ebe67a1d8cce27760f65be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797165, "uuid": "42ffc9fb-4abf-4b6f-b581-d8abd3d980e2", "comment": "Malware payload (Mirai)", "value": "4218d1008be6d4a2de59d455e5c8576a7634edd42651ac1052c233b11506ac03b3b8941b3257fa8c6e4e99ce37c0464f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797165, "uuid": "0ea20dad-7dfa-49a6-bd77-a0209f3dec3c", "value": "T13AF2E10225463C25FEB14C3A99388BB3759392ECD4B57F3068A44BF08DC570BD9BA997", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797165, "uuid": "f5c582d6-cc60-4a29-bbb9-35c72a7378d0", "value": "768:83uoZ2XD0ZrPhyiLFyYsbef07SOlas6/TpTVn3EvvpuXbf2cs3Uozw:s2YhgUo76+567p10RSbfGzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797165, "uuid": "034f6e5f-960b-4f5e-945b-3fd6cb03377e", "value": 36840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797165, "uuid": "6efb5e50-ef32-4c43-b03b-947318bb3dad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797165, "uuid": "5a021742-123f-4680-a27e-131ec55e8ea8", "value": "Space.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba2ef916-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873804, "uuid": "cb3e570d-1f3c-4e3b-92a8-7d41cd7c7c9e", "comment": "Malware payload (Mirai)", "value": "6fe9321ccf06b153d8b7f6615f951e27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873804, "uuid": "98115d8f-bfa6-4b25-b2e4-a5bef6225a4a", "comment": "Malware payload (Mirai)", "value": "4abca53afb82eb550d055e861b9be719fd6259c57f063c5fdcd95574d37ace0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873804, "uuid": "944d49a8-7610-4a49-9b90-7a48859ac8c4", "comment": "Malware payload (Mirai)", "value": "624cbcf9f49a105791d0d44fb9e8d8af834b17e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873804, "uuid": "ce87a9bf-cd5f-487d-abb8-0051753fe83f", "comment": "Malware payload (Mirai)", "value": "c7000c8b9a9f59e2cf47e42f3dc81fc140a81a234d9739e0622223701213cbf11f103fa3c79733fb25ad719105c429be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873804, "uuid": "d52369d9-41e5-456b-a39c-123ba83d2865", "value": "T120B3C60E7F325FBDFAE8823457B38A21A65923D627E1D585D2ECD6011E7024E241FFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873804, "uuid": "bd1f5062-6fbc-4329-b2c1-55b42fec33d3", "value": "1536:DaGeXHvz3L5Lu0NIHEiXBMI1ObIjwi7SAWxew6YvWNTL+e:xeXPz2HEiRMI1ObIjwiGAWSNTL+e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873804, "uuid": "8aa6a234-e5b4-4f7f-8b30-1d8849c3cdb1", "value": 109768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873804, "uuid": "6c2e2873-30a1-438e-a9e5-aef9cb67304b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873804, "uuid": "87b6254b-55e5-42f3-97e9-4335f6930328", "value": "ub8ehJSePAfc9FYqZIT6.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de57bad4-e372-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766874294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874294, "uuid": "04083299-e6b8-4772-a5e8-3a53322a9ace", "comment": "Malware payload (Mirai)", "value": "232b595022b949c4f246cd876dc750d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874294, "uuid": "463a2fae-a72d-4731-9439-44cd5d46e6fd", "comment": "Malware payload (Mirai)", "value": "4b66f863d0456957fc2737d413b575ed00fadd5dd37560b76730980c6b107ded", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874294, "uuid": "e7bc8c2f-9e1c-486c-bdde-10a1f513a0f9", "comment": "Malware payload (Mirai)", "value": "1b2f462b0923c8bb15e2577df07a4327df300635", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874294, "uuid": "4fa341f9-e866-4420-a2be-9c2d01aec619", "comment": "Malware payload (Mirai)", "value": "cfcb5cec3764ff540f11e1d8d8973068bf86d7fd117d644f5d99bf710637b891b583e3b788761d801c49e2374b92c8f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874294, "uuid": "5dcd8ef9-12ae-4d7d-af89-6307e3ed091f", "value": "T1CDF2E05460862841CB7164B4DF39CFD24BAB4A6AD3F97770B17183A4F58231672F868F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874294, "uuid": "6344012a-5b19-4f8e-b3f2-39c9948b3bce", "value": "768:s3pLpba4gEur4Gp0ljiM2rfY3DoUhlhFKe+yB798s3Uoza:sxhur4NurfzUV9n95za", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874294, "uuid": "a4cb79d6-3cdb-47eb-b223-dcd251a2c74a", "value": 34740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874294, "uuid": "0ef24ec5-7b3b-4fd7-860f-c294f0bdd705", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874294, "uuid": "f276e7af-225e-41a4-b542-34ee07afd5dc", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "014378d6-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825390, "uuid": "1b6271b3-d6f5-4cc1-899c-b11f727138c6", "comment": "Malware payload", "value": "edf9a7bafd362df77041c40998206f7c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825390, "uuid": "35cfde5b-6a05-4b1e-ad3d-7ec6ce334cd8", "comment": "Malware payload", "value": "4cbb8dd6ee7d4f0354dfc31c416990abc00844cf1db81078a81ee2a6cd7155ac", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825390, "uuid": "82cbbd48-5b8f-4a07-8a1d-32e933e95090", "comment": "Malware payload", "value": "baba43b1e840f142e21763fa2a068c7d334830a6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825390, "uuid": "8a6148bf-28d4-465e-9253-2d67278d6169", "comment": "Malware payload", "value": "bac7a99c76dc601b9448bb42e7ff475116360380eed3717b891f56e5596cc9502967054ceae6e79ba127b64fa0947bd8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825390, "uuid": "e099ca9a-cb33-44c2-a3de-111a06cd5a1c", "value": "T1AD63FBE5A5A0DEEC5E0B63E5C91A2AFF9247ED8C2C5E31B42B04567C8F5C40F65A30D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825390, "uuid": "ca01337e-ab5b-4130-913d-9b1aaf356d69", "value": "768:I8w/h62/jWs6oS+xISN0v0PyNnqv7dkfScBYrwz2y8kTAlGB:I9l/AoSSM0aUusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825390, "uuid": "1a650e52-1444-4df1-b2b7-2bf7ed999c07", "value": 71574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825390, "uuid": "ceb45fcf-56a8-4693-92a0-12fdbf896b64", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825390, "uuid": "88aadf76-9a0d-43db-b6c9-75947b2ffc44", "value": "invoice-1645080830.pdf (69).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15dc9f31-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864079, "uuid": "7c49ac60-f240-49ad-b7b4-fe56e8496ad3", "comment": "Malware payload (Mirai)", "value": "da5a025b3680c7d5045c14adedcec9bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864079, "uuid": "83b258ee-c6d6-4645-b189-eadb8ca5c2b7", "comment": "Malware payload (Mirai)", "value": "4ccdfba141379347d89e0004f38ae07bc2a41cacc28448361bf3636dfc03ac09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864079, "uuid": "aa817990-f52d-4cac-930d-c65827a9685c", "comment": "Malware payload (Mirai)", "value": "fef25e7e54dc06042b04069a947f3e716450d671", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864079, "uuid": "16750dbd-a1a6-4153-b115-8daef64b3cc8", "comment": "Malware payload (Mirai)", "value": "9a8691efcf160b228b50c68972f113b5731b0f7b7f0122f1f34bbb6d24612a074364d6317150c77dcf6f8754e199625a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864079, "uuid": "09d92ba2-fffe-4584-ba18-0a4dc2189709", "value": "T1A8334B21697A1F17C4D0B8BA61F34734B2F6470B26A8CA5E7CB30E4EFF15A5065036B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864079, "uuid": "5e72313c-9a18-4da9-8673-7690e90a0002", "value": "768:c0W5opq9AawKFNgGu8bDXMEjugorrNu+KB+bO+1RipuY0w:c1ESLBFNgGu8bzMEjugoXNu+KB214HN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864079, "uuid": "8c0b7c11-a29e-4ae0-bc70-cb1a0d53051b", "value": 50848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864079, "uuid": "788b0cd8-443b-419b-964d-f3c942f4c210", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864079, "uuid": "292e57f1-8e1c-4bc2-b2c3-7b9057e4a17b", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "560d1ff6-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825532, "uuid": "1b78ea11-daf2-4e3b-9426-c2e0ccdc43c6", "comment": "Malware payload", "value": "da7d0fc602691402cf964270aa39cb4e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825532, "uuid": "6288fdd8-120f-4b39-a5ad-03ae7f94d54f", "comment": "Malware payload", "value": "4de1a4f20b6198d28f861f89b2dab86ecd2cb62d535bf8d1ac49b7ce131f7998", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825532, "uuid": "46e7719f-5b17-4e3a-a7b6-f0e999de3873", "comment": "Malware payload", "value": "d5c9ceb560fc02331a868027e96bec5b2ace5a5a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825532, "uuid": "42a17fe8-4f5f-4a6c-a837-163a5afe2640", "comment": "Malware payload", "value": "331ebfe803799c8f54afc1a6eeedfdc0dcd5e76f441a06c73fb31610b6e0eabc586c53f71aa72ac6ec3387da100e8a4e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825532, "uuid": "bafd4369-5294-4cd7-a3a8-93f006e30a2f", "value": "T141634BCA912479DF289FD0149C4D1903677459B4CD48C8E284292373BB58EDF88FAEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825532, "uuid": "923eff9a-ea80-44ad-b21e-3b5dfc051edd", "value": "1536:I9l/AoSSMFN34dE2F0v5wh3Q9Nf3VgIghFg86MbK5+qLdEHbMZV53ZYRmyRdHyRk:I9l/5M0MusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825532, "uuid": "6dcb79cd-5a42-4155-a11c-130cc7d3e1d5", "value": 72488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825532, "uuid": "7d330006-b2c2-4476-a434-993321f0ed96", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825532, "uuid": "ba8a3ab3-a1d8-41ed-8397-9329a786c2b8", "value": "invoice-1645080830.pdf (37).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69f9044f-e362-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766867227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867227, "uuid": "dd64b0b5-0238-4227-8e82-7db34f24b2cd", "comment": "Malware payload (Mirai)", "value": "8654bc73e363384b827dbde73d7f5635", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867227, "uuid": "d29fb758-2721-4d30-9202-9d43b2b80d94", "comment": "Malware payload (Mirai)", "value": "4df87639e03ac655893e64db5acdf6d5848ae631eb61ca6c0148353e6f02d5c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867227, "uuid": "deb359d2-6b02-4cbd-b562-bd7ca4968dda", "comment": "Malware payload (Mirai)", "value": "757b36c7284d59077a1674dd5585376e4428a7bb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867227, "uuid": "59533462-a0a0-41b1-93b3-1c030e872bc6", "comment": "Malware payload (Mirai)", "value": "8980e9e3c4b8945ae1575665da80deee47c0d06777ce743fc8082460b7946d629f4f318bfbe10435eea20f68739c47e4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867227, "uuid": "131e5cf1-d2c6-4343-80c1-c9e55e58299e", "value": "T168F2E0F025C978629DB15436F7AC0FC62F22563AD1E57F4B5728826E1DC470A4BB8CCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867227, "uuid": "12965ca3-30f6-4127-aee7-102a0475a9d0", "value": "768:WF61cTLx9J6Sn33yQF/FrdkEuL8e/NOis3UozV:KBngyyg/9uLLNSzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766867227, "uuid": "132aec5d-2555-469a-a290-a827690e7524", "value": 34716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766867227, "uuid": "0fca4a6b-be3f-4bfc-b30e-b90b3e4cdf1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867227, "uuid": "9a6db334-c7ac-48b8-9ada-1ac5d33f3aea", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b7a0d9f-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858666, "uuid": "6099c6e4-a01c-4499-9ef9-ebe9af0de3ef", "comment": "Malware payload (Mirai)", "value": "15c769ad9534aab1c641059c30773f8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858666, "uuid": "a0783880-9f18-4e20-b22d-076821c6051f", "comment": "Malware payload (Mirai)", "value": "4e15875e91c9b1ade64e154904f016ca233903e57896a373c123070bb661dac2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858666, "uuid": "1600b8e4-f14e-4469-81e7-7156205b54db", "comment": "Malware payload (Mirai)", "value": "e9f48e39221beb838e2f1e6f35d71e3f39031afa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858666, "uuid": "706274ef-10dd-44d8-9d79-906e3cebbab8", "comment": "Malware payload (Mirai)", "value": "3b387858abca1fe5101907428e20ec595e1e686155eeb93650281e7f8c2aff59011bf36d7f329da0ea32bd2ce7dd6f9e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858666, "uuid": "4ea2a6c0-f20f-49b1-8071-2c35696e3b42", "value": "T1EF142B46F9418F12C1C211BAFB6E418D37136BB9E2DE7202DD24AFA037869EF0E76515", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858666, "uuid": "2ca90054-6a7e-4c22-8050-787aa0a38ec8", "value": "6144:HqoNdGbblBGXeGzaSQwqVEoqR9Fv28VTPwf:HqiGbbnGXRzaS7FvPP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858666, "uuid": "9f1e1ecf-8f50-4602-b88e-6ed18c43ba3d", "value": 208940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858666, "uuid": "a97872fa-c4f8-4d3e-af3f-b0bb3b359eeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858666, "uuid": "e8d44583-84ad-4c44-a3e5-bdfb9890bc89", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee78b6e-e346-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855317, "uuid": "356f8adf-17d4-4b82-aa26-1b951be843b1", "comment": "Malware payload (Mirai)", "value": "d809724b773ccb35716723c23f5df958", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855317, "uuid": "c7d9b2e8-a586-488a-a217-6a5b6bf7bfcb", "comment": "Malware payload (Mirai)", "value": "4e34924646cdee7122a6435042de3f46ace69a189bd37359fff6ee1d5119579e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855317, "uuid": "3c99706a-7bdd-441f-9187-371796b57300", "comment": "Malware payload (Mirai)", "value": "db0640df21930df3b550530cc22db2300231a815", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855317, "uuid": "9848d024-beb6-440c-a1ea-82a8dac7352e", "comment": "Malware payload (Mirai)", "value": "b006f6c6542bda535eb56e9e3ffd748566970fa83d7f1074d4c1cfbeeda70d7f9f4a14884e82b9762558080d69d8d0e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855317, "uuid": "077a61e4-7664-428a-9c51-13acc8340040", "value": "T1AC836C2168792D1BC5C4A57B21F30335F2F6174A26E8CA1BBD730D4EBF256102617BBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855317, "uuid": "70376bd2-d915-4b57-8da4-8a66d3bf40e4", "value": "1536:SCPSTMGhnYmdhNwTNZetz+YxNuTqdovAHQtkB/DFrw/3g7uh5:pKZYmk+r/g1aFZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855317, "uuid": "e9d6b66e-e27f-4973-9498-b2bf6c5dd884", "value": 83148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855317, "uuid": "daeb2273-8647-4cdc-8362-ddaf0f07ac54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855317, "uuid": "66c05a05-6ff0-4591-9218-85730c372832", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fed87334-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858887, "uuid": "b0c1e628-c09d-439a-a3e1-85ddebdd19bf", "comment": "Malware payload (Mirai)", "value": "41f093a5afce6948409a40942d956318", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858887, "uuid": "0b412083-bfee-44ef-b51a-cac125babafc", "comment": "Malware payload (Mirai)", "value": "4e6edd6bec4543982fe469b8ced769bd8dd3a5df00a6668d5d351c2076125de6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858887, "uuid": "62375ee0-9f1b-4ceb-b92e-28a2bc18a45a", "comment": "Malware payload (Mirai)", "value": "e473d1dc989c0833d8811639dcd18c2d69fceb28", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858887, "uuid": "90832e33-23d3-47cb-9127-d4b15b1e027c", "comment": "Malware payload (Mirai)", "value": "997babcbcc16b09d09fbc18604bb38066b94b46b7bbcad75a84e9c35a980b28b405afc255d400ef4d023affca871d459", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858887, "uuid": "e844b255-7acf-4b8e-8137-613508e5cccd", "value": "T1B6F34B02771C0947E1632EF03A3F27E093EFDA8025E4F644291FAA4A9176E371585EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858887, "uuid": "cb87e47c-a287-4e53-9f2b-859befce1bbb", "value": "1536:OAwVj2tQRAQW22XfkGOpQj8H5xdO+GsGgmn564kLUAbgnGPq/vAVEGjjzEqkM+Cr:OA5oS8jpZH5xZGImc6A8niVhr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858887, "uuid": "d95ffa1e-541f-4717-a0b4-b0bb56cfe6b2", "value": 163316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858887, "uuid": "b2126cc4-7d63-4632-a369-0d7565a8214b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858887, "uuid": "6df11ae2-7794-45a5-b981-6749856a5b2d", "value": "mirai.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a8109ed-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797247, "uuid": "195269f3-8f9b-4f72-8827-c5e8bc27b354", "comment": "Malware payload (Mirai)", "value": "813566d9f282c3c546d839edbd290cbf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797247, "uuid": "10f22198-f07d-4fe7-816b-fe6032b4c97e", "comment": "Malware payload (Mirai)", "value": "4f3a2b9f2136727d5e2a84b1d7679cdba2358579f2d1b21ee2337df23aee7976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797247, "uuid": "e679f5a1-8f1c-4ea6-9720-c26bc02064b2", "comment": "Malware payload (Mirai)", "value": "e2b86500650b08fe84591e79b020bead97480580", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797247, "uuid": "452b683c-f824-4966-ac38-26ec5a01bd8e", "comment": "Malware payload (Mirai)", "value": "bd70796e60bf0792882e8f5a2792ae9e7728f89846d689f1d07156b8655da389a1f325838ae7ad2e08e3383d2a7b8894", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797247, "uuid": "b5af474e-4e07-44bb-9689-2a6d595a8a6d", "value": "T1FC24941E6E228F6DF7A8873047B79E21975C33D636E1D641E1ACC6101E6039E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797247, "uuid": "d73657bc-6d58-46d2-b1e7-0861bdf7671b", "value": "3072:lj1FkAPW8y4idNR6DVStDq7m3BG5793qXHKf66gji7y:lAAPW8y4idN85StDqKGNcH/6gOW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797247, "uuid": "25c10381-24cd-4364-bc7d-788d2ab4c898", "value": 222460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797247, "uuid": "83d9d491-00c5-41ab-9884-283ed2c54d8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797247, "uuid": "2c099bae-9a98-471e-bafd-91f146b4d9f5", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fb1dbd8-e362-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766867236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867236, "uuid": "b68b8969-5182-485f-9fff-8c994e97cc01", "comment": "Malware payload (Mirai)", "value": "81d2d348dbc642e91a659ab06b73f5c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867236, "uuid": "d7330669-33d7-4d5e-b770-f191f9fc8890", "comment": "Malware payload (Mirai)", "value": "4fb08bd457c3ea9f88b8bb4eb3c4f3ba93c1d028b4debae218d12f1bc150a02e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867236, "uuid": "88551357-5e67-4419-89ab-302ae240bf4d", "comment": "Malware payload (Mirai)", "value": "b37bae3e93278a03d7cddcaaf1100cf4a425ad26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867236, "uuid": "68d02fe1-3541-4bce-815b-acc04cb56ed7", "comment": "Malware payload (Mirai)", "value": "0e02bf7e3a81a1a537dffae5950be4ab40c1b5ad6a3311acdb1a8f19da945bcdf613e24fe6cbae0d33825b1c7902b1c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867236, "uuid": "727feff1-0170-45b2-969e-b51c0df71c4a", "value": "T1DB833A82BC91896EC6D413BAB67E268C3392B3B6C2CFB217DC159B5037C551F0D67A90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867236, "uuid": "7ac57fe4-e3a8-43e1-bc50-97f2c65c5304", "value": "1536:ZoOaIlDP8hLOKb9rOUUMboMYX+IyW81XmuXQ7NBq/k+2IymQY2AUm6hh1Nmyi:ZoOaIlDk85/yckS86hh1Nmyi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766867236, "uuid": "5f2b1450-e645-4f55-b35b-d043e3bfde44", "value": 88172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766867236, "uuid": "28c22a08-2724-4ecb-80cc-c96a3338d5c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867236, "uuid": "4b51a8db-3f5d-4f20-bd8e-a41e69fa2c66", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae73771a-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825680, "uuid": "2cdcff63-63a0-43ab-9acd-1363357c88bf", "comment": "Malware payload", "value": "79b043f599761ffc5320c4d8db5aedce", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825680, "uuid": "610c8a2f-8d16-40ae-8fc1-a501c9c71e19", "comment": "Malware payload", "value": "4fdaa87a6f83ba26f3ca47dd4daf4638832734421757a9476256112aece789ec", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825680, "uuid": "88e697f3-7de1-4d8a-9cf2-1f592e6d8d60", "comment": "Malware payload", "value": "f1a211b73aea35793bbe4dd60699c444cb995699", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825680, "uuid": "28d078c0-dede-4040-bc26-1c1cf2d7fbe2", "comment": "Malware payload", "value": "2405deb8ed4b673b2a9d3982e98b43f164cc9a128e501fca32cee39c7d965508592a16b7bcc5659e2bb51fd6444dea29", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825680, "uuid": "c79d3ab7-070d-43fd-869f-855d0477cada", "value": "T1EB63F96A58F07F3D09F33542DB3CE4B4A846F903844EAD6FA5E119104A9C8D5BF631AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825680, "uuid": "3e723d5c-5858-47d0-8f6f-5bff58719718", "value": "1536:I9l/AoSSMBjbwjPjbtj0jfjvj7jsjJjtj+jbjbj7jbjtjljjjjj0j6jIjCjvjLjY:I9l/5MJoiPusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825680, "uuid": "b359f38a-d833-492e-8332-e47f53b7c3f3", "value": 67727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825680, "uuid": "107fc35b-32a4-4cb9-be68-92c6dc3d47dd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825680, "uuid": "615069a0-6d47-49eb-b230-290ec3011eac", "value": "invoice-1645080830.pdf (9).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d82046ac-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854527, "uuid": "1289f04a-6a99-42fa-87f4-1cc2ebc95ecb", "comment": "Malware payload", "value": "f26eb8b627338f547720f1db939c92d5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854527, "uuid": "904134fc-bcff-44ae-93f6-84d164ed4e33", "comment": "Malware payload", "value": "50674ea5629f65e86dc06aececb26a296a20b7cf5b6c6b6653903ac1911de1c3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854527, "uuid": "f9424bad-a535-4a9c-be5f-0bdb5dcd4064", "comment": "Malware payload", "value": "6a99cba579b29db7424467f780adfa98eae8973d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854527, "uuid": "0c8d572c-67ce-4d45-bb9e-a6a080b4ea49", "comment": "Malware payload", "value": "a31f31eae64e6cdccbb840a439cbe36a88602b476037bbe38e80c779a942d9b3bd64701c37d60229f4ed1a10c2d70847", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854527, "uuid": "b12dd202-b196-4725-9388-28ae3c466482", "value": "T14F635CFE9DA784D0A5EE78DCD3F7F8CB781C4C04845ED6718E91292A02ED12B91C5788", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854527, "uuid": "cbfd4225-6cf9-40fa-872a-d19e57ab7e02", "value": "1536:I9l/AoSSM6eze+eVeBeZeheSehenezeyeCeyeUeAeJewieKe5eme8e5ete5eCe8Z:I9l/5M6Q9uEyyRyaYHr9HZqIbefleq4N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854527, "uuid": "d82a62f2-1ade-48d4-a34b-97fb65c484a2", "value": 71437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854527, "uuid": "76e8be38-1887-4100-9393-25c22897ddf0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854527, "uuid": "b68b31ce-5ccc-411e-8c0b-0b64435badf3", "value": "invoice-1645080830.pdf (96).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ffec15a-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766857654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857654, "uuid": "ce7ff71f-7e52-4dcf-9be5-651f92289cfd", "comment": "Malware payload (AsyncRAT)", "value": "028ff95fe3bb1dcf0a25b3907fbcf62b", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857654, "uuid": "3d98f425-cb96-4c86-95c9-ade7998dc8a8", "comment": "Malware payload (AsyncRAT)", "value": "515bccaaf95990d74c10584a5c0c2c4d75eecf93669697bc42ca1f074d8338f8", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857654, "uuid": "fc97adc1-c7c2-4f38-8358-898a8c5b482e", "comment": "Malware payload (AsyncRAT)", "value": "c718a4e95a9c4b0d4679519101f31c7db84db8bc", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857654, "uuid": "af025be1-3a03-41d4-b6a9-05337b1d6169", "comment": "Malware payload (AsyncRAT)", "value": "b4009cf94f6844f2d4a8620c15d01b9ec9406368dac0f3de2119e412876e8006b5359941947fc41ae54e35ecd8d9c5f3", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857654, "uuid": "63bf6b4c-ed25-42ec-afe1-abedecba6ea3", "value": "T165233A003BE9822BF27E8F78A9F26245467AF5633603D54E1CC452D74713BC69642AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857654, "uuid": "fe2f6297-25bd-4535-b34e-ca514af220ce", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857654, "uuid": "451214ec-11bb-49c4-8464-6ecfda5fbab6", "value": "768:zuWu1T1hx/9WU9PloXmo2qzm3HO4SNMOPI0azjbZgI3ivQbW7qI55OP9D5BDZMn:zuWu1T1PvC2x+JM30a3b2ISvQbWh5OPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857654, "uuid": "01d4cbac-d4e3-4e1e-85d4-124c5c6be5b0", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857654, "uuid": "69f84b37-d313-4da1-8de8-0f1e0e906d04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857654, "uuid": "3a03d7f2-2907-4c93-b2ab-20416cd856e8", "value": "IDMan.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8443c1e2-e34f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859110, "uuid": "3fc0e9e6-36a0-4d40-9e6f-22b863c5b092", "comment": "Malware payload (Mirai)", "value": "abbb45b7d8c734254dfcd8997c8e9b39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859110, "uuid": "e0c9f1fd-4bd2-4d57-b370-8ea0ba9b0a57", "comment": "Malware payload (Mirai)", "value": "5254581b78caf553129b43f907c7e0035cfa6b357bbb35b22a4feb018b4aea6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859110, "uuid": "46921b5f-beb5-4df5-a680-3f243f13ea38", "comment": "Malware payload (Mirai)", "value": "f42b5ef48b67cb02962f948166ccb72bc4732d4f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859110, "uuid": "6d67b269-4398-4468-a0a4-1b855942f2c7", "comment": "Malware payload (Mirai)", "value": "29ea6be9b2c2e2bb55181792b758e1e772b583fa1f364fb5c2e4b2578d6cfc119a29685cdc914dbcd4530febd0c9b0cd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859110, "uuid": "de52ea1a-1265-40c4-86e4-e3e4e05038e7", "value": "T1C2835B13903C2A1AD5F0A47702B79356B1E6365E4494D38EFD360E8BFF162940E6BAF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859110, "uuid": "b01605cf-fb06-4bb2-b65d-18b678709fa7", "value": "1536:gt+6hTiyLdGRpTGFmCjZarXHypVOUreq+CVWIymQY2AUYci5hh1wUw:kvWyG2GGnIqhh1wUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859110, "uuid": "fd71d2dc-c802-4acb-8cfd-5c2ac2c3dfcf", "value": 80772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859110, "uuid": "95b2901c-d9ae-4b4b-8533-63f921f1ca00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859110, "uuid": "e0fca947-dcca-4fb4-91ea-c18fb1e51ffe", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f1f7b8-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854919, "uuid": "23893a73-e4aa-4e26-98fe-7fe6f7a85332", "comment": "Malware payload", "value": "53b3738230ee5cdd0a1ece00cb14ace7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854919, "uuid": "401e40d2-77ed-4603-ab4a-b73b45a39c48", "comment": "Malware payload", "value": "530a15147f783c1cf62f805d9fb692c9e2226778fd6b1982e56744572e58adc3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854919, "uuid": "032e70ec-e727-47ce-985f-d1de706e83c6", "comment": "Malware payload", "value": "0389570114d50762863d83af8d857b961bac4916", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854919, "uuid": "001fe62a-d980-49a7-b47a-05a9e1b2b013", "comment": "Malware payload", "value": "337caf879ba343f1956c52d29a2d3d768db3c30bd9531f037ce6adf01e7f1ae672d7f1703f72390ab8e3e622d0ad4dd8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854919, "uuid": "8d2ef302-b85c-4ff3-98ea-ed075511b7eb", "value": "T157731921AD61FDC4BDE06F7988EBCA8880D2C0ECE7578A66722337E56125E557F5B300", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854919, "uuid": "13e110a7-7e88-4c31-9a1b-dc9f9689b998", "value": "1536:I9l/AoSSMd1N1/1u1T1U1g1X151K1O1z1V1vR1F191V1K1u1J1S121D1A1D141mE:I9l/5Md1N1/1u1T1U1g1X151K1O1z1Vr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854919, "uuid": "35bd1e3a-09d6-49c0-ab9b-f871acf530b0", "value": 73500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854919, "uuid": "6c8b7583-72af-47a4-9d5c-af5b99d9fee6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854919, "uuid": "67551a58-a253-431c-8887-e54c37ee66c8", "value": "invoice-1645080830.pdf (17).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4a1a893-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854897, "uuid": "f7ead5bc-df5b-4881-ac1c-ea1042369a3b", "comment": "Malware payload", "value": "5f72ea3c84876203bdd0ab5a9b03e80f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854897, "uuid": "8a5ee38d-27b4-47f1-a2df-0bf52642e4b9", "comment": "Malware payload", "value": "548c1c4ff260f733333722d5d22bb7437f7459b538af7dd3efb62aaaaf425748", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854897, "uuid": "b6bee808-cd47-4e9a-b9ef-ab6fe48300fe", "comment": "Malware payload", "value": "ef00de7e47450e7cb92fe2b1dbcca5ea05232e48", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854897, "uuid": "fafe6a74-bea0-4b06-8a98-56b6e61116d2", "comment": "Malware payload", "value": "13966a3c87649acb7c5b7af707ebedcd85edc1734192c522490165e73318019900b8f0690f75e9c0610b55f3892512e3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854897, "uuid": "6c79bdcb-cbac-4758-a653-a5012f9438d4", "value": "T184734AB63DD4FE4C3292F95FF64C32DAAB592200417E4FDC2CA996A4A30399B56351C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854897, "uuid": "2d374006-d45d-4162-b502-82f1f82531ba", "value": "768:I8w/h62/jWs6oS+xISN0vLde/+SD55yxL2TEyj2T9Ty3dH7/zG8pHeR1Q4k+AnaZ:I9l/AoSSMEJusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854897, "uuid": "92de9af6-d6be-45d9-bf50-e794fb993df5", "value": 73432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854897, "uuid": "2d3555a5-eee6-4d8f-a1f8-37e61c426803", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854897, "uuid": "3c73d17a-c7cd-471b-9140-480ac19d5130", "value": "invoice-1645080830.pdf (23).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7c3ad47-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854553, "uuid": "38676a90-1443-453b-ab32-46ee3e6e92d6", "comment": "Malware payload", "value": "f2072808a5dab3390f38d4527f9d0c41", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854553, "uuid": "67d3536d-cd9b-4111-819b-2dfe3d4abb94", "comment": "Malware payload", "value": "54d5f4a16bf77db32dc6a16f5fe1adfd870ad59066bc77ddf81865713b965e1e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854553, "uuid": "c4dda31c-88e8-4780-ba32-32817dfaaf5d", "comment": "Malware payload", "value": "0d4601a6c0f11638fa80d6b0a62f079b55297194", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854553, "uuid": "77026103-f35b-48cb-94f3-a56aa9efe9dd", "comment": "Malware payload", "value": "76e140e5a5c46bf3c7781900a2e05c641febc31f663cfbc4a0860a7720772c72e83b29c4fae8b3ce430f0428bbb40bf4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854553, "uuid": "e30ff95c-adad-43a8-8a01-d3f9f291790e", "value": "T1BC734C073E620FC2A9CB523AEF4E70D0DABC44C0889D1BA9E6D0B85794486E3B57F755", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854553, "uuid": "7321bea6-501e-44d0-b96a-6ac5f8247c5e", "value": "768:I8w/h62/jWs6oS+xISN0vGywy2yjytyeOyOOyDyoy7ygyty+ysypyWyYyByEyTyR:I9l/AoSSMI7usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854553, "uuid": "45d2dbdb-1796-413a-a84b-f7ed77fe1873", "value": 73486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854553, "uuid": "805f8dd6-d5cd-4178-8df9-51cd9f63fd29", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854553, "uuid": "a44fa1f1-d8d9-40f7-b7a4-6d1d25161529", "value": "invoice-1645080830.pdf (93).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5794e2f4-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830689, "uuid": "fd35a248-6075-41fe-9d03-492034be6e78", "comment": "Malware payload", "value": "4c80baf945d01bc118fde5f4926e59b4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830689, "uuid": "b6acfab6-80ec-467f-8c4c-87541e0b2064", "comment": "Malware payload", "value": "54e53e47f767e34ea1fb559010fba4743f67b67d7ec3755cd1c74dccc1a8d950", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830689, "uuid": "fcdadd17-7509-4ffb-b530-11c1cb339929", "comment": "Malware payload", "value": "20158e10fd3c9757a7f6dc55b588d1e4b8f06ac7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830689, "uuid": "7d94fa6d-15b1-40bb-8b7b-d35e76dfbdd4", "comment": "Malware payload", "value": "6e0944c9815916c8a54f6cdb192b553b72bc3c4f9bbc1ba9083f08128e88348b965113fd87f69a362dbbd1ac539a954e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830689, "uuid": "c827c33b-e461-4961-99bc-75ebef50236c", "value": "T1CA632C7FFFA198B80E2C3907DD2E1EC00B2966B145D2487C5DCD72476E9E5866A12C2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830689, "uuid": "87219d51-6397-4bad-8c2c-65773d2b8406", "value": "1536:I9l/AoSSMcKgSKgJKgkKgpKgnKgnKgQKgZKg/Kg1Kg+KgQKggKgSKgwKgeKgJKg/:I9l/5McKvKEKBKCK4KOK3KUKWKuKXKRl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830689, "uuid": "540a02ba-25e7-4ad3-9b3c-2675eecad291", "value": 69686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830689, "uuid": "d37bfa60-2253-469e-9fdd-34c74c70c5fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830689, "uuid": "7df82a5c-c7ee-4489-ad16-26f0293efd3c", "value": "invoice-1645080830.pdf (47).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b5ffb-e324-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766840443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840443, "uuid": "5dc087b8-383d-4486-ad37-c90ddfdffd45", "comment": "Malware payload", "value": "9b5d6a9c6503e5dddf2ef5cdfeb90e00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840443, "uuid": "76c65133-137d-4e10-8cc1-d6cfcc5b094a", "comment": "Malware payload", "value": "550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840443, "uuid": "cb2e483e-9de3-4859-88db-544a44611a53", "comment": "Malware payload", "value": "20839bc70c495b8fe4944bab2c65b9f833d8197d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840443, "uuid": "b5795db1-d425-43b5-aa44-e9e0e8edae6a", "comment": "Malware payload", "value": "37cdf3194a11a814e4c491e48abef67fa17fe6a62ae791db5f5b7f3d64deb99d92f65c8ed7caed06a61d408a1dabf500", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840443, "uuid": "470babf9-c242-4a13-a8c0-ec3611e7e002", "value": "T13A52E801D93CBB33E6F0E277117BC792B2E14A8C2750964D7D594E2EBF25130069B6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840443, "uuid": "058ef93c-6e8f-40cb-a6a4-8e94d2e038e4", "value": "384:Yf87VpVJuJO26U/7DUf0CNFo+ybnEvq90v42xPZ:u87VpHCOeYFoNEvq9/AZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766840443, "uuid": "765efa51-e28b-4731-ba3e-5a6c1fec02b0", "value": 13337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766840443, "uuid": "ba853b48-8f7c-486a-ae1e-de4a5641a758", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840443, "uuid": "66a020f0-8896-4d93-ad00-4e589ce3df80", "value": "xans.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeb24e3b-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825359, "uuid": "f6d66bf1-c167-481e-8919-421889d98431", "comment": "Malware payload", "value": "7c6e2338edde9eca15322c7a53359615", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825359, "uuid": "8377063d-0b3a-46de-bad8-98d06b7c930c", "comment": "Malware payload", "value": "5520c59b10f95d26c7e53b240e36bf74db4bf1527ac5682b82d126c5f97205ca", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825359, "uuid": "80bb29ef-62d4-496f-b524-ce63f96d3ae0", "comment": "Malware payload", "value": "c1f63db2116610c208854882baf67ef422cf15e6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825359, "uuid": "202352f7-a250-4593-834f-cdbf991a947c", "comment": "Malware payload", "value": "b1f47ba05a12d3efa51475e8de2071bd62b9f081d83db0469c91487b4363db26d3034ba34629c5d1fd0cbce7ab3ae8e9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825359, "uuid": "2e47014d-aa73-4bdc-b7d2-83cbaa459728", "value": "T148633B83E7215605BD56E3BA9EE823D4074DA2D2C3423BC44DA47293CDD6BEE0C9169B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825359, "uuid": "88415818-c82b-459d-9ef8-fe5f0ab2cf99", "value": "768:I8w/h62/jWs6oS+xISN0vPt3+FHCHiLSUyRSkHsq5Q8eLVeC+Wft48hnf/1Xy+Tx:I9l/AoSSMigusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825359, "uuid": "f5772793-7f11-41bd-bad0-f8251108ea0d", "value": 71553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825359, "uuid": "f5bba0c8-a64f-4f13-9699-f07fffe76532", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825359, "uuid": "bc066cf8-c17d-4502-bac2-a5d19bd84dec", "value": "invoice-1645080830.pdf (75).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef368bf-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825252, "uuid": "f507a7c8-bd21-4f73-a61c-5caa2f876322", "comment": "Malware payload", "value": "70dc287ea28149eab63aa40257704976", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825252, "uuid": "8529a08b-af5e-4072-83ce-aaa9a124e31f", "comment": "Malware payload", "value": "556286dcaf1aaa3df0a2e87ee3e6a30157635d4489405f8b5ba81bc5417bd075", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825252, "uuid": "3a2889bb-23e3-4973-9ea2-14bac17318ef", "comment": "Malware payload", "value": "86c559a87c30bde6929aec43a6a07c1786b8f5d7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825252, "uuid": "e3957219-8bfa-43b4-bc32-7acb891319b2", "comment": "Malware payload", "value": "c05ffad2abfd67974b9778eab47f3b0caf026faa4ed33dacd194b71ec069fb6615f31d378b573590f011eb9720548de3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825252, "uuid": "6132ea95-f3c5-4d1e-a1d1-f6b02714335d", "value": "T1A1634A0B691FB58EE5FD14143E5BA00FF0781E78606C6F46C876527A327CAF68A21CD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825252, "uuid": "c88c8d85-8e0a-44ed-8102-4dcf0174e0bc", "value": "768:I8w/h62/jWs6oS+xISN0v/+UbNHdkfScBYrwz2y8kTAlGB:I9l/AoSSMXRusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825252, "uuid": "f037d98a-ab38-418b-88ba-90bcf3180363", "value": 71557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825252, "uuid": "27e19e10-8a19-40f9-b4ba-f20571f47095", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825252, "uuid": "9879741b-1848-404f-b58c-febbe1f271c3", "value": "invoice-1645080830.pdf (100).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "399dc21b-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830638, "uuid": "ac8be44d-b9b6-47d6-85c4-799f2cad205e", "comment": "Malware payload", "value": "df4b71c325092fa0b1c6b734cbca6411", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830638, "uuid": "750c87f2-049e-416f-a208-80220f1278e3", "comment": "Malware payload", "value": "557a281b4d8e7f4fd8920a303aaae497e2016b7357c6c0c6f863efb6b7441c1b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830638, "uuid": "e78cbb0b-e50b-4ca9-8028-160115ca3531", "comment": "Malware payload", "value": "61c2d7d4f240cef900251b8d7ec88e5952707c2b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830638, "uuid": "5ff3a983-95ff-44b7-87c1-4960fde5c3c2", "comment": "Malware payload", "value": "0af1fef007dad26220270eab9b1a4aa3b9ea410ead3caa92f538e083a852ff3f4396c3759f9ac5a797df1ab9e23a4d5b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830638, "uuid": "7c019c51-a234-42d9-a01b-38fcfa991c17", "value": "T1BE731B7F91B29F93B434ACA61EC506EDC634EB6E106F6E202C82A076D244E5C7ED4375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830638, "uuid": "8d817269-6986-4706-89fa-72d793313e4c", "value": "1536:I9l/AoSSMRm7KKBwtqlaaqjhi73DoLkNmrFFKrar6a2GWT+ISSKnwB5SLdC/w8Vs:I9l/5MO6OusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830638, "uuid": "adfb2b25-ec0b-4945-a44d-5b52c001fdc7", "value": 73459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830638, "uuid": "81df5fc8-0413-47c5-89d5-2778c64ec84f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830638, "uuid": "94b00f64-e0e8-4ab9-aec6-ecca0b03c9b1", "value": "invoice-1645080830.pdf (55).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc95b394-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825302, "uuid": "17dd0e7a-95de-4159-8f47-22fd4a2264be", "comment": "Malware payload", "value": "72dd77d0edff14d7285e89ca9d1c8a4f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825302, "uuid": "f6a953ba-c814-421a-9e90-466dc79ee112", "comment": "Malware payload", "value": "55cf025cfd1678c1109810282c660adfecd00a58b748e83541a9080d5687114e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825302, "uuid": "07693a55-d42f-4e98-82ae-86547270a5a1", "comment": "Malware payload", "value": "d95be172900dc767134a81fcc8c83cbf0b03d5f0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825302, "uuid": "23dc4483-03df-4ecd-b1bf-8cba847f27c2", "comment": "Malware payload", "value": "8318ab540aa0ab87f12d984be63601a60607ba0e1b13dbf6149095aa0ab77a87e5345793a31c0b490b5a4b09845ea67e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825302, "uuid": "552f8b89-0f28-45b1-9834-a94e3b023857", "value": "T1EA631B5C841170354B523F58C6BE79E2BB3AD0EA2C95E0A0BB08FD45478B6AF0ED754B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825302, "uuid": "ec65bb44-84dc-4ba8-9ef3-98cea87ba44a", "value": "1536:I9l/AoSSM54o4TSz28/Ffi16wz79c9aspE8pVHv982eW+3T2DQv837qOS02DWFjm:I9l/5M54o4TSz28/Ffi16wz79c9aspEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825302, "uuid": "e4528149-15aa-4085-8f8d-8b68e0a79fe4", "value": 71580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825302, "uuid": "558ff1fa-c780-4c6c-8190-9eb3ff998400", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825302, "uuid": "2bd90922-329c-4ab9-bae3-3e1f655e2fcb", "value": "invoice-1645080830.pdf (85).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a99198-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830556, "uuid": "c4ad2fbb-7997-433e-8d29-8084f1ac3647", "comment": "Malware payload", "value": "b04fa15fb47d380df79d916ec550ba65", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830556, "uuid": "99b3fba0-eb9e-4e0e-8073-45c46b5de26e", "comment": "Malware payload", "value": "56ebe9dc506a686de89331d889c466b8410bd428f402df87f0ffcda707dfedee", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830556, "uuid": "3e29274f-4a4d-47c9-afbf-7aa27aeda0a0", "comment": "Malware payload", "value": "beadc619e1175384748b993d8296f6d1d2d72fe4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830556, "uuid": "da0d7ba1-d7a8-43cd-bb88-be19beeef213", "comment": "Malware payload", "value": "6f6da9b45df99bb7fc4b199df7c2f791ddc89f7576b23386894f8bfee8c4e02c8fec256ed53786481530e092c0888db6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830556, "uuid": "e624e474-765c-4fb7-86b0-5c5038a0c179", "value": "T10D630B845D917BEA24495C6FB84E41B1546E0D79372F22299ACF3264840BF273CAF1FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830556, "uuid": "a166ccc6-2b3e-4464-b310-0b3a335ddc9f", "value": "768:I8w/h62/jWs6oS+xISN0vV0o0M0h0d0X0n040o010vi0O0f0x040z0Ti0xi0q0aB:I9l/AoSSMIJusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830556, "uuid": "6d6442e8-9fff-467c-bf27-332455689cb6", "value": 71541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830556, "uuid": "f37b01d9-d038-4b34-872c-3dd0213c764b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830556, "uuid": "5b98dbff-a497-480c-86e4-359136d7c022", "value": "invoice-1645080830.pdf (73).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e46166-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854768, "uuid": "c995e03c-73a2-4a56-92d5-d28c23c67e5d", "comment": "Malware payload", "value": "8cef3b7c8956d6fd5bb9a6cd7b39e0f8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854768, "uuid": "9b0c6304-2e54-4b9f-a584-3c81e2be66f0", "comment": "Malware payload", "value": "56f26434882f19008ebb324db4629473b6302a68078f409d89c1cbcdb150c0ac", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854768, "uuid": "ee7f12bd-b63d-4eb0-a1f2-a3077bc8e44e", "comment": "Malware payload", "value": "39995ba14bff2d6b628970d1c8f822293b604b1c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854768, "uuid": "5c1e169f-dba9-49e3-9e2b-0caaa3319744", "comment": "Malware payload", "value": "08c0576783f61fd573bb63851ad47886609f3e01928b2c051b24ea6b6dfd39faa1f92f88a6de38478a7150b48e3b3268", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854768, "uuid": "85a69262-5255-4ea5-b6ed-4fc4c4c48f5d", "value": "T1AB731BE6BF95A4FB48CE9237E54D43233A75BF9D24F110D9A21682E8F0CD07E65644E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854768, "uuid": "9920a2ce-ddc6-45e9-b7e2-60f67ac0ff54", "value": "768:I8w/h62/jWs6oS+xISN0v17tEziLdkfScBYrwz2y8kTAlGB:I9l/AoSSMj4musrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854768, "uuid": "7ea03552-7f0b-42a5-ae57-668e73339793", "value": 74390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854768, "uuid": "57e5a341-891a-4c4a-ac2e-c0ee85f115cc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854768, "uuid": "9b5f1b96-1e86-40ec-b6b2-78bd939f0f99", "value": "invoice-1645080830.pdf (51).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27b96e6f-e36c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766871411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871411, "uuid": "bcfbc3db-2676-4239-83c2-e98a4cbbaffd", "comment": "Malware payload", "value": "bf62ccefea48e3cbc6c2b902d2cec75c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871411, "uuid": "07139f98-22b0-4f52-b810-0fa7c4c01ef5", "comment": "Malware payload", "value": "56fb8f19261b81fa4e036287ea28e870c5af04b40c2d5d767fb4e24920180f8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871411, "uuid": "9a26ba69-3406-4e94-9d55-7e8990fad2ec", "comment": "Malware payload", "value": "e62666f49cccdb3fdd5ed028a2d63f2f5deb5b0e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871411, "uuid": "6f61de21-f66a-44b5-9425-33e6c5823b3a", "comment": "Malware payload", "value": "821e455461d4b6a2a54115ad8eb7c603b688cfb6fa5ad8b98e6960b8ebc21fe3f4bd389e82c051f47da7ea29989c7ca1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871411, "uuid": "1dc67896-578c-4041-aac2-a375fe82bc3e", "value": "T1FBA4E09AF7533E46C9D78534248682855A5DE86733F383463B439D7A382D3378F68389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871411, "uuid": "3cf650b8-36f6-4ea8-9561-ab8ddf09c123", "value": "12288:gWhfmghw7W+8m0qOgI20jZYIEpOXe88pYw41na:gi+uqOR3ja7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766871411, "uuid": "f27028b9-0a03-4839-8c0f-72242340d2bb", "value": 453200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766871411, "uuid": "1dae1295-d1f6-406e-b0d1-6f286a7b9bcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871411, "uuid": "58e67a2b-7525-4fe9-959b-c1ceea5ef395", "value": "mirai.gnueabihf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931a8837-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857847, "uuid": "4946834e-0a6b-4a92-b3da-f04a5abe6898", "comment": "Malware payload (Mirai)", "value": "0640348784521452cf7cd6db32cdfc88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857847, "uuid": "7ca71105-1068-4323-891d-e04431bd4f23", "comment": "Malware payload (Mirai)", "value": "5713621690ff0a40032e4781a996d2aa78115af631cf2e4aecb04f42ba2ef305", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857847, "uuid": "e580e4a6-013c-456c-9557-90fb96ec82f1", "comment": "Malware payload (Mirai)", "value": "ad505f532dba797458e7798f0211b991d0d0dd4b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857847, "uuid": "e4de407e-ef3c-4ece-b52b-69d2c38f72ac", "comment": "Malware payload (Mirai)", "value": "2de44cdc53389c93de2b9adff10bf8484265c970bdac2452ad3f94786410f03a46689e7505791bf498f7bb2ffee3eaca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857847, "uuid": "4ca7acd5-a2e0-487b-b39d-4b3e09958205", "value": "T152830796B8818B12C6D552BAFE1E51CD33131778E3EF72139D106F256B8B86B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857847, "uuid": "dd68b07f-0781-43ab-8fbe-571b0659d81d", "value": "1536:ignBkNANiseWDzcrqY6wsiWFJF4lAVFtcXjet3AMui6xBOF3vC3U77RYnbVR:YKN5Dz7YQiAJY+FSX9xBOF3v6UnRW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857847, "uuid": "255db5f6-3eac-4d21-a7cf-326fb602fd8c", "value": 87472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857847, "uuid": "302d567a-49df-4e63-b4d3-e49506e3313a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857847, "uuid": "a684aee5-e147-4a8e-a633-71d1006c862f", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d06f4f1-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824685, "uuid": "dd2af891-04fd-4eb8-b485-abc0a921cf0d", "comment": "Malware payload (Mirai)", "value": "8bdf1e73b3ce18458815bb1a90761038", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824685, "uuid": "2255a893-7852-4f81-ab96-d49b18285d59", "comment": "Malware payload (Mirai)", "value": "57b1f9087ced2740909bc0e041b67d9a3cab8c1f77fcd64fc704f643907ab656", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824685, "uuid": "4bdc2354-cc71-4847-a053-05c213f8f469", "comment": "Malware payload (Mirai)", "value": "707f0ffa5ae00ffc8dcbeaabfe10e0c0fbd0d258", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824685, "uuid": "8b44c73b-9297-49e1-8110-1ca58cd67b31", "comment": "Malware payload (Mirai)", "value": "8626a28f0f4ae59e64fc1b737c43bd29c1d2b16bacd869e763b7e93a5394ac48228eb35d9865676e5132e78c666238bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824685, "uuid": "9d0f5d6e-5816-4bac-afad-f86fbe8fb867", "value": "T1EA735D42731C0D47E2A31DB0363F1BE583BEE99121E4FA85691FEB864172E721586FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824685, "uuid": "357427f6-5ee5-4be3-af16-7b6ce76033d7", "value": "1536:0KBE+QGfYYRnpVHpONSbS9tZl18OJiFruDUQAl61d6Xz:0NDGfVRbJOpb1LJr04+z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824685, "uuid": "2f30043a-01b2-4b85-95dc-36664b4b3d35", "value": 75897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824685, "uuid": "3e9c2aa3-bc03-424c-9ba8-038373e3187e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824685, "uuid": "2b936404-c6ad-4efc-8584-1355e51f1d43", "value": "nova.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "500f4d62-e344-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766854298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854298, "uuid": "96ff579d-dafb-4ca6-9a4a-08e9d1f3bb18", "comment": "Malware payload (AsyncRAT)", "value": "6a9930fdda320886660ca073f1ecd582", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854298, "uuid": "00675f7b-bafb-4138-82e8-a4678f605a0f", "comment": "Malware payload (AsyncRAT)", "value": "58647699edab1b4258b421ca97f958c34e7084c7ae49e55bdb7d6d450495e6a0", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854298, "uuid": "fab1e751-549e-405b-a6e9-bcf1571c6b8f", "comment": "Malware payload (AsyncRAT)", "value": "531c3bef8e7a5513c5508afd8a80be90ef87ffaf", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854298, "uuid": "a62d8635-d5ce-4f6e-baeb-d87381590a83", "comment": "Malware payload (AsyncRAT)", "value": "3bd0ab686f481e54ef8a3fd203445c9508e68b4b92292676270c0d67dd36001f3fd36b3e183c89cef7d5cea93bd5c07d", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854298, "uuid": "3d7ce146-cfc1-4eed-af95-dcc7b5a5a00e", "value": "T19C535A002798C965E2ED8AF4ADF2954006B5D9772102DA5EBCC404DF6B9EFCA45123FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854298, "uuid": "33781e83-1b8f-4dee-8434-c16889c33bca", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854298, "uuid": "d4d93ff1-fdf1-467c-9ae2-57d5950cf3ba", "value": "768:UAcEOq3U87iPL14i69JSSUtYKhlaQ0rnVjspF1+iSCv7mqb2napBH1o5umNTN8GN:U23U8UkSqK2VjsTYGbbbBWTyGahVclN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854298, "uuid": "28a7b6d2-178f-4f1a-92d3-b3a3e450ed37", "value": 66560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854298, "uuid": "01890c36-9dd8-4ba6-af2a-4e7d05080f92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854298, "uuid": "45503058-3e00-40d9-9f94-84567e07afc7", "value": "ApexVectorCloudGuardian.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2698051d-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870550, "uuid": "28a29e17-3a3a-4f2e-9035-9037679de836", "comment": "Malware payload (Mirai)", "value": "72dfaad09029d17543bc15ce041989d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870550, "uuid": "b1739f0a-1249-445b-a453-e68276cdb33e", "comment": "Malware payload (Mirai)", "value": "587d1ca9d126fcfcd7ea9271e2ed831c4fbe91a08d53e258c571e9ff18192d1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870550, "uuid": "d561297c-8822-49f6-a6af-5cf541db2d26", "comment": "Malware payload (Mirai)", "value": "1e6abfb8c28cabc15d6f694b951c372ef8932ec0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870550, "uuid": "fe474826-fe79-4ca4-8808-1e55084f47fb", "comment": "Malware payload (Mirai)", "value": "bb0e5588390a37db48d45386948a0ccb992528118e6ebc240b03c6634b126c508893860aa59cca301d28a8476f9bba9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870550, "uuid": "80c6a960-cc5c-4fb3-bc42-19040db954fd", "value": "T1DB43E90BF84681FDC156C134577FBA3AE82671EE423CB2A777E4FA222856E614D0DD48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870550, "uuid": "70a07f8c-f53d-456a-aa39-a8bebe9a0244", "value": "1536:HUwAK0aMBsdnDcSkHwM+2DvQWoyOdHgHnIxkob+riX:9AK0aMBsdnDcSaj+woSOdHgoxk7riX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870550, "uuid": "1cb9f693-d65c-4bb1-8fc7-9de00ca6990f", "value": 58624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870550, "uuid": "85298921-85b5-435e-952a-7ccd730154be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870550, "uuid": "fe45df37-9a68-49de-80c6-56eda8e586dc", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f611498e-e33a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766850282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850282, "uuid": "c67a1e94-6d44-449f-8b99-e14e73b7242d", "comment": "Malware payload (Mirai)", "value": "df70c704940f5b3844314ec1b5292bf0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850282, "uuid": "ff998141-3349-475a-b52e-877a4ba53b60", "comment": "Malware payload (Mirai)", "value": "588fd3c4b223f1c3a719e77f426533a0e0866d5e572125dabb97cf1e3b740b41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850282, "uuid": "57900d8a-70d2-45f8-bb21-1576bc5839b2", "comment": "Malware payload (Mirai)", "value": "62be6fb87ce14d49651101a51b1236f64593c680", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850282, "uuid": "c4b39ec4-1730-4067-bc7f-c4ba7e72594e", "comment": "Malware payload (Mirai)", "value": "96f1600c1ec3b60684dc1a8f57925884d28acc3b6437429f5b0234313ee715fa61bef0138a7d1802d11339e04bbf825a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850282, "uuid": "6b13340e-e7bb-43d9-87fd-8ea8963e5166", "value": "T17EF39C73C8246E98C625C4B5F4F1AF791B53A12551836FFA69ABC2B18043E9CF6093F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850282, "uuid": "2db7234b-4013-4913-8c49-f260b792e782", "value": "3072:SDvy7+kjqdFRl1s2vZcU3IFoEicyAdTyWcCHZcTQ6hh18t5:SOjuRfsyZcSzBC/cBTUt5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766850282, "uuid": "f5945b10-ab9f-490d-986b-1dab51499793", "value": 170848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766850282, "uuid": "38079ff3-4926-4b84-b795-544bcf59d51e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850282, "uuid": "622ae841-3f9f-4658-a465-997434871e4c", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc65bbd7-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825731, "uuid": "d88eabea-d14e-4c0b-9cae-8b5a74a76d72", "comment": "Malware payload", "value": "7685040ab049fd341d7de2d6ba4160eb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825731, "uuid": "9716cbb0-8b5c-4b7c-94bb-3c66b81a26b4", "comment": "Malware payload", "value": "58aa40f42ac4d2dd7d740cac1859f580a2fb33f1bd8a053745f04c1964049936", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825731, "uuid": "55f8143e-effd-4445-859a-2da921268104", "comment": "Malware payload", "value": "cf2308e6fd2adb9773090ddbb1a5775cddcc65e5", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825731, "uuid": "a002f738-ec37-4dc4-81f2-c9f1a322a347", "comment": "Malware payload", "value": "6d7c1b29cac600067ccb9883299bd069d1ee5203d72824cd5479d2ed110bc4b6b87852d62045cf3cbf63eb0e75af8322", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825731, "uuid": "3b31d1f9-c4df-44df-979b-344f73c4c01b", "value": "T10073297A0657440B30AFCEA183B94C4D45F521426703D9417CAC6AF6FDCF6BB987A8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825731, "uuid": "f51a642a-7b14-4982-a74b-32ff07df3631", "value": "1536:I9l/AoSSMgMro/wwLET4+NJF5uEgpCzrE5djVXhiZMF0AFpb2+kqCGaZrG+ZTdVb:I9l/5M8husriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825731, "uuid": "162f64c6-2ac9-47e0-b80f-d4293b1ce1cd", "value": 73429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825731, "uuid": "92ac6733-54e4-45aa-9e24-8da5b62bfd31", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825731, "uuid": "279b4210-d754-4c7e-909c-c231b0da3a6a", "value": "invoice-1645080830.pdf (2).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74124f3e-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825583, "uuid": "dc24b3be-3bd5-4993-9bd8-a6532fc8eb96", "comment": "Malware payload", "value": "ac082fff2c45a7f0e04e58cc2ff4fd4e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825583, "uuid": "d44f62ed-991f-4a80-8fd6-d65268bb63d0", "comment": "Malware payload", "value": "597911166fd18f78986be061732b04e88d31f1e06072857030cb8220023e9827", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825583, "uuid": "dfce928c-81c3-4dbc-ad0c-ad5f60670d64", "comment": "Malware payload", "value": "ce5f7f293ae3702c7b7fcc8956259abf8e977505", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825583, "uuid": "231f390b-86ae-4875-803c-ee33730ab585", "comment": "Malware payload", "value": "f4e370402c7937079466f43eceb1db5c849f67a3c6a6823ed8688005f6d358daec8b930af616759c38da1a5a4a104e80", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825583, "uuid": "daadb06c-a27a-4a80-ae95-ba435681fc7a", "value": "T1046319F3AB10BB2F05F6915C2E7C76EE1941258B33FDE1D9D865B1098F0E9C85A64C88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825583, "uuid": "1c51a8e2-c20c-4dd5-b8f1-11f10f3ce91b", "value": "1536:I9l/AoSSMAbke6clo3JQvQDeGbj3aXVcU7DfAS/MQ/rBDskR40eyqiosqJWQW8eo:I9l/5MAbke6clo3JQvQDeGbj3aXVcU7W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825583, "uuid": "c28d4cb8-057f-4b16-90ca-658d4da7141d", "value": 72545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825583, "uuid": "dd468922-0458-4325-9b73-806f82dbf8f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825583, "uuid": "9b3d70f8-4c52-4408-9259-9a38e5dc9886", "value": "invoice-1645080830.pdf (29).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b74bb8c0-e366-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766869074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869074, "uuid": "524a336f-e51c-4658-8197-37bb6a638c0c", "comment": "Malware payload (Mirai)", "value": "1425de76acfbe2adec7ae022146abe90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869074, "uuid": "6dfd3d3e-88d6-4306-8ab9-c673f0e46025", "comment": "Malware payload (Mirai)", "value": "598f53eee341b31573b2c94c2c828f9d1d20e28bdb7b94134f93fb639d718817", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869074, "uuid": "d48e17ed-0d97-458b-9cb3-81ea58394f29", "comment": "Malware payload (Mirai)", "value": "c14b195e925ff30889848aec26642a814cfaeb66", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766869074, "uuid": "9c1c4cef-628a-41f8-b169-22b7f5380ba1", "comment": "Malware payload (Mirai)", "value": "90d638e46e0511155932c7d06acda974ba00ce98b5019be848679e941c971083f24e4048a90846275301572ae1ab1323", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869074, "uuid": "00da6196-c148-458c-b87c-09e4b8c5016c", "value": "T12B7302DD924978E2CEFE08FFD81F6BA6166CBD966208DA2D034494C0A927D47F709346", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869074, "uuid": "01ba4103-059e-429d-acf1-f51d28777f10", "value": "1536:oIcCX947sedMxJUAT8V9ZXW9Q2lre+2oiZuGulD3AY0PEE:oIcs47PaJUIAWvZpGulcY0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766869074, "uuid": "b4982ecc-7cbf-4948-8877-4e7153ef40c3", "value": 76936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766869074, "uuid": "497f7310-72e3-419b-825b-e6c4ffd595fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766869074, "uuid": "2ea9fa63-c4ec-4c94-aaa2-8a76565e3795", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b9d476b-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824683, "uuid": "da8cfb42-88f8-4bcb-99ad-9922642196cd", "comment": "Malware payload (Mirai)", "value": "b4974fa3a92bd048ec1688f908c488a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824683, "uuid": "16c4ce15-4add-4955-a59c-bf1ffe3d70a2", "comment": "Malware payload (Mirai)", "value": "59b949700f27b7fc6b8e6be03ccbf3b19da69d663036d469b36977817f1a261e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824683, "uuid": "84092e6e-8952-440c-bdf6-adb84d2ea945", "comment": "Malware payload (Mirai)", "value": "74717db4dac720e2b6284cf95671189243e0756f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824683, "uuid": "2291d8f4-2a25-49d6-85b5-3f6baaf9b104", "comment": "Malware payload (Mirai)", "value": "dd7a3d929f55ef037404ce419189fff3a22fca98f01d2b039344f3e7acb4e4d95a512dda9e93d83567a55b0567cb56c8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824683, "uuid": "a0a58160-31d5-4ce7-8a9d-db6a1e4547c6", "value": "T144833B42BD819F13C5D222F7F7AE418C3725ABA8C2EB3142DD25BF91378689A0D67711", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824683, "uuid": "6a89af18-832f-4a3c-aaa5-866abf6e59f9", "value": "1536:nbNO7EBZJ9DLHZgq0aB2iU2MCi3fTzvoAswoXewWv2l61d6itP:nbn9gh0PGCWfTTbRz243tP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824683, "uuid": "a2679faf-fef5-426b-9314-c48bf1671f09", "value": 88336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824683, "uuid": "e32b752b-a0bd-40fe-b89f-ed944b721b40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824683, "uuid": "b939412a-6fc3-4abd-b765-e476732b5b11", "value": "nova.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdcac578-e341-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766853221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853221, "uuid": "19ffc608-ca2a-4e59-9ec5-40891767e26e", "comment": "Malware payload (QuasarRAT)", "value": "85b86f98c0f84e2f58984cb4fafa74f1", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853221, "uuid": "b31a1247-128c-439d-96e1-53ae08ef1679", "comment": "Malware payload (QuasarRAT)", "value": "59d60ad0d6f56441851a407f4ac5a9ad0cf7d8a9532fe30f2de3f02c523e672a", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853221, "uuid": "d7a38afd-8b83-45d8-861b-b0e87dc77358", "comment": "Malware payload (QuasarRAT)", "value": "e77450bce7f42e0dba5716552ea766f0b48e56cf", "object_relation": "sha1", "Tag": [ { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853221, "uuid": "f7b1a23b-06d6-476f-9507-571cd2e5d796", "comment": "Malware payload (QuasarRAT)", "value": "b3e167ba1a5f13ed495decf0271eaa20adec18ace351311c72eeaf610f38bb966c8a4865a13fadf5220de6a2dab98f22", "object_relation": "sha3-384", "Tag": [ { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853221, "uuid": "c547144e-5521-4184-bd51-7d7a4443b620", "value": "T197E55A1477F85E33E1ABE272D5B0401667F0FC2AB3A3FB4B6191677A1C53B405842AA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853221, "uuid": "41683ce1-0868-4923-be9d-f73ff6230c3c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853221, "uuid": "1fbe4c3c-eea1-4606-8b72-a12eb5a8e5a4", "value": "49152:svFqB2ZNag4YgPblSvLo6L2KocbRz1J7LoGdwTHHB72eh2NT:svoB2ZNag4YgPblSvL5L2KocbRL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766853221, "uuid": "59381a67-9d5b-44ec-9ecd-b6e2a9710bc0", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766853221, "uuid": "e3622710-9aec-4f6b-98d9-a238016548b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853221, "uuid": "a3a7a85e-991b-4215-80f2-57eec8745116", "value": "steam.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f3b5ded-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854834, "uuid": "1d94d923-9a7f-4eb9-829c-a566814cb565", "comment": "Malware payload", "value": "ebc45a980fb7af24bfce90c9abf3fe2d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854834, "uuid": "d6d8e05c-4019-4b10-a133-54f2b58dc55c", "comment": "Malware payload", "value": "5aa472b2218bd58f0d73f0aecc05ca3e345ac082df8b3035990b1eca3c5e8b55", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854834, "uuid": "4cb19219-9096-49f3-aaeb-922b890f4d79", "comment": "Malware payload", "value": "db93d3f3bfb6ab5103572bfde6eabef07af026fe", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854834, "uuid": "9ef88a0a-28dd-4b6d-a6b5-8283a9d1cd6e", "comment": "Malware payload", "value": "7cf20355b0e82374f57028ffa10e9117559e3408517257eac4b1837359c298fc10ee176a161e81999b113a77985f2a23", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854834, "uuid": "3f6a119d-0afc-4e4f-84d6-34a441b05e22", "value": "T1CF732BDA585121382DC4F2670B08575A944B0FF5D69B076BA8FA3877B8C70AB1D7823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854834, "uuid": "5dbda5ea-135f-4986-b426-b82aa075c218", "value": "768:I8w/h62/jWs6oS+xISN0v6InLyUXZHtf5ZuH5UAMA1PCfb3OPMa7qX4tbTCaT/m9:I9l/AoSSMG9busrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854834, "uuid": "730da312-584d-403d-830a-a4ee22352d46", "value": 74413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854834, "uuid": "95b0c02b-ea87-443c-aba6-becce3bd8988", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854834, "uuid": "741e51c1-9bc0-441f-95ae-aba5f19dc4ef", "value": "invoice-1645080830.pdf (29).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5e3a61b-e33c-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766851087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851087, "uuid": "37d93ec0-434f-4e50-ba38-20a481270be9", "comment": "Malware payload (ValleyRAT)", "value": "780e356d8db2632a1226b20c1316e7f2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851087, "uuid": "4d139487-628e-49de-bbe9-a177c749ed4b", "comment": "Malware payload (ValleyRAT)", "value": "5ada26b0bd07e54e568a058ac1619a7a613d67ae3680d3219aa254049fe111ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851087, "uuid": "3af59a1d-b484-4f81-96f3-75c2ccff15f0", "comment": "Malware payload (ValleyRAT)", "value": "08be14529d5bd9829931a29b78dbca12a48ee45f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851087, "uuid": "562d6d5b-7aa2-4f60-98dd-9c4007cdb1a5", "comment": "Malware payload (ValleyRAT)", "value": "1969d79edca70fe100220b2cf6ed4608cc954f2bfa909d759ca8606be02597afeb8ed45656be44c7bbb0e01a8440ac84", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851087, "uuid": "e89805cf-62cd-4004-9697-bbfbf0d24789", "value": "T13087F120F6C18132F69E11314BBDD77685BDEE200F3582D792447AAD2F312D26A397DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851087, "uuid": "ec85042d-e9fc-424a-bdf1-6583530a426f", "value": "7d405506964d94064f3524a26fbbb8f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851087, "uuid": "a8d24982-9747-4f12-ad68-b27f9b97bd83", "value": "393216:CDh+V7S4ky26yIF3j89mPV0XlnsAKPuK2pR7cNe2/eJUj9WJZ1uhg22pDXSplQ5S:7S4dL3/d0yUR7+e22JUjU7dpz/5C8o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766851087, "uuid": "e5cb32fe-2568-4a2f-97a9-dd3c0a6cc625", "value": 36121088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766851087, "uuid": "e8fcb7d1-dc95-4c9c-ad35-cb90622ff2ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851087, "uuid": "8835658b-c530-4668-b895-b36b66f99ca0", "value": "Gskdfkd.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b734bf5-e304-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766826883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826883, "uuid": "582d8b74-11d9-4f65-ada4-66d66fb7caee", "comment": "Malware payload (Mirai)", "value": "ce20ace56e509b62cff683a114adc54c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826883, "uuid": "927554d8-c78b-493d-bb24-d491bcd90d38", "comment": "Malware payload (Mirai)", "value": "5b617e08cec5c2db0db9d60ff0ccbdf820cc2abfd666605ee5fc81ea19c3cc5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826883, "uuid": "92df1088-627b-4db9-911f-04cac0439374", "comment": "Malware payload (Mirai)", "value": "88067d100d26c632eaf1194dc77da7ad71f1ca81", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826883, "uuid": "6509a78d-93ff-4360-a6e7-039c2e7ad4c5", "comment": "Malware payload (Mirai)", "value": "e98420dcb81246ebb594b766a871e934547aaba4717f208c176adef470a7b9b6458cdd5579cdf12cfcff6293239c76c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826883, "uuid": "b6f88ebf-4946-40d9-8770-4e649aa2e78a", "value": "T1FAB36D02BB42D1F5F8AD42F220379B374232D53A4021DA45CBBD9E32DD75A42DB6A79C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826883, "uuid": "861246ac-d896-4ae4-a6bd-308d712563ae", "value": "3072:iDxeju58kemBPosukR7JIWsJ3CFJI0UY4j:iDxsue23Pqv3SDUNj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766826883, "uuid": "58054a0d-6ed1-4b0b-8012-b51a984671fb", "value": 112964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766826883, "uuid": "cc02c772-8b16-4b92-8a60-8e955516f744", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826883, "uuid": "5eb85c49-5587-4715-af19-495c62ebad13", "value": "rondo.i586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d52fde-e2c3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798990, "uuid": "361caa8c-9c51-434c-b89a-e0589af13edd", "comment": "Malware payload (Mirai)", "value": "20f88d3ce1fd8a1d61e24d2047cb46db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798990, "uuid": "83752232-f97b-4098-af0d-d78d95e60470", "comment": "Malware payload (Mirai)", "value": "5c3039368622c77ba28152085caf3d39531ae217eeb63a22d69c7e48715b2a2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798990, "uuid": "7f211f0e-c920-454b-8e3b-1b820682cab8", "comment": "Malware payload (Mirai)", "value": "2ea0c9993ac7d4c021488e359681096617d68076", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798990, "uuid": "15a421f0-78a7-438f-b609-3d2dd115c264", "comment": "Malware payload (Mirai)", "value": "531a2dcdb3be7fa3c472470dfeab12e609f9c4d983018f67aaa484ccd44bed53ca570c12b2d6aefb5425b13f34727229", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798990, "uuid": "aab6b764-e293-4181-bd0d-4e409ff38704", "value": "T14E435CC0A613D8F9E95A46741173F7374732F0F611E9EA63C7A8D933BC81B01DA1A698", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798990, "uuid": "86439e3c-d1c5-4326-97a5-ee0a8dcae204", "value": "1536:00D2dhuPhqjxVEuyfFzuafCQyHitK+37Cx2EnpTpGSA/:0W2dhahqjxVlyfFzuafCQqM7e2Yxq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798990, "uuid": "83dc785e-9e03-4cf0-ba5f-e5b311d48489", "value": 56528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798990, "uuid": "34b1ba43-5287-4295-a287-660ec2381cd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798990, "uuid": "2b73d94b-a6e6-4899-829b-f47eda08843c", "value": "sdxkzX_UXA229x.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1f67664-e37c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766878514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766878514, "uuid": "9f3a9b28-962d-4110-ba5b-9af5cb488c4d", "comment": "Malware payload", "value": "21268182424c867c9f959df2b27610c2", "object_relation": "md5", "Tag": [ { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766878514, "uuid": "3b2152a8-4452-454c-9731-330f58826894", "comment": "Malware payload", "value": "5c34738a9e191e80277637f6f1deebfa842f8bd4f0d7633ab148313c64f8855f", "object_relation": "sha256", "Tag": [ { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766878514, "uuid": "b113e73b-8bb3-41e7-8c52-663e7003a075", "comment": "Malware payload", "value": "96128cc287b0565d025ff0c368ebcfe928b13346", "object_relation": "sha1", "Tag": [ { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766878514, "uuid": "bdc21c55-07f8-48d9-b138-9cfe6a36710b", "comment": "Malware payload", "value": "09d1ddd194975de5199d06dc356ac066e3542ba631031d279d0137c7de6437da822134d40c9bdd17a939da980e17d721", "object_relation": "sha3-384", "Tag": [ { "name": "HUN", "colour": "#D5C697", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766878514, "uuid": "1ba5a06a-7ef7-4052-bd52-b90ffb45c726", "value": "T14026C8710E56E5E8D5289F0FDEB057221368216FE845CE6A33408F8DDB609D91E3BEE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766878514, "uuid": "1ae6013d-a0b0-41f4-b608-1b9912b688dd", "value": "3072:Hy1eLobbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb4:H04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766878514, "uuid": "de4c03ce-b80c-4480-9a21-c04a31dcbf79", "value": 4707011, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766878514, "uuid": "297de9a2-45aa-40f9-8a9b-c192385bf58b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766878514, "uuid": "c1f49096-972e-4c0f-904c-eea9ee012ccd", "value": "Activity_List.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "243b6438-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854654, "uuid": "5b6ff3fb-04f7-427b-8c5a-1012247f85b4", "comment": "Malware payload", "value": "97bf80584118f3d6611a985b71800980", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854654, "uuid": "718d9d16-3e82-4e42-a05b-a75692f66526", "comment": "Malware payload", "value": "5c531a41836ba4702dbce592c0ced725e8c5a625c7fed87a224d50fa54b46d47", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854654, "uuid": "bb958940-171a-41b6-a026-d5e306880f3a", "comment": "Malware payload", "value": "a4121f1804dc2c453e35ba5cb451103199d2f349", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854654, "uuid": "5cfdc13f-0f2c-4928-86ec-a5492129808e", "comment": "Malware payload", "value": "03408e1144d9308b325a85c58578e3740cb0a479854a3f867bdaf0534a4c9e21116972b1b0e4bfcfc2062af026510a33", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854654, "uuid": "853dfe95-58e2-487a-bcd9-5e2591be729e", "value": "T113632CCC66727494161A8FDFC68313C17A0F37A4EC8C62B6294EF450468B2AF165DFB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854654, "uuid": "971f6cf4-265f-4776-996a-767db6199c4d", "value": "1536:I9l/AoSSMmGDvspuW7ck/k4N4afWjwDNfS8fLKi2vtJNEQzs/ErCvTLS5w+Zvanm:I9l/5MePusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854654, "uuid": "69c9e141-2234-41b4-ae35-a9e820710b14", "value": 71585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854654, "uuid": "d6ff575e-18f4-4082-9786-df9daba81d52", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854654, "uuid": "b59bfe7b-755c-4f88-ae27-21ea9e6dce5c", "value": "invoice-1645080830.pdf (75).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ceff77f-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794137, "uuid": "8ef97f72-9f0e-47ee-a413-8725545a85eb", "comment": "Malware payload (Mirai)", "value": "dce812b988f7236d5b9e329d114a8d24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794137, "uuid": "1a5be8db-f628-4e96-8143-ce5f81f4dc64", "comment": "Malware payload (Mirai)", "value": "5e06ec0fb2f7ceba14968d4327cf6eb22294aae4222441311fa28c602d139e26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794137, "uuid": "92aaacef-4a63-47c3-8b5a-49e93cc1695b", "comment": "Malware payload (Mirai)", "value": "b36168752c3a0304284a9a5feb5a1a06cf120b78", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794137, "uuid": "c4a7acb0-9126-43ed-86e6-7e9180990cb4", "comment": "Malware payload (Mirai)", "value": "0e27abaa7f3728554ae9272d417e8fdb4e901813599d3b54d5a459b13cc27756e20c81a1f27661071755c8f139530f7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794137, "uuid": "b6cb72ef-a995-441e-aa6b-8c9ae5224de9", "value": "T10E734CD7E800CD7DF84AE67B88670F01B524B3915B830F27B6A7FD57BA710A44919E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794137, "uuid": "f628285d-95a6-4b64-b530-f91bf2dcc32e", "value": "1536:U7Iy51SSYZFOEdt/LgwBae8Zg8uKbVyoBfxvBfZ3TLOcmc/ATPI9:U7Iy51qFOEbswgeoVbpvBR3nOcln9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794137, "uuid": "973d214b-ba31-4132-97eb-55bde5bde1df", "value": 78740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794137, "uuid": "32df82b9-a483-44a9-bb09-b987b492213b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794137, "uuid": "bf17833f-ef94-40c1-a5a6-45eee002c49b", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d7574f1-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795560, "uuid": "b2323f44-b9ca-45b1-9f48-6dc8ce37d55f", "comment": "Malware payload (Mirai)", "value": "758960c875ee7123ce316fec5d47d0b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795560, "uuid": "058aca5c-c756-4828-b3bc-778dfe509026", "comment": "Malware payload (Mirai)", "value": "5e11cf2835a1fb0900232367fbd604f90715111b69551969a409230541fb9e4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795560, "uuid": "dd9d78c8-dc98-401f-a45b-aa4537e1af3c", "comment": "Malware payload (Mirai)", "value": "a81fb854763ce1153c7de8e5050729c3417e1072", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795560, "uuid": "363f2a9c-98b6-447f-b12a-61514964c25e", "comment": "Malware payload (Mirai)", "value": "884dff03cc01b1bbfdb7bbf71b2d88cc4eaad17a6c84c32b5f92e375350a6b18c91243b4b13e790d3111551910bf19e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795560, "uuid": "a1015a83-1145-4c37-a893-c223ac4b7120", "value": "T15B733CD7E800CD7DF84AE67B88670F01B524B3915B830F27B6A7FD57BA710A44919E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795560, "uuid": "e317764d-7e6e-4bca-a26a-5fbf85ee2512", "value": "1536:U7Iy51SSYZFOEdt/LV45ae8Zg8uKbVyoBfxvBfZ3TLOcmc/ATPI9:U7Iy51qFOEbp4AeoVbpvBR3nOcln9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795560, "uuid": "2565d614-67f6-4811-bbe1-d4ad48edf1fc", "value": 78740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795560, "uuid": "454a3eae-b58e-4c27-99b3-c6426713da08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795560, "uuid": "3e282475-27fb-4f93-9982-9a53271a1928", "value": "jklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c975cd8d-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854932, "uuid": "af30ac7f-8c1c-4b78-9fbb-d92817fc6b6d", "comment": "Malware payload", "value": "c8fa6bdda92ac77a13f1834e3ff2a7ce", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854932, "uuid": "44e55e67-4706-4ff2-9787-b95b5a10ffd0", "comment": "Malware payload", "value": "5e166519487796fc71cca9a18a57d3a6afd7e8507d577eb324c4c259c0a7c605", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854932, "uuid": "4bf13b84-225a-4232-8d2e-545f815ac347", "comment": "Malware payload", "value": "a7992bf78ae6bcad3167a3fba18aa0d39a07a606", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854932, "uuid": "5faac2c4-d075-485c-8e86-6980dbc8ded1", "comment": "Malware payload", "value": "e3e3835c6dc0f614bdd7290b1799356181af61f092cf7f5cd2a6aaebdfde53274f9bcf9107cb5cd1566997de31751fa4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854932, "uuid": "41c9c4ba-1967-411b-88b5-5f7ac5e64585", "value": "T151632AE0A7A03A5893536C3BDF7133139E62D4965E0E11ADF70B00897F4C6E678275EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854932, "uuid": "67b9ca4e-621d-46cc-b368-119574caf70b", "value": "768:I8w/h62/jWs6oS+xISN0vckKvzndkfScBYrwz2y8kTAlGB:I9l/AoSSMfgusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854932, "uuid": "e4a78086-8692-4ed1-9eaf-5bdcbd783e31", "value": 72521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854932, "uuid": "a3f362be-1d2c-4576-ba7f-c7be3ac92636", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854932, "uuid": "25682d96-b5d8-4e5f-9eec-d352f4d65197", "value": "invoice-1645080830.pdf (10).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c576c207-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830444, "uuid": "8d652180-16f4-4610-9300-c8efe5857de0", "comment": "Malware payload", "value": "b6e2afec59847331534ea7dd99a0cfaa", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830444, "uuid": "dc8722d8-40fd-438e-b9a3-35ecacd14d13", "comment": "Malware payload", "value": "5e30dbab8ff07abc295c7b1655777e24f9f0fccd9ec61c4aad1d2bf47575824d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830444, "uuid": "001bfb35-9936-4386-b993-6e866cad8630", "comment": "Malware payload", "value": "cb7e17a024472b96e730425542bdae63feeb0a90", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830444, "uuid": "c655d99c-02e0-4829-808e-b7892e832c7c", "comment": "Malware payload", "value": "ebd8d44a04b1a0a83533499bee1533158cf9719b4cd2f282804c953efd04f466f9b91a81ca9b0a90e7ea3b344d645d9d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830444, "uuid": "91a7312e-ff62-467b-9047-10a99dac1f72", "value": "T17F631A6C1D0106C58AAFF2FE5A95EFED482F9CE0786576CE7C91F2F486A60C7120E458", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830444, "uuid": "3fed069c-f9a9-4ba1-b7b0-f2e3c9aa2c08", "value": "768:I8w/h62/jWs6oS+xISN0v5lF3QzGNT9cbwfmJsQJvn7zCx0CeXfFaZM6iXhqB8XK:I9l/AoSSMAYiusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830444, "uuid": "5c7f0f4d-4133-4bfd-b1d2-149238975cb4", "value": 70658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830444, "uuid": "0225568e-3918-4e59-be82-97b54b6ff4d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830444, "uuid": "249fd1ed-f2de-477d-8d4e-677cc5cf0499", "value": "invoice-1645080830.pdf (98).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b622b1-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854664, "uuid": "d4ce65d6-6563-49c1-a845-c191f01df1f8", "comment": "Malware payload", "value": "f450a1d83c8ab9678c9b35b0d9250416", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854664, "uuid": "0f6e5002-914f-41a2-aeaf-4f348cb0992f", "comment": "Malware payload", "value": "5f028d5c9e25cec20d96c3cd1450bf2496b8c437bda0fb8d66d941fd24687cff", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854664, "uuid": "632a7eb0-1090-4367-8112-45869cffd9eb", "comment": "Malware payload", "value": "4e8c82ac8e173caef68b4e8c5b8c76f8961c6439", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854664, "uuid": "1ef82522-1d05-4a4d-a9fb-377729e3b881", "comment": "Malware payload", "value": "277206ca7d9871384228fab033290583150e385e765dc7fc4ff33af5a8ace079a387ef46a617cd1ea02898b1886ca2bd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854664, "uuid": "6c5ddae9-8899-43c7-b503-ed3dd632b9dd", "value": "T1CA630AC91590E8B956CADCF1FE433B103E42EF41C648BEA96923647E15BCFB144892DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854664, "uuid": "520806ad-01f1-4619-ba58-4e1e8f0cbbbf", "value": "1536:I9l/AoSSMFhfQHzQIcMNQVgbrOPgipMnqcdn7N8zGKogRH+SVMCBx6+S9dS1fRAt:I9l/5MFhfQHzQIcMNQVgbrOPgipMnq0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854664, "uuid": "923f2029-57b2-4a9c-8388-4da4c35073dd", "value": 72480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854664, "uuid": "30fc57c1-5772-4833-be38-b1eeb6ea91b8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854664, "uuid": "1c98eaec-b21b-4d51-be81-8725ff453fe2", "value": "invoice-1645080830.pdf (69).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "486ddf73-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859869, "uuid": "e026e238-e71f-49f4-abf1-751063aa367b", "comment": "Malware payload (Mirai)", "value": "b3bed7414c8a0ec9842654c588279d67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859869, "uuid": "e90e239c-c330-473c-843d-35dc2822617f", "comment": "Malware payload (Mirai)", "value": "5f38d0b75b8ce67badfe1668955001fcabe08dfa0947037ca6685f298407fca4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859869, "uuid": "6f7a9875-5ec5-4747-a7df-24d957664054", "comment": "Malware payload (Mirai)", "value": "47699a3daed15dbea3e2700376aeed4a3296b0e9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859869, "uuid": "c4089e9d-bd5c-4916-b489-1ec641599003", "comment": "Malware payload (Mirai)", "value": "7e3efcbbde3b93366bf0d457ac982fa142314631850f8c176fa91c85dd1d03cb33e32ae4f32f680af4e493c4253ef236", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859869, "uuid": "98ea99db-8ea4-46a1-bce6-2490cf44e2a5", "value": "T172832942BC918A6EC6D413BAF67E268C3352A3B6C2CF7213DC159B6037C561F0D67A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859869, "uuid": "63089f71-cc4d-486e-834b-8132dc115c12", "value": "1536:duPUuWnMqwGmxOmN9PQDI/oMwT/DO21jYdKUVaH3fR2IymQY2AUm6hh1Jbq9i:gPUhM3N69LOZdKUev6hh1Jbq9i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859869, "uuid": "d5caf86e-6555-4ba8-af13-4bc2e5e0255a", "value": 88176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859869, "uuid": "1d1cdd74-0e4d-4384-b3d0-52c087e15cbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859869, "uuid": "d9fa0058-3590-4707-99fe-fb7d016603d8", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6560c11-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830472, "uuid": "79bb78c1-7ef2-4ed1-abaa-50190770d4c9", "comment": "Malware payload", "value": "b9d1ba4b8ce5c7ba9b2895bf8a11f76b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830472, "uuid": "ec4d79b6-44f0-49d6-a8d7-6ef16d49fb31", "comment": "Malware payload", "value": "5fcd1ab8907090775a2658ec04a6e3eb2e4b7f5d2762048060079e20ee9c86d6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830472, "uuid": "6898e081-f4aa-43cf-a345-93fe0397f201", "comment": "Malware payload", "value": "0ab4a0c1cfd91c8a84ab77a66821cf09c5e01a84", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830472, "uuid": "1ec34700-b9b7-4861-af4c-3f469bbc458c", "comment": "Malware payload", "value": "f353d97832de3769cfbfd8ea80abbe5981c420560242240c2f710019509c2d634be2012e19ed8200c44e2482202b3707", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830472, "uuid": "c51e4e6a-f760-48e9-8492-da45d76f1311", "value": "T170632AE8AF1B6ED4E521D9FACE53BB8D460920FA6E1F01115CDE3410579FFA82138A47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830472, "uuid": "46018cf7-28c8-4315-8a65-f9073cc31d6c", "value": "1536:I9l/AoSSMLUjRa/cDSa6+uWpmvDomxmgqWVujjIpjfLFIvDBwd0flWCa5tvaRpMz:I9l/5MLUjRa/cDSa6+uWpmvDomxmgqWH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830472, "uuid": "ea38adbd-3c7a-496c-b0e8-197a71858422", "value": 72532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830472, "uuid": "56aa3b9c-1868-4670-848d-1fe61fa4087c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830472, "uuid": "96c80192-df13-4432-b147-b097b8ca0965", "value": "invoice-1645080830.pdf (91).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44b03bea-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854709, "uuid": "dd3b1b4c-d876-43f6-84e3-f38290fc14e9", "comment": "Malware payload", "value": "c994f195d11449ed6463677a34e5f33a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854709, "uuid": "8b53dba0-0241-4a80-9e16-5febabbe9619", "comment": "Malware payload", "value": "60000e8fd589f0ff2b08dc3db48e85d654a37fa05dc034ff4757f88e57833e56", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854709, "uuid": "6985f945-157e-4f4c-9c25-3551679aa453", "comment": "Malware payload", "value": "7f54eb5da583373bc9975e4d353ef65d231a4a9f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854709, "uuid": "6fde0261-e281-43dd-b5b6-e1ab8b388780", "comment": "Malware payload", "value": "36e394b181136dcc726130cb84a99d73c6ace1a8e94fa070af4e74ebeeb1b8a28e85275f106aeababe401f406621b394", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854709, "uuid": "8c76842c-f279-4c04-9ddc-39c078693afd", "value": "T15C731A0C2A12AC9C3677DA5A54C71CF4BB5B7E87D62461B5BA72B977522CA2CF102CC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854709, "uuid": "9a6602a2-d66f-4167-b779-8db1ade73486", "value": "1536:I9l/AoSSM29s/npGlW9ZY1cxD67ut4pGB8YJkb8ZwFBE1yR1ZWE2X8imtimdJ9k2:I9l/5M29s/npGlW9ZY1cxD67ut4pGB8h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854709, "uuid": "1988f6f4-2540-4ab4-8a02-10ad624c52db", "value": 74410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854709, "uuid": "5ffa055b-35d1-4f93-a915-2ae728129eeb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854709, "uuid": "c7f8c165-ab6e-4cf5-b8ad-1c37b15f5469", "value": "invoice-1645080830.pdf (61).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f34452-e34f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859112, "uuid": "d30bed47-e0d1-4012-ac1f-4a80ea64bc81", "comment": "Malware payload (Mirai)", "value": "b4eb00aeb785ca89730d364bf3de7130", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859112, "uuid": "abefa85b-f466-43b5-9b03-8fa5d0d7feb2", "comment": "Malware payload (Mirai)", "value": "603080bb197deee228e79c93e87d68ec7394c80ce573e49215128393f2bf6f07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859112, "uuid": "21da7a46-6c7f-4062-aba7-173010beca57", "comment": "Malware payload (Mirai)", "value": "d8d6f24dc5e726388d4747135c268b0ef89c1f56", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859112, "uuid": "10a7be24-41e6-435d-bc40-e42190c0960d", "comment": "Malware payload (Mirai)", "value": "1fa4d74ba19fde7c24bab7f37f7fd86a27320e762084ceba0cfea4057cebc88794c96ecdcdfb9a311529c265805b9380", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859112, "uuid": "5540e406-7029-4330-9a34-1a74ce35d45b", "value": "T111631B81BC819613C6D526BBFA6E41DE332613B8D2DF3303D9219F15778A82B0E7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859112, "uuid": "f3aaeba0-f90a-4629-91e0-81f1b35f31a8", "value": "1536:W+3maS7d+w87Dy3T27i7HEjmZblyT9HyrbVR:W+3maM2e7HEjm5lK9Sr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859112, "uuid": "62ce79ca-8654-4269-a756-bcb0e5ba0e8f", "value": 71516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859112, "uuid": "f86dd4eb-b556-4f8a-8ef3-563fbd080838", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859112, "uuid": "2876ea25-e62a-4d25-8aa8-0d43ba1cdb27", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e43d13f9-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830925, "uuid": "f828efa7-70ac-432e-bab1-9f6c81661535", "comment": "Malware payload", "value": "61fb35ecf50dfdb99136751b4e83e512", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830925, "uuid": "b01dbf35-91b8-4093-a0bd-b622a5efc12c", "comment": "Malware payload", "value": "60a45460495019d4eee0906b41a8aa3e9cb2f0dd9cd3d65360e9e8a209452c48", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830925, "uuid": "bb32578d-0ff1-4f56-b1d3-761a8c6bd683", "comment": "Malware payload", "value": "afd6f8411f9bdbf9ef85714bf80515be7be7c4d5", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830925, "uuid": "634717ad-61df-46b4-8983-2f31ac701700", "comment": "Malware payload", "value": "70d857d77f8f1511d20697bf995c04dfcb1eabd8124045fd46fec85b29fb8849998bbd4e1bba1861ab3243a6dbd1ea65", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830925, "uuid": "ca08646e-a1e3-47fd-a59c-2bed1a18514a", "value": "T1E7636E237904ACFC965F4D88A74DC736855942537862D0B85C2A983F6FC3FE11C9B2AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830925, "uuid": "49ade66b-97fe-44ea-8248-c78d2134bc3f", "value": "768:I8w/h62/jWs6oS+xISN0vt4JH9OdkfScBYrwz2y8kTAlGB:I9l/AoSSMWGusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830925, "uuid": "90fa7a4d-a022-4d61-8918-71d6cb483592", "value": 72464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830925, "uuid": "d4516bcb-6350-4659-b33c-1c7e9c532868", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830925, "uuid": "9cf1d196-701a-46b6-8406-7207cefdb0d6", "value": "invoice-1645080830.pdf (3).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc74b342-e33d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766851527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851527, "uuid": "a34df70c-edf8-497d-aefb-2a30ee43d74e", "comment": "Malware payload (Mirai)", "value": "582383fd3941ab10dbabc1babb806a8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851527, "uuid": "134ac13b-3e4a-42fc-9e1a-977faf3fac00", "comment": "Malware payload (Mirai)", "value": "60eaab676c76ede981804df429ab53ba3345b887a7e607b688abbb46e6be84df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851527, "uuid": "b7c6ec75-e584-4f8e-ad96-939501b06dfb", "comment": "Malware payload (Mirai)", "value": "81dbeb8ac51df91c08c266b1c08e7b0098b39cb7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766851527, "uuid": "7982d653-f274-44cc-a7be-7f8d00724363", "comment": "Malware payload (Mirai)", "value": "8937a0b797976a9585884ad51b17f53630ef6d4327c664154052eccc0097b933cbf120ea6a842216961fe511bf641871", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851527, "uuid": "9aebca3a-4985-4b6d-902b-4df13a7a0dfc", "value": "T16A042946E9418F11C4D622FAFAAF414833536BB9E3FA7102DD245F6023C6A9F0FB6552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851527, "uuid": "2c86e8a7-c065-4b1d-9a06-37b84fa10e79", "value": "3072:fZLye0nW4ndV4uiiYKhnv0KOa10e29fDMMzr6QeQKu0h6hh1ou1+W:fZ2Y4z4uKKhvxOa10e29fD7iQFH0zu19", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766851527, "uuid": "6011a689-3b14-4e6c-bb48-781088270b91", "value": 182704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766851527, "uuid": "3d0bc850-a7c5-4147-9711-d6ae58c6c777", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766851527, "uuid": "ecfd06c5-2c0d-4a65-8000-7ac3a10abde5", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d840f0-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854927, "uuid": "d36e7cc4-22fe-4629-a3c1-6a27fe569efb", "comment": "Malware payload", "value": "4c1a5255e059d0d62faaa36d8202ca9a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854927, "uuid": "307bdf33-02bf-44e3-8e5a-b9539c5e53ba", "comment": "Malware payload", "value": "61f6774df9d761b24997a54318a41836e603e3ca43a3e4e33a432824d08b0942", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854927, "uuid": "49c6eaf5-f720-4224-aa6f-69edbaf582be", "comment": "Malware payload", "value": "c4d8236bd2a7493f4321345f792ba3b3c74a842c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854927, "uuid": "b22f79bf-d0ae-467b-84df-ef25eb4a6f5c", "comment": "Malware payload", "value": "fb7449eef2467e1748630978e12210588d47521dca7059a0c6b82293984b1b19d3d4295ab47a64583cefe34adec6be93", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854927, "uuid": "2eb93f0e-cb33-415c-8956-9cb140be652c", "value": "T1DA63398FCBA6DB8D68BEDC40DE2E50FAA13BDE356D278550261379170F64B890677032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854927, "uuid": "140ddc26-f918-4924-8399-badb100ec5a9", "value": "1536:I9l/AoSSMlftuWBUBDirkOgvRkZXkBNSUTmUQSHGBDp8wx8MS98u9OtP/ruuPNtQ:I9l/5MxPusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854927, "uuid": "dfb3e05b-e8ce-4034-9658-8d9342298064", "value": 72479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854927, "uuid": "62a30d5d-8291-4043-81fa-e422f8b07224", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854927, "uuid": "5c886eb3-0feb-48e0-a7f6-497a35a2dd53", "value": "invoice-1645080830.pdf (9).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e18d5ef0-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830491, "uuid": "0e72eeb0-d17a-4e20-957b-8e35bd8a45cb", "comment": "Malware payload", "value": "f57635db17caa5f2f84ec8d109716eee", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830491, "uuid": "0dec39de-c825-41ea-b19c-37d12081111d", "comment": "Malware payload", "value": "621058ab9bf5e336e7804a920ef16d6b0cc850a8b82af08329e76c959e0516a9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830491, "uuid": "9bfb3026-0a36-4da3-87ca-05e19ceda1ce", "comment": "Malware payload", "value": "a770ad73cd809ef6471d9fc8186c15546fe27f98", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830491, "uuid": "d45f9a4c-42fa-4983-b9d6-0750c01ab7c6", "comment": "Malware payload", "value": "a40e136699623db3bf5f1c01c860ab85a1ed69c91012c08a25e27f26fd491d185ccaa6047c7b8844d1cbe59868e9520e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830491, "uuid": "9c690267-fc4d-4e12-a3bf-8e115639a5a5", "value": "T17563FC878321B7E03CDBE0E894693A54E4B15ED5828FE12E5F13F85418D84EE2916DEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830491, "uuid": "8c4be441-5ffd-4eb3-a732-f6d9737cb73e", "value": "768:I8w/h62/jWs6oS+xISN0vwX5XtwdkfScBYrwz2y8kTAlGB:I9l/AoSSM4OusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830491, "uuid": "07e6b820-87af-4e7f-9ae6-13902f471e19", "value": 71573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830491, "uuid": "31ae8d51-1dbf-44fa-953c-68823f4e2f76", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830491, "uuid": "6df61728-ab3e-4e63-b60b-3465d7a0a92b", "value": "invoice-1645080830.pdf (87).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77b9aae7-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823441, "uuid": "6da0aff6-e54d-4730-bbd7-d74cfae99a7a", "comment": "Malware payload (Mirai)", "value": "d33b72db0fead25c4e9c41ebb193a2b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823441, "uuid": "70c30c3b-9b9e-4573-8de2-5b79f4411854", "comment": "Malware payload (Mirai)", "value": "623e9249fbf753053160a85c3b6faf05bdc61876b99f0d3c34ddee81c27307ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823441, "uuid": "23d3c4ce-daf6-4864-b1a8-038b6292f022", "comment": "Malware payload (Mirai)", "value": "16bd74b92d5cff273a069e3e5f243c735d939a08", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823441, "uuid": "b3f66c7c-c4d2-447b-925a-7777f9d40e26", "comment": "Malware payload (Mirai)", "value": "c2c2de094226fc4078717540ca6947faff418c1b425aa4eb99ad7eddad9b94b2205dc347cda09ce325c1e6d2924768b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823441, "uuid": "3bd3c22e-638c-4719-b9d9-30b624e0b232", "value": "T1E514074AB9919F11D5D231FEFA9F419833136BA8D7FA7102DD206F6033C699B0B7A112", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823441, "uuid": "07ebafb4-05d4-45ed-8029-d71b2c04f115", "value": "6144:0d425iSP/c88zc/vCcSaU/MvNL1QH0hP14iWXjx6i:0d4To/Nqc/vCZaUcNL1QHGeiWXjx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823441, "uuid": "56556ba1-eba8-4903-982a-161e7fedea9e", "value": 201416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823441, "uuid": "c169cf39-4e8f-4d26-96ec-381546b1416e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823441, "uuid": "de4239dc-68d6-4f00-b226-c942003414ab", "value": "bin.armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "058a3a6d-e31d-11f0-a129-42010a9c0007", "comment": "Malware payload (Babuk)", "timestamp": 1766837423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837423, "uuid": "787bdb9d-dda2-475b-95ab-0d2a4f71504d", "comment": "Malware payload (Babuk)", "value": "0fbeb0c96c056a0e4f56316ddb43ebb5", "object_relation": "md5", "Tag": [ { "name": "Babuk", "colour": "#BCB907", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837423, "uuid": "1e77d954-4f85-4f01-b9db-c1a2effd4e8f", "comment": "Malware payload (Babuk)", "value": "624391da604c4f5a032783234edc2f22338150656d90179a910e1e45cbfaf566", "object_relation": "sha256", "Tag": [ { "name": "Babuk", "colour": "#BCB907", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837423, "uuid": "a30578fc-5701-47b3-9620-353614bbd4a0", "comment": "Malware payload (Babuk)", "value": "e89ef947a5d22562dc20fa5b8332257e9bc65b46", "object_relation": "sha1", "Tag": [ { "name": "Babuk", "colour": "#BCB907", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837423, "uuid": "8f4ed63c-efeb-40bb-b346-6f9f9670b902", "comment": "Malware payload (Babuk)", "value": "c2c04b008f8e3aa22a4f9e377ecc8b4b2a5fde07ccf4b6f5dd0b277e8aacf1264f92661577a29baf35697c175e5f98cb", "object_relation": "sha3-384", "Tag": [ { "name": "Babuk", "colour": "#BCB907", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837423, "uuid": "31c1b12e-6ef9-48a4-8caf-059d6b03f8a2", "value": "T17E958E34A2C1E039E50390B03AFDFAD75529BD355BA855E3B6C02F186320AF2965BDD3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837423, "uuid": "cce9aed4-ce4e-4705-a26c-1d5ddd916627", "value": "aabcacf4b10d6decebcc7fc6521d8c2d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837423, "uuid": "897e85ff-5254-41e8-ba09-d50bbc083454", "value": "49152:Kt+j2ZG4vhex7pQv6hDSkT20+NO5SJrJr9R4NuaX:jjmIpQv6hDSkq24V5R0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766837423, "uuid": "2cf425cd-19f6-45f6-bfb4-aafea2cfe053", "value": 2044928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766837423, "uuid": "4aea03fa-79b4-4272-aff7-cd463b22d526", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837423, "uuid": "e7d9c006-5892-4850-b965-e62afc134814", "value": "d792ec4dc1e5fca5dac1f612d86168f36b701e44ea4d13f4cc79b308644f3724.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65257654-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854763, "uuid": "a02faecd-67ac-4c2e-bb62-272df7c87bf2", "comment": "Malware payload", "value": "cada6b0bb0a012d177564af03911a6c3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854763, "uuid": "13ccb6b5-ceb0-4181-b839-3ced7d7136c0", "comment": "Malware payload", "value": "628a1608e245f5211650dd67a96e12bf8674d1a0b13b914dc3b10d44ffe4314e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854763, "uuid": "73f2f3f1-60dd-4f8c-aa2f-46929ab0a97f", "comment": "Malware payload", "value": "df728d7a10cf2c5e454908d3672fd89f3f1b3f51", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854763, "uuid": "d62c9b28-cbf2-45f5-ae46-f40716911fb1", "comment": "Malware payload", "value": "407b1a1a7c0c9a4ef2f81f1cb2cd9be0d7eecf7cd74c29c856c59b5a2f9158914958ffb5f8e0e74c38bd0aa36e464feb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854763, "uuid": "a6e30eb8-9039-49d8-9f80-ea36f1cc499e", "value": "T1C6632A086A091CE509B1B9AC2F9E09E567CEB313AC3D65F6384D32C1C8D9D184E66FF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854763, "uuid": "93701b68-4613-423e-b5d2-d33df805b41f", "value": "1536:I9l/AoSSMPnenMn/nVnhnEnBnXnIn7n/nnnWn/nlnknGncnznGnnnbnpnvnpnand:I9l/5MPeM/VhEBXI7/nW/lkGczGnbpv+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854763, "uuid": "3504eb74-dc68-4e9a-861c-10a96a7e7f37", "value": 69645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854763, "uuid": "239b19d6-6f6c-4868-9bcd-60604ca100bb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854763, "uuid": "5abee5f4-82e8-4c73-b979-b6ff5abd95f5", "value": "invoice-1645080830.pdf (50).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd58ab00-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830913, "uuid": "767ef73d-bda7-4a1e-8659-a84d44327058", "comment": "Malware payload", "value": "85c09ff53918a09668a0d001daaa5045", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830913, "uuid": "0a5861ca-3184-4db1-87a9-04b5b4c608c6", "comment": "Malware payload", "value": "62bdbaa5284d241e359f4f6ab538997e242868b5d2d38a6199bfb2849cd6ab0e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830913, "uuid": "69738581-eb97-4a3b-9f39-734445114197", "comment": "Malware payload", "value": "17f34e490c263e2d181258da8be469102032786f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830913, "uuid": "e3818524-f26d-46c6-9019-60e0c03189a2", "comment": "Malware payload", "value": "45678ab8e07c2343fe8ec40eb73ab1cc19b1a8bfd3e70537aa4503738cbcff1b7de74c4c3b682f7ca89a9c0a13e0f5cc", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830913, "uuid": "3804f9af-460f-4915-835d-605b9cbcba91", "value": "T11C6318BED8F714C47AD335F088B53D4EB81A0ADA5D1A616DCA57736B820ACC720793C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830913, "uuid": "10f151ff-3222-43d0-a112-604bc115705e", "value": "768:I8w/h62/jWs6oS+xISN0vY957xR2OPBvBiWi6jykKF2dFxXvZETrRKLluNKOLPx2:I9l/AoSSM04usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830913, "uuid": "8d2bb344-8998-445d-842e-d428b3647c82", "value": 69595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830913, "uuid": "92fd4701-160e-47a5-92ec-56b120510f7e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830913, "uuid": "23d589a0-cbdd-47a1-8d0e-5aac9b285ac6", "value": "invoice-1645080830.pdf (1).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2187e793-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854650, "uuid": "b41bfe98-21f3-4090-8de3-3e90d4541cc2", "comment": "Malware payload", "value": "412631392ff4ffda66e1eed04d5209a2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854650, "uuid": "6bfb4ed6-1510-4338-b4e7-0ca0f88a25f2", "comment": "Malware payload", "value": "63044ed9a0cafe43e988687b657652ce1a30e4bec8c06ef316aa4c66ee2462f8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854650, "uuid": "08067ced-3481-43cb-a66a-c510b698ce3e", "comment": "Malware payload", "value": "73131015ed8bb2567e299d98b3b575fd1a00bb19", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854650, "uuid": "c203cfc1-7026-48a4-a605-d3635cac4335", "comment": "Malware payload", "value": "c4938082035a6e76f2fddf4e5521b2fe920be2fddd11a3840f1968cd0c7f97aca4a7d0cbe0ba3952f6b60563fdfdbd0e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854650, "uuid": "eaa92d0c-c408-445b-af04-fea9cf21b1c6", "value": "T1E363070B0D72AC964531EB76C1AA26F705FB3714E8F701433EDDB9366A5A2DA3E41E40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854650, "uuid": "ef7c3605-73c7-4fea-92fd-c18c755d191d", "value": "768:I8w/h62/jWs6oS+xISN0vLOjBFjDXdkfScBYrwz2y8kTAlGB:I9l/AoSSMgRLusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854650, "uuid": "266ea90a-98aa-4425-871d-a21971f5a66b", "value": 70599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854650, "uuid": "1d25dae0-f65e-4bbe-96d5-58f2e6949329", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854650, "uuid": "859ba6f3-8d85-44eb-bcd5-ab61403eb6b3", "value": "invoice-1645080830.pdf (74).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609a7b34-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858621, "uuid": "a032cf06-711c-4baa-a16b-bf5b482b5bff", "comment": "Malware payload (Mirai)", "value": "46523981b884c563204589f3e8b3afe3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858621, "uuid": "833f5120-a9a4-44fc-b454-17bdee624465", "comment": "Malware payload (Mirai)", "value": "6322533d6a9ff69d3667bbacb4698a19a47c866559371064d8d1b2680055b31c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858621, "uuid": "203b5d57-759c-4b5b-ba72-418be066854a", "comment": "Malware payload (Mirai)", "value": "9a5c010c3cca400966168bf4867492acf734aed9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858621, "uuid": "0c4d5539-d282-48a5-ae17-77b54e25b8f4", "comment": "Malware payload (Mirai)", "value": "f150e842e56d853ea74b6804d71fd594f143b37d07febc2c7ae5a3f3d400a7a522be83011e669bb27265157b7836b9ac", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858621, "uuid": "56a5fce5-5e80-4259-be86-47499cf29cf3", "value": "T1D313F1A796F7E9B4F022ECF08C6500046676BA9F6B5EA6EA4CC857FB4771F540312302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858621, "uuid": "6e9dfe12-9de7-4643-808a-f3ea9f844667", "value": "768:AGW8gw5mnETJuQ75UtEoFXamrGjClEQHjHPYGAZYb97SHZrjcp0NIx0rVgx:BWMmI75YEoUU3HPYhZM98Znc/ygx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858621, "uuid": "ae7054f7-ea4b-4d02-9f83-573de951a8cc", "value": 42084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858621, "uuid": "e9494a14-a41d-47ab-bb08-f500de1b7cf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858621, "uuid": "7ddb5c68-4dd8-4e94-8e3c-f8b131f6bfc3", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f38c2ae-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854673, "uuid": "887a0c45-c0d8-43d0-aa2c-d2535761b578", "comment": "Malware payload", "value": "a415608dbfe1c8e4c503c50da75057de", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854673, "uuid": "84c2667f-cee4-493b-85c7-b124d71532c4", "comment": "Malware payload", "value": "6347114185bff8daba9eaef08ef6cd4f2c89323477a0dd482e60d28f135f30ab", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854673, "uuid": "bf16f375-8e66-425a-99ee-6d941a350b4d", "comment": "Malware payload", "value": "a1f09c2deae37bbc5e1775cd3a391626c42d8535", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854673, "uuid": "4b6c7c64-e639-47ea-833d-a9b05f096e8f", "comment": "Malware payload", "value": "c6028cb5cfc9dddb8ef11fcf4fbaa1ea1d9cec39b564c5c4fe1d8e97297b0cdbb12732f268437743779e1a28859c87aa", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854673, "uuid": "f3f30516-b095-4706-8093-40e34666eb33", "value": "T1BE634BA41C422F02C574DCE1EDB655F2BFE5666363B4A8507A353C09D489F232A3EF4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854673, "uuid": "aeb7d92b-9bb5-4227-97ba-fc139ee55d6b", "value": "768:I8w/h62/jWs6oS+xISN0v4O/KxBtyhzUupl49h8tpepn/ZNEAClO/W/i/S/l/v/s:I9l/AoSSMpPusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854673, "uuid": "2452b556-ac03-47a8-8f81-15efc6af1397", "value": 71466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854673, "uuid": "854f320c-51b4-4219-891a-d47fc3fc790b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854673, "uuid": "cc2b840b-b389-4fab-ba8a-ed5bda58d55e", "value": "invoice-1645080830.pdf (71).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b375bf44-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796483, "uuid": "46c05e43-f03f-40e9-947a-f8061172f586", "comment": "Malware payload (Mirai)", "value": "61af78f8bb341984602f0441f718b4db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796483, "uuid": "0f33f1b7-eb88-4329-8eef-b580aa338081", "comment": "Malware payload (Mirai)", "value": "637cd310cc72896278e8b64c9ffd33eb1bc8ce2c4ec8b4fb41f5df01996d111c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796483, "uuid": "9b3694e2-9525-442e-86e7-e90900355c0b", "comment": "Malware payload (Mirai)", "value": "a2fe233bddeebbebd3ddd581ed795d108bf540ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796483, "uuid": "e2d1ea26-20c9-4ef7-940c-ef51a3ecb4f9", "comment": "Malware payload (Mirai)", "value": "4e0ec874b0631cabd622631fb746d790dd047e906252a7102b89b31d6f36e507b9b2916c5dd24d4df3e170c5b166eab9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796483, "uuid": "7ce42586-9ef4-4323-825a-88c72be79977", "value": "T135430198D7AFF910F256A6970CF791923BEACBD12B31D92494886FE24F014B78230DC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796483, "uuid": "3da8224c-dc8c-4eb3-8efd-35eff0e3175f", "value": "1536:uNNtWZH/DArXtr4WWyzJF+Tf3i3P4u+qgw0Vu/:bZf+r4/yzb+Tf3i/4u+qgw2u/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796483, "uuid": "a1b11cbf-4660-409c-a392-b734d167051d", "value": 57888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796483, "uuid": "4849774a-c55e-4b0a-a8ca-c6a343368710", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796483, "uuid": "3c425a3e-dd0d-4412-82f0-3eee64190aae", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bfe8b14-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854855, "uuid": "324f802f-9878-432e-8836-53ad2bd10fe4", "comment": "Malware payload", "value": "34723e53c87708ec50fe346dd30f0ddb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854855, "uuid": "379acb3c-3c53-40dd-9355-1e07f5cb680b", "comment": "Malware payload", "value": "63a4e1a736dc1604d4c67d0d457b8727a72ff0d78aa49dab156d1de7b610cc7d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854855, "uuid": "1fa1346a-e6f4-45e4-ada8-5b075fe94a2f", "comment": "Malware payload", "value": "f6cb03220d77f4b3d7eb21e046c92040cf437efb", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854855, "uuid": "930af99f-a635-424a-99e3-badb248d3b60", "comment": "Malware payload", "value": "11f679996306f4c562c053a1ef540aa378f54e122833a48c9367124c7626d062b1f1fcd6b98c82f4af805987a675b374", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854855, "uuid": "6e5219e4-8c8d-4e2c-983a-edb3bb5ef178", "value": "T1E3631A897F5F042377E7656DCB0B63A458A29EC637C15816D88BFC24C11ABBF18246CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854855, "uuid": "0f4d5cd3-989b-4749-af6d-445589974286", "value": "768:I8w/h62/jWs6oS+xISN0vGKyKAKVKoKHKzK0K5KWKLKbKcKcKCKMKIKRKEKFK/Ku:I9l/AoSSM1GusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854855, "uuid": "e085dfb0-90e7-4dba-8f78-18b0e68a1dd1", "value": 70615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854855, "uuid": "20fe6776-3ae3-4bdc-9750-fb34f0f72d27", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854855, "uuid": "004857fe-9aa6-42bb-8275-509cc72f2a77", "value": "invoice-1645080830.pdf (24).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4672dd5-e370-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766873391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873391, "uuid": "8125a500-f1db-4a90-8b03-9a6b9f0b68d3", "comment": "Malware payload", "value": "44292d285ceb79b875dba921107efc88", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873391, "uuid": "013933e3-a657-4e43-8b11-b1ad2d4ee2c3", "comment": "Malware payload", "value": "63e7e2f98212ea5bccf6faac8af0de543459b2d40e2ffa12b3358949f868f8a1", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873391, "uuid": "c31c9f33-6015-4894-b3e3-d83ea0afd921", "comment": "Malware payload", "value": "0c6c152dff814b52f39eeb6206d87a6a618d04c5", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873391, "uuid": "8b14976d-52ad-4825-a1fb-aa9223cdc136", "comment": "Malware payload", "value": "53b67aae163eb3e71a9d8b511400f96e47b34015e8b415dc0e9fa493532fc903793506562e1c9ea6537b2df399fbb5a0", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873391, "uuid": "c35bf7da-04fa-4bc1-97f9-fe5a5a4e3c2d", "value": "T156E1C696ACF324087417905DCFBEA2583069A057474ACD9CFDCC76A8DF4C2A48622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873391, "uuid": "b73f58a4-6329-4e63-89d0-d6c48b1523ac", "value": "192:OZdBVmIE/CTK/ek0llHYoHsfOBro2Tc/OkSmy:OJa/QYoHsfO2/G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873391, "uuid": "ebe6bf97-b7be-452b-a30f-79402fbe103a", "value": 7372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873391, "uuid": "c67d1322-aaa5-4586-b440-ee72dcbd3008", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873391, "uuid": "8bc7b866-33c9-443d-a1bf-42fa58fd598c", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46ed1897-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830661, "uuid": "050052e1-edc7-45bf-b0ad-e1eef337b121", "comment": "Malware payload", "value": "6273ff0f0b409b85c1ddda858af7b737", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830661, "uuid": "a9626056-7837-436c-9e6e-50116d9cec80", "comment": "Malware payload", "value": "63fdbade9e0fa1dbe12e4799cc4f20f05ae49a9db9be34af09df0efd96ce8082", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830661, "uuid": "5e828d55-fb58-47f3-8a92-c476bc80162d", "comment": "Malware payload", "value": "53a6015e341a7d66f708a5e4b46e57ada81ee14c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830661, "uuid": "0820b781-a23b-454b-a451-370e9a591b22", "comment": "Malware payload", "value": "1306d20a26c70c018e8512c0402a92f07afacac5759df8d40c467627920d6aa6eec2fe3f0e5a287ff83fc8ba931360fc", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830661, "uuid": "5d8a35f4-f6fd-47a8-a415-8b8d5628c106", "value": "T127631A8E1B87A89CF059368F634B0D90A0E6D66D5BFDC8D476CEE360241C7FE1268E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830661, "uuid": "8ff8b392-f24b-46a0-8613-a99d5d1fb6d5", "value": "768:I8w/h62/jWs6oS+xISN0vVmWfQgQL2XgAGmssGLFyXpB9UvoUqkF5If59ESVmmSv:I9l/AoSSMf7usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830661, "uuid": "89899a56-5458-480c-9d56-5fa9d9011a25", "value": 70662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830661, "uuid": "180f80e8-1518-47de-9c9f-a98beb834733", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830661, "uuid": "a100be85-9df1-44c2-a9d9-95e6da2e21df", "value": "invoice-1645080830.pdf (53).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d050e6-e356-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766862151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862151, "uuid": "f58d8ccb-18aa-4058-9f3f-2ef87ca583b5", "comment": "Malware payload", "value": "f03eb5d09a179304265ea12b6357ba11", "object_relation": "md5", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862151, "uuid": "56083ba3-87f5-4756-979f-e6242eca4026", "comment": "Malware payload", "value": "644cd639458df279e091ea525eceb0724e29b09cb04380b4a71869a53532417d", "object_relation": "sha256", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862151, "uuid": "e833a8b2-8dab-481a-a860-af13b0ff7b23", "comment": "Malware payload", "value": "53313a9113e69e184457c4e05deefeb250033081", "object_relation": "sha1", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862151, "uuid": "1412c639-5ed7-4b3c-98b3-c11c642eccc5", "comment": "Malware payload", "value": "484586abec31a13787c8052829360bda719795a7dbe5ac2ddad41aa77d76ebc161c220998e2c8310b9f0bdee20be7a91", "object_relation": "sha3-384", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862151, "uuid": "9c10e1e3-139f-49ca-8632-deeb987a3f81", "value": "T13D95CF0963A4829DFEABD176CA13C657D7B17C460237972F01A4AB726F337715A2E320", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862151, "uuid": "37133e07-468b-4fb3-9333-2d16bc14f938", "value": "6c9794990dcbb89d798ebf671bb8138f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862151, "uuid": "8ee8480c-c529-4c89-bac2-e9e63237bb8a", "value": "49152:b2EYTb8atv1orq+pEiSDTj1VyvBakWRvdB1eOKdNALoOhG+:KXbIrqHVBRKPXOw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862151, "uuid": "3b7d74d5-3cb5-4c73-bb52-ba2cb3c41566", "value": 1875456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862151, "uuid": "5314ef4a-a1d0-4452-9e39-73c2860634fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862151, "uuid": "bf55008b-054e-43bb-9cc2-710585eab17c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76a74f6f-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825587, "uuid": "5cd3db7b-2d87-4cf0-a977-d55ac60492ca", "comment": "Malware payload", "value": "861ad86e637aa465b2a742b235bc2424", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825587, "uuid": "9e4d35f6-f87d-4512-a3f5-c3ed85037b7d", "comment": "Malware payload", "value": "645449b5686d841ba67527d4a96394756fa0534b18a1811d7699f34e328920a8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825587, "uuid": "7226a9fa-03a2-4faa-9e24-edd6d1201e49", "comment": "Malware payload", "value": "de57711d6ab3e294301e811844dfa1146a04f694", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825587, "uuid": "e237db72-8271-496b-b483-76b67fdd7391", "comment": "Malware payload", "value": "2393f82bbd91140e7caf63852390deb01ac4b84ba2e63062df3bfd882f59dfbf9add1aaaf828fc8ff0d62ccadec7c613", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825587, "uuid": "5be03dc2-cdb8-4fcc-97e1-bb4205a017c8", "value": "T1CC630850BF5370A47A6EA1E793D11FB427928FFB43A36C8042B0224F5866F4F6B87519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825587, "uuid": "17589e1f-e4c9-46cc-a2f7-46d5ad911c7c", "value": "768:I8w/h62/jWs6oS+xISN0vCTCid7dflHoz6fqxz8zqK61Ec3vRjfFXCZQidRttGD9:I9l/AoSSM8pusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825587, "uuid": "90ea85e5-d85f-48f3-b8d4-4389e7b47e5d", "value": 71526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825587, "uuid": "41b85cfb-76ba-49b9-9a30-4df04495950a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825587, "uuid": "01999f02-66b9-4c31-9dc8-fc98c9be0298", "value": "invoice-1645080830.pdf (24).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b29063d-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865028, "uuid": "1dcee0e5-7f55-45f2-8bb7-74d0efeeabae", "comment": "Malware payload (Mirai)", "value": "4e85c36cf4c7b12407223d2c75afc3c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865028, "uuid": "5e02d277-dce8-4ba0-b1e0-48949b2f8fa5", "comment": "Malware payload (Mirai)", "value": "64db323354b6da41acc968e0b07543c7371e886ecb870cdee9051ac46569b9df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865028, "uuid": "67342c4a-ab81-4c96-ad50-47eaf512ee67", "comment": "Malware payload (Mirai)", "value": "e8e3a702f5c4b4588e288b1d991303034755ab8d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865028, "uuid": "78338cf5-a200-4e9d-8303-5abb8f0b5871", "comment": "Malware payload (Mirai)", "value": "38039f36c0a017c315cf60d150f91167da23b61cd896b1f437d2f027d710cf3a63f73d26fcb60f12c710a28b9168abcc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865028, "uuid": "b55b4784-1fa0-4488-9853-919fea42422a", "value": "T18C043B46EB418A13C4D627BAB69F42453323AB54D3EB330699287FF43F8679E0E67501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865028, "uuid": "ddb63da8-3d4d-49f7-a819-dcbb7c7faed5", "value": "3072:Xp63lV7io8yOvKja6yHZUMgekvS3foR14Pz6KGkWXM/9/2+mhwqVYY:XMVV7ie2Aa6yHZUMrkv4oH4L6KGkqM/o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865028, "uuid": "ead0e3c8-99ff-467f-b456-1972aee2211a", "value": 174872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865028, "uuid": "d792d6ef-ae41-475a-ba76-f273e9c17cf2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865028, "uuid": "ca81a79e-bec8-463e-a9db-a7e89378d5f8", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9cbb512-e352-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860542, "uuid": "72716272-bf2e-4dcb-b132-ffb933b81d29", "comment": "Malware payload (Mirai)", "value": "274e516d437e7b1f36dca12381383550", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860542, "uuid": "5774e4e5-0ac3-4caa-82bf-22cdffd69994", "comment": "Malware payload (Mirai)", "value": "658c75a00521ff144a109d4703c1d08858f3f0b4605e5546aa77eee53861f1c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860542, "uuid": "e94ad170-7bb6-44de-b9c9-8cc5d7f5d963", "comment": "Malware payload (Mirai)", "value": "91ccb63a2415103918b18b6582ca014692e0d7c7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860542, "uuid": "4845dc8b-94c6-4027-9849-29546feb3207", "comment": "Malware payload (Mirai)", "value": "d7095b35c61df3a44b9bbdb162b6c45cd520fd9e4e20feac30e998f06f42bdf7c9dd24880e6a64f73381ebfd6e53bdca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860542, "uuid": "fce72bc4-154d-4ce6-8b05-67e8da5cc3ff", "value": "T16B43F741BC92566ACAE463BAFA6E518E336273E4C1DF335BCC104B117B8961F0D77A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860542, "uuid": "676e3626-95b7-43ca-84d8-d1d2a50fd667", "value": "768:fOUWMWyi/ymCL9NHhkg9l0a4Nv8gKlY5IqiP/J8m6VhxcWcff3eDp9GxrosuUBNx:feTamo9Nagr0pvFKEC8h/xcWcffODqx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860542, "uuid": "564ee42f-3c8c-4741-8a69-dd5722a4fc0b", "value": 60592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860542, "uuid": "2c95453c-2adf-42b3-8676-0f6cedd4a46a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860542, "uuid": "a50b61b7-0608-4ac8-bac2-ce39969a411c", "value": "miraint.arm5n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10c0fe06-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870513, "uuid": "61eaf985-17db-4a3d-a196-9a3814c5c4af", "comment": "Malware payload (Mirai)", "value": "b144eec8911e3a996aebc6c63c72d079", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870513, "uuid": "26d2f075-28c2-4ff7-aba3-f2e42d469f15", "comment": "Malware payload (Mirai)", "value": "6625cf8176c6db96352f2793b2457e083f140a2a7805257a679d484ea0ee7825", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870513, "uuid": "881179ce-6296-4225-9532-d08e352a7233", "comment": "Malware payload (Mirai)", "value": "21d15721abf3f9939e4c5e49df59e87f8a1f72c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870513, "uuid": "382fe77d-37aa-4210-9a96-026aece8cdff", "comment": "Malware payload (Mirai)", "value": "d10457a027fed4ca0614652453578ef84b8c2c0d436a8ba0e5bc9fc788b2661fb7d3f3ffd37deb9be798693db047a179", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870513, "uuid": "af1428cd-4d3b-4de8-97cc-00a1f999a687", "value": "T11CB2C1DC56E83CCECBAC687DE05D53995E106294A30E8A6AB3439C00B27674FB99C4B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870513, "uuid": "ac570612-263f-4cb8-b36d-25df0fdb2551", "value": "384:iBT0Ekwijgxkf3Zo6a2aUuC/+UFuFBYsFF+cByEsE3ucRWGVCz0Nv2i:gTNkXjYkf3ZoZ6u7Ppu8Ws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870513, "uuid": "40e8bb4a-e890-4ea4-aef6-0ee9e4d19272", "value": 24608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870513, "uuid": "3a466569-0c53-4e74-b46d-423dda6aed7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870513, "uuid": "4b9b916b-1538-4748-a20e-cc2c9f7534c3", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "787143be-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823442, "uuid": "745a6db2-2999-438b-bbc6-869de8c65f69", "comment": "Malware payload (Mirai)", "value": "dfa184fc7fae69a89b4292e048bcfeee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823442, "uuid": "2a52cc05-6195-4c8c-8f43-0e7ac072b83f", "comment": "Malware payload (Mirai)", "value": "662d43fbd1e8d529382591ba449101a9e161e5f87e14e159dc809dadfffeb059", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823442, "uuid": "75acce07-d8bf-4ba5-aeb4-122db66ab7e4", "comment": "Malware payload (Mirai)", "value": "2723d9c8945d622131534f9f2815303fee994012", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823442, "uuid": "e82535e5-e429-4d0d-bd82-5ead7fec59e5", "comment": "Malware payload (Mirai)", "value": "e4a845761bf481b8ca14f0087dc9cd2a193eef120ad0e369e0103fc3ffdbcdf5145a70f29d1bcef8be872ac80181bd27", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823442, "uuid": "17a6f81e-7568-4c62-a0e3-d2c8aee375be", "value": "T1F724F947B991CF12C1C111BEFE5F418D37136FB8D2EA72029D246FA477868EA0E7A116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823442, "uuid": "10391eed-658d-4d07-808b-017975516ea5", "value": "6144:Iv4nw6IdA1Twfl4ds0aVGGp8CwZ9YNJmh0jsP2:IEwi1Talz0aVEHZ9gmujs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823442, "uuid": "8cdaa84d-0bd4-45ed-9b0d-9d0662acac54", "value": 221968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823442, "uuid": "9262bb2c-2f9c-465b-927f-8d13668d4c5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823442, "uuid": "ac2abf76-ffd6-4f04-933a-3f7ce3681802", "value": "bin.armv4tl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7389727c-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830736, "uuid": "73a71a57-9c4a-4e80-ac54-a6f7b320898b", "comment": "Malware payload", "value": "8b16113d40318274dee52b01b36e5d52", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830736, "uuid": "8dfe13ee-dfa3-422f-83f7-27ce988f5db6", "comment": "Malware payload", "value": "6653b4ca9b3c1aae172dcd845d60d2b936c49d64bb8375cbaa02b07560f3bfc0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830736, "uuid": "75d67c06-8bbf-40e0-b3c5-1c7f06d4aae0", "comment": "Malware payload", "value": "80e992f553f0542c832b2a67551df4017ffa763d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830736, "uuid": "d0c66d49-e948-4feb-bba4-a3f4a17cefcd", "comment": "Malware payload", "value": "7bd530b844c5e421b376bf849989812d9cdfb1aa0de071ac25bcc2842ec362cd95fac3bfe450cb097f243bf017a26adc", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830736, "uuid": "e6c818a9-1332-4110-8afd-0c64a8fbd05a", "value": "T1DF63F85AF979B2E75E37F72CB1F0D08E562579FCEA7BC3809104EC02985A869DE004E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830736, "uuid": "6e2b3e2b-13fa-4832-a62d-b050c3fc247d", "value": "768:I8w/h62/jWs6oS+xISN0vCwzZq8JUqwuRaZIXdkfScBYrwz2y8kTAlGB:I9l/AoSSMwwusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830736, "uuid": "71753047-f9d4-4908-a336-4c30f556de5b", "value": 71510, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830736, "uuid": "af554e65-9f2a-4911-bc56-211ce76fbd59", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830736, "uuid": "dc5d4874-79fc-4b96-8cc1-f245c947d912", "value": "invoice-1645080830.pdf (40).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1176ba6b-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830571, "uuid": "352826f9-1b96-487b-bc8b-42e70acc3f43", "comment": "Malware payload", "value": "79c4bfa2635b991cfd2497b421625536", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830571, "uuid": "891469e1-f2b8-4869-8057-50a278fbd9b0", "comment": "Malware payload", "value": "66adb2881a7b17964d405ddd58119f5c344c5e946ddc00968fea543f7e24f9ae", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830571, "uuid": "db718db4-73ca-4b7f-b900-575e468d0fa7", "comment": "Malware payload", "value": "10f766b2c61d630660dea5ce4924caaff23ed01e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830571, "uuid": "57e62edb-e1d4-43a3-9635-79e4d797f690", "comment": "Malware payload", "value": "a41e2c5b50687f0f5b8c9669d6fab8f6342ce6eced147de7be96fc046b61fbb16be2796c554efa507870508219c0338a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830571, "uuid": "aed8f2b9-932f-493a-b026-7cdb626b80b2", "value": "T18063F7CD0799EECB38D53BBB447E15219AC543B202EC9F9F96B2E406254DB4C7E618C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830571, "uuid": "faf1ad2f-69b0-485a-932a-757649c96b2f", "value": "768:I8w/h62/jWs6oS+xISN0v4DjfNidkfScBYrwz2y8kTAlGB:I9l/AoSSM6EusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830571, "uuid": "07e8a10b-98a8-4912-95d5-e0fba289e227", "value": 69704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830571, "uuid": "feeb3aee-aad2-429f-8c3f-a7b44cbb4bc5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830571, "uuid": "ed9d6d82-50cd-45a8-91bb-b710299bf6f7", "value": "invoice-1645080830.pdf (69).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feca7579-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825386, "uuid": "910c794b-bad7-45c3-bdd3-54b2e0dfed93", "comment": "Malware payload", "value": "fd8e64187d15b02bd2cba49c47d819a3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825386, "uuid": "b9344cdc-93a1-4b61-8f5e-4b8e156a9462", "comment": "Malware payload", "value": "670d2747fb28ffb29611e55cc85bdf16ba47b89c99f007390157673ae446b822", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825386, "uuid": "f7d74c0f-3fc5-4dee-bae3-d5607b093181", "comment": "Malware payload", "value": "b62939c8c91e440588db16549e5e0a985f93df89", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825386, "uuid": "592494b6-b0aa-4dd9-8972-a9a05554e1e0", "comment": "Malware payload", "value": "1b47e3c928bcadacf29bd72d1de797eada10c3df7a5caaa89d24e406a4239c2f5fa48f1485a7fdf426eddb494067afc2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825386, "uuid": "aa4a5e35-6966-4900-9555-07b02aecd425", "value": "T123634942EEAD386BC41940608A98D5F114E1E89E18BF1C8C5F2F851C7DD1FFE1992FA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825386, "uuid": "a7f029c3-0318-458b-8c64-dfc73d3b36e4", "value": "1536:I9l/AoSSMNwQtuihi5tKR6y/vjWbMiTTw0TvmzyBnaS1SZcC1Uj7dlQj7GsQ9mz4:I9l/5Mq6usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825386, "uuid": "0361322d-c471-44fc-a6d9-0c7835bb5aa0", "value": 72461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825386, "uuid": "ee476844-9729-4755-97e6-d9488b555870", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825386, "uuid": "a6dc037c-2dec-4205-9850-b3a71b107e30", "value": "invoice-1645080830.pdf (68).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b30afee9-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793905, "uuid": "10eeb031-4b91-4c8e-831f-4ca7926221b1", "comment": "Malware payload (Mirai)", "value": "3d7b2760933a293eb7f3b727842bb064", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793905, "uuid": "2e888a0c-dd4f-4318-a219-f61eaeca83ef", "comment": "Malware payload (Mirai)", "value": "6746fe8bdc25d8bafbf27480e92d527bbba6d67b59e68f66793d43736b525b7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793905, "uuid": "ba07d5bd-cf4f-4dc9-b27f-e2bcd76331fe", "comment": "Malware payload (Mirai)", "value": "2867a37ed3caf124f5a839e8d1c52284c6cfde8b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793905, "uuid": "44a93b62-f47d-4456-b1b1-e45db6081c0c", "comment": "Malware payload (Mirai)", "value": "c22962782e08d4256703f32c217f973ccd0314a85e61c66c0e8a16f8123d95a70b7c60d8eea3d836851fd20837db2be7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793905, "uuid": "ebcb6252-d835-4aec-97db-80239cf5a786", "value": "T13963F996F981CB12D5C595BAFF1E518D33130778E2EF73139E14AB246B8B46B0E3A805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793905, "uuid": "a9f112a3-da3a-4b4f-8f92-a8a44e8f3bbb", "value": "1536:vhnqg2qa2s5+VHAifswfXPagkD35MMinhFQF/U5Y7qUYsbVR:8gLNlTsw3aQhFQF/U5YOUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793905, "uuid": "93d9119c-28cc-4081-b9d2-2997b1def942", "value": 66728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793905, "uuid": "1bb871b0-aa6b-4e6d-9766-e988715dde7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793905, "uuid": "55e13fc3-059e-4397-9fb2-7b2b8e960427", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7ce8850-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825320, "uuid": "801ffe2c-0d78-4650-baad-488de268f7cf", "comment": "Malware payload", "value": "258360460a6241b14d9aa4932cf6a855", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825320, "uuid": "3f59e0ab-98b1-4f2b-8cee-877ca59a9ad6", "comment": "Malware payload", "value": "6747f4846f5d11c1628f6e91d960165855ee86beab7059a7e4a968d2a5ed9329", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825320, "uuid": "348cbc58-eb5b-49b0-b4dc-e8de1a0b3d73", "comment": "Malware payload", "value": "e3e069cd9b25f303a92d9252ed983c21c4f944d3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825320, "uuid": "a2258644-555f-4603-a585-5acebd27d930", "comment": "Malware payload", "value": "03a9d5e977d9a565f7115760f96d5f62bbe8c42c7aaf3546f015900d241f5c7582417d11b63d1bb0fe4e688aa6bbaded", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825320, "uuid": "60d10750-9c49-462f-a1b0-2c34f027d6b7", "value": "T1776319D7DB33458A4BC2E2984F1378460108E7210ADD52A6C9CB32F6C1BE7AD5A3E4DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825320, "uuid": "6a57f046-f8e8-4f22-a0fe-ec5cfbf29422", "value": "768:I8w/h62/jWs6oS+xISN0vLrFEYtYaQvX4LojTsPtPOPGPhPfPMP1PkPXPI8rU9hV:I9l/AoSSMW0usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825320, "uuid": "22b94f2d-429f-45d7-92cc-aff0d92fd15d", "value": 71565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825320, "uuid": "e4cab6c8-a8c9-4fa4-b067-6d14dbb53bd3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825320, "uuid": "27500ea0-ada0-494b-947b-c0e519c0aed9", "value": "invoice-1645080830.pdf (82).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5b58b9d-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825666, "uuid": "3df214cc-a569-42a5-a97e-f5914796ece2", "comment": "Malware payload", "value": "0778e0419c6604620e6230bacc91760a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825666, "uuid": "f973bbe0-3aa8-47ce-ae7f-25c2443f55cb", "comment": "Malware payload", "value": "6807ec53aedc9d5bb0c97f1936d866902e1877dd1f2c0b818418d851b8db9e2e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825666, "uuid": "eadf851b-cd25-4671-a2fc-36f7c085048a", "comment": "Malware payload", "value": "9861e9b68b5c7578142df6defb2fcc86edd86879", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825666, "uuid": "bd0d2dc1-e74a-4242-b931-f32dd94f148b", "comment": "Malware payload", "value": "53e10be4520deda4cd259640dd800f441dd8da6b6929c7efd95a0ec76b6ff2be15fc8b5911871ca7fa257804a16f3fcb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825666, "uuid": "e0bf9aa2-0fa8-4192-8d97-b5579de2b9cc", "value": "T10A632C427843A2FA9BB01520060F120F4B167A86695ABFF290F7EBA15F0C13D9F73579", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825666, "uuid": "0d961bd4-824b-4bc7-8ded-bc9af85c4a05", "value": "768:I8w/h62/jWs6oS+xISN0vVTzTJTfTZvTr9T49TNTsTsT4TsTjTITJMTnT3TlTlT7:I9l/AoSSMNX9usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825666, "uuid": "3b9d3c92-ef21-48b1-9ba7-0c99df9dca16", "value": 72531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825666, "uuid": "50529f47-3ac9-4609-af4f-c6d91536d407", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825666, "uuid": "3f2ec7ae-5a3a-48ca-b21b-944955af982b", "value": "invoice-1645080830.pdf (6).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "beffa25f-e351-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766860068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860068, "uuid": "5c9c3753-137d-45de-ab00-ddadbf642a99", "comment": "Malware payload", "value": "21a8ea8aa256cf0363c7ad75610f19a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860068, "uuid": "4c01ba94-329f-4cf4-86b7-6a3182291182", "comment": "Malware payload", "value": "68d543794ad5d2a8a7368d752043d7f5804c1d6a5ce55f0b6c03d014520fb7ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860068, "uuid": "580c8834-480f-4818-ac92-233aee922bd1", "comment": "Malware payload", "value": "6ffcc0722306c7d45b68cbb5072b360024641013", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860068, "uuid": "add62e0e-6d98-4e5e-aed0-7c48d600c7f8", "comment": "Malware payload", "value": "035ee0245690da02f617c4c85d03ab66d050aabff60dceb953423de8e8d096a3be23ab77b193da27a1f6c28526f26216", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860068, "uuid": "9cb3e80a-b595-4acf-a8b9-4062f0008ead", "value": "T17353F995B8818B15C5D413BEFA2E118E33272778E3DFB2129D115F25778B86B0E77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860068, "uuid": "7c22d1a7-f1db-4a4e-b1c8-8a7d7a7499b4", "value": "1536:HJnM9v/KEUU363bgM/qnP+nmPMpi60JX1d:m3Kv3b/q20JX1d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860068, "uuid": "0363095e-452a-49e9-8e9b-c093a79359ef", "value": 62656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860068, "uuid": "addeb00a-0bcb-4367-926f-8a126431048d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860068, "uuid": "93dd1382-72f4-43d0-b261-c8a703212140", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39daf6e4-e2e2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766812170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766812170, "uuid": "636e6b55-f267-4185-98e5-589bf771fb7e", "comment": "Malware payload (Mirai)", "value": "15676420a9f13990569f712bd79ec8f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766812170, "uuid": "85b3cf19-6d8e-4f4a-a4c8-cdd3e1dea3ef", "comment": "Malware payload (Mirai)", "value": "68f38bdc29cff7ad2194be6766f4318bc5a57083041c7551337c66ad3c1ffa1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766812170, "uuid": "48fc246e-83ae-4802-8a3c-324b0df6655f", "comment": "Malware payload (Mirai)", "value": "61d60e160bd56fc5d23ef7dab7a1ff00be526faa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766812170, "uuid": "c53057e0-ba2e-4896-8527-23ca80771d43", "comment": "Malware payload (Mirai)", "value": "bc1e81dedea8541b1d4e89ad7f3f2aa08f485b654f6e642d8a7e0a179da518e2be01c4dd7f4759eceb3cbbd732be3d75", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766812170, "uuid": "f13de7cb-477e-49a0-afea-0fe5066e43e7", "value": "T151764907ECA159E9C0AED6318A729253BB717C484B3123D32B50F7282F77BD06AB9754", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766812170, "uuid": "2bc12e0d-bab4-4990-b5ed-8dd0626457b8", "value": "98304:+da5dtRQEyuY80zLtGxHUBUgfTBtknrEp:+EDZyb80zkHUqePJp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766812170, "uuid": "7cc8cd3e-5b10-406f-b036-cc6b4ce9c2da", "value": 7737492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766812170, "uuid": "ae5815a5-489a-4180-9d17-8a269faf986e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766812170, "uuid": "94c49d53-63b4-4c99-b143-60f9e02ccc36", "value": "int_driver", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeca354c-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793898, "uuid": "13cfa533-dea6-4885-a621-badd415df1ff", "comment": "Malware payload (Mirai)", "value": "bbc4b84d0e4126659947c9bd2614cf50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793898, "uuid": "cec0593e-4400-4c9d-9900-1bf5431ddfdd", "comment": "Malware payload (Mirai)", "value": "696262aae78c381073e4b76022ee5065ee144c69b380f3c408aaf6fc4be057d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793898, "uuid": "cf15b119-1c1c-4c2d-8c37-68823151edc8", "comment": "Malware payload (Mirai)", "value": "cd63b530bf42df539d342f3c57e5c62670799592", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793898, "uuid": "a9deaf1c-cdb7-4a32-ad58-aa1f029a1ba6", "comment": "Malware payload (Mirai)", "value": "05491abdba12a3d1010ac6f2a22c01f41e8438cd020e81bc2a10f36c70d98888f1f68b83f1d61294ddcf52afa772f8f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793898, "uuid": "bca08c7b-24ce-409e-a1f3-248489ae90c4", "value": "T16EA3C64ABB650FF7D86FDD3706A91B44258C560721E93B3A3A74D818F64B24F0AE3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793898, "uuid": "fce1f46b-b83b-478b-837d-d5b5cd39a9a6", "value": "1536:s146ASD/5lI/Tbf9ltn279Lj7vRMUkPA8S8Aalki+nPpNX5HdibVRZ:sO6N/5K/TZ+LqpElHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793898, "uuid": "ca9128ff-b8ec-4279-88b8-54d67663ec1f", "value": 101208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793898, "uuid": "c2c7ea7b-6321-40b8-b2a6-e9da3cd16aeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793898, "uuid": "672d419f-a66a-4314-a7e9-c982ba9d3618", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbc7f7ff-e359-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863606, "uuid": "9664e9d2-5e95-4d29-a321-f4791fe78a8b", "comment": "Malware payload (Mirai)", "value": "586ad66ba65bf3c4bc977d3139a0905e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863606, "uuid": "42614d3f-f62b-424a-8dd9-854e09252022", "comment": "Malware payload (Mirai)", "value": "69a6d46c416d0f23deea13e94704a5c68715b83d96c38536ac77c875c903df5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863606, "uuid": "ddcc6975-2795-4bee-88bf-90de219a253d", "comment": "Malware payload (Mirai)", "value": "58cc7f2a8f9c6b83ab069a3d241318011621841b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863606, "uuid": "b74a6084-f8c7-47bd-8bcf-c75e792b1f9d", "comment": "Malware payload (Mirai)", "value": "7612d6332a45b9954461e2cc2703db65c43a07195a23b3426bf5378c96bd04c3b56d1bb80f2f71423c546afce6509caf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863606, "uuid": "523080ad-54dd-40f1-8cdf-05a06efa3dc1", "value": "T170635BC69A03D8F5ED19067460B3F7365B32F5395068EA87E794E933BC52A01BA0638C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863606, "uuid": "32635523-0d58-4fc4-8e05-b34f81da0442", "value": "1536:Dzy0mANY4rb/gw1jAFKzv2PIb6jwsM+cabCaHGwa54HbEYRTHRR:3yPYY4rbg2AF9PIbywmcaOam/W7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863606, "uuid": "2e0e1042-48ed-4cb8-9692-8830659c5920", "value": 70608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863606, "uuid": "72a47d57-93f9-4c72-a307-f50f05910bcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863606, "uuid": "d47d5aa2-e855-48fd-b5a2-a9b13d8a5703", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99970733-e350-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766859576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859576, "uuid": "1928d741-05b1-4ccc-ae25-2eef986668c6", "comment": "Malware payload", "value": "c23e35e9e45da365b48aa0a80ecaa41c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859576, "uuid": "a8228fb4-4b27-4f96-852d-0587cc0ce157", "comment": "Malware payload", "value": "69cd8c85a6d85627ca1314be5c24da2d0cc36d45722161cfe549e01518a97b10", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859576, "uuid": "3a854c7b-861f-48c1-ae5d-6bea14148896", "comment": "Malware payload", "value": "187deaed1fbb32d6e882a0be6c46f0e9195dba91", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859576, "uuid": "fbd6f67f-7d21-4a08-8090-573a8fa0402d", "comment": "Malware payload", "value": "ff8a4c4cda9d6aebbd8020a7c5d32c54c2cc160dbcaa8af9aa5d2d66f74a246849513e2f2aa9631fb0f699a9857d7060", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859576, "uuid": "76b41342-0cba-4439-9b5c-68a59f974c51", "value": "T12AD10DF2B48512BDDD9FC83A915529BD108AAACB268A5D64CBED34767C89FCC1C40DC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859576, "uuid": "3df69add-b34d-4bdc-ab59-2f35b0fca0cd", "value": "192:in3mBZiOBqmNp83fuC12aMk7soAgnAUPPOZxPPOZxYofI8pNwDTKGpi+8Ur8YlxG:in3mBZiOBqmNp83fuC12aMk7soAgnAUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859576, "uuid": "fa129842-5241-4963-b55b-fd6a6e66fd8a", "value": 6359, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859576, "uuid": "914513f7-f94f-4146-b15c-0f92a9bb4abf", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859576, "uuid": "40852754-3d7e-4b66-9d00-1f1fa150600c", "value": "1.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3e9ec29-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873766, "uuid": "db2157f4-74e7-437a-87e5-1d64f8e4b0db", "comment": "Malware payload (Mirai)", "value": "7c91786f2e9cd0d02f18bd7de23f4f2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873766, "uuid": "36074afa-55b1-4580-9fc3-b45e16864b98", "comment": "Malware payload (Mirai)", "value": "69e96ebc8d42a9eab8aeaa8a6a38afcab161e05db93812ede92121aea705cb42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873766, "uuid": "52eeda91-c95b-435c-b3a8-ecffa4c89edb", "comment": "Malware payload (Mirai)", "value": "d28f9e5f0983ac625c0d57ada2df507c3df209c5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873766, "uuid": "5a572ad3-53ea-42fc-89c6-47597b912947", "comment": "Malware payload (Mirai)", "value": "3147c8912e68c00c548fb90739500c8a1744b9dfd4f6682a5ebdeda0a888179e061cc94fa78758115506a27b5e3301b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873766, "uuid": "7ccb59e5-4cec-4bd2-9b4b-4dcbb0d31e49", "value": "T12513F1FC85897C7AC99E983CB2CC03A58D4A70E17316BB4D3B1249E89626F097685CB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873766, "uuid": "60b16109-9ab0-42eb-8d8c-25b97d1fb5f8", "value": "768:Lor57qeg/SYn+yZf5eEbgsq34zRL3MgWamdP9fGkjVb7WzkQchNXsWg:o5eeQxnBv1zBMD9fGgg2+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873766, "uuid": "a17e6b51-0d76-4ac2-9bf8-c7fd67453821", "value": 43064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873766, "uuid": "9c0033c4-7fe5-4bd5-b762-e85a316c7755", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873766, "uuid": "dd5abd83-2ae4-4a54-9970-a6011d73eb6e", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caff8917-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830453, "uuid": "1d2dd40e-50c3-42b3-af59-acccaf9898a4", "comment": "Malware payload", "value": "af5122f792fdd6dbb47a7a74899b8d70", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830453, "uuid": "1e4e5e5b-3cd2-4ad4-a41b-c2aef8e135eb", "comment": "Malware payload", "value": "69e9de47b6689b4b8280f08deb7a2d77cd676d471534ebf9ff3d19b7827e72eb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830453, "uuid": "3cd165da-f307-45a3-8acb-d53d2b83f609", "comment": "Malware payload", "value": "e93fceedd28d14376216d9f34ceef47bf99945a6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830453, "uuid": "fa9e503e-fe37-4c54-9054-c6071374b1ed", "comment": "Malware payload", "value": "12fe6adbafa026286ee212af4b8dabc90e19ea13b49909bbf99a67815f5ea5ace07fa8a1f284b25584afddb0c312a241", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830453, "uuid": "94a3dc44-d7ad-4920-833a-bba6813a012a", "value": "T1E5632C3B2C5851CC071FDA6F15BAA8491D2B010D1BB2E8F67132FB565D2FEC8A64E1C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830453, "uuid": "06b3b3c0-de02-4849-992d-79c9e83aba89", "value": "768:I8w/h62/jWs6oS+xISN0vtO2O5OSOOOEVOYVODwO2OIOHOdOiOfOSOkvO5OuVOtZ:I9l/AoSSMTkpusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830453, "uuid": "17a35c6a-1211-47a6-aee9-93bfda31f6d5", "value": 71534, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830453, "uuid": "3b14349b-6188-4f99-9ec8-747e22755baa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830453, "uuid": "2b3108c9-b69d-456c-97c5-37148bd0d734", "value": "invoice-1645080830.pdf (94).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1225f751-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825418, "uuid": "fb5dbff5-740d-40b3-80b9-ca3459b2daa2", "comment": "Malware payload", "value": "d8136dc43d5afbabe3d6770d8f725155", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825418, "uuid": "1645426e-4ece-47e2-b8df-4d09e2d80e71", "comment": "Malware payload", "value": "6a170ca08a396a7cc71acdef50d344b2568e3d8ede2345cf430c36d4081502f7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825418, "uuid": "7b737563-8734-4e52-ab3d-00c0fded016e", "comment": "Malware payload", "value": "d07db5488834362417b1cbea801f175bc067aeae", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825418, "uuid": "ff763259-595b-4f61-b3ee-4a195091e44b", "comment": "Malware payload", "value": "d7615a7fedfeb8591a354ce524d81432c42e504a8373f97caf2167117e439e253e06827e6d7b2bbf12bfde0cbc717ec9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825418, "uuid": "035ad107-3005-4aaa-820e-69b7abc2513e", "value": "T10F732B2FEB764F5C6A844E62EDEEE35091B538FD0E83090C25DF24DB91E3A568C55B08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825418, "uuid": "199c1a28-0744-47b3-8f34-fe9edf78c8ea", "value": "768:I8w/h62/jWs6oS+xISN0vfNRimimvxsCC5dMvLUCXCP9sl5VJ6jA6si844qBZxJM:I9l/AoSSM4xusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825418, "uuid": "19969f51-f53b-4c92-b788-02f7b03c2a39", "value": 74407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825418, "uuid": "aca9b9eb-b4de-422b-bb1e-e978df9cd698", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825418, "uuid": "247c0780-ff34-444f-88ae-79d841e19f28", "value": "invoice-1645080830.pdf (62).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a67e5afe-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873771, "uuid": "2749bffa-55c0-4c7c-9138-597f5f86f34e", "comment": "Malware payload (Mirai)", "value": "35cf944275deac095a2becab08fd080e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873771, "uuid": "9d13e659-6a70-441c-a237-ab6c1ec5ca1f", "comment": "Malware payload (Mirai)", "value": "6a69c6f5f9ed7d886f5888e30f474579a63fbc3b4655c8e0d03e9fb941af04fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873771, "uuid": "350d947f-db82-4310-a066-bfbbdf2600e7", "comment": "Malware payload (Mirai)", "value": "adc0c128a84c319e1c6a1b83b9bf21d0d18d5fdf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873771, "uuid": "c8642b8d-aa62-4953-a536-fdf725482426", "comment": "Malware payload (Mirai)", "value": "d001b7a55b21612a50bb811c0efcac84468eb68d02c8d5629a61b2a9eb4f11cc751faf0c3a57bd8cbdd5ab468ec996bf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873771, "uuid": "daf965a7-d2b6-4e15-bea1-ee85dd8bf5a0", "value": "T1226302135492D8B4CB2C2439CDCC8B8739BF1734B3FB1A4B12244E618CF66619E7565E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873771, "uuid": "b7d00682-1bbc-46bc-9149-b3d1db8b13c6", "value": "1536:S6LFk5Z0WMKrlHrKABKMZUlkzNDalMdjX2aKLuj1yduIEdx/uWp:HF408Ku/HJDalLPLuj1bIox/Dp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873771, "uuid": "1b9b6726-205b-4a30-ac44-0758dbff723b", "value": 67508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873771, "uuid": "4b89bfe3-4653-4966-915b-c00b92019ff3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873771, "uuid": "18123bb3-4bcd-41a8-aaa1-23aa491336dc", "value": "ub8ehJSePAfc9FYqZIT6.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1de78d14-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858080, "uuid": "e747c12b-385a-4d4a-96d1-df6acad659fb", "comment": "Malware payload (Mirai)", "value": "f56516f1789394bf3bcd8e2b6425d41a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858080, "uuid": "7a136fba-397d-47fc-9ecc-89498eb5df8f", "comment": "Malware payload (Mirai)", "value": "6b08ab7abc3d9d8806bb162a6153fc614d6a1595bc97ed17fdbc729bb105db88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858080, "uuid": "f1d35911-4876-4782-a064-97c1432ab06a", "comment": "Malware payload (Mirai)", "value": "e4e71ae40404be12bfbacf6bf26e9eef8800a851", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858080, "uuid": "86637928-5931-4376-89e2-f9e991d5cd8e", "comment": "Malware payload (Mirai)", "value": "e26f8fdaab9f1ca930ba75e735d2ed1e70bc2b653a10eac57e2aff6fff4d297ff56c666fd8d0c914cac046d9a9dd6952", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858080, "uuid": "2eebfdc3-1a1d-4d69-b3ca-bb1c4bb03b0a", "value": "T1FA830796B8818B12C6D552BAFE1E51CD33131778E3EF72139D106F256B8B86B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858080, "uuid": "151d68e7-0f51-4fd8-95a6-94cd20f8d154", "value": "1536:ignBkNANiseWDzcrqY6wsSWNFF4BgVFtcXjet3AMui6xBOF3vC3U77RYnbVR:YKN5Dz7YQSMFkeFSX9xBOF3v6UnRW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858080, "uuid": "c10a327d-3472-4f3a-8fc0-913a54696985", "value": 87472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858080, "uuid": "1ad2fa38-6b12-49a0-8030-78640b4146ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858080, "uuid": "2d32f409-ce98-415f-8a5a-267fa0c3dac5", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "003fe31c-e346-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766855023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855023, "uuid": "7ad30d14-5a43-495d-ad4a-06bb062a4ce7", "comment": "Malware payload", "value": "efadcaefed2f0e762f8bb6672331dcfe", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855023, "uuid": "50d69080-278f-470c-ab34-c1b8d99efaf5", "comment": "Malware payload", "value": "6b57d0d5a0edb65953ac2fafd042fd6aea9a87a8aad906ce7489aa1e8a308d26", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855023, "uuid": "7868f29b-55ec-409e-b775-5d8ab9835050", "comment": "Malware payload", "value": "b10012768e12c60a9c0653f0ad4710abf289f023", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855023, "uuid": "7b436f43-986d-4f05-a80c-041ccf2248a7", "comment": "Malware payload", "value": "8a40b5eeeb7d7e49debfe86e4911361b78a4d26c25babff5464a33bc5ddeb427161281e13e7c7650fd05ad9ad049dfd7", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855023, "uuid": "99e741cc-8b2e-4cb1-8e18-449ade2743e9", "value": "T1F167333B922A6E28CC197877451C73D1390B2DEAE219CA33DF213AA1DFD67E4570D462", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855023, "uuid": "3919a054-8347-4af8-a135-584f543d89c5", "value": "786432:TZw2bvJvKMjoFbL2jyfdKjQkF2H3Ytrf9ZHrYtBvgcepSoNc78:TZw2rJYhsyfdsQkFSojctBRySo+I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855023, "uuid": "6a6e0be2-065c-4fde-878c-ad21f382ee14", "value": 32642502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855023, "uuid": "e7f1493a-78b1-4250-86da-01a6cf612e86", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855023, "uuid": "fe9c1772-7134-4e51-9cc4-5bf2eeea081c", "value": "Wallstreet_campaign_overview_B8H628686.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ede81c8-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825466, "uuid": "be0a9c27-8700-4893-99f7-66f9c81c0879", "comment": "Malware payload", "value": "caef1eb8602b0e01082f15fc1098071a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825466, "uuid": "d4fb8aa4-a82d-4e67-951a-1f833a46acb4", "comment": "Malware payload", "value": "6b6343167551c60ced6000a0aa00945ef782f6e02edc0e54916740b7343a0935", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825466, "uuid": "a6fa0bb8-ce55-4b8e-8ed3-6c6783b23ab6", "comment": "Malware payload", "value": "0942ffc1a8effc20536c138ff9b781f113905d7e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825466, "uuid": "da265325-c2b6-4804-a91c-c3f5a6c064b0", "comment": "Malware payload", "value": "cb82bb9da4a4e8a8ac55b22a5c1c2ada8c2b180398f4b508aca85760db12f4660c7e6b4718bcd47c1dbd36a79719e871", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825466, "uuid": "4977b214-4d5d-49c3-86bf-4833b10da926", "value": "T169732C2BC764B4DAA16E3011DE0F3548DE68210CB6B25952D1AC336CEEE1FB52C7ED85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825466, "uuid": "b5bb1758-3ef0-4c51-95a1-9e5a94ceb517", "value": "768:I8w/h62/jWs6oS+xISN0vC7bCAvdkfScBYrwz2y8kTAlGB:I9l/AoSSMk3usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825466, "uuid": "1ce4066d-a558-4e63-8cf1-bf1567b63e47", "value": 73471, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825466, "uuid": "14c0feb8-5bd7-49c2-9f6b-6a382aea87b9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825466, "uuid": "eff6dd52-b286-4bc5-87c2-8f770754c4f0", "value": "invoice-1645080830.pdf (52).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64572f6a-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860775, "uuid": "0cbb259f-7890-492b-a08c-44d69eb2b465", "comment": "Malware payload (Mirai)", "value": "a03cf870a087fc857d38998dbc18c985", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860775, "uuid": "6457af9a-2143-4181-873d-4ee6a84c57d7", "comment": "Malware payload (Mirai)", "value": "6b9951f3306ad261daf0a77a357ce5f3c445ae7b5b28df83443f65e747e83011", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860775, "uuid": "3d50d255-4a42-4566-b603-80d45fc82bb0", "comment": "Malware payload (Mirai)", "value": "40bcbb980b6fb90ec595aaff44100559193f4c86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860775, "uuid": "f4a26fc2-486a-476e-bc64-4b6a90377ec4", "comment": "Malware payload (Mirai)", "value": "836d6dfb22ff0accc7a910fac510a82a3f8453fddea1a0f7463cf1aab0bf8faf41a532db165cf11da8aab9a39d0e98a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860775, "uuid": "b6cc088e-6677-4e6c-8233-26e51b441f0b", "value": "T1DF03F1B2C1BE1A44E981423CAB5AB0CD5C44E52C04DECF61AB58B1B7ED11F1C2E2CA91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860775, "uuid": "18a1cf75-4d4c-4cd6-b036-e9f696176c2a", "value": "768:i4qDeXKzCBdI3mxnFyHamS28molRR2xShpYobnukO+NnbcuyD7UHQRjM:YDSFPI2pJOovR2slbukOWnouy8HyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860775, "uuid": "1f203715-7b6b-40e3-a8fa-e10bb1828113", "value": 41032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860775, "uuid": "7f1a8006-66b3-4c13-8290-94ca346c01f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860775, "uuid": "425da598-f2e7-4a18-a24f-3a8820cc494b", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac0f93ad-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854882, "uuid": "41d8f475-5abc-4438-9256-42b5b20c62ec", "comment": "Malware payload", "value": "f4f85d9c79fd9955fd1f6f3a5b85f335", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854882, "uuid": "3f59142b-97be-485d-8e2d-6158f5814401", "comment": "Malware payload", "value": "6c25bf14888081422969275c57d3f40f3426b957e40e1316ba4a356b71a49ba3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854882, "uuid": "091297ed-67dc-409f-bb76-9737df2853d9", "comment": "Malware payload", "value": "66da6b3d7d15c49704a790cd331146e1f65f66b0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854882, "uuid": "d8306bc2-9f74-4a13-b0c6-d9084921ae24", "comment": "Malware payload", "value": "01291b15f9bbb77cc98dc9b02ce771e3aed9d9b8fb2724edd48e8151085f53163cb25e103304114514d15a877d8049af", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854882, "uuid": "f58832e1-0dd8-4d61-b342-23baae0acd40", "value": "T1957309EA3E241E6D394C4144B9DD14F2B86566F3F4F223AC2D330FA55BCB752A3096A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854882, "uuid": "0ff9ae66-3d7d-41c6-8845-2e61c72a49c8", "value": "1536:I9l/AoSSM0FgFMkFdF6FaFMtF2FJFsFEFUFwFqF4FEFnF0FGFqFWFnFjFOFVFjFw:I9l/5M0FgF5FdF6FaF4F2FJFsFEFUFwM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854882, "uuid": "134d038b-47dc-4d0e-8d6b-2c432f3b7eb0", "value": 73412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854882, "uuid": "5057283c-c2e0-4ca4-b424-7ec1ffcb0997", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854882, "uuid": "0f3da016-09ae-418f-9ff5-7fb1b04bd741", "value": "invoice-1645080830.pdf (20).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f0eb75-e2c1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798319, "uuid": "3e205b30-7d69-4da5-ac5a-90365ec02c22", "comment": "Malware payload (Mirai)", "value": "a7bba49fdc20a9c441caa8e733693123", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798319, "uuid": "2fb9c41d-7a23-4b0a-b401-3a784bebb12f", "comment": "Malware payload (Mirai)", "value": "6c8bae9bfd49c260f05b6ce84c021eb2c4600ef73daeccf0e92b7eeb08bf5c2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798319, "uuid": "7f4bc491-a817-4ce9-8379-d3143ea4509f", "comment": "Malware payload (Mirai)", "value": "2ba5c8b98982b6c1048f65c1c306eeab50d45788", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798319, "uuid": "ad962562-aaf8-49d5-b230-8e1af294cc71", "comment": "Malware payload (Mirai)", "value": "1ab5cec4de1e5be361c8758c5131a8d7d97ae6ffef1b360fd7ca99af7f6eb86ebcf9e78c4154740122a54f31ffe0da2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798319, "uuid": "a843afea-3729-4d2c-a9db-517e2f8c309d", "value": "T123335CCD9B4FD6F6ED2E047110BBAB725B32E5350068EE83D758A431A957502B24A3EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798319, "uuid": "d56cacae-5864-4f65-8f23-6500893fdb94", "value": "1536:j9WsQz1jTz1jnzaI2MiZsdeHixmchSVRR:j9Ws8TzNV2rZ+IeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798319, "uuid": "8a822c9f-2acb-4646-83d4-fb7c7f94a3ae", "value": 50480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798319, "uuid": "c5018d83-bdd3-4297-9386-eaac3c87543b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798319, "uuid": "89b34d89-0444-4cb7-a3de-709e6cd15297", "value": "nabx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17f45bc3-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859358, "uuid": "493da7cf-acee-4e90-960b-ecd811e67984", "comment": "Malware payload (Mirai)", "value": "4f3801038dcfacd4f9cdc466c7d51faf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859358, "uuid": "21ee7fc3-01f9-4947-8053-b2fb01034cb5", "comment": "Malware payload (Mirai)", "value": "6c91291666150f69b683098b1e63cfebd72d6ff102b4017aea3ef000cd081c76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859358, "uuid": "42adb785-9dfa-4f43-8603-2fd33df63db1", "comment": "Malware payload (Mirai)", "value": "5c0f3714736e637cdfa140aeb71bc922808c7cfc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859358, "uuid": "abb212e4-969e-4b82-8fa6-3be591381add", "comment": "Malware payload (Mirai)", "value": "58290e96ff1e4dc74beef39dfa12e8389adec4a34b6c100187846b669056d005a0abc85ab4bd1f71f6640d57bb6c5fa1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859358, "uuid": "40e50727-7738-4130-9095-6c53e6f3d11d", "value": "T135731B86BC81D612C6D462BBFA5E81CC332653A8D2EF3207DD15AF25778A82F0D7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859358, "uuid": "fbb1b0c5-0b79-4217-a7a1-aade6b2d0e3a", "value": "1536:cQVnDv7bDfjM4kGLRG7yXhRrHizzr0DHE9k5ZP4bVR:cQVngXy872hpHizzrUSk5J4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859358, "uuid": "e52355d8-d27e-46d1-b617-d304e68a54af", "value": 79040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859358, "uuid": "1c6c8604-47f4-4bf8-80d4-d0bb37f4358f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859358, "uuid": "e9a4396f-e3b2-48f7-9e66-69e453864990", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c5ca6f8-e2c1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798082, "uuid": "c6f5161d-53be-43a2-8bcf-b8f597cc6ff4", "comment": "Malware payload (Mirai)", "value": "f54bec343e7567dbdc2de1dd8a39692d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798082, "uuid": "b8384512-f93d-42fc-9691-4fb2de3d44dd", "comment": "Malware payload (Mirai)", "value": "6cb6c9aca1f8649b94aac89ee19ef20543b6b98b93391c5cfd75728164b8f248", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798082, "uuid": "74de0c19-c9b8-44ea-973d-b25a1e1e9422", "comment": "Malware payload (Mirai)", "value": "ca557bd435f801194364b25f71c74204955fd6e5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798082, "uuid": "01e94948-eec2-4f9e-be8a-77d774c8991e", "comment": "Malware payload (Mirai)", "value": "2987cdb3e5ed9a366a63eb7897a434d1df91480ee7ac3cad5a61e4f6cb88b454530be5531c35fd699b3561c196724052", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798082, "uuid": "144f6640-c981-44bd-b7cb-f20ca5125122", "value": "T11F93C61A6F219FBDF759C33547B78A21A74823C237F1D281D66CE9005E6074E681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798082, "uuid": "e6c69559-361d-456d-a4c4-202ebabf6b1a", "value": "1536:LFQcrm6iM8tIWbMw+FimCajeayQeaauCY48iWI5bObVRC:ecrjiM8tI/FidY4KqbOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798082, "uuid": "f30b4933-434d-4911-9544-c70d6771b670", "value": 92980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798082, "uuid": "9f037a38-17b6-4454-aeda-7d2b2deb27f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798082, "uuid": "3df4e45f-9994-4141-b8e3-eae33334bb74", "value": "nklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89aa4e53-e323-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766840222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840222, "uuid": "af1d7172-d705-420c-a9e0-e6b3e99a077b", "comment": "Malware payload", "value": "5e4b8e7d2bf8d69c59f1fda814b90c1b", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840222, "uuid": "38c42c6d-6e6a-4062-89a3-0b47ae6aa2e2", "comment": "Malware payload", "value": "6cf93f947cf06fbf2d0ba1582efe22a2d2f9e6d8a5ebc6f3df1ed06b9c565d14", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840222, "uuid": "61a782db-b347-4473-9ff2-c2bcafa4c35c", "comment": "Malware payload", "value": "683cef442e10fcbc21ac77754e81beb8c69a3f63", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840222, "uuid": "8f0c52f6-a3f8-49e0-ac33-f779e93dd9da", "comment": "Malware payload", "value": "07240f888278549fbde5492a7bbe37dcc889b2112f65fb8cb309dd237303d49f54dcfe6ae7fb4ee927beee0267572ffb", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840222, "uuid": "fdc6ee2f-2dce-4f6f-b185-3dc026e5cf36", "value": "T130E1C796ACF324087417905DCBBFA25870599057874ACD9CFECCA5A8DF4C2A45622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840222, "uuid": "23d1dfe3-efd8-4b47-8a60-d184efb172fd", "value": "192:OZSIE/CTK/e+T0llHYoHsfOBro2Tc/OQSmy:OC/2YoHsfO2/u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766840222, "uuid": "435d38ea-9fd7-4aa5-af4e-537b7fc82729", "value": 7372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766840222, "uuid": "4af84321-8209-4907-a570-9b4b2f479d95", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840222, "uuid": "0ce889a9-7d60-4de4-ace6-1d7b194f716f", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb7dd217-e325-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766841164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766841164, "uuid": "c3018836-f2dc-4646-a6c0-31d044696259", "comment": "Malware payload", "value": "8c40cdb43248e6e606cc217c0781d29d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766841164, "uuid": "d4f47414-e3ca-4d21-93a8-769b82e88c7b", "comment": "Malware payload", "value": "6d3cefad47797c012416bb91c58a41b5f18b75bbb00722e5efee9756b984084b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766841164, "uuid": "bb35c380-249e-4e3f-9d79-25d766138192", "comment": "Malware payload", "value": "b11b3c5d43180c13039ece6654ed340207c40a03", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766841164, "uuid": "61099662-72ee-47a3-9f4f-06a9f303ab88", "comment": "Malware payload", "value": "ddfca96a28f78680fc74c327e3e763a4aa29089806a4aa8d70f7d73b62d0152bfaf86d985153051305898cf7537d7c81", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766841164, "uuid": "8923c5ca-17fb-44ad-8241-b62fa9b31d60", "value": "T15312848871C222F734AF4506F1AB827C690882E8E1678AB7F9C664F77E785CC705D647", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766841164, "uuid": "78334104-d51e-4d87-8816-c764826f10ad", "value": "96:Ax0iRoLngDNSVz35buR/ZrIYfMfNVVSSDqtDZ/8knwTJxjAAb1qX1747B1FCCj6T:g0goLngc2Cof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766841164, "uuid": "068324c0-cc56-407a-b204-b1984c606406", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766841164, "uuid": "19953603-4c58-422e-81bd-cdb84154a04e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766841164, "uuid": "17b3674e-57dc-4866-b7fc-7000ac440fae", "value": "rondo.aqu.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8f2d518-e352-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860541, "uuid": "c13581a6-c2ef-42b1-8da8-7d4e9ad92c15", "comment": "Malware payload (Mirai)", "value": "da029b89d77867c5669b8b7071d56522", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860541, "uuid": "8260f390-1225-41a8-8b0b-58e66310df47", "comment": "Malware payload (Mirai)", "value": "6d799638ca6ac2783b1405f317dfea4ec0c5cafdd012e01f87aad511d8ee7be0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860541, "uuid": "232d56a3-cbf5-4097-b84a-350bf47d9eb1", "comment": "Malware payload (Mirai)", "value": "2bccdf6572cc31639bcf2e5706d361c1898e8beb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860541, "uuid": "93ad13f4-48d4-40f3-91b4-ad445bbf35ba", "comment": "Malware payload (Mirai)", "value": "36970509e16a1c864e9ae2051d98b5824857ffa99dca401c2b582cf5b5167b021c01cb4d5cd86e2f7f3407655ed3724a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860541, "uuid": "9182871b-b397-4e24-a047-8dd45bb2cbab", "value": "T14E342946EA418E13C0D627B9F69F42453333A765D3E77306A928AFB43F8675E0E23605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860541, "uuid": "4868ee42-8766-4318-a4d5-7a008bf2dda3", "value": "6144:oyJMQcZiI3EOg9ZzPbIasVaPD7oW9h5a3OP8OiM/RG9mb2SgiUvP:RJMQcZiAgzPbIasVaPD7BeDOr/I9mbDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860541, "uuid": "922338f9-2a51-4ef4-8303-5d7d729be2e8", "value": 230749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860541, "uuid": "741b5827-fe1e-43f1-a3c6-8bd03c37eb8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860541, "uuid": "45a05674-9e06-4b11-a71d-00855a3c9a86", "value": "yamaha.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d67d1b86-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766870415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870415, "uuid": "0e0d2e83-724f-4e78-a9b8-269e16471b6c", "comment": "Malware payload (QuasarRAT)", "value": "40f6bbdaab42517831ec9d12b372a0ad", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870415, "uuid": "6f8e0f19-b380-45f7-af16-1f194acb94c1", "comment": "Malware payload (QuasarRAT)", "value": "6dc24b1d87d8e1ae1bacc45fb297e60bbd64a179e2a62ff9be6a0456f5d9687f", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870415, "uuid": "610f7ce3-0349-4100-9caa-373a8f308b64", "comment": "Malware payload (QuasarRAT)", "value": "03010b51a1b01820f37486abc21c5f1a75382686", "object_relation": "sha1", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870415, "uuid": "45212a3b-c68d-4d9b-bebc-c1cc63f2cb04", "comment": "Malware payload (QuasarRAT)", "value": "99f4c5a52f6641771d6abdc237c6930f9bad28f5cfb03793bf0f9413be1c8d6026f9f51443e4fea8d80817d9e538fad7", "object_relation": "sha3-384", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870415, "uuid": "b9ce8bd7-9f27-456d-95a8-4aeeb212d0fa", "value": "T109E56B143BF85E27E1BFE677A5B0041267F0FC1AB363EB0B6581677A1C53B5098026A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870415, "uuid": "7e2ac579-691c-4178-b890-a21160b4721a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870415, "uuid": "edc4c3a3-7f6e-49b0-bc1e-9870ebad1dc5", "value": "49152:NvB+j2teai5mmP3lhsFQawoSgG0KRJ6ebR3LoGd6QuTHHB72eh2NT:Nvoj2teai5mmP3lhsFhwoSgG0KRJ6Yq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870415, "uuid": "471748af-c333-4b6b-9159-e4f5b5e226ca", "value": 3266560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870415, "uuid": "3de0d56b-0e4a-469b-96f9-d68f12720d0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870415, "uuid": "b6d8d4d7-fac8-495a-9456-98a6c4fd5c46", "value": "Discord.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23a49ee6-e2ce-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766803543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766803543, "uuid": "f704d3ee-91f6-429f-9369-e7a674930f8e", "comment": "Malware payload (Mirai)", "value": "13ffa861d725d37c5b186ceed8ba83f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766803543, "uuid": "80854c83-6c5c-4d3b-af45-002f4808bac0", "comment": "Malware payload (Mirai)", "value": "6e3131a8cc91c2b34bed30ceb7ff3544a6ed824892cf5d8451408c8ec1e94ed0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766803543, "uuid": "503e005b-5a5b-421d-8fdf-d735d5421640", "comment": "Malware payload (Mirai)", "value": "4da4b65bee9a8aae6022b19e99c01498f1704aef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766803543, "uuid": "c6f59f15-6f96-4f1e-ace4-c7c959e9e6e6", "comment": "Malware payload (Mirai)", "value": "c106bfa738e4c1919b949163564a75ec1ab32bae3d45de6b8f7b1ae44ab9e80d6b27c036723344cc8dee2a512c0a3c50", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766803543, "uuid": "74af95d3-da81-4d72-8701-e3c7af4aedf2", "value": "T1A9438D37FC2B5D54D44846B0A0764EBB0B52B04882171EBE19BAEBA5506BCBCF1053FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766803543, "uuid": "29ab2931-9e22-4dab-a510-bbc19678803b", "value": "1536:vGGAiw3E2QEqOVu/lxZdKP/sAKBd+CzgZUVjW3ZW3ZW3m:tAiw3E2QOV4bEPSBd++VF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766803543, "uuid": "88fad63b-0bbd-481a-a396-9b4f33ca11c1", "value": 59604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766803543, "uuid": "474c5c4e-5fe4-4ba6-bb4c-6c07aaa21e53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766803543, "uuid": "4cb84c2f-9175-45c2-968a-e92c4a810d77", "value": "sdxkzX_UXA229x.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85a0b605-e34f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859113, "uuid": "d9016b67-a58d-42aa-a344-703e0b987a00", "comment": "Malware payload (Mirai)", "value": "0d4845197023889ad85608d3fab14293", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859113, "uuid": "8b915840-5ccc-471b-8bf0-e35a8dd731d8", "comment": "Malware payload (Mirai)", "value": "6e501a816214f3e80f28b8f308ecdfa1648001d54af6a88bcb153c47726c2462", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859113, "uuid": "078e9849-49b7-4d8e-a2a4-b45f5385205f", "comment": "Malware payload (Mirai)", "value": "0fe3d7402991c97f54214f80bdad317f18d683ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859113, "uuid": "fe2c81ec-37ef-4fa0-823b-6756050dc99e", "comment": "Malware payload (Mirai)", "value": "fde9ae944fcb32cd02abfb2e1044f8ec0f650a699c20d783cae58d3abbb0e6c0a032b51c3d7b8e1a6421e6823a158d6d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859113, "uuid": "ade5782a-57b5-4931-beec-d8bd04452565", "value": "T1747301DD86498F8EC0EE86F88BE8035144E45BBA7183BD6B7D45B747E6001EAB651CC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859113, "uuid": "2f844ed0-a9f8-4eac-95e1-f91885dfcf1b", "value": "1536:pnV0LK8N+GeunJiFv3X2p3J45irgPwbsghV1bt0wdMzEK4G1dW/KQsVJu8:cJ+3p3X+ugyH2btDd3O1Q/fsVQ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859113, "uuid": "8f8c2d28-e224-4c41-b374-cf268d86658f", "value": 74828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859113, "uuid": "adb32ad6-7f72-4246-a50a-cef26d092849", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859113, "uuid": "2440cb91-5b91-4409-abf0-e2fdc2c01417", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "550bd9eb-e358-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862897, "uuid": "f83fcf4c-df4c-4d48-886e-81590dc7c77d", "comment": "Malware payload (Mirai)", "value": "bd19e276eb9607db31d33c86c0ed2d55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862897, "uuid": "ff1e6519-7258-4c7c-838c-cacf6a9ab643", "comment": "Malware payload (Mirai)", "value": "6e8cd1e36e35b0c6225a6073edc659dc2cb15fac68b249572d3ec190bc48b948", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862897, "uuid": "4b52632c-eda7-48b2-902f-f52d684a00a0", "comment": "Malware payload (Mirai)", "value": "ec2c1e007d836e17eb3ce2059dc72799e6a2b9ff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862897, "uuid": "b6baa5c4-7d50-4356-b1c0-6ae682ca44e8", "comment": "Malware payload (Mirai)", "value": "f8135d7c24cfb3efbd61c61cc8192595102e2ad76a49a8d0b80e68fed033ecb7c1dc8a36998b9618b38c9b0f66002d75", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862897, "uuid": "825740a3-0ec8-4300-b4dc-ad77844bb379", "value": "T168E38CB3C835AF98C664C578B1359E782B53D42581571FBA69A6C2B240C7DCCF60A3F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862897, "uuid": "4ecb1ea8-1c99-43ca-9f02-547aea06f5fb", "value": "3072:ras+eYWA3FwWvu/LgQHSS9Ze49WxkDw1/VR:ryeYd3h0LgUSa7IxYw1/VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862897, "uuid": "91ac81c2-858c-416f-9cce-f5288855d924", "value": 147072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862897, "uuid": "cedd63cc-6444-4fb2-92af-fe106474ac4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862897, "uuid": "886e9cc2-ac8b-40fb-a414-6e0c18f85702", "value": "miraint.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "556eec20-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824672, "uuid": "ac4cdf1c-505c-4512-a9e6-d9c0b7bc9794", "comment": "Malware payload (Mirai)", "value": "b2bdf1f300adfbba7d76d9f64af8144d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824672, "uuid": "6d122b80-00c2-4527-93c3-9d86470bbdc2", "comment": "Malware payload (Mirai)", "value": "6ea49ca8376ff5ffb0ad9d495488d701c31eb84443e2caeac30fb5eee4019ef6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824672, "uuid": "20231996-5def-43ea-80bb-d9edded7be3d", "comment": "Malware payload (Mirai)", "value": "09ca40260f95a7d3e8d1d92a4ee0555b83d33ed8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824672, "uuid": "e9c89c33-5e88-41d0-a73f-ca2c64c61eb3", "comment": "Malware payload (Mirai)", "value": "2e6874f65b4161b175546d92ab44af71a4e93fa17d29c659a52359bdb007f1910800600f9d63bcd4382bc5b9610af155", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824672, "uuid": "4ea78582-616f-4dc6-a650-2ff01ba87579", "value": "T1C7B31A55B9819F12D4D221FAFEAE418833136BB8D3FA7112CD206F5027CA99B0F77652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824672, "uuid": "024bc600-68d8-4300-a6c2-8345328fdc88", "value": "3072:BtbG8ocyFfrEsE561Qa6NVz5UKJl5fezm8RY4zjx140u:BZG8ocyFf4uQa6NVz5DJbey8Xb40u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824672, "uuid": "15f06398-4f48-4bfc-9b60-f209a1816d2e", "value": 109200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824672, "uuid": "c4b97164-3f10-4a33-91b4-53ab40bc1688", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824672, "uuid": "ab4c7bd8-376e-477a-8627-743dbbc87a28", "value": "nova.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e127c6a6-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830920, "uuid": "339b6bed-9242-4b04-8cd4-7e96f14db787", "comment": "Malware payload", "value": "764689554062e00ca28c8573a082563e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830920, "uuid": "8e86554a-125f-459b-bd6b-b60cdf135a9e", "comment": "Malware payload", "value": "6ea99d382f5e083ead409c40bc0c7938feba9195d320b95cc1ea2df71ad37a35", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830920, "uuid": "14a2a2ef-a6ea-4de9-b53c-38f71f528273", "comment": "Malware payload", "value": "49caec5691edaa3bb5cbe3508ffb714f751bc339", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830920, "uuid": "87526c59-8193-412d-bd2d-3589301a8f1a", "comment": "Malware payload", "value": "0f972ca9010b931ddf48845e3ba7c8bd59881fd8c3e72d0c4d36ae2583b72dac26d2a9f497d672eaf8b886aac363b0f1", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830920, "uuid": "12823654-32b2-40a0-b9a4-901034eb5516", "value": "T1F7630A9D1EB9BFD45049FFFC1F2881C56F3A4835A92227E6D14A2361CC81B7294C92B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830920, "uuid": "28c1b1d0-d7da-4660-95bd-669feb60903d", "value": "768:I8w/h62/jWs6oS+xISN0vlQ+dI1IS3lGeGPKQsYoIOnanbRburVdPx/IX128Nasb:I9l/AoSSM7tsusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830920, "uuid": "352f326b-689f-494f-a7a8-ee4d6c72981d", "value": 70683, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830920, "uuid": "d237a450-3355-49c8-84ac-514c7d7c67da", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830920, "uuid": "f6ee03ea-df78-49ad-8cf7-b1adfa1ed164", "value": "invoice-1645080830.pdf (2).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1280a1e3-e338-11f0-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1766849041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849041, "uuid": "74140bb3-6fcd-4ffe-b921-ee424b359c00", "comment": "Malware payload (SalatStealer)", "value": "6e0e55b1c8e192a0ccf89837e8e704fb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849041, "uuid": "8f894de6-5a81-41bd-97cd-cdfdce9f9778", "comment": "Malware payload (SalatStealer)", "value": "6edae3ce00b1da08b837ebb3618830afd9d34dea2d63439c4755490f5947cd15", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849041, "uuid": "6183dbe5-2ae6-4c59-967b-3092bf08a15a", "comment": "Malware payload (SalatStealer)", "value": "5620a6181b0e1384d98075776b3a80b274f633c7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849041, "uuid": "65ff20cb-69ab-4c83-ae7b-5105a6fd7607", "comment": "Malware payload (SalatStealer)", "value": "848e21e9661c722d96adc09af0e266f1296257e016549d0b7b4dec6c4c9f707053f0a72acf3be7ee7d6a4bcb63c5fa63", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849041, "uuid": "602b056f-f9b3-4ce6-8382-9e665b02cb40", "value": "T10CF522241EC3EF0CD312DC7CA6F2E11DF6E997A18DA694C3AFA508458631EDC74C619A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849041, "uuid": "963e5146-d91f-49c8-95a4-682df0a46446", "value": "d59a4a699610169663a929d37c90be43", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849041, "uuid": "93815ac3-96a7-4dba-8b91-5365cc8116c7", "value": "49152:H4VPBXCtwRK0tJTjKuhMuq3kISCEQMxjDzb24ojnhqA3LwHk0+M5XO:YwwOuhWUIEfjL2ZjnhZ7aX+IXO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766849041, "uuid": "f338dc60-56cd-4357-ac6a-891954e62684", "value": 3588608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766849041, "uuid": "1fa07a79-cd7f-4f37-8e64-342616e2ed18", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849041, "uuid": "67f37c6d-d697-4452-9a23-79973ca3257b", "value": "AnarchistSnoser.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01cf0779-e37a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766877360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766877360, "uuid": "651ba49a-75af-4e5f-91ed-c654cc57fdf0", "comment": "Malware payload (Mirai)", "value": "9f63313eb8aa36ac78fed2f0b7481142", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766877360, "uuid": "c3ee4713-26a0-4289-b5b9-167c6397d10b", "comment": "Malware payload (Mirai)", "value": "6edf5cbc91aaef4c3611151bb211c8f03fa97dfa7d806592c2ef453164050d78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766877360, "uuid": "b76e5052-4fd4-4173-9dd8-5a3dc07b2ff5", "comment": "Malware payload (Mirai)", "value": "7f53cb2dcf74d7bc37ca29850c4130862b7f6f94", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766877360, "uuid": "8bbd7a62-c7f8-4a82-aa55-70b354d52d2f", "comment": "Malware payload (Mirai)", "value": "c5753cadfce65846d027856db2454045ce45cf646b30b175318faba2ee38e17bc395ddee406200113c692db405d043fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766877360, "uuid": "bc363456-a81d-4b23-8e5a-343569c72570", "value": "T13B732B85B881C727C6D556BBFA6E418C332663A8D2EF7207CD116F253B8A42B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766877360, "uuid": "c5433d20-75d2-4d34-ba93-667e7b4d35ad", "value": "1536:B1U5UhJQWrYP9awCTANMckV3e0VSOJwCfdb5vztuJ7R:B1U50dTgiVueN6wbJztuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766877360, "uuid": "d4d31824-c4f9-49fa-a129-9c8bad41891d", "value": 79436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766877360, "uuid": "aec1fade-80fe-4cd7-b7dc-fcaec4b89c16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766877360, "uuid": "b8f5fc05-8eb1-4404-b79b-78a67c06b72d", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39d316d0-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854691, "uuid": "f67b6d6a-6430-48e3-9704-1b587d1b067d", "comment": "Malware payload", "value": "31fc99a1795d45c2a0ec852989e1323b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854691, "uuid": "4ae252f1-59df-426d-aed2-a7ee12b9dd1a", "comment": "Malware payload", "value": "6f950038e4242d71140c6e827b798d1de0728bc762737d46b0c59398b1b5474b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854691, "uuid": "2c0f0c1e-ca48-4308-8e61-5c7bf54ff2bb", "comment": "Malware payload", "value": "7ca1d52e51b571b24974c058dffe9e2094034be2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854691, "uuid": "595fc8dd-ff64-42c5-b170-0bafb2e2aeb7", "comment": "Malware payload", "value": "af30e603944af4c7716266b125e3172f322a8f3e28d3caf2de08f22b1677558368cbf5f92eda14ec5ca152867db1e7e3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854691, "uuid": "3b207947-623c-432c-bb7e-489fe6fd7b52", "value": "T113631885E4D77B8D7F5AB27DD4041288034A4433962B2EC5E984B7206E2FCB79AC85F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854691, "uuid": "4e32c461-616b-4986-bb06-73fbe9a10b89", "value": "768:I8w/h62/jWs6oS+xISN0vB/6YzQYm6G1ykcUmWhywyEwy/rDEUGbs8bkuj2FbBjl:I9l/AoSSMSfuusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854691, "uuid": "b0197ced-989c-4f5e-8770-f46bfae3ee0c", "value": 71529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854691, "uuid": "994e8146-75ae-427a-b5e8-0e8435c19d6d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854691, "uuid": "e1425df6-a8c1-4c44-bc83-8a7ed9aaaf7b", "value": "invoice-1645080830.pdf (66).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74356228-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766879699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879699, "uuid": "3677221b-f995-4f70-b0a8-27bf77717cf7", "comment": "Malware payload", "value": "e13e3320624b20802c0a30cdf970d286", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879699, "uuid": "e00a6ad7-5391-4749-b725-848cb4b781d8", "comment": "Malware payload", "value": "6fbd2d67409163c7af894123ff2c7dda7db413ff389b8aa38db49d4613b8e74b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879699, "uuid": "d7d26373-620d-4430-b30c-d6f87b6d2789", "comment": "Malware payload", "value": "1be856a9b29ad7524d6cb80254b6a50cbfb1fe3d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879699, "uuid": "c0bd7785-175f-4c09-a58b-18b13539d04b", "comment": "Malware payload", "value": "9844263f8ec4117e311117e5c742d9779d68cc3a58cdf82a23e5a297534ab2c14d2f302b9c2e30384c2358c9c9203128", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879699, "uuid": "2e043d0c-64e2-4473-8b37-4a98f63ef1a3", "value": "T1DB732A45B841CA23C5D5667BFA6E42CD332623A8D2DF7307CD21AF257B8A42F0D6B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879699, "uuid": "9bfcbdcb-c462-4505-a7b1-9651256065ab", "value": "1536:KgYeOpnBiMcugK1BoJZPF04/+aQ+docaTVvbuJ7R:KgYeOvorW4/3Q+altbuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879699, "uuid": "4a04d828-d3b0-4657-9e00-d934c74c1a8b", "value": 74948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879699, "uuid": "28f6ff41-7031-4cf3-9200-7042e72115bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879699, "uuid": "0013d6ab-c663-4efb-b295-492af07a1ece", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9293ca0-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854877, "uuid": "d3769feb-e3e9-4f30-9d2f-0f1a06fab092", "comment": "Malware payload", "value": "23fc33c3573d0343874ba15c595e1ddb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854877, "uuid": "0549efff-6c81-4839-955a-2208e66a5470", "comment": "Malware payload", "value": "7005799111655ce2d8033622b272297db4a485a22d6203d04dfb3ff1290b5224", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854877, "uuid": "7753e16a-3566-4814-a44e-ee346a1d5f52", "comment": "Malware payload", "value": "a0f16e2a3a3cea31b099f2c996e3ebc75d3088d0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854877, "uuid": "922a36e7-e2bd-4122-b5cf-247e6799cb77", "comment": "Malware payload", "value": "e5c22c014b2adc5a990f9bb03e65b4ce212d9a21cfd13e3c0be95c54182fd60aea3884ab1bcf74e786a187f0d2f9b558", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854877, "uuid": "e7e42c0b-8efa-4678-be59-128549b422e9", "value": "T175632AD4EFA35D5FC331F7EB44968180649CE5A8D961D2FAA9484A970C2834B70F23F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854877, "uuid": "b61d877f-65dc-4e83-8b23-c506a97002ef", "value": "768:I8w/h62/jWs6oS+xISN0vGTxdNHdkfScBYrwz2y8kTAlGB:I9l/AoSSMK5usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854877, "uuid": "de129420-76f9-4093-8c28-3d50e12c395c", "value": 69622, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854877, "uuid": "a53673a8-4e49-409e-a2e2-d5fbc7c16ef8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854877, "uuid": "783f68b1-387b-4c77-a1a2-7d870bd81477", "value": "invoice-1645080830.pdf (19).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a61b2dda-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795602, "uuid": "68ce3b0f-fe08-4e67-b67e-34860cef2c4b", "comment": "Malware payload (Mirai)", "value": "08467667f4eb88be1798ba74c66e3ea3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795602, "uuid": "75a03dd2-dee6-44d5-aac0-d99a0871eea6", "comment": "Malware payload (Mirai)", "value": "70a8369263c3a76439b5ae4c41bf713731544764edff52d26ec83ef4ac1f2e76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795602, "uuid": "dd3fee3c-8d39-4e8d-bdd7-d6925e683886", "comment": "Malware payload (Mirai)", "value": "fc8ec5b2be8539513f42240b0f1d665e4423fdf4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795602, "uuid": "89e91fbb-25c2-43ed-930e-ed271094fb74", "comment": "Malware payload (Mirai)", "value": "aa968ebb9fe3647a836bca7b77cadda6ae1e22d50adfa3c5719df5506f7d3419ed963a06fa9e6d9cca641cef76b24c50", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795602, "uuid": "e46d9ed4-f6bb-4275-b36d-ab650dd23810", "value": "T173042A91BC516F62C5E623BBFB5E428D371513A8D2EF72078D226F203BC695B0E76241", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795602, "uuid": "9a3a38f2-d5ba-41ec-845b-c3b190d1e34d", "value": "3072:SfDsOiGZ0/pRkgm8ruGhF5UCj6+Voqnqn4Yh/KR+ulMrCK:SfG2+3qn4YhyR+24CK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795602, "uuid": "21b72509-2f98-4d34-a700-9bc4a2d0c36c", "value": 174476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795602, "uuid": "73d9c30a-26c7-4ad4-971d-9bcd3d4e7348", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795602, "uuid": "f236e73b-8d52-4350-93e0-3197e37f6f8e", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f426adc3-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825368, "uuid": "39b11b42-a309-4717-a49b-177cf3f23faf", "comment": "Malware payload", "value": "b4594d7f0d26e1a18d06f5fc1b711289", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825368, "uuid": "a7183597-e821-40b4-8828-dbcbb98d65c8", "comment": "Malware payload", "value": "7194757641be7bea03228bef91c34985766d93724d555ad342682910020b88fd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825368, "uuid": "3b86235e-81ae-426f-b041-741511812bbf", "comment": "Malware payload", "value": "f67d7697618675f6c1230fe0f89c8dbd470e05ce", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825368, "uuid": "21904e47-25d3-44b7-b573-2e429cffdd8e", "comment": "Malware payload", "value": "a8f171077b5c6cd611696ae45e5cd9f7de44919b7e4fe6fa66f23fbc4796de52202f2dd2350ff344706edb6e621c2ebd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825368, "uuid": "da138304-686f-49ba-95ea-302f99237e49", "value": "T1CE630D87E346B7670134FE78C4BCF6A991DAB352AA4A8ED7477A7FC28B0565F0107009", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825368, "uuid": "6a5c6f47-1659-47a3-91db-2f1032ddb0b6", "value": "768:I8w/h62/jWs6oS+xISN0vchYirlG+wAsBw9C+0CByB2MXVNQQOBqRGQMnoAt2axv:I9l/AoSSMDUlWusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825368, "uuid": "80050b43-903f-44ec-81d6-694c2e589a4f", "value": 72459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825368, "uuid": "c62f2510-e093-4f3e-a0bb-8bd1a142f9ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825368, "uuid": "ccb599e3-8b97-4bff-aec7-9cc6b640eb0e", "value": "invoice-1645080830.pdf (70).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2be00c2-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825715, "uuid": "8b36aa0d-c7a2-48c0-923a-843fb229fac2", "comment": "Malware payload", "value": "8fd837db243c6ea56ea39d2660a48cb0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825715, "uuid": "9eedd878-5204-495d-8779-0ad51534d324", "comment": "Malware payload", "value": "73ee1647b6acf293ade8c6987eba30eb488d2408275d30a98720e87fcb259a77", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825715, "uuid": "5c04fd1d-65e7-44c4-b477-54a704777433", "comment": "Malware payload", "value": "463a828a467caf4acfe4b6df67a3ceeabb375940", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825715, "uuid": "5a52b577-753a-4e55-98c6-1141cb76bab7", "comment": "Malware payload", "value": "088824159b4d74c1b52540bdfa84cd9073a0917e940a310dc3b4bec732c048ddce9eef5c79d5ab353027c17829349c82", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825715, "uuid": "788eee2d-ca95-4557-94f5-04a3ed9c3b7f", "value": "T1AA631BA2BFA27E8D826DDFBDD3D804E1492078711AF6472714CDB242729A8D17B04EE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825715, "uuid": "c21d039d-6124-4cf8-a7b5-00cab61f09a1", "value": "768:I8w/h62/jWs6oS+xISN0vxCnCxCRCQCfCQCfC9CcCzC8CuCFCWCpCJCnC1C3C9Cp:I9l/AoSSMGWusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825715, "uuid": "054b02f5-ed66-4b52-812d-d1ec53c4bf84", "value": 66841, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825715, "uuid": "a0248e36-759c-4c4c-acfc-b782747f216d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825715, "uuid": "c3246d40-2a60-4807-9d95-7cc9636fa5af", "value": "invoice-1645080830.pdf (3).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44ec6939-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825503, "uuid": "e79db794-a791-4eaa-a015-8fd56cb1716b", "comment": "Malware payload", "value": "ca67e1302ffa28ce37a17f6c2a2c5df4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825503, "uuid": "7a900ae0-8c6f-482b-9208-6e6ead6243bf", "comment": "Malware payload", "value": "74405a73e0b77dc217e242cc518b593e7051f3c99471f800fea5da06c29b4b12", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825503, "uuid": "2040be45-a20c-4588-8371-9346d1d254ce", "comment": "Malware payload", "value": "ba68735a4bad3175ca504e629c273aa3b45a9cc1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825503, "uuid": "11a37945-a076-4652-ab65-317522b66773", "comment": "Malware payload", "value": "0b83676bfb946b5482cd83efbec7025be4fa6f1435767bd80e2c796892db6db0ac9c15636b1eca675405ab63a6eaeb4e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825503, "uuid": "1c0b3dd1-fb35-4a21-b0c3-25db6f4688eb", "value": "T15B631A4A872F707F50DE129ADBAE661C6A8712DBDB008A93B0421C53F534F7FC1D994A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825503, "uuid": "94f81a64-07db-4bbf-8d53-6c6e246bca85", "value": "1536:I9l/AoSSMwMzye8e2efFbB/wrvgY33eQ3LEqOwRa2KOcoRKT8esAvAMbBHUQc6dm:I9l/5MpfusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825503, "uuid": "1c6757e6-a9fb-45cc-9bfa-bbcce5b3a88f", "value": 69622, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825503, "uuid": "ff846ef0-7dc1-4cb4-998d-6618a22bb4eb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825503, "uuid": "916ad570-92ff-414f-b948-8e49c386591e", "value": "invoice-1645080830.pdf (45).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe0c527-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854587, "uuid": "83c2aec0-d19f-4efa-9856-c590faf5ccd7", "comment": "Malware payload", "value": "3d211b608859682533131bb6a8caefb9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854587, "uuid": "7c1ce5aa-9a37-4943-8a4f-dbd36b5295c7", "comment": "Malware payload", "value": "7484ebfca0ff69a6cd4bec28a0d2af31b8d39ff1d9894f594e89870bc02a4901", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854587, "uuid": "9892aa6c-34b1-4a3d-9b5c-86da86bb87ba", "comment": "Malware payload", "value": "985aa9dab708044c420f585c30d12ed10275dad1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854587, "uuid": "165a822a-a545-4fea-89e2-63bb49ad9f0b", "comment": "Malware payload", "value": "de6b8c20bd53d3a49a7fe773c1bb0a559235e4432ce1266beb9686dd2861f8964e9d7da387e5822b962c173012d478ab", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854587, "uuid": "cf8a6e3d-e673-4867-b46b-ec3471d820f0", "value": "T12173F8D835127EDC464C98DC7B66CC9D5F5EA38164A8108CBF746931C60689B2F28FED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854587, "uuid": "8f3aff3c-b505-4a48-aab1-8e50c7b48c18", "value": "768:I8w/h62/jWs6oS+xISN0vpo3BGVtLzRdkfScBYrwz2y8kTAlGB:I9l/AoSSMhLLFusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854587, "uuid": "e71679d5-93a4-4e99-acd4-02c0828f9148", "value": 74340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854587, "uuid": "653bbdff-582f-432b-9227-367b623fc40a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854587, "uuid": "0c34e85a-dcc9-4122-84d2-5318df020688", "value": "invoice-1645080830.pdf (84).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b557de60-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873796, "uuid": "787da05c-2398-4a98-872d-8ad8c919d841", "comment": "Malware payload (Mirai)", "value": "ac2e9029e7ed38ff6f72b9f151ee7f88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873796, "uuid": "0cacb86a-f859-4dc9-89d4-aaa8a84e1af8", "comment": "Malware payload (Mirai)", "value": "75492eeca49d71afb0b42549de579e0cf4b1f37ef448ddc53e5268b4914f18c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873796, "uuid": "dfd23a54-62a5-43c5-99f7-e9a352fe4287", "comment": "Malware payload (Mirai)", "value": "2a021e66bf586029211eaf66d8878f6b8943621d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873796, "uuid": "56e8985d-1cb5-4fef-861d-6ecbfed64dce", "comment": "Malware payload (Mirai)", "value": "21485a1a53ddb91478538262c30f014b7b6ebbb68ad00154866f811871d0777a3a7b05f8cc9d1ed6c5af55d52f580a46", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873796, "uuid": "b4c8a76a-1f5f-47cd-b33a-79aca925e5af", "value": "T12F733A85F98782F6D45708304167FB3FDB31E8A910A1CB4AEF969F35DD33902A613689", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873796, "uuid": "09a9ad32-28b4-43f8-a6f1-840e9a8a5da8", "value": "1536:d7JLryH0OJHZe4MxlKH0Jy5UWQ8Rm3ylMx0pYIqlml2olp:d7J0HZezlKH0WpRm3yOx0rs4l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873796, "uuid": "05633b34-d769-4a41-976d-9263c43787d3", "value": 79312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873796, "uuid": "8ed68bf5-6618-4cc0-bb0a-3853f50b9229", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873796, "uuid": "30ccabc3-05a6-4dd7-b03b-0e39b360eef7", "value": "ub8ehJSePAfc9FYqZIT6.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "264a3662-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825452, "uuid": "3944cd02-964f-403e-910f-3f88c7aef60f", "comment": "Malware payload", "value": "e134f0b6eabe17939537a4272071ddac", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825452, "uuid": "727699ae-3d31-40da-bc06-6f1855a4bd23", "comment": "Malware payload", "value": "75647ae68c9d7b90b095051a99f7a6c1b8e4a3136a7b4904e22e01aae312bf99", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825452, "uuid": "78a3a7bf-f793-47b7-92ee-bfcbdecb7820", "comment": "Malware payload", "value": "1864031bded90d871f5b5ab273421a0aa7cee268", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825452, "uuid": "854ac39d-c06e-4601-9925-c31afaaa00a5", "comment": "Malware payload", "value": "33124f64663618eb681282760aaa3400b5fd91d52be80fccce696f6e7f37e2c69e799a6bf1b2b7e1eee8d622ee655390", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825452, "uuid": "0f1e9986-04b8-4530-8d86-5fe3b64c5aad", "value": "T10A731B8C7A30B9F81EC3C714E5279D852659566CDA6121FED7ABC4C0A03DCDA2F2ACD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825452, "uuid": "f7020396-7926-467a-885b-cb36334aa74b", "value": "768:I8w/h62/jWs6oS+xISN0vhSMx43BPVlskGfyZQ+fHPn25O/ROq3lC6FI1CTWLip4:I9l/AoSSMcI2usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825452, "uuid": "89c743e9-da51-4743-90f6-adc507c98839", "value": 73500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825452, "uuid": "b8afda85-f907-44a4-8788-f7017259201a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825452, "uuid": "8233b44f-42f7-420f-a0b3-d1ca9fbc698b", "value": "invoice-1645080830.pdf (55).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfadb673-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860069, "uuid": "4694bf49-21f0-49dc-a60d-841d604de5ff", "comment": "Malware payload (Mirai)", "value": "ac9d32208ca0aef6d4ff51f443680f72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860069, "uuid": "ae478003-2095-4132-bf3a-65b1e479320d", "comment": "Malware payload (Mirai)", "value": "7593d56402c1d9dcd60a74089eca31ed910846f0d799fc6548a5223baedeccba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860069, "uuid": "907dd863-f09e-4103-b2bb-01f3d4fc5d59", "comment": "Malware payload (Mirai)", "value": "28b1f70589c44218da41fa4bbca80ceac87f55dd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860069, "uuid": "1ae5f028-6560-4245-b5c2-4ab13b02cace", "comment": "Malware payload (Mirai)", "value": "a4367e06cf0e395c57b2e9f10a9baca270510ffad12e9b38d0d814f0a212ece9e060995265beecc950a5d9aa58ee5e11", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860069, "uuid": "94902348-7706-434d-afab-74fe23ca4efb", "value": "T126045BC7F800DDBDF80AE77744130909B130B7A154934B3B625B7D6BAD3A1DA192BE86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860069, "uuid": "362419ec-5545-406b-87f4-82a597972e50", "value": "3072:5os9Cn/13HirRzX283DiQMbfm+4tMTPmd7avvbVZjbipL+H0y9IoYfHW:W//JHi1iHO+4tMTmgvvWLjy9vYfHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860069, "uuid": "d2974e70-9760-484a-880d-62bdea2ce7ee", "value": 186944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860069, "uuid": "57b592a7-0465-471c-bcf9-0a07ddf55e92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860069, "uuid": "5d258870-0bff-4a6e-96c1-913a7e8f38b5", "value": "mirai.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "840d81b0-e35a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863835, "uuid": "076dcae6-5e8a-4b4e-91ce-515bb2e92cfa", "comment": "Malware payload (Mirai)", "value": "3a6f07c368dad6df25d0ac2dbbfd5508", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863835, "uuid": "ef159757-10ea-42cb-9e54-1b95e2ba52c4", "comment": "Malware payload (Mirai)", "value": "75b4ae426a1148145256c8666e1a762f2bd21bf3217d77d1cc66d0dcfabfa0d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863835, "uuid": "edf8044d-72f2-4758-a9e9-ff76361f2431", "comment": "Malware payload (Mirai)", "value": "b3adf6c0e91d106fb9344983f930e1519f948e7b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863835, "uuid": "d70a7650-ddfe-4028-b041-fe4acd6bdc17", "comment": "Malware payload (Mirai)", "value": "204697d4b1fcb0016d9eed22e8caa7601ff671495feca797ec3f1b25a05d3b3e7087cad8e15601267150f1720b2163aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863835, "uuid": "eb1fa296-7f04-4df3-bf68-f9b7a06ef9da", "value": "T1A2639E76C82A5D98C15C55B0B9F09E7B2B13B50092071FFB5E9AC5694043DACF60E3FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863835, "uuid": "540df359-a823-4cbb-8e53-23e9c52001b3", "value": "1536:7a2wtq+9m8CQdre3snh/b2VdiUPikPXCWGsj3pbVR:7tu90QNss5EPikPXvpjZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863835, "uuid": "dc984934-7a34-42f3-8966-17b155d1fe28", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863835, "uuid": "e21ea797-b658-4f29-a5bd-f74c8c9d4193", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863835, "uuid": "5b3ac685-1299-4c6d-a9c5-a80a862dddcd", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "252cd183-e373-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766874413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874413, "uuid": "e180f6f3-37ac-42cb-83b6-d8fec893c637", "comment": "Malware payload (QuasarRAT)", "value": "d7e9e9e32ba70b34ca47e0dc43fd293c", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874413, "uuid": "55d5b3d8-e04a-4a0c-a1bb-881085e021ad", "comment": "Malware payload (QuasarRAT)", "value": "75d68ed0a01b84f9e4f5482b8aacb690844f16341f92d844722d3f7e36497850", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874413, "uuid": "07276d97-afc2-448e-bbaf-9431c065de35", "comment": "Malware payload (QuasarRAT)", "value": "b7a03ca0e64829e77875cee8958d14aa86d42b5a", "object_relation": "sha1", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874413, "uuid": "cbb766b5-3e3f-4631-888c-1c2e4910e771", "comment": "Malware payload (QuasarRAT)", "value": "30071af9cc7164f33c64c751555194d2d0586dd31a44a5c817ec69b2a15d8d67ab573d7444dac716d2fe7338f7604245", "object_relation": "sha3-384", "Tag": [ { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874413, "uuid": "02f997fa-40af-4ed1-92ef-4f8e76ff3a30", "value": "T138E55A1437F85E33E56BD673D5B05026A3F0F82AB763EB1B219167BE1C53B4488026A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874413, "uuid": "0988b4c0-1e25-4c77-92f7-1fa9d7a5af90", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874413, "uuid": "5cb912c4-82ed-4d96-8d9e-9dceb3206fed", "value": "49152:svOkl2luaWIuuPjl/4dPDEF8SjzDXau5p+6k/XLoGdzTHHB72eh2NT:sv7l2luaWIuuPjl/4d7EF8SjPaR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874413, "uuid": "5352278a-cb62-4a43-93f3-8f6bb0e538fe", "value": 3266048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874413, "uuid": "6bfec1b5-c7ac-4d87-a74e-234747864827", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874413, "uuid": "efc5224d-239e-4371-bcbf-36b58195c20a", "value": "Google Drive.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a1f8323-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854745, "uuid": "915df2c0-0749-4de6-a2db-d4d58d383b79", "comment": "Malware payload", "value": "5ff34e7ca55f402b0212da434f4f93be", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854745, "uuid": "78e56516-a9b5-49a3-8a26-6c40cec590ca", "comment": "Malware payload", "value": "761adf81e97911e42cc2e9a73889a98bffa5994376a12e52fea57a4e6f27fda2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854745, "uuid": "9e678d8a-21e3-4d69-a1f8-08260534292e", "comment": "Malware payload", "value": "996d8660d84520291af312a87b210e97a4acf07a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854745, "uuid": "81bf6f2b-7fc6-4f39-8ac5-46b319c56f11", "comment": "Malware payload", "value": "fd8cd3a31a65db3ad8cd5fe19903c3e4c98cc4609e92450d7a14483bc70a3016b0cf5ecf74e5e06d022eddf0748a0f26", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854745, "uuid": "082b67d7-1c17-4aab-bff2-c86bb1862309", "value": "T104632CBF8630098CDA79E7D14C3D31AD99B7EBC5B0D612B35842DE24882C7A01597DF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854745, "uuid": "b899af16-db0a-45ab-ab36-1c96d250b8e4", "value": "1536:I9l/AoSSMsIo/S1Vtbze0eueaebeieweEetMTQTNQ8nhGhSAhBhYhhhRhuhYhhhw:I9l/5MsIo/S1VtbztjzcFHVcMTQTNQ8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854745, "uuid": "c9fbcf7a-3fb0-4a84-91f5-272d8ef57ab1", "value": 71477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854745, "uuid": "687638a8-15b3-438c-89f4-19d792365a5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854745, "uuid": "12d07f4e-c051-4d39-b08f-3f57979533c1", "value": "invoice-1645080830.pdf (55).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db89545d-e2b9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794832, "uuid": "ea73b593-e8c8-4aa8-8398-f48461a31b0d", "comment": "Malware payload (Mirai)", "value": "de1fa0a242d134fd1318c67f1d637ed9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794832, "uuid": "a581da3c-e6c9-421f-8261-1f699ba63dc1", "comment": "Malware payload (Mirai)", "value": "76386753fac81c222802adc487b24b7ef90aa5f2aa492fa81c7563752ce90400", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794832, "uuid": "cebbb4f1-95e3-442c-a19c-2545e6e6faa0", "comment": "Malware payload (Mirai)", "value": "3238f1e3c6457c352105a4daedee6820a600a945", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794832, "uuid": "b93091a8-5f8f-4123-b472-a5c5c92977fa", "comment": "Malware payload (Mirai)", "value": "df736b7b61f58a59155227bc4e299bfe13ebb6ec03bfb0faa32ad87e89f9828e25085b0d3d7693e00106db1f7f62f33e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794832, "uuid": "d5e23dba-7b6e-4009-a384-755722cea0ec", "value": "T1B7538D77C9BA9D98CA4C92B0A8719F741BA3A10092571FFB4E49C4A64083DECF50E7F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794832, "uuid": "1763161c-65a0-4258-bcfc-c3d99297d288", "value": "1536:DauwtWK3yYv2Fz8VN5cDUaeuPCwsTyfbVR:D9O3lCwHaeuP14k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794832, "uuid": "527210a0-b3e0-4daf-bb96-f5a5647d1dda", "value": 64620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794832, "uuid": "f2febff5-16dd-4df4-8670-357d34210ebd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794832, "uuid": "db1e0af1-8ea7-4113-bcfc-5c6001d9a060", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30f8279d-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830624, "uuid": "1821e014-66f5-43a4-a702-badf0a601cda", "comment": "Malware payload", "value": "dc5bde8ec85a2f912053d08483b23cf3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830624, "uuid": "b7fa7f54-bcd3-49fa-8b35-e6a53dc5abbc", "comment": "Malware payload", "value": "766017ba2d5031760407c73996141293f337d23d20e5392839a3a9a6b1bdbd8e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830624, "uuid": "900d559d-2566-4504-934e-ed10034fa7d9", "comment": "Malware payload", "value": "0b1f7c72667c643f2a85de956dc94b34725ef373", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830624, "uuid": "61350215-8458-415c-9a6d-c5264699aba8", "comment": "Malware payload", "value": "d42077c0a72c94bb50ebc7f3bfb3239cbb076d4069fe7cef9ba4677b448506982e875402bd06f7992bcc0fff97a72dc9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830624, "uuid": "56320055-6afc-461f-8984-3e2fca0a3da5", "value": "T158631BE268229C17C51A979F5F270AE8854EED829C6610CF878BFC410778CEDA4779DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830624, "uuid": "675aaa71-aee3-4449-8cc6-4886c20844d3", "value": "1536:I9l/AoSSMrw1F95esZbyEnq+G9jIyV2KiDu/DP/KGYzmSJwIAlJlfW8oBhbRvbRH:I9l/5Mrw1F95esZbyEnq+G9jIyV2KiDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830624, "uuid": "5a1512e4-8390-4267-b434-98a44c75ec05", "value": 72499, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830624, "uuid": "cd32599e-3260-4847-b8ac-eadc24c0519b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830624, "uuid": "9bef8296-b989-4608-9c3f-3a58fe0046ef", "value": "invoice-1645080830.pdf (61).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df205615-e372-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766874295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874295, "uuid": "61f367ba-abbb-4a1c-a6fb-50adeb736d24", "comment": "Malware payload", "value": "e4a605dd2345d0e208f2b9f1d8b32644", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874295, "uuid": "fb3bd23d-3f85-4207-9bad-d7ddf6b1732b", "comment": "Malware payload", "value": "76c8c77f62255ceba001acdf9f20d5cb5caa059b26fa648f7125dae9272ef824", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874295, "uuid": "58c3355a-0981-44a2-8905-f616d5e44010", "comment": "Malware payload", "value": "11ddb1b9fd6db02c1c8c652a37758d77bb096a57", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874295, "uuid": "61e19a33-4e6f-47c4-b5ee-006fc2d5dd74", "comment": "Malware payload", "value": "7b51bcd8cefcc7a0c42721cec8866175c142be6bfe6576ed3f96cbd5d9a66c7004ddf4fd929192c508515ab6dee49450", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874295, "uuid": "071ea020-9e89-4ce2-a82b-c963bfd8c2be", "value": "T18962D088E86F2291FF42E0BE3881E1CC9CD1C75BD5DF541E65E19498667A2151423793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874295, "uuid": "12b84705-870c-448b-aafa-20da7c41cbae", "value": "384:AFaU4ujMeUB0ZjzuNzhvxj5NGoSDthMBKqKwFjOOKTXB:n4jMZ+uNzhv15NmngJjjzg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874295, "uuid": "ded63355-f636-4f68-9125-849fc665328f", "value": 15400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874295, "uuid": "5cb4c8d0-1c13-44d4-8d86-9388cd574b68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874295, "uuid": "a9b0746b-f2be-4ee8-882e-c7daf1f4b3ce", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8d3e950-e322-11f0-a129-42010a9c0007", "comment": "Malware payload (a310Logger)", "timestamp": 1766839844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766839844, "uuid": "bfc3a0b6-2324-4600-b937-f36ee23a6a6b", "comment": "Malware payload (a310Logger)", "value": "9e1ca253683151714d596acb03600209", "object_relation": "md5", "Tag": [ { "name": "a310logger", "colour": "#64A82D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766839844, "uuid": "078a637b-96b2-4c06-b9fc-30b6c36360df", "comment": "Malware payload (a310Logger)", "value": "77e8ad6d2d3029c151d872c289caf4e27cc5e6f95963c64f003553ccf57a7db0", "object_relation": "sha256", "Tag": [ { "name": "a310logger", "colour": "#64A82D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766839844, "uuid": "a1437e5b-26f8-4ab4-af84-a43720ad6c13", "comment": "Malware payload (a310Logger)", "value": "59be4eeb54e411708cb5b4838c5d85651cf98027", "object_relation": "sha1", "Tag": [ { "name": "a310logger", "colour": "#64A82D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766839844, "uuid": "70d5bda4-4f2d-4460-915a-bd3548913780", "comment": "Malware payload (a310Logger)", "value": "fc76fb5bc971061089da4b85531de1204798316f8af77e29ac0b2b8742873764857eb923e50c8879cca85d19bc5373a6", "object_relation": "sha3-384", "Tag": [ { "name": "a310logger", "colour": "#64A82D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766839844, "uuid": "c010d28c-6760-47b3-88e9-042014ed6761", "value": "T1B4846B13EA60B12EF5A3C9F1B8A5A25628263D3A5698EC47F3415F5834711E3ACF131F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766839844, "uuid": "f2742ed8-7d4d-4ae3-829e-b6fac1de9ba6", "value": "252c027bda7298291893ceb108f11214", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766839844, "uuid": "16827085-a988-4409-8af7-52fa973965ae", "value": "6144:ZR8d1/w5KA81IJ8GpF6nuTmOOUWT4bmudHJ8gexqWsG3bXyen6gTfjRqd:Z6jYKkJj6GmZUW4m3gZUXyenN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766839844, "uuid": "30f7d057-0a9d-48ae-b36c-1305c18dbf3e", "value": 380928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766839844, "uuid": "d9b65816-5ec2-4141-8b68-93fe9be0ac83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766839844, "uuid": "7315ed91-e073-4fe5-9711-5aad918492ea", "value": "PO 653 PDF.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31648e06-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864125, "uuid": "21555ee7-0cc0-4fd4-9538-f0c53023b36a", "comment": "Malware payload (Mirai)", "value": "63fd4f3881019772034e9b200414ffa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864125, "uuid": "9418c063-ac4d-4876-87a7-88b5dd763661", "comment": "Malware payload (Mirai)", "value": "795f7151fcdfe35a451f4de2a19858098b34e1ddd68fa2d248d656f411de4a37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864125, "uuid": "47af684e-de45-4274-b7ee-b4cb9b77124d", "comment": "Malware payload (Mirai)", "value": "3ee8db270b77ba00effac1cdf93fffc820c6b9d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864125, "uuid": "1e5aa25b-4c82-4055-89d4-828b9bc604e5", "comment": "Malware payload (Mirai)", "value": "1d38f912f9ac035fe1b39ceb3575c2650e12ec17245c447003a3e82ee6fc9f5cdb0eaa837f5fa0911047db13727f1b34", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864125, "uuid": "c8597a15-019b-488f-a7ce-11c00b4facae", "value": "T18DB3D80E6E219FBDF758C23447B78F24A39823D63AE1D685D2ADD6041F6024E245FFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864125, "uuid": "1e284695-0179-4853-ae62-ecc1f7e9ad90", "value": "1536:2AKfhCSOvayngH4IJukUAcJMpnL19Yp2He+nW+dGofN:CCxfgH4rRJMpnXYwpddN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864125, "uuid": "72b0db26-0d91-49fa-8846-2d2d1541b900", "value": 110100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864125, "uuid": "57443b92-ce6a-41f1-bb8f-1847980aa74f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864125, "uuid": "84dd4ded-f383-490d-a883-dcb000e86dfb", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f90c229-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830702, "uuid": "aee2ae97-cb5e-43db-85e5-0ede434bb3ea", "comment": "Malware payload", "value": "c192c975c58a1f8ae689f07c6da6d26e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830702, "uuid": "53735475-e424-4db6-941f-d9bc9f912400", "comment": "Malware payload", "value": "7a372ad7fc9af27faa4b74113fc583f72ed2c7789cf0128a78a64fbbda3331d1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830702, "uuid": "02d4c272-966f-4ddc-be66-c8677bb0071d", "comment": "Malware payload", "value": "a7c5b4532f1c99b156fc6a9d3ee4e3c6fde6df37", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830702, "uuid": "e8667e12-7dad-4901-bde8-bc29b0da137b", "comment": "Malware payload", "value": "7f4f00d23a2f8d910623b3165e9d33c713c84ca5ffa61e1d6d9f035d557e6036a3a4d1d3052fce1c1fef398eff092c0b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830702, "uuid": "e3ac4134-5062-45f7-b76b-db59cc021e94", "value": "T140634B5FBEE51DE767572A718A99ABB0942290013D0CE416F727BBA03093F6F01693C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830702, "uuid": "52030853-74a8-46e7-96b6-1459008c81c7", "value": "768:I8w/h62/jWs6oS+xISN0vUfgRNgdkfScBYrwz2y8kTAlGB:I9l/AoSSMzCusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830702, "uuid": "b2254b92-1f25-41e6-b91f-c0416cb19033", "value": 72592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830702, "uuid": "871f75c8-ab51-440e-9ed7-f627235fefa4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830702, "uuid": "f9d66e35-f56c-4722-bb65-e4d25f84b146", "value": "invoice-1645080830.pdf (44).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d6481ab-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870507, "uuid": "b9c5ff0b-b9f8-4b16-994b-552166e376b3", "comment": "Malware payload (Mirai)", "value": "37e3ead59e26f622d8e3c11bc3ab0e16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870507, "uuid": "b72c5aa4-56ee-4c74-a884-927379dc105b", "comment": "Malware payload (Mirai)", "value": "7a407b97f0906d6f41054d50f989e251e05748421ed59e43fbb7bad353443493", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870507, "uuid": "0d748ddf-b21f-4964-b3c2-537ebd0b5d29", "comment": "Malware payload (Mirai)", "value": "c87386fbcff4563b84c75dc372c077469399f50c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870507, "uuid": "c281bf45-faab-4839-8b86-d4fa6514e6ba", "comment": "Malware payload (Mirai)", "value": "d2ec5ac32e7b2208bf005f96c72487d699fab791220c32d009e7cc6ea4dc6cd8f2e9becb951e0ed0b8aa4a86572a5f9d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870507, "uuid": "9d47ba38-5c37-4fb9-84ae-620657f7207e", "value": "T16382BF60195AED72C5B0443A7CA446A6B3E22EBC92FA3826361947343F8550F5DBDBC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870507, "uuid": "bd08529f-6deb-4ef2-af92-e8abc0f0bafb", "value": "384:LadVAxJd6Yv/gFUHIpfFLO++ZVqi5pWYFCOLKipDhymdGUop5hgd:GdVAxJd/PAFr+vY0VLKiRs3UozGd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870507, "uuid": "1da23ff6-8e3d-4b9f-bf48-37a17b6a6567", "value": 18128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870507, "uuid": "22774194-5907-4418-b0ca-b6f2618fe637", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870507, "uuid": "78ee9c4c-c03e-4b85-af77-ab416f4cd652", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd3d5d02-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794352, "uuid": "dc5b6e68-5b2b-41ac-8a1c-b1c41567e3a8", "comment": "Malware payload (Mirai)", "value": "66078a335b294c470d253259d19b3599", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794352, "uuid": "31be51a5-9b62-4830-8bea-af326ef3fa55", "comment": "Malware payload (Mirai)", "value": "7b01f3f343d27ee2a382129b7a4eae97263f3fbf50b05d2b629fb9c83384a2dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794352, "uuid": "e70309dd-4a77-42e7-9e24-77fda4f60cbc", "comment": "Malware payload (Mirai)", "value": "45efde9c26b44eb9ab948bcbda6062992c33d5fa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794352, "uuid": "265c6e10-e88d-4ee4-9c52-5538c2c30785", "comment": "Malware payload (Mirai)", "value": "39389100629fa310fd0349c1908853db0a3be20a66a1d9c3635146741e1b1b4e17b8665cb01db0c75dd432c6368d0bcd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794352, "uuid": "7c9a38a3-e427-4051-8425-bee5dca2f05e", "value": "T11D634B43B31C0907D5AA09B0653F6BE283FEA99120E4B7C9650FDB5A4237E36104AFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794352, "uuid": "6cf65669-6622-48b4-8e4f-22b023713063", "value": "1536:iWk2wTAtU1EQGojhWU4Sg81ynjd4UqbVRq:SXqSgewsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794352, "uuid": "4d9beb55-22c1-4f41-a29b-2ce1ba86ab80", "value": 69620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794352, "uuid": "89acddb4-9c8d-4b66-807e-311722b7af54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794352, "uuid": "b50d2111-8a50-4c3c-8b2e-6d9de6b0b2da", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebe5857d-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825354, "uuid": "57f41072-d2b2-4291-a19b-516cb6ae7a48", "comment": "Malware payload", "value": "3959ba50d40bdbb3d8764e88164d6808", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825354, "uuid": "32d4dafc-0c65-4e88-9633-9bda16227fb2", "comment": "Malware payload", "value": "7b0d80f26f6af21063769d0c7c7493c6c5f0331bca9ab3549b6ec9279f93fcf9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825354, "uuid": "d8a475ba-bd9f-4056-a735-371d030e4876", "comment": "Malware payload", "value": "bee4088e3bd014228bd25f0f153478d5f959bd9f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825354, "uuid": "418b08bd-1999-41e6-a84a-5f8bd377a152", "comment": "Malware payload", "value": "4d6414a0c057d584fffada59dd2486916b55495de0146b825d778c6eedb60ff9eef5ad53087c3c5bf1583f22584ede19", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825354, "uuid": "0719eafc-f0e0-412c-b795-070d7e00ceb3", "value": "T197630BBC8D2FFF9D0A37B10FA5581DD21A65D4028592476A3DB19357CCDBEB2A82348C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825354, "uuid": "bc5e8a3f-8578-4f71-b9e8-e72dd7190290", "value": "1536:I9l/AoSSMFPEEsC7En3Y7gzPuatayqxEwSZOlqJl5An2AZwHEVpgzUphW0kV09ym:I9l/5MFPEEsC7En3Y7gzPuatayqxEwSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825354, "uuid": "bdbb6959-7e2f-491b-8908-2ad3f8c0714a", "value": 71538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825354, "uuid": "dd55c0d3-030a-4107-9ec9-3926a74cb028", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825354, "uuid": "7420e909-6355-455a-8905-73664ca97846", "value": "invoice-1645080830.pdf (74).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0931dc0-e376-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766875935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766875935, "uuid": "58088c50-e114-4092-876b-517aa090c51f", "comment": "Malware payload (Mirai)", "value": "313e513588caebce3a0da3a004e0481b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766875935, "uuid": "e0517388-7674-45fc-bdfb-a70f87af991b", "comment": "Malware payload (Mirai)", "value": "7b57a96cbbe33677d9bf44bf92190a2194617dd165558fa14f746d2e90e27031", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766875935, "uuid": "1883c507-69ff-4e4d-8d91-8bd444d5c6fb", "comment": "Malware payload (Mirai)", "value": "049d6c67129caa1eb5220b18846a3cdd8fe3743f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766875935, "uuid": "be71f646-cddc-46aa-ad07-7ca65f6ed641", "comment": "Malware payload (Mirai)", "value": "c0d71e595c0230a930252ea970263a53f7bf6baa808a7decff0b1274b39ad3151e2b07cdb58ce6178e9dfff81da2dc98", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766875935, "uuid": "d5f83893-6e6e-450d-a1d8-e11b56e907ff", "value": "T1F034E60AAF610EFBE8ABCD3706EA1B0124CC541722A97F757674C514F14A68F5AE3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766875935, "uuid": "0f2b873a-0612-4eb1-a425-e91b4f5ac7dd", "value": "3072:OpDg74E7dMWFiqDnN0pdeGSbnvXIT5A1pEcrSVPJHga6hh1pQV:OtjE7dMWcqbN0pMvXIT5A1/eSLQV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766875935, "uuid": "e082e1ee-c186-407f-b5a9-5bd091d8300c", "value": 250552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766875935, "uuid": "8c7ef4f6-52be-44c2-af82-dcfe8b5b7825", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766875935, "uuid": "f32079ec-f4e0-40af-853d-b7321fbb98fa", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4d259a9-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796485, "uuid": "6f219df2-494c-48e7-88c7-534dcce114ee", "comment": "Malware payload (Mirai)", "value": "963e1f5c81ebd6864db091327fb7a6e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796485, "uuid": "8fc33185-8c5d-432c-89d8-8da86530be11", "comment": "Malware payload (Mirai)", "value": "7bceab5446b15e0692efe1044bbf0ec1a97c965d6c9ba7efa8b10c30f6ae0a02", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796485, "uuid": "4d1139d6-7299-480a-8b5d-2e0de5bc6992", "comment": "Malware payload (Mirai)", "value": "2ec3f3884de33fa7becdfea1c2e7897de10526fd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796485, "uuid": "6aec7012-0849-4152-934e-2df11675bdb7", "comment": "Malware payload (Mirai)", "value": "290747eed38c417842c5f58f13cba327d122c751f73ba6f92464fcf0b5820b442e4bc3ea6dfebbdbef27ea76d1c13987", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796485, "uuid": "a4b31ffd-8ef8-4f2c-ba68-42b22e4af72d", "value": "T12D33F167ADC04A6EF76B617A643F7F486468615E83C00EBAB9810187DD7BF216C37312", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796485, "uuid": "b841b6a7-253d-481c-9775-73d941274c79", "value": "1536:8gReQUD1RbTfmbzjrS8Jxc0vVWsJ7xAZme0nm3UZSjnouy8R:8gReQYorJ6iVWsJKZmtm3OSboutR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796485, "uuid": "102a4079-a37f-4e47-aabd-38fdc5a89815", "value": 51080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796485, "uuid": "bed9d014-787f-481f-a151-080e56e7a999", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796485, "uuid": "ead4fa04-a8e2-485d-bea2-2954581f65c2", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21da8a9f-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858086, "uuid": "0699a7f2-bf30-4493-8572-a77c29946b38", "comment": "Malware payload (Mirai)", "value": "2ef3709a4025c50b0369eb14047efa44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858086, "uuid": "b6c753ad-2789-4604-a0c7-a3708f751d9c", "comment": "Malware payload (Mirai)", "value": "7c4802a435488b0b52d050e2c3010c9c926aff36fca13ea53ebad4681c8556b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858086, "uuid": "84695ef8-3adf-492f-8d39-4e22109af254", "comment": "Malware payload (Mirai)", "value": "c07fd69f3f2311ae7e448dfb5177d66c1f3a3c36", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858086, "uuid": "6bc70ce5-a599-4eaf-a255-8394ec139f15", "comment": "Malware payload (Mirai)", "value": "5c62432ae70a90f7d876f6e20e655275918924132abbbe20a69d579ab04cb6610e514fff2e03df60d4a08395bdcd83c1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858086, "uuid": "2cbbb81f-2700-4609-943a-e4821ef49038", "value": "T1EEC3AE87F78B14A1C8260AF007C71B9E2E532251CE5BE8E76C1E763F5A7A4DB19063D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858086, "uuid": "9eae08ee-6336-40f6-9a54-5a8fcd2a44a7", "value": "1536:eiF32UMv/SFpNA+gWGsNPY3CenWd6z4ZIq3GlCZ4ECdLJxclwcg/oyo/LWC:x4U8qzGUY3COe6cWq3G24ECdLYgiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858086, "uuid": "87f08e4e-e55b-4fc1-b2b9-4d417c22c984", "value": 124588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858086, "uuid": "e580a8e3-f819-4c58-a662-7ff0cb38bd2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858086, "uuid": "4174c1e7-1324-4f3f-bca6-bbbb9c95e2e4", "value": "morte.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15092549-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864078, "uuid": "1e095116-e4d3-4be1-8411-4005774b66da", "comment": "Malware payload (Mirai)", "value": "9a9a2ad815e079d47a36f0a6389f05a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864078, "uuid": "1ac94bc7-dfd4-4cf6-bf5c-efee4536bb22", "comment": "Malware payload (Mirai)", "value": "7c6371614ae39c5b6c821162f2da333ca5f91ad02c01d4f22d63c0f66e7f11ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864078, "uuid": "5ab30f0a-fb66-40ea-b214-929adb4d0947", "comment": "Malware payload (Mirai)", "value": "d385da199c23743431746bb6099c7d8ea8397549", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864078, "uuid": "d2031502-c7c3-4c79-9b62-7a642f488cbf", "comment": "Malware payload (Mirai)", "value": "681231dc9d4eb91b1fa45d0aab1633584b687505c5571efdec32cf5e1f119351c49e64b91ccdd4cdedc4d2a31a129c58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864078, "uuid": "945a748e-b390-43cf-b81c-8501e9f74ae8", "value": "T1F413F1BB441243CDE5BF55BF06E0895536294E70A843DD2E3E02FBF69E9A1086C42EE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864078, "uuid": "f66a516a-658b-48e5-bbdf-595a39a3a32d", "value": "768:VA6I8dloZrq+MJ/QV7lW2Zcl1tawDZ0Yf2c90iDNgehIdWGS0OvJgGlzDpbuR1Js:VA6I8OW+MJ/QVI2Zcl1I4/n4dDyVJucj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864078, "uuid": "84effb80-282b-4acb-8b3f-61fa09a886a9", "value": 43456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864078, "uuid": "b7cd55b9-b8f0-4576-a8f9-7d0efa2b0b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864078, "uuid": "18eaadcc-bbbc-44f2-85cf-0a73431589ce", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "475b6a6c-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854713, "uuid": "489a12d6-928b-437e-95bc-4d8bf27150cf", "comment": "Malware payload", "value": "4af2bb313b6d802cacc8018ab2582e4d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854713, "uuid": "19d352ab-7556-4011-9a05-75f705ada2f6", "comment": "Malware payload", "value": "7c96e3207e9d3ee4dde591d34424e24606503a848940f2eb473d17c54e1d1025", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854713, "uuid": "96d1d9cb-a7d3-4e17-a3ac-fc237c584cd8", "comment": "Malware payload", "value": "d7e200f078c0d4cc1e3d8f1800b8918cfc1fc5c1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854713, "uuid": "f29b7223-d0fb-43e5-b472-4bd4c30fc2c7", "comment": "Malware payload", "value": "2808030d5f524f5dd0a17d0236b534e2d00d3d78f54e95aa603d6e55fba13f5bc71147cea9915f015d22a8bf38640501", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854713, "uuid": "c3c2ce9b-cb9f-4db2-84f1-9036cf320c27", "value": "T19D633D22F97361D691FBB86782B417E29F448DD599C8D859C06030332BFF38AC6D7886", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854713, "uuid": "35f06f7a-35b0-4e22-a203-e5068d12a3f5", "value": "768:I8w/h62/jWs6oS+xISN0vrCeCujCfC9kCxDCFDCFCu2Cu3CutCuYCuWCuCfCuHCw:I9l/AoSSMUxusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854713, "uuid": "fc8b9930-888d-41f2-98b6-8fdae41a7ce7", "value": 67742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854713, "uuid": "c099f964-7a31-4c59-ab5d-e62bc255c4b8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854713, "uuid": "494cc08d-5892-4671-9e04-b31fb8d66990", "value": "invoice-1645080830.pdf (62).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8def27eb-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830780, "uuid": "9d615282-a0ec-452f-add8-34609954b787", "comment": "Malware payload", "value": "b6555a82c936e92c7ed46d99c9e4f86a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830780, "uuid": "04d93bf8-2323-4eb4-92db-2f07608f6360", "comment": "Malware payload", "value": "7ca2343a60a688f385ee2f5b69e32b9d505b9c2d251b41e312d36d816ba83c31", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830780, "uuid": "1ffb256e-451c-4c21-aa84-763fd472dbaa", "comment": "Malware payload", "value": "e6af4e27048177a881f21ef0000ad08f72e5ad32", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830780, "uuid": "d54d0406-170c-4503-9dbd-ff18778a6bbc", "comment": "Malware payload", "value": "d24e315738f94e90397286f8bb7528e5c2374927273744b72afa2ecbf9af6299eba2306fb5fb7219983eb50d0a1d3500", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830780, "uuid": "66c88a32-fbe0-46cf-8e1d-3c419ce5d17e", "value": "T15F632AECDB8017EC97396484CFE45E4D9A4A74CCC2730855DD93158E881EAAC3DBBEA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830780, "uuid": "c6c04312-656b-42b9-91c7-505038da3327", "value": "768:I8w/h62/jWs6oS+xISN0vG9g407nMdkfScBYrwz2y8kTAlGB:I9l/AoSSMkeIusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830780, "uuid": "f32ad34a-aebb-49c5-b78a-124222656d26", "value": 70613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830780, "uuid": "1f6efc8f-7ada-4972-bbd1-e002655eae9d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830780, "uuid": "5b11f68a-f504-454b-8c3b-a6a06aafbdc1", "value": "invoice-1645080830.pdf (26).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38122cd9-e345-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766854688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854688, "uuid": "ea4f5f7a-26e1-4367-abe7-e5ffc914ce81", "comment": "Malware payload (ValleyRAT)", "value": "56cded49fcbbeb89599b09a9f058dc62", "object_relation": "md5", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854688, "uuid": "36447ec9-5092-42da-9285-5d3907ffdc99", "comment": "Malware payload (ValleyRAT)", "value": "7cecbc386a956670dd27cf2dd7e478c0dbda03152748c787352dd295b8aa5389", "object_relation": "sha256", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854688, "uuid": "bb27ba02-58f5-4b22-ac75-50ca3e5e1f58", "comment": "Malware payload (ValleyRAT)", "value": "71730354bc9924a6ab7234df0b97f1c9b052a26b", "object_relation": "sha1", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854688, "uuid": "cb659900-6b5a-40a2-b45b-2f210d1ca5a3", "comment": "Malware payload (ValleyRAT)", "value": "d5854f574ed2e162a943d0bf055795938a507304b3fc6e26a9e6295ffb0b4f72ef2ae4b9197178d19c1bd986bc380881", "object_relation": "sha3-384", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854688, "uuid": "5ac32149-a6af-4c40-b357-f2201c4c61cd", "value": "T1C2773320768EC232E19E1577D83D6E0E9431BDA3033042D7B3F47A9E5E329C1A67D692", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854688, "uuid": "7a64d25b-5dfe-4f22-aa7a-b6f56564b830", "value": "786432:I1BLppWPaOcV+IZ02eE3rLy/GWW5ZXdaK9x0TRmo3sVCHPzrfGUaslVDBV5gqQEt:I1BKiOcV+vRYTZXdaWOVw4P3fXaQDdgq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854688, "uuid": "c142d0a5-75a5-4712-9b11-9797546128ab", "value": 35613696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854688, "uuid": "03ed3bd5-86d1-494d-a395-3778f6c8ae0c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854688, "uuid": "ec1a342f-e0b9-4c99-b20a-7d7f9620d5bc", "value": "Gusnktyst.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "003e7c79-e34f-11f0-a129-42010a9c0007", "comment": "Malware payload (Hajime)", "timestamp": 1766858889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858889, "uuid": "2de04c86-9dc9-40db-bf9c-5c03b43d8827", "comment": "Malware payload (Hajime)", "value": "8fe12c975fddc4ff70cec86e24e8ddaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858889, "uuid": "cc5e3307-d75e-4bca-890a-d7760098b05d", "comment": "Malware payload (Hajime)", "value": "7cf48efb48badc9a8989e90396d04c5f8cebb870b44a2e3789606fc0e0c3ff08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858889, "uuid": "c1845952-75e7-420b-8531-465c4df3707e", "comment": "Malware payload (Hajime)", "value": "a95a4a09d3f0e4bdd299b09fed944cff967bdd65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858889, "uuid": "e8f25742-d295-411f-9203-6485c1f20ce4", "comment": "Malware payload (Hajime)", "value": "0d193cd38d2d1fdfcc9ad56506bab262f534e86ebb5fc4b407045d63dd96e3a9f1b236da6c1814a18006fb2e23224766", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858889, "uuid": "1a4fee1a-e066-45ae-8640-d40212f97878", "value": "T10823028623A63F72D52148F5D7FCEF85A14A7D94AFE6140E7C223698B47135C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858889, "uuid": "04ab2694-3b63-4f80-9db3-bbe6d51e2ec0", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wg3i:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858889, "uuid": "6580fb38-296f-451a-b207-26ebf374c85c", "value": 48026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858889, "uuid": "64769771-d11d-4ce7-bfe2-22f1b46724be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858889, "uuid": "ccd52083-c664-404d-b451-2c42f3d43e27", "value": ".i", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b074d12-e35c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864544, "uuid": "def32254-022a-4ec5-8ace-7ce0dc992fe3", "comment": "Malware payload (Mirai)", "value": "babe56ca9bc96761e70f21fb26151b4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864544, "uuid": "028a08e5-4f3a-40ea-969c-f1e01ac1e0f1", "comment": "Malware payload (Mirai)", "value": "7d7a1705ff58fcf507bc38866e6084669befe3127aa85c3c73989cdb0b7c9ebc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864544, "uuid": "361c60af-5429-4b9f-b0e4-8032071ecee7", "comment": "Malware payload (Mirai)", "value": "598d0c913bef769dc4ae8ccd1a8ba9622de87322", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864544, "uuid": "4490b92c-d2b7-4066-b50c-82158218fdf5", "comment": "Malware payload (Mirai)", "value": "43702e753bb3d8a87daf043626948cc22f5638ba2567f2a27173c494e2bc1b6ebaab0129244f69ed2f5d8a42d9056c8e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864544, "uuid": "2a2ab291-f670-4fdb-a51b-cadbaac35283", "value": "T10C732985B8819623C6D462BBFA6E42DD331613F8D2EF3207DD11AF15778682B0E7B650", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864544, "uuid": "054c80bf-274a-4ca6-83dc-3e0b62a4079d", "value": "1536:5JL8kCQDuvVpVHoCOgGg1+Gia96KMb3wEWO6r0c6TaWhvyTAbVR:PLpCPGY+9KMbzWO6Qc6hByTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864544, "uuid": "e011a358-cd1f-4ae3-af05-73d859f6b355", "value": 79040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864544, "uuid": "8300482b-2299-445c-a75b-f80386fb6fd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864544, "uuid": "235a4e56-8637-4835-965c-b1744b00878b", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a7c542-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825537, "uuid": "d8552aa2-04e0-4525-9f5d-a9f0e26bc254", "comment": "Malware payload", "value": "f68c9a91f9ad0de5d174421864c9f5ae", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825537, "uuid": "00e8c0d8-c10e-4792-8f34-80061f353447", "comment": "Malware payload", "value": "7d8b9ebd354d400b441ca620ae27597a98b7010dd5b8daef11d3e17993d1058b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825537, "uuid": "e7e0a4dd-7f98-4831-859a-c01ed769e6e2", "comment": "Malware payload", "value": "e96a111ec50e3cd77d63dc6ec164857f0deb46a4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825537, "uuid": "6cb8a97d-b1da-4562-a2a1-f70cc06f5fb8", "comment": "Malware payload", "value": "76ec6d2ef40e1689b5405ed79c1555193de4f67619c0f64694bcba086cfd84d186cdbb9491d2da5cdd40cb8ed6969946", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825537, "uuid": "2ab617b4-b82b-4020-b074-2137c2a4608a", "value": "T1C773DAF56E3251CBA44F61A7AC733DACBCD76F0058E5A39D5BA873728B05641283A0DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825537, "uuid": "8fb10156-7153-4294-a5ce-49a19df6869e", "value": "768:I8w/h62/jWs6oS+xISN0vlIgpAdPq1i5dkfScBYrwz2y8kTAlGB:I9l/AoSSMHWusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825537, "uuid": "30ba82ea-f5ef-4219-a772-bdf86b725ea0", "value": 74397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825537, "uuid": "3972c3c6-b256-4d23-b772-54bfe9350c23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825537, "uuid": "730da007-12e8-4e20-8801-aeddcd9048d9", "value": "invoice-1645080830.pdf (38).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c2c3460-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825596, "uuid": "50f47412-d091-47a2-8415-cc8b2577188c", "comment": "Malware payload", "value": "0070b8ae0503d0ee6449132d6774dbbe", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825596, "uuid": "3bc2fbc9-f775-4314-88cb-41dc4e22bdd5", "comment": "Malware payload", "value": "7da5657bc989bd8844a825c9612296a9134c094b4d608140e9e8581a09b00839", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825596, "uuid": "e89d5458-1004-412a-ad3f-61de7411a129", "comment": "Malware payload", "value": "aebcb26c03edda8b34a1de5186ef0ebf547dd2a1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825596, "uuid": "57d6dc2c-803e-4b00-b11b-fc07f874b8af", "comment": "Malware payload", "value": "835dab931bb43c133b28b970c9a9631f4dc24214e9b1c92199d60a28ea4530f358af2484a8761a93b0107481271693dd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825596, "uuid": "11b7c112-8e3c-4e52-b704-f46cd45d8fd1", "value": "T1B6632B2D138F1D2D7C235A3A6A651CF98CA5B4711E5D5002A4B36FA2277FB331BE7061", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825596, "uuid": "319c4b1c-bccd-49e2-94bf-919ef974c120", "value": "1536:I9l/AoSSMN7i7P7h7c7a767q7/7s7h7n7u7F7q7f7o7y707y7E7m7e7l7G767S7X:I9l/5MN7i7P7h7c7a767q7/7s7h7n7uE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825596, "uuid": "80ecfd7e-e0a7-41a6-89de-dbce03146a90", "value": 71562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825596, "uuid": "87ccfb9c-8bb3-494e-b1ef-998a20fefbdf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825596, "uuid": "4ebae23e-dd78-4efd-ad9a-03dda69d4ebb", "value": "invoice-1645080830.pdf (26).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5db0158-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873770, "uuid": "38f61122-3138-4757-aac7-90b159f42bb0", "comment": "Malware payload (Mirai)", "value": "c780500efc9397a5da06b5df7a7d622b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873770, "uuid": "d487c391-56d5-4b70-94d4-787fab2ff24d", "comment": "Malware payload (Mirai)", "value": "7e16738235101d701dfaa43afbf6eb3e1e127fefd6a8dc8b04c1f307bca8b3ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873770, "uuid": "348fe3c4-a948-4831-819c-a2831a2e4a13", "comment": "Malware payload (Mirai)", "value": "c3527629b46674af5560ae503934aebb65fb4806", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873770, "uuid": "6132cee3-3404-482c-acf7-0554cb6cf6ed", "comment": "Malware payload (Mirai)", "value": "5b0976604ec95656455895ff4936da769b10ada09ee31ed1cf2de5e24a36ebe4948f2afc05c0f0dd4a0036756f50d17a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873770, "uuid": "558f7e56-5ba7-41be-a30d-c42c4a898046", "value": "T198130140F65B2CA4D3241CB2ECD28A497ED987FC19A9B2221A1F52B95CE94410BFC997", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873770, "uuid": "7b46c1e5-45df-43a1-b353-80fed9ea0ac7", "value": "768:oNiZfFIqV58JB6yGoOV09EfpcdovUZIzfV7YGUJPf9q3UELO+:oUfFT5sXGoOe9EtDVFEOLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873770, "uuid": "df99faed-1f55-4dc8-a865-19a5393cbb23", "value": 45136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873770, "uuid": "906f2945-2925-4c10-ada3-dd0c9db692fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873770, "uuid": "b3afacaf-fccf-42bb-a2ef-77d85b51fcf2", "value": "ub8ehJSePAfc9FYqZIT6.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbbe2b82-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873806, "uuid": "123f74a0-8058-412b-9a83-82deb61d0052", "comment": "Malware payload (Mirai)", "value": "60d38460c448dfdcc8294ae468f8c4b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873806, "uuid": "cb948e3f-879f-4138-903e-52067e6a6cfa", "comment": "Malware payload (Mirai)", "value": "7e426720004fd32af0d32f7c3ab57e61cba577a3bfcf49bb36fa31c3bc4e87c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873806, "uuid": "1fca4a03-f72e-4991-8feb-81456fb2bec2", "comment": "Malware payload (Mirai)", "value": "ef8546f9bc83e673c9f76e3a944a9e3841fe27e8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873806, "uuid": "86226ef9-ad06-450a-bfae-7eb5718afa8b", "comment": "Malware payload (Mirai)", "value": "5c02c878614ca4e9b87a8e3c8533fdd617213fd71e94cdf85327ff5aa4157d0cdc84fd3b8a08a66c12f1a70bf51aa04d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873806, "uuid": "d4e3b212-9c4b-4381-b967-93d93e146a03", "value": "T16913285AFCC24A7BC5C01339BAAE5A4D3721E3E4D2CB761BCE545B3172D620E1D6AD80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873806, "uuid": "4c4b4988-a832-4e3c-8fcc-3be083bd2b49", "value": "768:jagSOPTkKHnI9rpzg62EpCTZQY/UZvnPeZk4cPBNmwIoO:hn7MpE62L9tMJn2ncP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873806, "uuid": "bbd17407-f4a6-45f3-a639-42268c6821df", "value": 42920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873806, "uuid": "accd6da4-7ce7-4e64-8442-9ea685d1368c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873806, "uuid": "f1ae5129-2c55-45ca-966d-7789a35e9e1b", "value": "ub8ehJSePAfc9FYqZIT6.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97c4d041-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811040, "uuid": "a01db442-dd67-4187-83bf-3f062bd5724b", "comment": "Malware payload (Mirai)", "value": "78f613e20d5d4a4aea8b888ad69f2c51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811040, "uuid": "8d645e2e-de82-4ef5-b56b-4085c9b3697a", "comment": "Malware payload (Mirai)", "value": "7e54826fecc5106e10aa85ef004cc300adcb92753de9963c3dead09ced5f3827", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811040, "uuid": "eb49703a-a6cf-42d3-bb86-98010b40506b", "comment": "Malware payload (Mirai)", "value": "6e7c5679ecaa2dea34887dcf7e6ef794617d2a0b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811040, "uuid": "79322301-4bb6-4eb2-bca8-97d2f18f0295", "comment": "Malware payload (Mirai)", "value": "a2e963e24f379339eba6b939abe48a042c0752896817a68e5779f62b2f49df2e2cf82e31647c05559f36222126cfb79c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811040, "uuid": "67eb7815-e0cb-48ad-a93e-968ce78e8e63", "value": "T127237CC0A543D9F8EC150AF43173EB329B7AF07A2129EED7D795A432D842702E54729E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811040, "uuid": "960d240d-d9cc-4301-a001-d806971bc7d8", "value": "768:gjo8WnBsux3TUi32+4qbBYSWLxD9NnbZrYMbJoSlO+Meb4az:gWBsux3TUiG9qbBYSWV9N1Y8JoSlO+1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811040, "uuid": "c307a6d7-62bb-4a25-822f-13f4dd409011", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811040, "uuid": "68bfbf6d-4a9e-47f7-8d59-278bef9ff253", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811040, "uuid": "db59e2ec-9a47-456a-93f4-e38803224524", "value": "hoho.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f302079-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855559, "uuid": "9bfeaaa8-a8a5-4012-9169-5d48156fe0af", "comment": "Malware payload (Mirai)", "value": "c505f3879d4e1fbd2fd90992f87e39bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855559, "uuid": "55ef0cdd-58b8-4c95-9f25-9b08d6f460fc", "comment": "Malware payload (Mirai)", "value": "7e8a91c42829fb9e7e56ae70822e36c5a65a14fab3acb3499c73571dbed63533", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855559, "uuid": "a65465e0-d8d7-4cde-b74b-a3d4d3ed2ab6", "comment": "Malware payload (Mirai)", "value": "3a6718a34a8327526009ffffbd93957ae51d122f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855559, "uuid": "2ac2d8ad-21b3-4788-b37c-b5e6ebfad819", "comment": "Malware payload (Mirai)", "value": "6595339823ea4837c2c71cea2fa2a2431fae13c56cf9a9a47b20f68534f161ef64c2d1808ba5c127937f3bf66f4df51e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855559, "uuid": "2f000a70-4cbc-46f5-97a0-e4cd50f8b36b", "value": "T127D3B021E4006DD1EC2129F578BA97B80350EE740BDE1582EFFDF95E647BD9438AD2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855559, "uuid": "9abce38b-6d4e-4efb-8f7f-3103fc5e0ca9", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xC:PiySSGp+PMmT7zMplM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855559, "uuid": "9bd9689d-e3d8-4158-b9c4-5c73901de89c", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855559, "uuid": "aa5db3dd-9195-45f3-ab6e-ce4125e9f9d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855559, "uuid": "568eaa2f-51d6-4a26-a5c2-b6609827dfd5", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74f4e917-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823437, "uuid": "d64fff1a-2c49-416b-852c-6cfe880e5dea", "comment": "Malware payload (Mirai)", "value": "76f91751ddfe25eb22a2a05ea0a726b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823437, "uuid": "f15a8d0f-a1ab-4463-bd1a-42177d9968c0", "comment": "Malware payload (Mirai)", "value": "7f59255768a8e454b26577bad0cc42a01fa037d6ac33f3674ccf4b83b32dde83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823437, "uuid": "05b35615-b1f7-4c7e-a364-76835d9f9dc5", "comment": "Malware payload (Mirai)", "value": "990486b1268a2615da0854e9289ffc0af2c56d31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823437, "uuid": "44374188-0f10-4683-9c52-c1874d9f9aa1", "comment": "Malware payload (Mirai)", "value": "6154802c53af53ca9f6848d88d9d0ba61181f6b91e98d2bd740c80082cc64175c5b514714cf9a49547be21502fe0b1ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823437, "uuid": "42ddb5b3-0a7a-4545-90ea-11498434a923", "value": "T1EB045B22DD25AF8AC416A1F0B1F18E789F12BD2549470FF9A5B6EAF44143DC8F1097B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823437, "uuid": "75c8cf33-690e-4c82-ba3e-be9fd5ecc4f6", "value": "3072:NHihjk6GE7VHjcMLjuvAfztkWzJW7kfco0yjU7nGw:NHihjTGEJHjcMLj314IfwyjY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823437, "uuid": "0c3a3154-58c2-4dc9-aa9c-9186c165ef53", "value": 189492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823437, "uuid": "54e7e228-1c0d-42cc-99be-315cb8982c0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823437, "uuid": "376e62da-adc7-4322-ab1b-063523faadb7", "value": "bin.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf8b7023-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825709, "uuid": "c224ef88-f7c8-4397-b15f-23953cbc4f3e", "comment": "Malware payload", "value": "2d531de1cee5ca73710e2d6c741bd81b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825709, "uuid": "46080a86-072c-49b5-9a9b-1f28d53360d3", "comment": "Malware payload", "value": "7f6ab9ab50f621f2010cccba69bb1f5d968ed24a15f788812e52f0a35d5b3398", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825709, "uuid": "882399ce-5f22-41f6-bdc3-5483f50ee53b", "comment": "Malware payload", "value": "f09d0092f655d10ece1169d1e3a739fe2e62afcf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825709, "uuid": "936e1353-3bfe-4501-a5f4-08cdd93cfea5", "comment": "Malware payload", "value": "f2f92d74d4fc0f7b11947fd353d30b020c3470bc9b2e91cdc995bd327e4eb83c40a4f58f93e83f2941a739d94142fcaa", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825709, "uuid": "cc921521-5180-467a-ba16-ed6706eb3e70", "value": "T18D631C2655FAC476138EDEF5A8C8D132606AA24163157DD0F88E3FA9A5B84106FFC07F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825709, "uuid": "0a518d52-3685-4a7f-b123-691a5905787e", "value": "1536:I9l/AoSSMEjejAj0jSjNjWjtjQjJj8jQj3jcjBjmjlj7jTjejEj4jHjCjwjWjfjm:I9l/5MzAusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825709, "uuid": "6c087364-79b4-4a03-a059-92e21fe56641", "value": 69616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825709, "uuid": "1209569d-361c-4632-b69d-adab6f843f65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825709, "uuid": "7e4ce9f3-5e27-441e-9835-16e0a5a75637", "value": "invoice-1645080830.pdf (4).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31d29eb3-e2f6-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766820747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820747, "uuid": "56ef94c7-d374-48ce-b8ad-d19292e78d39", "comment": "Malware payload (AsyncRAT)", "value": "73dbdf2ab91196d864e9c6092a98ef47", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820747, "uuid": "71964246-2801-4fd2-a764-f41b3f5fc44e", "comment": "Malware payload (AsyncRAT)", "value": "7f99f5540631f133425289c1420129622a9b4eae57201c27e1ba9d181d18771c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820747, "uuid": "a1698a0a-ec81-44c4-85ec-954f91392d80", "comment": "Malware payload (AsyncRAT)", "value": "24c2e2693df00b981f2df7cf5ef80bc10e593f55", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820747, "uuid": "c21f07f4-78dd-432f-afa8-de01eb8aa793", "comment": "Malware payload (AsyncRAT)", "value": "9a09bf15c88a8bd484d953ffb915f712c3257170f34bf6c7d8548ff4f7376f051ccd75f9c870090ed8d58c4e2c3b2f71", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820747, "uuid": "c87f5f3f-988e-4140-9cb9-7240ac76db54", "value": "T1B4D02B033510439FD995E453106097370E92A50C3C1916613737990C690167DE1D79DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820747, "uuid": "30d40238-fb6b-453d-b7f9-69dfa7651f50", "value": "6:s8qOLh8JJ6ulvBok+w5IAuaHvQ+JCUWR+u1MFXA98WFGqR3KIIYAGQO0cA1aHvQJ:s8JG3flvqk+w59JJXLu1MhA98WFGqkIg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820747, "uuid": "0999885f-6644-4b73-85c5-ee13569c9ac9", "value": 269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820747, "uuid": "f0959dc1-5498-4661-bb36-d6eb187db72f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820747, "uuid": "279d2aba-a2c3-470d-900d-ffe85f1e3893", "value": "OaRxT97.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f03f5ec-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864980, "uuid": "526458b4-7e2f-4ff1-a0ae-83884bf2f9a0", "comment": "Malware payload (Mirai)", "value": "ca34a320fd7f9781a94b9f6312aa71fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864980, "uuid": "f3f3ea6c-39ef-4024-bd4b-4e74a25bef61", "comment": "Malware payload (Mirai)", "value": "7fb1790f59d720733905f8f3540887826b910830acd5753c917af89a3f80ef88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864980, "uuid": "6103ce03-eb24-4fc6-84a2-09078f8913b8", "comment": "Malware payload (Mirai)", "value": "ba89f9846233bcb5d1ee4fe92e41f57b008816c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864980, "uuid": "da0f3a23-7a65-4afc-8f92-45c1c4c1976a", "comment": "Malware payload (Mirai)", "value": "1fd93237b905aeeb8b5832815cec813158176d6dc9b7914d96d0ede8dc0c0ad72ff36a2b03866ab09e284c917edc9e0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864980, "uuid": "eb81f727-cfa1-46d5-897d-574dad2387f8", "value": "T1DB639D66CC6A99D8C54C9674ACF08B750B53A500C6571EBB4ACBC9A28003DECF64E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864980, "uuid": "b1d90617-331d-443a-8275-575bf7d50e46", "value": "1536:4aRwtE1skRjDW3e3tJzSUsXDiU8C1/9DHKTAbVR:4iTsggenXsTiU8UVDqTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864980, "uuid": "67fc08b0-1733-4199-bbce-5285ec923593", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864980, "uuid": "4097b1d2-5292-49c1-95ad-34a429ce9970", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864980, "uuid": "b42a6184-8a24-4f1e-b017-0e0553b49150", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49ccc111-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830666, "uuid": "f6074d85-4c3c-4a8a-8b6f-a481f7ef2413", "comment": "Malware payload", "value": "e16f2af40d92ccc168df6ec6ea6f88cc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830666, "uuid": "b6e245bc-4159-4d0f-a070-f2e4d701108d", "comment": "Malware payload", "value": "7fbaa831321d2319373d969624a6be45577062f28cf952491aab926e6a6ff7e6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830666, "uuid": "6b3cbe6b-9814-4a26-8f9d-76f853cf2c2f", "comment": "Malware payload", "value": "7475d8cabc13090531857dce5ee09d500d0897e9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830666, "uuid": "58a348ff-188f-4446-83c9-edc9671e580d", "comment": "Malware payload", "value": "584992204d168b39888a9858bff8ed683b6bee2e42a8ddbf21e35c359c9f07e0ea93d959f443551eb978626285a725c6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830666, "uuid": "e46d238e-6135-4627-b1c1-1c8c0d7cd3f0", "value": "T17063F9BA0D33B7D0365807CF4724744AEB43543E992185DA6C2F4E682D82B66F38E9F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830666, "uuid": "0439a7ec-6cde-4073-bba6-b498ef8dfc4c", "value": "768:I8w/h62/jWs6oS+xISN0vP+gPbT3tr74lk+xkNxg4OEaoSdcSmQfTan6GdxYGwT7:I9l/AoSSMwkusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830666, "uuid": "25197269-b813-423e-b7fe-92f8d842d6a6", "value": 72565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830666, "uuid": "e8f68fc8-55c5-4353-aec4-68be8d11bd1a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830666, "uuid": "635ad2c4-6643-4904-84f5-d4205e26ef37", "value": "invoice-1645080830.pdf (54).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af833a6a-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858324, "uuid": "34b4b557-0f4b-4bff-8643-3b457ffdc379", "comment": "Malware payload (Mirai)", "value": "a5cf41f058084cc792c6c9ddaad3617b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858324, "uuid": "34efb51a-990b-4b2a-80ac-130bf1ba13f0", "comment": "Malware payload (Mirai)", "value": "7ff3744eaf1bfe511e41cf95de746849ce3a119ea14c61bf405ed18fc4fb9e7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858324, "uuid": "8716b9bb-4ffd-43bb-9be3-8fa9e9bca591", "comment": "Malware payload (Mirai)", "value": "3b813822243bf112cdf559a0f30a6567b2f2af00", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858324, "uuid": "fdc9e153-e78f-4781-98bd-50056d73a87e", "comment": "Malware payload (Mirai)", "value": "3f1bb9c27413b6bc6b152033facc3e16de52c7cc32d3844b744085e491f5ce7c2f695d79bd196f02eff0a5f020ff3bb7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858324, "uuid": "f99e8f18-f972-46da-9c47-201461b8d764", "value": "T1EF734A96E400CD7DF84FF67B84270E05F624B7919B830F267A6AFD937A710894A15EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858324, "uuid": "1ee59e38-cf82-4cb0-9788-94c2b0fc7ede", "value": "1536:oe/OOin6QGPlEzwPazVT40xSL8uobolWxZxmOS4kiKigzTPK:oe/OOiKtEzQeVk0AebPZx7S4kiLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858324, "uuid": "7c0bb4d7-ae9f-4dc7-a4d2-579e32b3fc73", "value": 79372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858324, "uuid": "dfd65f53-7c18-4df4-a85c-fb4f1d261d03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858324, "uuid": "d78f37c7-0356-401f-9296-6a24656b8d4e", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "830474e3-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830762, "uuid": "c59cf118-c94b-476a-a5ce-2d71725582a2", "comment": "Malware payload", "value": "c47e7384efdadd60789d7a426c790728", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830762, "uuid": "a616af47-7373-4f52-a633-f6aa01cfce48", "comment": "Malware payload", "value": "7ff7642ab1ad39184d1d82bef42a00279f847fb978133121a64e149ee15f15e3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830762, "uuid": "5bfd2c60-8340-498e-ab11-1895e94e4c7a", "comment": "Malware payload", "value": "d5b49a13d5c1ba7752d2f75e1d5245a0da6b89ae", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830762, "uuid": "60a808a6-a67f-4cab-b4ed-8d770edbee03", "comment": "Malware payload", "value": "79bee118ccb7b0ca2c64227cbd89cf18a153c4dddb8d6a47e4e47ad26e38864aa9f876f6f4f2c41ec690e36113a415b3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830762, "uuid": "b618bd25-a70c-42c9-9016-24204086ef9d", "value": "T172631947E9B761EB346F924C16C272DD4EF8E19A5C120AD98C2F2A0E66DED3B10D411F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830762, "uuid": "ee484dd4-fc3a-47d4-9c6b-aa6b2cef6094", "value": "768:I8w/h62/jWs6oS+xISN0vw+mkNhldkfScBYrwz2y8kTAlGB:I9l/AoSSMJjlusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830762, "uuid": "491ba204-d74f-4b1d-8bd5-8a88a4ad0b0e", "value": 69749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830762, "uuid": "13e5fae3-fa3f-4a2c-b968-11f66f262cca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830762, "uuid": "a9093ebb-9e2c-4607-aa97-325e72f3ae53", "value": "invoice-1645080830.pdf (33).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14f2892e-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825423, "uuid": "a1c78dde-5d12-4968-a43d-990a6ce97df6", "comment": "Malware payload", "value": "11ab955eb22ffd0e85c240a1c47735b4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825423, "uuid": "a738c30e-3305-4be1-ad45-dbc133dbe158", "comment": "Malware payload", "value": "7ffe494b1af71e93d80f2bef53bde47a4825ba1d74a11442bdc841076a70fdf8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825423, "uuid": "eff39892-7871-464f-9f89-d87c366be5aa", "comment": "Malware payload", "value": "6daf829095a012cb5334e5d37d61916cbca9f307", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825423, "uuid": "23ca8d4d-2910-479b-8db0-7d75915c5356", "comment": "Malware payload", "value": "b04f103572f067e278d685adf1af1d7f5f01c4dacc74b17f15bbe71a1aadd06c8539ceb53aee71d499c19bf8ce65de2a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825423, "uuid": "009fce1c-aec1-46e1-8585-11a733d79c45", "value": "T10B630A026501B8680FE72A5AD45A24D97C6EDDBBBEBCC401D4743252E09DF7BEBB3811", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825423, "uuid": "df6e9167-8a70-40cd-a3a1-1476ccd4e12e", "value": "1536:I9l/AoSSMy5nPmbrOktVM4iGru9jaOmB4u4hqcRG0kb6kg4OJMTmRl6ERlKyusrm:I9l/5MiZusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825423, "uuid": "b34074fd-7e79-4a72-81b8-a007905acb88", "value": 68723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825423, "uuid": "b3da18ba-dd52-4b65-bfd4-a053d2e3c56e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825423, "uuid": "4e15c45b-5e9a-46c5-9592-edbc969968a1", "value": "invoice-1645080830.pdf (63).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a32c4e8-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824680, "uuid": "173c132e-14c0-4a48-825d-f68d8488ba6d", "comment": "Malware payload (Mirai)", "value": "2b4926cad34b37ade80a23c8319f814d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824680, "uuid": "932af20b-a567-4bc7-8892-903ab70ce520", "comment": "Malware payload (Mirai)", "value": "800018ba39da0ed4d8fefb4e674e6b7783b0ac082b02d381fb2330d3384ca6d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824680, "uuid": "f231ffe6-5939-4a99-9250-8a55f273d9e1", "comment": "Malware payload (Mirai)", "value": "e3e26e451d12a1541ff63d8360594c3e4364eff8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824680, "uuid": "6a8a4a56-a22c-4951-9af3-3b2c0b43a4b1", "comment": "Malware payload (Mirai)", "value": "623c9d23cc1eb338b29ed681550c96b2ebe7517a2456896ade40ee4013c715943084440f9d5297f579d4f19c382d4727", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824680, "uuid": "edf227c3-0121-40e1-9f4c-4fccf5bd99c4", "value": "T1FBA3EA1A7F12CFAEF769827007F74E31965837962AF1C585E19CE9401F602CE681FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824680, "uuid": "65aae485-2b10-4f70-9de3-61fca318d891", "value": "1536:/i3vQOiy5Qc8o5dRqYGjPisIwB/TfjoiseFpWPWIl61d6v7Pvy:/i3vh6cR5dRyesIwB/TsiSWI4a7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824680, "uuid": "27a8659f-f4d9-40c7-8db4-bdef807c8294", "value": 105060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824680, "uuid": "386b4c65-e1f0-4bf7-9511-4146bc61535e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824680, "uuid": "db6a0013-b57f-46a9-9a13-a497f495063e", "value": "nova.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb848d06-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796604, "uuid": "9df35cac-7cf6-47fa-b31d-a23922f045c4", "comment": "Malware payload (Mirai)", "value": "39edef6e25c91432e853d7a45f5fcc63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796604, "uuid": "795fd43e-7c2c-4313-8b4a-51e6eb4444ca", "comment": "Malware payload (Mirai)", "value": "80097ab5821aba0bffe2c96876ca44ca55f939b739cf3876ac0d6d9c160e7bec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796604, "uuid": "891a9c6a-8654-41ec-9d3c-6d6a67057b2f", "comment": "Malware payload (Mirai)", "value": "8d0112b014b40c604f655de00ebb004549621b74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796604, "uuid": "9f072eaf-1676-4a35-9855-42ba123195be", "comment": "Malware payload (Mirai)", "value": "743aa29fce082652482c67434893867c7361938d430e4bf00d578625f54c291fbf411402bd231f159d5d042b561020d5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796604, "uuid": "4b6041fc-82ef-43f6-bc3f-ed5724e3c77b", "value": "T11903F1ACAA0511F4DE5DD07527F80BD01E242B2BB4E35D0079E5FA87DFA0175E843ADA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796604, "uuid": "c04faa86-6cb4-4f2b-ac7d-64751c1e5d64", "value": "768:kyI187obKbg/ox9rfM0a1hXjAT4GCrMeHdGDBzuZDtJgGlzDpbuR1J5:kyf7oGbgKa1hXsT4rMebRHVJuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796604, "uuid": "82eeb1f7-9c17-4717-83ca-3f5cf8d661f6", "value": 38124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796604, "uuid": "475d45ba-e99f-4b65-8bb0-39a3d7f079ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796604, "uuid": "8037d342-365b-4432-a36d-905e634d8699", "value": "SecuriteInfo.com.Linux.Mirai.9816.24975.25520", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf575aec-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825279, "uuid": "2221f753-6d10-42da-bc90-d26b32d3e969", "comment": "Malware payload", "value": "9c3d519cf8f9466f3bd662f59909ecb8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825279, "uuid": "3eb70342-1c1f-4437-a7f1-9a1bae41c710", "comment": "Malware payload", "value": "80acc915c0ecdc9478152642d204c2e3e42bca7b38baa6dbec89a06f1660d7ee", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825279, "uuid": "133ddf7a-7e72-41c2-a4b4-dc0672125100", "comment": "Malware payload", "value": "47a99515a023cc12e66bf22dc022a213a58e7699", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825279, "uuid": "2d26db91-a2e4-4b5d-b603-233f86bccb30", "comment": "Malware payload", "value": "373edd0bf6fc74bf6108b36a9f21cf7ccb6ed168037ff26e8b7cb20e1b5843bdc02a2c930c68d723ae72f2f7fd72972d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825279, "uuid": "ac6fa317-09f3-470e-8338-b6d761edfd3b", "value": "T1E7630857CE43E69625AB2397873A51A61EF847C2622ADC36FC239F07091BD42337934D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825279, "uuid": "0916dea0-21d8-47a9-9bca-1ec02842583e", "value": "768:I8w/h62/jWs6oS+xISN0v0miEnh1yAlUBGfDx5mhMYpSypNmp70+phXcnQ86/FIT:I9l/AoSSMPzusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825279, "uuid": "74ebb637-76af-49b9-9794-e3c3f9547859", "value": 71493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825279, "uuid": "785fe3f3-6809-41f3-998a-2d53dfc18e65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825279, "uuid": "89cda0f5-76a3-48f5-827d-2bafe5e7cede", "value": "invoice-1645080830.pdf (90).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fa407c1-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854781, "uuid": "d9a767f6-baaf-47c0-a860-fccdd3f6f1ef", "comment": "Malware payload", "value": "18dfa03ce68eb75b466c823b14fc4679", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854781, "uuid": "8aba9573-133b-4ad4-95d3-711c579036a8", "comment": "Malware payload", "value": "80f0be555d21b7ef58f529c7d8c85b94a7b0280964d59383eeaa7b5b72495827", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854781, "uuid": "65338676-fab8-47ac-b60a-e4323dac42fe", "comment": "Malware payload", "value": "7bd72db236f42b4fe0770cc7ba8596684601e215", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854781, "uuid": "8f117a8c-a873-41cd-a686-573c2be45c8f", "comment": "Malware payload", "value": "4ce3813636f1d1f4279e5caee274e9812eec016111003f2b5006ff42c757e7892e9abe29b1362d8171cf0e594413afb0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854781, "uuid": "80df7f5c-2f02-4257-b99d-f7a76af4554c", "value": "T16C632C8B0220238BD5A25A6C737B155DA3D10A78CC53F3BFD865C1AA1642E8C972EFC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854781, "uuid": "c9777d17-ad10-4965-9705-32fb08238891", "value": "768:I8w/h62/jWs6oS+xISN0vOKcZFuUdkfScBYrwz2y8kTAlGB:I9l/AoSSMNCusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854781, "uuid": "93cc12eb-7c88-49df-967d-670e164922a6", "value": 72513, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854781, "uuid": "1059d48f-7f86-4088-ba25-9a20c290bc40", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854781, "uuid": "1670d981-644d-4346-9bd4-77e413551269", "value": "invoice-1645080830.pdf (44).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c21e767-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766797491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797491, "uuid": "9270d09e-c2a7-496f-bf30-0e59a99359cd", "comment": "Malware payload (QuasarRAT)", "value": "0610a0045b51ebb20f65094835184059", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797491, "uuid": "2b2a54e4-7e54-4bd5-b7b3-f8b17a27eda1", "comment": "Malware payload (QuasarRAT)", "value": "821a72cc451b8937d65c39ea4e7b04634a809e473945662f711f6870d932e84d", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797491, "uuid": "34834306-57dd-4b0c-9c01-d2928092c6c5", "comment": "Malware payload (QuasarRAT)", "value": "009af7f85f80775d133434283d7092932d9ac3e4", "object_relation": "sha1", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797491, "uuid": "3cc74fc5-9022-4a8d-ab2d-c20d0e4ea727", "comment": "Malware payload (QuasarRAT)", "value": "8156126becdfcc2167ed70ab48f554f316225d995a81760adf5791e7f853921f7e52e231d60709929c7c95d7209aeba0", "object_relation": "sha3-384", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797491, "uuid": "705bbf6f-cbec-4354-831c-afe7b7d89727", "value": "T197641971874599ED221FD2871D10686847AEA9F7302194DA6F6E0BB9CEE7F60CFC3814", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797491, "uuid": "9abf86dd-8938-4106-84d3-d521213011ee", "value": "6144:Z581i2otNkQqts0HeFMPEKSPlVY7dx+VJ:ZF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797491, "uuid": "873644ed-bdcf-4a5c-9b29-fb9c833b91c2", "value": 331170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797491, "uuid": "92c61b19-eb2f-4a8c-912b-20de731c108d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797491, "uuid": "f33cbd51-c500-4d2c-87a4-4a0f8288d8b4", "value": "EdgeUpgrade.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e4c4686-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830727, "uuid": "e9639432-541c-4dbc-a751-3b1cee6f7e5d", "comment": "Malware payload", "value": "f5367dae58abb5917c59362efe62cc64", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830727, "uuid": "5c4b2bec-6f88-40ac-8733-5b3d8dd53595", "comment": "Malware payload", "value": "8254bc767f54848a8fd991ef98e6d57f8fb11b69d0945c4f336891fa237eae0c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830727, "uuid": "62b66c03-39ce-47c8-96a3-7e862775e822", "comment": "Malware payload", "value": "dc983937113c11606a15ddf80a89020628b2b634", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830727, "uuid": "66ff2164-3779-4638-a691-c8a9799d5e00", "comment": "Malware payload", "value": "ba17cde36ef08b28f7ef389b24a8da90e4c806aaf0b36471a66766629f56d4dff992c1f00b7cc431e50f8623c14f8f27", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830727, "uuid": "d5aefd06-14db-42a1-a50e-399648ff53a6", "value": "T19D632A1407665FAC56FADFC9E1C68BA7E1DED5FAD30020CC6A6D40BE1D0DFE61429882", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830727, "uuid": "f8ffe0a1-594a-4c86-ab9d-7312b6a3e2da", "value": "1536:I9l/AoSSM2W3+1hYH/0+tnhdeQiMJaLxENGM564naar9TczTvy076ZBl50+1pWlX:I9l/5MpvusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830727, "uuid": "3354aaff-c72a-4d42-a24c-a971b51f0d21", "value": 72547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830727, "uuid": "b134083c-b504-4afe-a992-d02090bff342", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830727, "uuid": "d0346132-018f-464b-bc6c-d13e4e07ab68", "value": "invoice-1645080830.pdf (38).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8453c0-e2d0-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766804739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766804739, "uuid": "eee55787-c7b3-43bb-990f-63136d62850c", "comment": "Malware payload", "value": "350aa5a88acb5aa62ac2389de3ee9700", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766804739, "uuid": "7730cece-91c6-4ea2-b3e7-a784aaeed2c3", "comment": "Malware payload", "value": "825c104d17a330ab2b0e8ed055d621535433d00eee46f23e7e6e955fd67196cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766804739, "uuid": "3a436139-c065-424b-9c14-1d19037c66da", "comment": "Malware payload", "value": "2cf61a994a2531d85dd323c0bdea322f31ba4cec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766804739, "uuid": "647fabd5-8c10-49bc-81fe-4d6dc1521c8e", "comment": "Malware payload", "value": "4fbb418b64ec7ced7880c6262c739cc74dd58c947a484721a1b3ffc23ac5c52e6b875a57e5281cd1498927d903e52aab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766804739, "uuid": "55564a72-2c18-47ed-b173-3aeaf04678fb", "value": "T18B21B926DDDC74B7F0E513707C1891B9DB51D36D2A0A4715C3D494109C2176376F5150", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766804739, "uuid": "acd31317-cc63-430a-8389-47719c5cc945", "value": "24:ElgZx++4MWC7hKKkjD8GcRQ/sZGXW4lSxcKe8n+79ABwNBW:MgT+z1zKU8PRQUGGeSs8n+pqgW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766804739, "uuid": "3219f201-c15a-4eb1-b5e8-b96f848cd296", "value": 1121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766804739, "uuid": "8050d371-f16d-43ca-b99c-e34f6196c8ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766804739, "uuid": "56fbbbd8-d1d2-42d0-99fe-7724efc548fb", "value": "x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "169d8ccb-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859356, "uuid": "14f46d59-b685-48ba-861a-848e96685489", "comment": "Malware payload (Mirai)", "value": "e9de4ec2d3aa203e7282adfbe854e928", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859356, "uuid": "8b284033-b2f1-4ade-b38a-41bf1975139f", "comment": "Malware payload (Mirai)", "value": "82ee39c1318eee9fb39857efb933d8d5bcfa1842b55128ffff261577cafb4250", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859356, "uuid": "f80c35e1-c75c-43c9-b839-1d20ad15f503", "comment": "Malware payload (Mirai)", "value": "599e18ff126e334499c91e9479fd99a94013506e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859356, "uuid": "f4a199cd-f93e-4455-a90b-c83de265c67e", "comment": "Malware payload (Mirai)", "value": "c707c4b709fa769de2a0a97ee1761f89733930eb98596abae2770ceba3c87e576d9146bd119aa5a4ed874c0b344433f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859356, "uuid": "f586e280-255d-4ba1-8a0a-dbb0932c7d15", "value": "T156935B22FA75193BC8C4A47722F34375F1F6438A24E88A1E7D710E8DAF646502297BF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859356, "uuid": "87c84411-27a0-49b6-888c-10a2b78e2741", "value": "1536:mXLQkccTPBL/B/jbukIm5Y+gbDtZiNNT5RdUgL2atSi7GtH:mocPjb2QeDINNRqbL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859356, "uuid": "6bea496f-154d-4bdf-85ce-72d22fae4573", "value": 89184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859356, "uuid": "e4a7a96d-9b64-47e3-8b8d-eb5dbe531cce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859356, "uuid": "c2630d89-3958-4897-adaf-accbe6b9e5e0", "value": "morte.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c077601-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823448, "uuid": "2c79a86f-1c45-40aa-901f-962e0acbd4bb", "comment": "Malware payload (Mirai)", "value": "aaddfeb6998f386ea19d9c8284dee1ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823448, "uuid": "076bce19-0dcb-4462-80df-01a89a74ce67", "comment": "Malware payload (Mirai)", "value": "830385fbdbcc2949612d47f9128377bdb8436292af60064b4b2f59dcae9eb533", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823448, "uuid": "b7d6644f-3226-4fc3-9f91-d74a0ee647c2", "comment": "Malware payload (Mirai)", "value": "9a1253a67c987de76fcb51a1b02f3d5e8ad57bf3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823448, "uuid": "323c5b5e-4749-4d8d-b5c4-5104210e4a75", "comment": "Malware payload (Mirai)", "value": "ff631f9c70a460cf1e07faa02e8c5ebbc4041318831ab54c2e7e02e90cba2ac58c13ba3e944315b3e2475dd3d3406b63", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823448, "uuid": "91d3ca91-552b-4cc7-b551-571a4fe5057c", "value": "T14574F8113B47EC6FFD6A43B40AF78A7477DC65A22561889AE26EBF4D1F310D10D08AC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823448, "uuid": "720421bd-c106-453b-9ac6-98cae10d172d", "value": "3072:C9Q3Rf4V+JKBLCwvanDIryZTl/BDftnpj1PR2bm47Y7+4T/sgqT9AtYPVpMHyGEQ:H4V+JKBLcnDImiSfhe5VpiEex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823448, "uuid": "aebf3779-cf3d-4a12-8510-21b0e3441f23", "value": 342256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823448, "uuid": "1f9279a3-10dd-4010-aaf4-fa8629cafa45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823448, "uuid": "02f2c16f-4ae3-4349-9e0f-b6f7dd3d9c7d", "value": "bin.mips64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a53506dd-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873769, "uuid": "376237af-93df-4682-9906-5362f8777ac2", "comment": "Malware payload (Mirai)", "value": "620c72800362d674df6bdada5bfc9b89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873769, "uuid": "0d3d0183-7dee-490c-90bb-e840707e605f", "comment": "Malware payload (Mirai)", "value": "8369ee283a230809a8d3e3de59127673e36587f2823bdba6e1835152f97bfb9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873769, "uuid": "7b59ce2a-7b13-4fa1-a8a1-5dbfa0ee1198", "comment": "Malware payload (Mirai)", "value": "1c686c8ef755df4a132d494f9e4a1b25087a7af0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873769, "uuid": "8fd2fe30-0e5d-47d8-8dec-9a49bfe1d318", "comment": "Malware payload (Mirai)", "value": "f02e1501acab4226ad1aef6e8219c57ede38950a53a8dc091b68b3f9ab4091482b0aa187d2a83587fff61565054c9684", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873769, "uuid": "42df5dc9-41cc-4c8c-b29b-9c1d6cf439f4", "value": "T1B603F1A7E07FD736C1A55DB10B2E9850EDD2FE0708EA4B7700D92C5A4C7FE813A16660", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873769, "uuid": "f3b60a55-23d4-45dd-8b88-ac71fc90cf40", "value": "768:pwAN2KPKFgjX1jsusEQ3zhPzO1r7ShYOlIX9VI3CXRC00ZDs7rjhx0Bb2:pQW71jsusEQ3NSRShYOlIrkZOab2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873769, "uuid": "0ab1b9db-5957-415e-90a9-669749432938", "value": 41224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873769, "uuid": "c61d80a2-9788-427f-88c1-c9e31401c035", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873769, "uuid": "ec9311ff-2e89-4476-b3d4-f2fe4f42bf55", "value": "ub8ehJSePAfc9FYqZIT6.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac2dc7b8-e32f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766845434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845434, "uuid": "7a1c7787-8ef3-4c11-b639-38dc3af3c84f", "comment": "Malware payload", "value": "40fd7ea75b7161813c27651b1bcbeebc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845434, "uuid": "41ebedaf-5038-40b9-92d8-342ac95a2438", "comment": "Malware payload", "value": "838ae325235da5bcba193fb0cf2ac55597971bd1e56d7c2f423d4df996064a9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845434, "uuid": "0f5ec7e0-ed70-4695-b450-4495e0ed5152", "comment": "Malware payload", "value": "84ab9bd63c51dd82c18383ac5e3ad512c76402b2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766845434, "uuid": "f8cd519b-a03b-48b2-9830-e9fb2b4fa8e0", "comment": "Malware payload", "value": "59a0506987b9b360e4773af2c8dd13a67021ea326dc04e76eead53f18e344a153a775c743002ac7087a7bb83ed772006", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845434, "uuid": "b1a06b4f-578c-41e6-80d2-b018050e79d4", "value": "T1E4086B4263EA05C4F9F7DA758AE65617C673BC122F3095CF221C17291F336E09A76B22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845434, "uuid": "055816e8-0890-46bf-8a9e-23a1e3a1d4db", "value": "e05e31a5063c852520cc6950fe83ad1a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845434, "uuid": "1ec99368-b0fc-494e-8693-e49e9ec5d0af", "value": "393216:YIFqKb+iUHdZQKPAg9hAJLPU689cN0DshEQu58EASEhoIaE2lShUcBs4DJ7G15Po:YndQmQJhnVn0vSa5rs3wbI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766845434, "uuid": "1385d7e6-68be-4434-bd9d-1428725f7939", "value": 82352258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766845434, "uuid": "09ba836b-de03-41dc-971b-830441c7b807", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766845434, "uuid": "bf4247a8-afcf-41f6-a564-cb4b0076d3a7", "value": "Updater.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ff20132-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864311, "uuid": "f006d779-c487-4dce-9cd8-0bef23b6ae89", "comment": "Malware payload (Mirai)", "value": "84fabca69e488115ac3248a443d172d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864311, "uuid": "46970f3b-0455-4fe6-b088-8f6f99986d0f", "comment": "Malware payload (Mirai)", "value": "839666e3b8163a82f6f227750c006b6ec389ae5a4368d2c3d29572a65d07e581", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864311, "uuid": "e978e336-0e90-491c-bced-f49354f0a8aa", "comment": "Malware payload (Mirai)", "value": "657e5234d6177ce0efef57394a373c5814dc6f22", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864311, "uuid": "ecfec458-39d8-40a0-ab43-c2c1c609aca1", "comment": "Malware payload (Mirai)", "value": "9492c0ce6638c0568d1eb46e7d63de61065adb816457526b6bacaf5a9229f3de6523ec059aa936e51437aa111aa6da43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864311, "uuid": "2ba4570a-93e9-462f-911e-e30326abe509", "value": "T13BB36CC5E257E4F5FC1601B52137E7365B73E43A2029DA87C7A8AD32EC91941C60B3AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864311, "uuid": "a4d5b390-f953-4d67-a224-d3b788f6c637", "value": "3072:WOZOzv2822iInBKJNGqNWC+VLPweqzfrdUyMV3:WOZOD28JVBKJNO3g5UyMV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864311, "uuid": "8b3c773e-f7b4-4025-976a-dab16cee6c63", "value": 116840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864311, "uuid": "1ec5b24f-d311-4e82-8231-0597f7af1a8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864311, "uuid": "f506a52b-f1a2-4dbb-b50a-913ed6e8b3f5", "value": "miraint.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9270d55e-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857846, "uuid": "a33cc2e1-85b8-4b89-aaf7-a8e691f2b250", "comment": "Malware payload (Mirai)", "value": "07f6be880a1752a69e30e0008239ccf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857846, "uuid": "511f0a6b-2037-4617-8440-b71f7d5e58be", "comment": "Malware payload (Mirai)", "value": "845e156b2015830cd820689c6723fb295ba14a09ea892799712328d1328ddd5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857846, "uuid": "5003c635-bce8-4e70-b828-f74cb072e559", "comment": "Malware payload (Mirai)", "value": "fb616a6ae04fbf50517000f5fe29b11bc5aefd53", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857846, "uuid": "dafb8ce3-348a-40bd-ae17-f54b00755aac", "comment": "Malware payload (Mirai)", "value": "008daf63d4185b8a6f876349a035a82fe104970614a3f76a8c697cf985d311908bd410f87b6bd7874ed26e9f87233bb8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857846, "uuid": "b4d47f91-94f6-43ca-8b56-3ee75b0f820e", "value": "T11D733AC6E000CD7CF84BB67B84674E11B964B799AF430F26B66AFD936E710944817EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857846, "uuid": "c16959f2-aa51-4a53-9aeb-c27b6e9d7699", "value": "1536:K5oh7baMB/XEiQGvgxL4TSJxV8uXQZbT7a9+aBlb9eqCsTPU:K5opdfEipIxke3nQ1A+8lb9ent", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857846, "uuid": "ea26ef93-62af-4e5c-89d3-8c67353c7cdc", "value": 74188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857846, "uuid": "03a827b8-60bd-4d4e-bdc7-a4c0d0c43eed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857846, "uuid": "1d27aa0c-8e54-4e07-acaf-03db12b16dbc", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73b60dc3-e34b-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766857365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857365, "uuid": "7663c403-5e67-41ac-9d41-46e89221ba75", "comment": "Malware payload (AsyncRAT)", "value": "54e814b99887ee7082e0762ea6b70d40", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857365, "uuid": "60840e39-6061-4b79-9c67-e1fcf35f75b5", "comment": "Malware payload (AsyncRAT)", "value": "845eded92d5029c96fe08074d9622834bc9b7d9f52793998eddb14a33ad92094", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857365, "uuid": "0de2a8b2-c84f-4be1-9c39-f02c4f91c0c4", "comment": "Malware payload (AsyncRAT)", "value": "7151f510cde08042b01fcde2db7ea71d2668a489", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857365, "uuid": "078b7196-82a5-4965-8aee-61f2882cde19", "comment": "Malware payload (AsyncRAT)", "value": "e6f2f98412f9c3ef844ae42b537a240a7b4179466b5921d41247bc33249fa8c353172adf1754bb1b45b36daab266da93", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857365, "uuid": "3c152778-1564-4ac2-aec5-d27006c5f8f2", "value": "T1B6233A003BE9822BF2BE4FB899F22145467AF6637603D65D2CC451DB1623FC686426FD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857365, "uuid": "2f3a3eb9-de0c-4ec5-b7f9-363b82f72d3c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857365, "uuid": "f94e921c-af0b-4462-9d2d-f157b7c08e01", "value": "768:Pug/NTjgkH7F7WUHF9pmo2q7X/d5tXpHuPINzjbDgX8iTz6m49O4Y/0wOhdBDZ1J:Pug/NTcIb2cTL3N3bcX5NgVuOxd1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857365, "uuid": "17d14270-98ca-4073-aac6-4554c73c5f68", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857365, "uuid": "9574b0cf-36e3-4081-8bc3-df19191b6e74", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857365, "uuid": "9b686a05-fbe1-4cc4-abf3-bfb1ffaef9dc", "value": "CCleaner.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2703b012-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854659, "uuid": "45799527-a62b-4ccc-992b-a18396a368c6", "comment": "Malware payload", "value": "0353062d1896221eec141584cbddc339", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854659, "uuid": "01a55ae8-c917-4abd-b1fe-9a0383a45965", "comment": "Malware payload", "value": "847d0349051e90a50435f93ec7676426eb1aa399f4f91a346e92d937fe64b5f8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854659, "uuid": "9ee13d2f-bacd-4270-9e11-d6bc74c0f1d8", "comment": "Malware payload", "value": "d2aac105d5561a3b0ca7676adc4a5e6fad70055c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854659, "uuid": "2bb51f7c-0987-4789-9591-75c15fd3c1e1", "comment": "Malware payload", "value": "e22ab28fb295ce74f16e62706518dfc10687ad910a1d8d34a4051efc3a9c50de2e4a15ceda72fa857c42b2391c8b8bb3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854659, "uuid": "1cb9683f-d15e-4a4f-a719-617a7d490fa8", "value": "T1EB633BCBC7972D01816A38C0DA67DA95517E05BA32DE44EFF2A5769010233B7DF22DE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854659, "uuid": "507631a4-e775-45f0-a4eb-3622a0d084d2", "value": "768:I8w/h62/jWs6oS+xISN0vzkvnLfgPdkfScBYrwz2y8kTAlGB:I9l/AoSSM4CusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854659, "uuid": "f3f30ab3-cc6c-4022-bd71-7b1a11238a32", "value": 68685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854659, "uuid": "d1895b7e-fac5-449d-bbb2-cfa28b284bbf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854659, "uuid": "ca1fe684-90e0-4e53-bdf6-3ffae4eb31aa", "value": "invoice-1645080830.pdf (68).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc1efb26-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865217, "uuid": "fbde39cc-97a3-4ab8-9320-08694b9e1a9e", "comment": "Malware payload (Mirai)", "value": "8b98d5d9bd6e3c48cec29d9a2120ab43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865217, "uuid": "23c86724-ea2f-4a3b-b388-84223abf0a3f", "comment": "Malware payload (Mirai)", "value": "85bc8eda0b6f6db812642a498e08c7cfd7e0c2edf26357e9d7d68edc7d0b5483", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865217, "uuid": "015fcb4e-c190-4178-8b0b-a68d20fbd579", "comment": "Malware payload (Mirai)", "value": "cd0ce129fac53e8a9f0a1a0f5e7bfc000156930c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865217, "uuid": "4564e10a-967b-4097-ba9a-c1025bf9b09a", "comment": "Malware payload (Mirai)", "value": "f21ae2bab124bd738e2c20f8b0fb1efcc5f90fef161b3421a88374068ee749c324ee840ca027fab3bb221735640ebd16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865217, "uuid": "a6616b25-30dd-4c3d-9a4f-0a0d56df999a", "value": "T18C836D42B3184A43D9A749B0293F27E193FF995010F0B7C6654EAB9A8276E37144BFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865217, "uuid": "17714107-981f-483f-a643-268dd63c2a50", "value": "1536:YUgj9S9CFbMRxPx61TkqgDzTS6s/cTY5RVtkTAbVRq:w4CF+561TkqYsEQqTAy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865217, "uuid": "b11bceb5-5d06-43e0-a302-d9ca290a29f6", "value": 83236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865217, "uuid": "c4da5af5-5054-4965-803c-f5bace110c88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865217, "uuid": "f494593f-1da6-412d-b558-b77b6fceddc3", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce090b3-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873808, "uuid": "1ace9b4a-1f4e-418b-a2bc-695631b941b2", "comment": "Malware payload (Mirai)", "value": "7544e738c628e6387b1542ca86c1c99b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873808, "uuid": "727c7818-ad81-4260-8030-26a68e1ab4db", "comment": "Malware payload (Mirai)", "value": "85deba50b3cb7f918101f76a960689103d76942901959e5b620747d59fedc9e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873808, "uuid": "5bf669ba-5b5f-427d-8d1e-e2f66d24ddeb", "comment": "Malware payload (Mirai)", "value": "14acdde87cbf382fb5c4cd215edd95420d53951b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873808, "uuid": "12d97c09-c089-4365-acfa-cd718b6fb2d9", "comment": "Malware payload (Mirai)", "value": "1ee78ff0025e8e32a3c58f7b855f8242dcee22952e6302e7be434b8e246c77d91cd8f0dc972a958035d3bef3041fc7b6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873808, "uuid": "e5cc04bf-a22e-4a51-a7ce-a74e4a366eed", "value": "T1C3834B56FD814B12C5C1127BFB9E428D3B2653E8E2EA32079E259F3133C795B0D2B855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873808, "uuid": "50f6d808-8c31-4d6f-b2cf-7199e6443319", "value": "1536:OWE62WUpbPFozwo0mztEG4kGLYH8HSgkIdbisndgOVgvTM:dE62WUBmztE0CM+jSTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873808, "uuid": "97188269-7f19-438c-92f0-ee0ca5e30c18", "value": 87388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873808, "uuid": "b95c2793-43d7-4dfb-b216-ff9893427c61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873808, "uuid": "83c6e3e7-d252-419b-af96-ea20a3ce032c", "value": "ub8ehJSePAfc9FYqZIT6.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cba0920-e348-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766856011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766856011, "uuid": "93d01781-da35-427c-8b08-9ac23d8cedf9", "comment": "Malware payload (ValleyRAT)", "value": "a1c38ea4c7b625ec8f26922de6c045ed", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766856011, "uuid": "139ef3f9-31d5-4c54-ae6d-add743bda93d", "comment": "Malware payload (ValleyRAT)", "value": "86496d0fc8c507967ce76422e9d6521e65b2ea980d23738a0f58570c231382d4", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766856011, "uuid": "1c7afa3a-1d07-4657-86a1-bead0874d9f4", "comment": "Malware payload (ValleyRAT)", "value": "b11966a7ce134d59a81c2da50710a29f1a2d0c1b", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766856011, "uuid": "f4c7ed9e-564a-4c02-b3f2-9c6566212356", "comment": "Malware payload (ValleyRAT)", "value": "4684307bfefcb0651f4d9da6067a56443eb7e373a0fb2cdacc7fe6aeef8136cd8e768902c2ccde982aaf6ed48a3194cb", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766856011, "uuid": "df935c3f-5480-4f57-821d-d1372068a469", "value": "T16E26126367254056E0F9CC3D8537BEE132F7176B9B41B8BA65EB6DC129224E1F223843", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766856011, "uuid": "d2e7e175-eee8-420a-95dd-d7cfd0859d29", "value": "6b7122e461aeb4de937a70066aa185db", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766856011, "uuid": "d762cff9-8de9-45bd-8795-4e676d08a38a", "value": "98304:Mo66S4JM9C0Uelw0nI1WeBx3SVnlp8OUrafGx7lKz4pKHXjIdhMAvow6LF2pML:V6/m4U3SVlEOG5lk4sHze6F52p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766856011, "uuid": "a5ea633f-c42d-4a41-bd3d-58a4f82c6bf5", "value": 4769792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766856011, "uuid": "3ba39920-f273-4786-8b07-d009c02d8934", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766856011, "uuid": "f07da370-1858-426a-8c61-eed2148b499d", "value": "hr.msi.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a9bc97a-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823446, "uuid": "b8fc7a1b-1482-45dc-9831-1577e25536d9", "comment": "Malware payload (Mirai)", "value": "97ac9c082c094a2b40a4132f00bf83ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823446, "uuid": "c7be5283-8394-4707-886e-23019a966c32", "comment": "Malware payload (Mirai)", "value": "869a53ce114eb9fb3bbc84bba71d5bb9facff46a5af10327e80c3981feaaf679", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823446, "uuid": "099e1c62-e90a-4995-b3f4-64a382f4f074", "comment": "Malware payload (Mirai)", "value": "b544679b545489fc330dea14d9658f3a738c493a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823446, "uuid": "c408e237-9c4b-47a8-89d7-62f36032dc8f", "comment": "Malware payload (Mirai)", "value": "9eede2ed00f1ceeb7d6a3f5bc7af043fab65c46f533d6eb4c2507f383472dabe257ac0ceb894acfc9f4400bb4573dc18", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823446, "uuid": "be8fd4ee-6b76-4b68-a800-af0271fc26b3", "value": "T1D654D60A7B519EF7D46FCD3305F98B0128CCB45335642B7A3670EA5DB62A58B0AD38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823446, "uuid": "48689b4f-eba7-4c61-a439-5a1b50645b69", "value": "3072:FXb0nryFoAuINHwtxiN2asQdzD7WPtOrTqBkE7S6Vj0pnGqpLmT4Zm:FAr/AuINHwhEJDx/JEFjQJmTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823446, "uuid": "72a912d2-ae62-481f-b614-ef0ee0f2aef4", "value": 305548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823446, "uuid": "e772946b-bea0-4119-b471-f97592899f8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823446, "uuid": "bc093091-7f15-4f22-872f-bab831eeec8e", "value": "bin.mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3de2d7a-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854976, "uuid": "b68bebef-1797-472c-af04-244c5bf2a7ab", "comment": "Malware payload", "value": "e85f4308703d9c26db0b68cce001b434", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854976, "uuid": "10df82ae-3899-4dc1-954b-e4b5cb030c09", "comment": "Malware payload", "value": "869a89e2912426b712b9b99ea5ad6c325661ed78dacb9420810e490c9ef199bb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854976, "uuid": "3d365cc9-98ae-41a9-9cec-109957a1321e", "comment": "Malware payload", "value": "ca0e8b7e4f9cbba3176231ec5f064a002ac420a0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854976, "uuid": "b8e0d9e8-952a-4fb0-bb7b-5786eab93ee8", "comment": "Malware payload", "value": "e1020fa526be57150e45803cb9bca8aa42fa5dac03ed785ddfea56e79b78da69081c0711422f6b291080471c6f72fce3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854976, "uuid": "a6d091da-f631-4aab-b13d-25fbca5f5d58", "value": "T1CC634C83F8F17FBC321B780DDCE85E5E48696928037770DA789877E70B6494DD5A8288", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854976, "uuid": "a03ebec2-b735-4f87-a3cd-1412dd3afcf8", "value": "768:I8w/h62/jWs6oS+xISN0vUOillsWqP821VtP97HCTJCdRL1LH499dRZCCTHCW715:I9l/AoSSMvpusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854976, "uuid": "b800a0ca-8eb8-4098-ac90-911b66bba15c", "value": 72524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854976, "uuid": "818f99eb-b4d0-4295-860e-91f42b6154cb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854976, "uuid": "8ee324f8-c057-40a0-b5f1-ff83fb9c510f", "value": "invoice-1645080830.pdf (3).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be9a8e15-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794354, "uuid": "08268bc9-34ba-4b66-9b3d-d5e0c9630d7f", "comment": "Malware payload (Mirai)", "value": "906a72d00b6489094fa5339d4342d632", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794354, "uuid": "1600ee3c-076b-4624-b53f-a2b31343f52d", "comment": "Malware payload (Mirai)", "value": "86e899f186bef4c930270ce5c2f97020b6f029a6583ce719a6967f2faa3eca38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794354, "uuid": "0f56d4b5-0764-4e43-beda-3090b7ea5152", "comment": "Malware payload (Mirai)", "value": "60bccf3341da9c3cb648bc72f70307f226ec36be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794354, "uuid": "68004a7f-6d1d-4252-83c4-cc4b1160daa8", "comment": "Malware payload (Mirai)", "value": "b1c136df976b4959027d87bb3c7253e07ad3f937ae9146da41e99c1afe99b37ddd26d721743cfb7bd04647b19b1476a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794354, "uuid": "ff7b5824-acd6-46f8-8322-11980cedf049", "value": "T163835B21A9792D1BC5C4A57B21F34331F2F6174A26E8CA1BBD730D8DFF156102217ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794354, "uuid": "17f8e8f2-2279-49e5-802d-93548275139b", "value": "1536:hMYoSCdjEsdCHCrX0fxZetcVWzy5JxZLtfXrp17gZ3k7uh6:httdBiCnF/ZDfrN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794354, "uuid": "9ff4147b-8556-4fcd-9c24-4922e910dbfe", "value": 83148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794354, "uuid": "012bd22c-2bb1-4855-9a9c-48b739bf6578", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794354, "uuid": "50e73592-a17d-4398-b61c-6489a166e5e6", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4acf3659-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797167, "uuid": "01d82481-68ea-447f-8e96-a6cc5881ff25", "comment": "Malware payload (Mirai)", "value": "85fff3caffed3f2e3b0c7592da43ac97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797167, "uuid": "7b191642-9daf-4290-9d9d-84955a95530a", "comment": "Malware payload (Mirai)", "value": "86f259d87eef7b8ff42d36da58d153d9e61fbf16cd3e6470afcc59eb88b287a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797167, "uuid": "68ba73cb-908f-44aa-ad18-6fac0d672e57", "comment": "Malware payload (Mirai)", "value": "2bad53c1263c5165c053a75de13ad61171926f8e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797167, "uuid": "40c10a59-ab3d-4f87-84b6-f0bee3119a91", "comment": "Malware payload (Mirai)", "value": "bfb2545bd01feeeaae69dead6c0a1c22337b5bbada19bfee2cbbb8728f03d15e7a417bc7034fee442954ca057c1209dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797167, "uuid": "6e3ac50b-8544-4e40-8ac6-d93d98891d97", "value": "T1A153F13C323F0699F8AC54BB020017A42A931BCFA32B795597E8E9D39FC32557583799", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797167, "uuid": "d8bf199f-1959-4f7c-b6d6-1bd442f0f650", "value": "1536:zqzUwo1AMS4rNlCtyi3TVmqSIPkX9Gm1JsxWAi/IhVSe:zruMxrHeyi3TVmqSIjCIVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797167, "uuid": "659fe06e-6203-4b03-bd1e-ed517be44b58", "value": 63544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797167, "uuid": "fc4c254a-a12b-445b-ac4c-f821b29f5724", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797167, "uuid": "8e6c5ed1-9dec-4f58-9fa1-f077c42fbf1c", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef40f601-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830514, "uuid": "25734118-0397-41fd-8521-dac5bdb07c47", "comment": "Malware payload", "value": "e10378eb6a2842020e48bdcf72812db9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830514, "uuid": "df4d27de-9a2e-494f-86e6-68506f14bfd2", "comment": "Malware payload", "value": "877807d71b2985e00a33d9a8319b45942efadadf32d6ab217f4c84a74f34f324", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830514, "uuid": "9f78f0d9-f47a-4355-8194-64f2cafbe542", "comment": "Malware payload", "value": "4f9e7fe1262515f21680c05225e7aad641826327", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830514, "uuid": "3443513c-9dda-49fb-b3f7-bf8b86680305", "comment": "Malware payload", "value": "47814684501b3e5b16f0962b7497c0450925a9fb2392a5cb63bd68ba04a0b4830e3d77bba4b676b761a14e0c8b0a62b6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830514, "uuid": "e914b17f-ac21-46e9-848b-9d6fa66c76b8", "value": "T1DC633BBC52603C45BCB719CB8DA828F48A03C71BC6D3C69D5065FE36D7E62815A32DE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830514, "uuid": "68f8eed0-9579-4ff6-9790-bb90f8928d64", "value": "768:I8w/h62/jWs6oS+xISN0vGIUoWFjdkfScBYrwz2y8kTAlGB:I9l/AoSSM+xusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830514, "uuid": "664369f7-6c7d-4b97-873e-d9b020508d00", "value": 70604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830514, "uuid": "53b07b21-f388-4b8a-876a-8be6c19f6c72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830514, "uuid": "0fbedd72-2255-4a69-8bee-3794b2e6044a", "value": "invoice-1645080830.pdf (85).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b3f1dd7-e2f6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766820763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820763, "uuid": "64a13d7d-da5f-44eb-abfc-2b01c53ced99", "comment": "Malware payload", "value": "5e19e8accc7063a2bd359e2c683975b2", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820763, "uuid": "65e9c50e-35f3-49e3-aab3-40437b0fe9ee", "comment": "Malware payload", "value": "8789b145ef43fef601f231ec7b5c16175adfe85cd5c01704c2a20af3885bb06e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820763, "uuid": "4f567169-c1f5-4cb3-b1f5-7c93d7a75765", "comment": "Malware payload", "value": "a8d10da0e6eadfa0971321d29f7d024994d436ed", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820763, "uuid": "a4e048b3-906c-452a-bc03-ea6714add6ec", "comment": "Malware payload", "value": "75c066658a4c103c40243dc6e169738e85e54e80047973a9eae6ea492bdd27711e91119156ae8a1898b2ef01b68caa50", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820763, "uuid": "573d3d7f-b636-449f-b491-9cdc0b2f7886", "value": "T1B55178001EE60258F2738B715BFAB2668477F8A0DD3857A9010D87442733650E4A6F6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820763, "uuid": "0fbc0d6c-5775-4e60-9bde-711346a9aff4", "value": "24:8Ayw/BHYVKVWf+/CWTIXAt2VFv7kaHqaj5CCpYhCFCZssuqdd79dsrabqOl:8y5awIA2V9AaKaj5CCpLgYqdJ9AauO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820763, "uuid": "5a06c624-fde6-40d2-bd42-853709ac51b5", "value": 2974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820763, "uuid": "396bb658-ab88-4e83-a58f-eded71ed7540", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820763, "uuid": "181824a1-b089-43a2-9e12-5dc3c12582ae", "value": "CBE Notice.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d536aeac-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825316, "uuid": "026a2f02-7ca6-452c-a43e-6c4e38f64f0b", "comment": "Malware payload", "value": "14c0a7cf286ac2f5733c1afe2ae03150", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825316, "uuid": "f1030e1d-53a7-4be9-9f0d-ad35cd82eb33", "comment": "Malware payload", "value": "8806243f14e242525f10618894376297643bbc73099160ecc9c04bb687800856", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825316, "uuid": "230f52d6-317f-4cdf-aa7d-5006174b52a7", "comment": "Malware payload", "value": "67aacd3dd811fb0f9ac3ff1f1119d657142dde3b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825316, "uuid": "7dde53e9-c987-49be-afe2-11632e967ef4", "comment": "Malware payload", "value": "b29d634f4bb7ea3c136edcc3214475b2b824cd0af6efeba62a07f4e84cef3552820889aa0fcc8efd5dca2db7d89839bc", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825316, "uuid": "1b311d9a-fd2d-425d-9420-56056c3cdbef", "value": "T136733C3B20E3D2BFAF6A40B0F7AD551470DDA2095C62488D0E3D09D3DA9D39D2D863E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825316, "uuid": "3d894fe4-82b0-47c9-9bfd-a8df14b07315", "value": "768:I8w/h62/jWs6oS+xISN0v/KkFmU6dkfScBYrwz2y8kTAlGB:I9l/AoSSMFD6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825316, "uuid": "02698a39-806a-4053-bf2d-c6d97327bee6", "value": 74399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825316, "uuid": "a9bc3599-81f7-4356-84b2-c62385bd33ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825316, "uuid": "cf34d727-851a-403e-905a-9f387a087e78", "value": "invoice-1645080830.pdf (81).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f272352d-e372-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766874328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874328, "uuid": "5358b395-29cf-4b4c-8e10-8410cdc9ed6e", "comment": "Malware payload (Mirai)", "value": "ab9c551d2e28dab049ca0001ed7a0ebd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874328, "uuid": "9665cc17-8c02-4caa-8cac-aaf3ad23d897", "comment": "Malware payload (Mirai)", "value": "883f3a3b8e584acabb9259ab7a13d448988c4b3100904502b6f1edd31cc5f06e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874328, "uuid": "6c73a162-8503-4ea0-a1ba-3e7d8abda676", "comment": "Malware payload (Mirai)", "value": "7be5e28ef0e440be350c7a228d3ff0b9d1d0ee45", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874328, "uuid": "6fa354fc-0740-48fc-8925-9857cb4b5a34", "comment": "Malware payload (Mirai)", "value": "b236da1171375462e81393def5f93d7cf0f06cfc64ab5c6b6d24b2a4881dfbb8fa862c336d7730287538d2d5ca778a13", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874328, "uuid": "c3278690-0deb-4580-ba7a-b22f51bf61a1", "value": "T136832A82BD91896EC6D413BAB67E2B8C3392A3B6C2CF7213DC158B5037C551F0D66A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874328, "uuid": "25fd5dbc-e005-451c-a4d8-33c2c1edb05a", "value": "1536:zAzns2S++1UVROjh9lkD45oMwKrgcd1aWY5UHLbuiYh2IymQY2AUm6hh1qleAi:Uzns2S+CUzKEc3aNUo/6hh1qleAi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874328, "uuid": "f7339f85-b00f-4eb0-b79f-9fd6c910a7f0", "value": 88168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874328, "uuid": "f1e2b5b5-699b-4f03-929c-6260f82589fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874328, "uuid": "8e25e38b-1a65-4fb6-a435-f13b3f70ffc1", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a3db6a6-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795367, "uuid": "a227fc0b-9651-4c97-a90d-2148e1ee75cd", "comment": "Malware payload (Mirai)", "value": "7491dfd3be0217f72b1586a78845d04e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795367, "uuid": "ea23f471-57f6-4678-a05e-68f90a54e14f", "comment": "Malware payload (Mirai)", "value": "88454f8b6f779b8f0a12c2fb451e35f2d7433d3bc5a51249e0a52a803f203f40", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795367, "uuid": "9d02a2a2-496a-41b4-bb1b-47a066bb9d8a", "comment": "Malware payload (Mirai)", "value": "5b91fddf5f460505c36cc980a6c306aa1a8c0786", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795367, "uuid": "5770843e-5625-4e08-ac78-aa334bfde558", "comment": "Malware payload (Mirai)", "value": "a221e65e2de53687930a4dbc65b6ff52c890b1c5f93bf5a371726ff6140ed299a5892f042b53167c5be86fafaf9678cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795367, "uuid": "7816168a-6eea-4d19-bf36-58e4fdea9528", "value": "T1E383195AF8814B21D5C512BAFA1E164E331307FCE3DE72239E24AF7037CA55B0E6A855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795367, "uuid": "f0304c89-3184-4817-9c7f-f5d3dad35a3a", "value": "1536:GpnU4WSdJwFe2KnKvIicHPW824QOLMNPX/adjYRcgIh2i8F7IPqHE7+850YtX:EWbe2RR7djNPX/adNEF7IPqHEq8y0X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795367, "uuid": "423a8666-87eb-44be-b362-fa0eaf166beb", "value": 87348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795367, "uuid": "a3e7c59d-40b8-4367-899c-1ce6893a9da8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795367, "uuid": "b4e0c4b8-e274-47ad-9be8-986301c33f01", "value": "Space.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eda7fb3f-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854563, "uuid": "662b1948-5f6e-46f4-90ff-d866dfa43ef7", "comment": "Malware payload", "value": "d86cb2becf3c7ee6d4840c68256472e4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854563, "uuid": "b69b71c1-b48b-4db3-b8b7-2b26e8087e63", "comment": "Malware payload", "value": "893f97cfe0488f610125ed85d908419cf245f358818a995d5d1f0b1d0bcfff5b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854563, "uuid": "1e363291-9ba9-4896-8faa-dfd20f430362", "comment": "Malware payload", "value": "d819df702dfb63afb4c22c89833b502ac36e4dba", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854563, "uuid": "d028a4b4-bcee-42ab-8a78-d6237b169a80", "comment": "Malware payload", "value": "31a0c66d106d398d1122748e036b3d925c610521db24c4ee634c4cac968f44f175f2be93b5b7a2475d0f6ebb6a6b9e00", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854563, "uuid": "db8fccfa-d999-4e56-a9fc-a81ec5ac8c6e", "value": "T1A8635CC06376D90D3C6A3EDF79A42E106832DD45EEC87099DAB658E67CA2713D2F0D84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854563, "uuid": "9b164faa-0b39-409c-811c-90ab92dc2e45", "value": "768:I8w/h62/jWs6oS+xISN0vZ3RAZHU/sVGHOy+e8W3AGvQGSFI1UxyxywvCUGZIAvc:I9l/AoSSM9OusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854563, "uuid": "c25e6fd7-63d8-4532-9eff-ef1acea45ba9", "value": 69621, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854563, "uuid": "e9e85315-6d86-4bad-ac1d-0269e2e2c04a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854563, "uuid": "7235daca-f762-409d-a1aa-350f6f5570a4", "value": "invoice-1645080830.pdf (95).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0e5e207-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879882, "uuid": "32c052f6-c80b-4434-84f6-97fc773d2fc5", "comment": "Malware payload (Mirai)", "value": "d161fc442e77ba034d47326ca09e6512", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879882, "uuid": "b433adee-6423-4ae5-99e2-57340c1990be", "comment": "Malware payload (Mirai)", "value": "897fed53f999d9396b38a086b0a0b25a82573eaebcf137d0d0392e4cfd8509aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879882, "uuid": "60a62da7-3cad-4349-8cf0-e6331e59a44c", "comment": "Malware payload (Mirai)", "value": "f8f9c314d788298fe32ed7fad8cd2c16598ff090", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879882, "uuid": "40760f4a-9e01-4580-a480-9332d054d632", "comment": "Malware payload (Mirai)", "value": "638e13ea4e62883bc9ec9ceca4d27c050385834371ed4b0c28851f54675a56f504e5fa66f2c359a3276fe2ae58fc2f4b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879882, "uuid": "c5f23964-1c7e-4c0c-8eab-ad5695fbb7d2", "value": "T147835C22B97A2E17C5C4A57F21F34334F1F6170A26A8CA1EBD720E4DFF25650221BA75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879882, "uuid": "63742929-bbcc-4373-a428-5c5b2de84c78", "value": "1536:FntSvA/HNZLzLs3vqZeihiaNuG2Mi3jy1BWIe9vGgyXR0D3eEexchg:R8YbP/t5wk4ImeRiex5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879882, "uuid": "5d4e4b68-700b-44ec-bf10-a9166a3c0a6c", "value": 83148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879882, "uuid": "4cf5211e-1230-4959-9601-f9ac7ae3774e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879882, "uuid": "fdc956fb-6be7-408b-a06c-5b6fb0ebeb46", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e79bcf56-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830930, "uuid": "a4ea9be3-e96c-40a4-9b8d-bd2512a45e10", "comment": "Malware payload", "value": "4f0b86ff1a14f297f91ae8128c6a69cc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830930, "uuid": "a1e83017-df16-4ffe-8db9-e47149419a26", "comment": "Malware payload", "value": "899af9a46f2e35683f2e2ce2cbf836166df1c5f4d5f612644784318bbb947f17", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830930, "uuid": "22cae033-882d-413c-b909-1713fd3a6f68", "comment": "Malware payload", "value": "e88e7c6cbc327f4170a7c681a258c9cd9abedc7a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830930, "uuid": "7f406e43-3626-4949-8bc6-34e9ccf36019", "comment": "Malware payload", "value": "08f18376c7f0b07984307c243f06097e6a22e8dc345eca054e59b95117fdb23503d174a6344348f3b20c50141e42a59a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830930, "uuid": "179403df-899e-48cf-bb01-87f302c93e1b", "value": "T125634B692B376DC421D9F4F6E4FFBDA2E9473F85416EADBBD000C08BA81564F2798046", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830930, "uuid": "a66c5386-58ee-4246-886d-1e3647e0de6b", "value": "1536:I9l/AoSSMHWQPml4+u89Cbvogp9LfyURW3RYw6Tn6+dvoEbV6mQ4Oy1+LpiiytXc:I9l/5MXqwusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830930, "uuid": "c05c58e7-9960-4fd7-b404-cc67c7391d86", "value": 71525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830930, "uuid": "60acad29-789e-45a1-8a6c-10d709654fa7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830930, "uuid": "227e5379-cbda-4baa-92e1-be8f104d0957", "value": "invoice-1645080830.pdf .js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2573853f-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830605, "uuid": "ca410204-4284-4bc0-aa57-7f4063f6382d", "comment": "Malware payload", "value": "d5c7f3db2cc807901130aa6e32b85ae2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830605, "uuid": "fbbff2b7-e560-4cb6-832f-dd70ea86c7c6", "comment": "Malware payload", "value": "8a19c6fae3f9c320dc1488bd78e7a0bdb1e07fdf32e5aa440f74947988b4cca6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830605, "uuid": "76f59785-06d9-4cdf-bd17-9817ff1e9ae9", "comment": "Malware payload", "value": "c48845b9964fdce982f19e2a21a69d873010fd03", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830605, "uuid": "0fcece57-a409-45e9-8492-4ffcd6bce2eb", "comment": "Malware payload", "value": "8e70defa8c7b906e11e4e2d2fa7124b8f3ab1ff4d6d26b0db393a3e3f17e19792652ed40995655fb10c04b06b93ac33c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830605, "uuid": "d4d41447-0100-449c-a700-9743c8c1b3af", "value": "T14763F9A8987CF89B30453FD189A21890AC5B223B0FEB0696F5D1262F1D1EDB4DF35791", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830605, "uuid": "a8d66c60-ce03-429b-9aec-fe732a8acdeb", "value": "1536:I9l/AoSSMhNRHAC5IprjJCSIBmNygSFRsUpwDOvJclpmko1nswnbnHHi35ivS90m:I9l/5MBZusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830605, "uuid": "71733b0a-460f-41ab-aed5-a6c21440fc47", "value": 71548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830605, "uuid": "99df45f5-793f-4333-83fd-e7466a2cd35d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830605, "uuid": "73e720e4-3718-4be9-af43-8d8f433e8cdc", "value": "invoice-1645080830.pdf (64).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae1ff9a-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859578, "uuid": "abc6a436-f55d-40f9-893b-8de0b3399e76", "comment": "Malware payload (Mirai)", "value": "06140a317b52849b73ef5592c9167946", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859578, "uuid": "18e4aade-0a85-4b98-97bb-a012ff7a60c5", "comment": "Malware payload (Mirai)", "value": "8a27f7d9b978189c7e87f3b88335c80d1dbdffa289fa6085410133c0c1e23866", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859578, "uuid": "8bb8cd18-108a-487b-91e7-3dc33be1acad", "comment": "Malware payload (Mirai)", "value": "3d6c6f56fd8a06d2bfb124ee673f7a2f61742d61", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859578, "uuid": "4c08d03d-b10e-48f9-88b8-ad698f480f86", "comment": "Malware payload (Mirai)", "value": "abeb0ea32e1c7b937873be0adb52085b56a2f45f64692ceaa6092f22cf915ece7a1cf379d9ca7f97cc529ca2affd4863", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859578, "uuid": "80ac5bcd-728a-4294-a2bd-6bfc643bcd8f", "value": "T170732A86B8819613C6D562BBFA6E41CD331613A8E2DF3307DD25AF24378682F0D7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859578, "uuid": "389b643d-6c9f-4a8c-8b59-c5326f2e544c", "value": "1536:y9DwqD8bpZQew6ZDiOI7MNHvmmSfC+y4VSAvKbVR:y9DwrirgNPbSf/IWK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859578, "uuid": "3ff621f8-5624-4d1b-8bfd-7c6b1f582f67", "value": 79040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859578, "uuid": "b98799ed-b9d0-4c55-a209-e3ef34e88549", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859578, "uuid": "29224b10-ea47-4048-9883-742dbe9a201e", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61fc2b31-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858623, "uuid": "748576c4-a7ff-4410-828f-641fa594d4d4", "comment": "Malware payload (Mirai)", "value": "2adb403cb3e854afe4e4675e16b5921e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858623, "uuid": "acc1fe37-a4eb-4e97-9713-384f99623b1e", "comment": "Malware payload (Mirai)", "value": "8aacec96904f926fa87363f619795933fdc4859043dbd1905df54b8298486ad9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858623, "uuid": "23f7b770-4080-42c3-99ed-7aa56b6b9118", "comment": "Malware payload (Mirai)", "value": "a47a2cf9e0433914aa2d812f9ea41b3034a1eea8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858623, "uuid": "9bcddcd5-1ad9-4762-8585-70636b8ec182", "comment": "Malware payload (Mirai)", "value": "9afde66080fffed6a0addfd7153647b9348d3ff042f713c4e2274bcae97a6d6357a045140ce4f9d6f5897420c3dceceb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858623, "uuid": "b6adf0f1-1bff-43cb-ba79-1bc5eaff56ba", "value": "T1C7145BC7F801DDBDF80BE77748130915B530B7A224925B37B257BD67AC3A0A90927E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858623, "uuid": "4e3ab84b-5d8e-4088-9677-2c0c221a6e34", "value": "3072:teMCR5kAp6+gbvxwoGu2tKNhyOAN1fLOYe3tDkucfrLV5jbi9L0qINuh/Fv663:4j5kpbyOg1fLdeSVfryLJcU663", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858623, "uuid": "177bf01c-3ca5-4dc4-83cc-b3e8262545f5", "value": 206976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858623, "uuid": "5589ae9f-d69f-49d9-9c5b-7282b627961a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858623, "uuid": "fd533f64-a183-4b02-a0ad-074d8e5c2761", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd9057c4-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830538, "uuid": "7de00f10-e299-493e-960b-fe9e2aa00dcd", "comment": "Malware payload", "value": "0125479fcba9ce8b2216ad87eb196ee9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830538, "uuid": "5378e5e5-53f3-4ebd-ac2c-b914f6b4aee7", "comment": "Malware payload", "value": "8b012a74e1ed873637a66685a0c40f9efbad60a11b4875ccbd8d1d2e6f20998a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830538, "uuid": "87600911-561f-4663-9217-e0042caee433", "comment": "Malware payload", "value": "e05113fdfc0c98e8d2031e893b4c13add35f054b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830538, "uuid": "66b3bada-3d65-40cb-a2bb-abcbc68ad6ac", "comment": "Malware payload", "value": "9cba2237575ec0fa99579770f86598c26bf53448a07e2d4930c61969128fad521137d47da13fd84f1c14c5ccc4ea257a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830538, "uuid": "6e1844bc-d8ba-44b4-9143-c2c1f92731b0", "value": "T1D573FA803B1996BF753793ACF74B656AC11E3124A1FBC1DA23833D128CBD9506CB7266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830538, "uuid": "7b2b70f9-3c33-4d2b-8079-a5c408e62c74", "value": "768:I8w/h62/jWs6oS+xISN0vSP99RpdkfScBYrwz2y8kTAlGB:I9l/AoSSMOPusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830538, "uuid": "29a3cbbe-8287-4a7c-896a-57d5b6ddac5b", "value": 74338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830538, "uuid": "56cff3e6-8605-409f-9635-5b278c061796", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830538, "uuid": "3e0171f0-767e-422a-81ce-55341ddd6e14", "value": "invoice-1645080830.pdf (80).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc962cfd-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794351, "uuid": "6ec5aac6-642a-43a4-88cd-9f04c842dabe", "comment": "Malware payload (Mirai)", "value": "2ef45c0218b657a29fc9ee2cae5780ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794351, "uuid": "653f6ece-84aa-45b3-b181-5024419ffeab", "comment": "Malware payload (Mirai)", "value": "8b118aab1374a434018a921333f01c6c5bbb96903e9a59935c0411826a69f1e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794351, "uuid": "56dcec33-db54-484a-bb2d-a8cfadb9de15", "comment": "Malware payload (Mirai)", "value": "066c8653fb80b825f320ce77ec49495c733699d2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794351, "uuid": "2f7731ba-c881-4c82-8844-dbb1cdaa1eb9", "comment": "Malware payload (Mirai)", "value": "886a2e615d18346da935de09bf3c2bcca0ebbfdda2c729e8b13133a9a36bd237e3708a36dd10aa0019e43a1df4a9a517", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794351, "uuid": "ff0d3005-1182-428c-a4e0-1db9ff666d5f", "value": "T10063F64ABB614EBBC86FCD3705AD0A4534CD964722B83B763674D828F25B14F0AD3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794351, "uuid": "3db7c0c9-2b21-4d53-b12c-01fffc788d69", "value": "1536:jOcc+Ii+gczMWNNr4f5ApNdeotRQBaljkjLXEpfbVR:jOcK2FW/VHCXEt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794351, "uuid": "a5fc78f2-590f-429f-8136-bb8bb93510bb", "value": 73296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794351, "uuid": "1cde18e7-4bfe-4576-bf23-a0bc20420ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794351, "uuid": "bca48552-c234-4a74-81be-910f6cc98e2a", "value": "nabmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "856e0173-e2c2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798553, "uuid": "eae84be4-304e-4134-9800-b873f0bf1c92", "comment": "Malware payload (Mirai)", "value": "eb7161e031a1758fdad898d07ac7c55c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798553, "uuid": "b1ef7635-777d-43dc-a932-987975cef833", "comment": "Malware payload (Mirai)", "value": "8b3451c052c8694c82d48675c39c38185d1aa4005df1b6d4c03a990de7cdd34d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798553, "uuid": "a8fd933b-e598-41cb-a78a-fdc00c73bb8e", "comment": "Malware payload (Mirai)", "value": "2f873f3a41930f63c44a8c4ad5b05b9cd85ac51a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798553, "uuid": "eb489441-3dde-409d-871e-c92ba24f5d89", "comment": "Malware payload (Mirai)", "value": "34ebd40b59a6ef3bd03a202c7e9db019853d6a8c724c7d79b6aba6a15d590ea49a90ffa6ec3e4fa6982e740878fa99c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798553, "uuid": "cc17bbba-102f-45f3-b6bb-c2467325154b", "value": "T1E3A3188ABC819B11D5D922BAFE1E11CD33531B68E3EE7212DD115F15678A82F0F7B902", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798553, "uuid": "540c2288-5ee5-4f49-be4d-3d34dec495ba", "value": "3072:9m2vyRvtl8LGU4s7NSco4i393xT728D//mB:9m2vCvtKr4sBSco4i31xT7BDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798553, "uuid": "5a3767ac-dacd-41e1-af91-21d9b1a2c26b", "value": 100132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798553, "uuid": "97a61409-7fc1-446c-b2b9-b564f9c8cf29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798553, "uuid": "b044e422-c096-4c73-baa1-56fd3b7fd81b", "value": "splarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ad93d9d-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830802, "uuid": "a71040ab-3554-464d-83de-bf3678c3eb34", "comment": "Malware payload", "value": "6d3885b4032be3a846ea79ff42a66c61", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830802, "uuid": "2e20c910-241d-4f4f-92b4-68851412ba2b", "comment": "Malware payload", "value": "8b4b474af9e34eafab1b7a211addf8f8030e13f3b5f2a81d2f8c2f95034e363d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830802, "uuid": "e1803c1f-0729-413a-b299-944d5dfbe47d", "comment": "Malware payload", "value": "a8fbdd192eccde4b346a407ee155adf324eb338e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830802, "uuid": "9419f055-75e3-4b3e-b346-23e5f5a6a57a", "comment": "Malware payload", "value": "7b47c39ae0da1139c38717535cb2eb67f4f942910426b11e270b00fb008d85087a9051e29b36cb8b20bcb22401069541", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830802, "uuid": "7fea601f-bbb2-4f34-a0c3-6ab1542a980b", "value": "T1DC73FB7FCC7396EAFCEA1F8255262C818E3D89C43613774AD6F25BE6C27124005E3A59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830802, "uuid": "f778091f-c04d-4877-9b7c-03448d4a2907", "value": "1536:I9l/AoSSMZoXOoXYoXooX+hoX9oXFoXJoXsoXsoXQoXJoXroXzoXOoXvoXqCoX+d:I9l/5MZuOuYuou+hu9uFuJususuQuJu+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830802, "uuid": "00ede441-a28b-41d8-a617-ad2e9ed6a005", "value": 74361, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830802, "uuid": "0bb4fe2e-5d2c-409d-8896-d8ccc3227d2b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830802, "uuid": "2ce48598-d4ee-4a57-87d4-e2ab08499e31", "value": "invoice-1645080830.pdf (25).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10eda593-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861494, "uuid": "48b39c5f-025e-4faa-aac7-f2eeb587a60b", "comment": "Malware payload (Mirai)", "value": "6d352880947c3680c97171c23385b110", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861494, "uuid": "58b3a5d4-8878-47d3-91d1-3e104524786b", "comment": "Malware payload (Mirai)", "value": "8bc17143cb58f524f5dc6478e832743feb5d91e4b9b6cb50688a16233e1492a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861494, "uuid": "2e7ff6e5-20ef-4891-a0a5-32c520d5dc2e", "comment": "Malware payload (Mirai)", "value": "fa8c30af56d84c5100065bb282686883b4d95c01", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861494, "uuid": "f36e712d-aea8-48ad-a5db-95e8ead6b7f4", "comment": "Malware payload (Mirai)", "value": "a0c0abaebe57185204c5fe9564caae9679382ec1f30341cc229206485a9d648f306bf238ac1cb200a79410adab73964f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861494, "uuid": "1e3dcc85-9e8e-464e-86f6-9cb8b6f54218", "value": "T18AA3E70ABB615FFBD86FCD3705B95B0525CD560721A83B3A7A70D818F25B24F0AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861494, "uuid": "92d7a0d0-5687-49b9-8dc8-7daaed7e4fb0", "value": "1536:Cq48bRPATYQw1Yl4DM8WcQPtqB18FNkwCR1K4paqwUhYw3Eih0jOc+bVR5:CXYPAsQw1nKqPw+cjo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861494, "uuid": "fdf63b67-1e84-4707-abe1-92fe9fcb8ea1", "value": 103908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861494, "uuid": "2c05eb0b-4769-40d8-9970-28abcc7a4f6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861494, "uuid": "cc149170-6874-464b-9999-90f8ad9e99e0", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e386d6b8-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825340, "uuid": "2232da22-5779-4e46-934d-3e3d18673714", "comment": "Malware payload", "value": "80c4353b6369901b70091a01b91cc6d2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825340, "uuid": "475ddae7-9272-49d4-9f16-7608a558e2bc", "comment": "Malware payload", "value": "8bd650ff0b57b6a8ebc167001424b92120e36c7dd1250f3250ef374ab3909413", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825340, "uuid": "31a2f815-22b7-488a-8f08-809cfe1038f2", "comment": "Malware payload", "value": "5e24cf18f471d0f6c00960c49f3a5994d652d365", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825340, "uuid": "2ef08f20-bd1d-4788-9dfb-0ec591ed92a3", "comment": "Malware payload", "value": "0a56f3c4fc6b21fbd3d3439fba72544611646b3180039adf2615e9ee91b3679081b7b72947b2fadf1857c92427ededda", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825340, "uuid": "40ab6b0a-1680-4352-a51e-075ab5989b20", "value": "T183634C1DEB548C6E28FD19D9CA6829BA4C3352BC6E0B50DED66CF543FC18C04271BB69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825340, "uuid": "dbfacf7c-8540-436a-8ef7-0b38a59f61fd", "value": "768:I8w/h62/jWs6oS+xISN0v48U0NovXI0V+sRD5M89fBZ+st2sI7LzxCOvbHFkANHf:I9l/AoSSMTKusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825340, "uuid": "e82f5b1d-5d33-4f1a-bc77-2bbce9a12d60", "value": 70648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825340, "uuid": "33c78a3c-f350-4b9c-a21d-d417306f03f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825340, "uuid": "a331b8e3-354d-4b1c-9a85-a00616fd9bce", "value": "invoice-1645080830.pdf (80).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f94e4fe6-e2c1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798318, "uuid": "bcc5bbec-4a1f-4a03-8ed1-9bdc600f9efd", "comment": "Malware payload (Mirai)", "value": "3d01ecd84d1f624a99d8e90b43ed5134", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798318, "uuid": "6d1ad3e4-f92c-4168-970f-887d50c8ec79", "comment": "Malware payload (Mirai)", "value": "8cb583fa807f8106a1b8e9176a0b29de7422b00d05e230e785851ca55e3c8cea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798318, "uuid": "b3e35fd6-82c6-4fe9-88a3-72286c0ce8a4", "comment": "Malware payload (Mirai)", "value": "5574cafe0d01c9a5077e1788c8644fb48b5e936e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798318, "uuid": "6fc32c91-84b8-47eb-ba27-a566942902f2", "comment": "Malware payload (Mirai)", "value": "7d7c4766391cb313c50b1662849aabe253334478e66431e704bd5372b94d1d35a684ee62f14f4d64fbfba72038a14ce6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798318, "uuid": "5a0d2c58-e904-427f-9477-80a667f689cf", "value": "T13E632B22B6760D1BC4C1E47D22F78728B2B1979E25BC891A7D720D8FEF646406D43AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798318, "uuid": "69d2f961-cb04-46f0-b234-a21ad109b7cd", "value": "768:3fy+AA0NeJyHOG9kL3sl2IxiDFeVzhtFtsXO+75V3VvgHFt8NzwJll6If:vy+AF5OGkL3sgDDFeRhtjY75wt/Ik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798318, "uuid": "c84ac8fe-35a6-401a-8de6-a5dfd2f5bc69", "value": 70952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798318, "uuid": "370a5d7e-7b71-4d73-b1e0-3f0477539b67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798318, "uuid": "0ba67581-f9d4-451d-8a59-cf42a47fa8a2", "value": "sdxkzX_UXA229x.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b994ccb-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830722, "uuid": "f4499287-2214-4bb8-aaa1-abf505d23eb9", "comment": "Malware payload", "value": "397566039e5813142b5239b1c87833a9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830722, "uuid": "9510d719-daa2-4e4b-b238-c72d8407e893", "comment": "Malware payload", "value": "8d32623f36d120ac1a1b80c865c9e7dbbbc7dfaf0e7b9577fd3cdacb67727d5a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830722, "uuid": "bb34319b-1498-46f7-bb39-59a1f802b17b", "comment": "Malware payload", "value": "385d80e93890945281d6cda7786025802d5e404c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830722, "uuid": "12617375-7a42-48c4-9490-3c3c437bb6c6", "comment": "Malware payload", "value": "59e060f1fac7adc1b0183e019590ed94da74681954448e0df1352a3c58340788095cf6af06533ef9c7694b963d2517aa", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830722, "uuid": "4c76bec4-4cbf-45fa-a384-17141da07c33", "value": "T11573293052502C47EC95FC935B09651F88B8AA81C6D60ADE3D3D37F28C8E5E45EBF1A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830722, "uuid": "2d5a80fe-6d63-41d9-b16d-615a9f121df3", "value": "1536:I9l/AoSSMBX2Bt/lg1zQDhoj/GdtV1CyHKAHrRRJnAVS6pobLwntgxoBwCoG/685:I9l/5MBX2Bt/lg1zQDhoj/GdtV1CyHK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830722, "uuid": "6b4bfb7e-d343-47a9-a2fd-1e34eb49cf21", "value": 74394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830722, "uuid": "0792372f-d80a-47d5-87da-63530bc7fdc3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830722, "uuid": "49594ad8-db23-45fd-b497-cd23811640c1", "value": "invoice-1645080830.pdf (37).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75a6c910-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823438, "uuid": "e509b06c-addc-4a81-9695-d34f3536d253", "comment": "Malware payload (Mirai)", "value": "221afe38ebb06e3c2f6d0885d81e9e9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823438, "uuid": "a0e41f42-fbf7-43c8-9a8a-7881f3c5f4ea", "comment": "Malware payload (Mirai)", "value": "8ebf7fc6e5e37748e7be0aa2fbcb11e716f3e28034687dbaad799bdbcdb0692f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823438, "uuid": "08c44cfa-feac-4f65-9e0a-f891da6fb795", "comment": "Malware payload (Mirai)", "value": "4cad4615e09cadf115283d8fac009fe6e6517512", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823438, "uuid": "04e8d7f6-4b0a-4161-baca-b2c94b8e572a", "comment": "Malware payload (Mirai)", "value": "e1feea1a9d7d8665ac975086d54d54955307584c5079dbaee19524af45293aec09ed805170704775f3c31eb05617036f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823438, "uuid": "f0832a9d-67e0-4806-9679-ce6bf4a9e45b", "value": "T11D242A027B0D0F03D1432DF4267B0BE14B9BAD6138FAE681750AFEC957B1DB1654AA8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823438, "uuid": "56b53a87-6116-4999-acc2-27fd2d526174", "value": "3072:FPHhqVbmVjairxVqNWZsxthh9C51D8JrEhgXpjksnGKg:F2mJaUxJZsx/h9CbD81Ehcjlg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823438, "uuid": "d1e83815-240f-4cbf-812e-0b3df408b82e", "value": 217844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823438, "uuid": "74c2b86b-f3b7-4126-bb22-f16aa5270354", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823438, "uuid": "e2402831-6153-4dad-b4d1-4a9bd1f2fa3c", "value": "bin.powerpc-440fp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80733949-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854809, "uuid": "8b57adf5-1a27-46e3-8a3f-fb24d7c20c62", "comment": "Malware payload", "value": "4989d28d0967753ba825a2ece8ec4cb4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854809, "uuid": "968d0acc-bb4f-403f-aba5-26cb804ffb11", "comment": "Malware payload", "value": "8ecc22cafeb39e4ab1712add2d10da84d464b5d2a684875fc86db48bb6b1267a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854809, "uuid": "64c262c5-adbe-4a65-895f-6030400b68c1", "comment": "Malware payload", "value": "16006e4efa531b23c4e3acba1385b8caf87523b6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854809, "uuid": "a62faced-676d-496e-9300-39b82a56c4a1", "comment": "Malware payload", "value": "85f3ce8516f68b82fa7f0610c9ea21a80bd1df35a14d4e169641d047ca68146447994a318440abb48e5240d5948c6a29", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854809, "uuid": "f18cd14e-e0ce-489b-83a7-e63b375a5f8c", "value": "T12B631B2C293150FB36DB753D8C89D4AD4289B0B8DD7798F0784AF4239D687C3542AABD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854809, "uuid": "e19952ab-ff5a-415c-a44f-166e768078e0", "value": "768:I8w/h62/jWs6oS+xISN0vtLfiyYYYZiyzV1pLZBb/YHeXKTLus+q9Tl26ojPsGp0:I9l/AoSSMcBNusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854809, "uuid": "c0bed87d-e62f-4f92-9a9b-7961bbccf6e5", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854809, "uuid": "1420b51d-4aef-4221-9eb4-385129ba6897", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854809, "uuid": "c6005da6-af61-43d4-9b50-dc7179832350", "value": "invoice-1645080830.pdf (41).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c199c71f-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796507, "uuid": "8e68725c-4353-4c31-a207-ac10fd6c1a8e", "comment": "Malware payload (Mirai)", "value": "c38df852b7caf6060c2cd21ea327c7ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796507, "uuid": "d11da4e3-28af-4913-bc0f-4bb8fda5dad6", "comment": "Malware payload (Mirai)", "value": "8f082bf0c718c5d242dcfb7999febbe892706dd155989d3f3b16736c94c5d59c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796507, "uuid": "d228e3de-55a8-450a-99fc-85d366a473ab", "comment": "Malware payload (Mirai)", "value": "793f5bb046b6cb1dc3d97fc26126fbe35cc09669", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796507, "uuid": "b04e4707-abc2-4da0-8c7c-07b34ba164ad", "comment": "Malware payload (Mirai)", "value": "9d025926c2b3dd42b8f6dc4525753cc19051cab478903a473976f00a68a50de9ff39342787c2d64bf17d1724c06746f9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796507, "uuid": "163fa9bc-7bba-49f9-957d-b0fc6e9ae6df", "value": "T11DD319C0F643D5F9E94A07715136AB338532ED39602AE697CFA4FF36B871A80C61925C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796507, "uuid": "2c4c5b18-8848-4636-b191-50fefb22a517", "value": "3072:KOrnj6msghASprrrHxwyTP+alCEYxNtUBBmZFkyh1duez/EQfZHjQbRQcSAV3u40:xj6msghASprrrRwyr+alCEYx3UBBmZF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796507, "uuid": "01942eed-864a-4f6f-a688-2b2a992d619d", "value": 133068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796507, "uuid": "87fa25c3-3279-4253-accf-6bac33f0b09e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796507, "uuid": "316301fc-185f-4b64-bca0-80f993490337", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25410a25-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870547, "uuid": "2619ebf9-2b3b-42d9-bbad-a0a8e229bdb7", "comment": "Malware payload (Mirai)", "value": "99b1cf0b5fcac4f2dcb476076709a825", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870547, "uuid": "677c0873-b7d3-41b8-9d6f-9b9b2ab26b00", "comment": "Malware payload (Mirai)", "value": "8f340434b9f6ec392e5f25b31b87d6c21eb6db7ec1cd6922dd8704ef7de3ce06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870547, "uuid": "d96ee3b5-48f5-4106-806c-2ad9586904a6", "comment": "Malware payload (Mirai)", "value": "0015b427bd6ece5b83e34805ea4efec5e6259a1b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870547, "uuid": "eb505c25-c846-4bc1-be94-0f567ee61ed1", "comment": "Malware payload (Mirai)", "value": "c0bbf1f2bd4f434d10b09f68cb04ca47063263ee64ee27ac8514c1feb0f0a0074882c2fbee4ef4cc210e10691b85d71c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870547, "uuid": "6d3d635c-b238-4df2-83a0-70c712722368", "value": "T1FE73851E7E269FBCFB9A863447B78E16964833D63BD1C581D1ACD6012D6064E300FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870547, "uuid": "bf041cd3-997c-47fa-9b75-03b7ff4c283f", "value": "1536:NxrHDLlDLljneSWdq+sFAL8VFY6RLskpy4lE0:bDRDJORyY6RLskpxlV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870547, "uuid": "dd76f2ee-a10a-4a05-97ea-2c7e3e5e429d", "value": 76128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870547, "uuid": "5622934e-d325-4fde-a5e4-9f5f94d03fab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870547, "uuid": "fa5a6dcc-e471-4f95-aec3-6b8a2b19347d", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94895b4e-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854843, "uuid": "3ab1b55d-59fd-432a-a4dc-4f2869a7a9f4", "comment": "Malware payload", "value": "0523cd1f9b503367f1a9787aa9a4bee3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854843, "uuid": "af8bb169-c30f-44fc-8e14-ba170cb5bd54", "comment": "Malware payload", "value": "8f4f04e3e76c8b1d17d1a86f124fa447050f2b61e61021d2b68686abef1e6f48", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854843, "uuid": "4ba5ce30-26d5-4b1b-9fe4-d5f844dd0a79", "comment": "Malware payload", "value": "31230b9587c0f1120e7e1af8b419a8b63b9e763a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854843, "uuid": "689df359-2968-4b78-8aef-88c3af28d725", "comment": "Malware payload", "value": "f1d2a8a9a2133d2a001634894d6a321d8570cd0cf4ed297be9714f938c65fd1674c141b150fbf1a9337298dad601e202", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854843, "uuid": "0b81c7dd-a026-450c-b7db-c862b16f896b", "value": "T160635D0E1F79F9BAC269E4970FC748C3C26EEE4066DD5595EB4DBA704720FB28C82164", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854843, "uuid": "8f9cba39-9ad3-492b-bc54-78ad57f8de97", "value": "768:I8w/h62/jWs6oS+xISN0vnFcmSYdkfScBYrwz2y8kTAlGB:I9l/AoSSMn3usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854843, "uuid": "f7f27b7e-bd86-4295-9f6e-663b7c40d499", "value": 72456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854843, "uuid": "0bcac25f-8701-49ae-bb5d-641656defc89", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854843, "uuid": "753acbff-78dc-48f6-a4c6-74bb8e085351", "value": "invoice-1645080830.pdf (31).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74f34d77-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854790, "uuid": "b4f8af10-d2b0-4876-bfec-f3af4dae4d72", "comment": "Malware payload", "value": "bb83eb53398892366b3047f7b2b07f0d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854790, "uuid": "2da78954-9993-442f-8db4-84463481d8ae", "comment": "Malware payload", "value": "8f8a3ac95f8e563497b2b735571091dfe3c14a38e66b98e3f479efeb0a132b6d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854790, "uuid": "7b8c83ce-f1f2-43a9-8eb5-6f9cb0a73900", "comment": "Malware payload", "value": "1013260727093bed4c7ffb4244fe435af39c6502", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854790, "uuid": "b27980b6-c6c3-4515-be5a-01b8a12f90f6", "comment": "Malware payload", "value": "8aaa0428d6ede2a9af1fbbc151e14b545c67c91138119c38d32e76f670e0c2e7b502a269443847919ccaab235df50859", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854790, "uuid": "0174550b-42ad-4109-b754-d57e8b329ecb", "value": "T194630A848B3720DD467819FD8D0E26CFB5119A5A7AE88260F6DFB76930B728F54313C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854790, "uuid": "bfd7632d-9edf-4995-8bb9-266ca0c54f23", "value": "768:I8w/h62/jWs6oS+xISN0vkhNJkB6edkfScBYrwz2y8kTAlGB:I9l/AoSSMkbkzusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854790, "uuid": "e0490c58-4ae8-4797-84ab-f16a9ac3eeb0", "value": 69632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854790, "uuid": "c2ae0441-ab1a-4e93-ad41-1654f2973a69", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854790, "uuid": "18ed4ad2-5ed6-4d11-929f-e65f783e4dea", "value": "invoice-1645080830.pdf (46).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f55fa2af-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861018, "uuid": "6f37191a-a76f-4ab9-950f-8f904132d8d0", "comment": "Malware payload (Mirai)", "value": "61af3be2ee7f3bca307aa0cf0a9d372e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861018, "uuid": "6bfbae82-ac7b-4bf9-9332-d72988ab9515", "comment": "Malware payload (Mirai)", "value": "8f8d833929a0d8acd5344b34614eb379e29fd09d6e7aae979c0a88662e9d3e19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861018, "uuid": "7796a7f0-3470-452b-b7f7-4924314ffe77", "comment": "Malware payload (Mirai)", "value": "a6569181a39863b5a379e819f930307b86e0f462", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861018, "uuid": "80eda6d7-bb89-4fd8-98fe-3b6722048813", "comment": "Malware payload (Mirai)", "value": "d1e59aff0015da0357bc7f156a44ba112c5a79463fe96b3c192573862af3f93afc0b5aa0d1a6abce547a36ac0441f976", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861018, "uuid": "4b665620-ecbd-46aa-a279-7f5b44510e18", "value": "T1D87312D1F3185B798FEE1E7C248FBAE19973920075CF4B185A6BDCC9849B5CA9E14038", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861018, "uuid": "21a403ae-f644-4a7c-8041-e2fe8fc97eff", "value": "1536:Z3wkrMGivnxqa52my7ay0FG5D9jV1gQlMhIyD20ZSdpQbZX6FqhavCGoSrgh/:F9r+m90FCBVeQuhL60WpQ1DgEdJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861018, "uuid": "e79830e3-28a6-4492-84b2-b650bda36125", "value": 77108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861018, "uuid": "7cc7f112-f7f4-4179-80eb-6ee661d70ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861018, "uuid": "a4e183d6-5584-4f4a-ac33-9652b832f8cd", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fed3e42-e2bc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795806, "uuid": "d6d44f10-63c1-4af6-ac4e-2ff07f681bb1", "comment": "Malware payload (Mirai)", "value": "0fc7825de06dc34a755c82818d1d8c68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795806, "uuid": "ddd2bcf0-3985-4910-9aa4-870fe601fc3e", "comment": "Malware payload (Mirai)", "value": "90388006f1cae599954399553e69effea276a6ebb30f7c6f0452d631ed8e942a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795806, "uuid": "85853119-478b-4414-8e33-f9efd3f5424c", "comment": "Malware payload (Mirai)", "value": "18b69b9ec367d84ce969a4fb3a9db0c31cc88779", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795806, "uuid": "efdcc44b-d18b-473c-a42c-5e2a438988cc", "comment": "Malware payload (Mirai)", "value": "d06e0ec6b5318769d2742b63508f81cfec8929018d07185612cc5da6db3902ccc2dab0a015673214023290010ad760f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795806, "uuid": "cb88ffb7-95a1-4fa0-9a81-ac55873f9c76", "value": "T173635CC5A603DCF9EC19463550B7F3325B76F039212AEA87E794A933FC56601BA0638D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795806, "uuid": "b6868457-2a60-4c36-98c9-ffd3d37eaa24", "value": "1536:gFXbfbI8T2Tk+OHAChzJMFozDOxM/tMeMku37vs2AP8Sxv+J/RRfo:gFLzI8T2w+4Rhz8jxMlMGuLE3UOV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795806, "uuid": "be1be3b7-f81f-464d-ae1c-510da926c792", "value": 70608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795806, "uuid": "7e89f252-5beb-4af6-ada3-1979bec81b38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795806, "uuid": "12cc036d-05cb-4a04-a5aa-98a47ca00896", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0f54c4-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855555, "uuid": "1062b304-2c7e-42b6-8558-6e55f37e0ac0", "comment": "Malware payload (Mirai)", "value": "237696fab9a4ff1e28204a62e55771ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855555, "uuid": "89b4e973-9367-43de-a40e-eb02277c20a9", "comment": "Malware payload (Mirai)", "value": "9078b17d510c83aca9c1b8b2e29fc5a7ca06961d48eb9cc3d6d916a4b87a587e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855555, "uuid": "85960921-00fe-4763-b1fc-073bf9b1bbf8", "comment": "Malware payload (Mirai)", "value": "93fa07491673b366d7a3d7d5960a02bc4612b737", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855555, "uuid": "2852ad9e-5248-4f55-8b09-2a2e8ff3bff2", "comment": "Malware payload (Mirai)", "value": "5796077e5734f66155546edd4e1015882dadfdce28188f374c777956cf0d82dd1935c1d13546019b225daba643d8d14a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855555, "uuid": "3d910be0-7de8-4122-9243-c9ae13acb109", "value": "T13163028AFBDC0F5DFCDE1BF807AA76DF1261903554B280A408E65C86915FAB1519B8CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855555, "uuid": "898d6fb3-728f-475d-8b90-27dc94067695", "value": "1536:37MbwKNGjjH+Xq34n/q8Zu41zmX3sDgoTdrPH:37Mbp2L+Xqdfoz2sfrPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855555, "uuid": "fd7d1619-2c01-4011-935d-f11802e39fb1", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855555, "uuid": "0b9a4d48-4cd5-4acb-b4e2-a1b5b828f84b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855555, "uuid": "7b87b0f1-75ea-4d12-adc7-8908c6901666", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "966cf5b8-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811037, "uuid": "6d9bcc2e-7920-495b-8773-033cd4f809c0", "comment": "Malware payload (Mirai)", "value": "cf6325e23688a3d35499b8317f4e1a31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811037, "uuid": "ef096487-d25b-406b-bb72-cf65a79bd58c", "comment": "Malware payload (Mirai)", "value": "90c192bc31ab15a5273fc49619a3cb51d547c47586e55ec094601896c82af434", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811037, "uuid": "a1e4592f-e7ed-446c-90bc-d89097c79fd0", "comment": "Malware payload (Mirai)", "value": "ab9b5aac8af144dab7bb4741565ae9e925ae31d5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811037, "uuid": "05231c0c-4161-430c-9728-183983810d59", "comment": "Malware payload (Mirai)", "value": "1c83c0adad1377aefecf1b381933fd066ebf24a173050db76387119cf2e418c89027c726e68118ffbd2ebd11bb67a7b5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811037, "uuid": "60c38edf-8e35-4b8a-8053-f172690e8823", "value": "T1C813F796BC829A66C6E0637BFA5F418D3321A3E8D1DF3257CC112B057AC991F0DA7B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811037, "uuid": "fd618e34-bb72-4761-8da5-f62f46af09b7", "value": "768:XP7T28mUGj57T7lq1dZuhfHn41GC8saIDoCerCIcW138vYPDX/heg3OgGytZPNhI:XjHm55TZ0v8sUcWh8IDX50Py3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811037, "uuid": "1f5e2b68-6112-474d-a4cd-0fcbd1d8edb6", "value": 42880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811037, "uuid": "51cf7b7f-e73a-4e0d-8863-808b9a1886aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811037, "uuid": "feddf895-8fff-4478-bd1b-6fa71cebd71d", "value": "hoho.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfb0f9dc-e30f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766831749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831749, "uuid": "dde2582e-9424-4e5c-b89c-0623ccb3e98f", "comment": "Malware payload", "value": "e996f27621d77f255fdcf426029cbb7e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831749, "uuid": "ee51d3f5-170c-47fb-a2c7-c6773f556d68", "comment": "Malware payload", "value": "910049cf736d71aac3b818d9e53fae178d91c0fec4d8df8de435417653ba960a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831749, "uuid": "e92faa8a-384f-46f3-957a-56be7a6e768a", "comment": "Malware payload", "value": "9ef0cdb735bcfa81f37b36b0d19fe12927e56bac", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766831749, "uuid": "3f7e707d-b2f9-4110-951e-129153361fc5", "comment": "Malware payload", "value": "7e0f21099b1e51e5834c4032fde9a1aab4fdd1fc7fd651f9097b0fb68e97a395a74eca48315767c39b2538a1a7f70829", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831749, "uuid": "f87cd74c-b8dc-4b35-a0a7-a849685475f0", "value": "T123363323B2C740B1EC661E3D8466D522AC2B31E9A9E460B83D7DD95C79B19C36C337E4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831749, "uuid": "761035a7-903e-436b-b536-4f3fe1e73e8d", "value": "48aa5c8931746a9655524f67b25a47ef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831749, "uuid": "bff28519-5390-42bc-b3a8-c850d0e231ba", "value": "98304:NIs/6X7GB9W4NgDFqxZqiwCJEojlHx5adMdRJCR10yEyLq3J:upX7MVyFeqiXJECR5pa0yhL0J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766831749, "uuid": "5b3498d9-840a-4abb-8614-bde487e8a706", "value": 5105496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766831749, "uuid": "fcc76e40-e6cd-4d37-86a1-c583b0a5e057", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766831749, "uuid": "23c6f1ab-1ed4-4555-850a-e0093766f5ec", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34d70ebb-e378-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766876587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876587, "uuid": "5587c1c6-675a-4475-9866-6b79fdb226a4", "comment": "Malware payload", "value": "4bf776b997a94bef78507d4102335b8c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876587, "uuid": "2132fc04-12d8-4586-b517-1f2f9b353765", "comment": "Malware payload", "value": "918fc4bdc4567d365990259350208e50543dfc5a43576a7c1dd6a4a30eca7f17", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876587, "uuid": "4032f2e7-06af-472a-a396-e218b012f4a8", "comment": "Malware payload", "value": "aa207000abcf2457c728f7e41ea44edbd4bb9be8", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876587, "uuid": "f31a0e40-72c5-4022-9314-34fc003a3576", "comment": "Malware payload", "value": "16874a8fedef93fb2438467ab7a3c8ba9f96e1a29606c5c3ec521d2c80ba208bee2f7b0ca2e955b9af34c17fde98ebed", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876587, "uuid": "1eb4eb8d-fc5b-4adc-b568-0e4d030a4dd9", "value": "T109964BA2FE441356D69FE335E9B022957230B044137515D7BBA907A64C1BAC82B3FB2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876587, "uuid": "8c9c1df6-05d9-4f98-9866-7764ac1f7212", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876587, "uuid": "b7074d89-dceb-49c2-950e-ef7f018160c3", "value": "49152:GYC66rb/TCvO90dL3BmAFd4A64nsfJqsyEPc4gzZF4NG7QnHsPlw2O/ku/hBg3Mh:GYxJmB2REjnXxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766876587, "uuid": "a49f90e4-3081-4e3a-af62-b01c747babbf", "value": 9304192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766876587, "uuid": "db7f6858-bb45-4d7d-ab8c-8c73ac221d30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876587, "uuid": "5aeacc07-402c-4bbc-9699-e491a0c817a0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cc17d50-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858131, "uuid": "a6d70154-7877-43e7-9ef0-2690db43dd60", "comment": "Malware payload (Mirai)", "value": "b994e884ec7bd3484eb3da2c457a3747", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858131, "uuid": "8bedd063-be16-4808-ab5c-92a77880d8bc", "comment": "Malware payload (Mirai)", "value": "91cecbd485440b8990aa1e1a680ce219327bb80fb902783a475c7de420c94457", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858131, "uuid": "994dff2e-29fd-4c76-ba39-27d1cdb38142", "comment": "Malware payload (Mirai)", "value": "0d6d05a8a7c9fdc3d0d8937d8a0b7c720d064e60", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858131, "uuid": "3d5caf62-a565-4e50-8766-22ad30ef6213", "comment": "Malware payload (Mirai)", "value": "b995b2ea2d5e29572cdefa52c2d513040942330843fbe65d5d7240edcfe916758744aab08897ab8be681d22f1c3bd5a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858131, "uuid": "f85e05b1-3ffc-432d-add9-08ab8ac0dc14", "value": "T145932A56FD814B21D9C102BAFA1E118E3313177CE2EE73129D186F2177CA96B0E7B906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858131, "uuid": "10dca49f-d2af-4975-9c5d-31de2597dea2", "value": "1536:Ifn8wi6c2Lwtp15qXQBZjRu+wl5zLAaAtI4oVAUnio2ZDBCg78zY1r77:Hd6c2smQBGLl5LAaAE2ZDBCgozi7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858131, "uuid": "86a4775a-d608-493c-8753-b8354d4bd322", "value": 95952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858131, "uuid": "2a2ab43f-0624-4ef2-bbce-35a2a2994f4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858131, "uuid": "53a8b5a9-5eae-49d5-bf54-aedbe065279c", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af75aa92-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793899, "uuid": "f97a79ab-ecef-4f43-8fd9-97ec71ca217d", "comment": "Malware payload (Mirai)", "value": "6f22d9b616b5256a98819b21c058293e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793899, "uuid": "0ce06f4e-fbd5-4f97-b7cb-bd57365e4d31", "comment": "Malware payload (Mirai)", "value": "91fe1fa77fda72dfa63aaa93367a5d9e5ce167aace864c31df3b3269f8428c73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793899, "uuid": "493ae95a-6eaa-45d3-b59c-d126b7039481", "comment": "Malware payload (Mirai)", "value": "8493230b8dc2e0d69e768fbd1eebdce5aef964b7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793899, "uuid": "b6c1cc1c-4123-4b8c-9888-cd6b42c61a62", "comment": "Malware payload (Mirai)", "value": "cfb37161366a8888e0de9f4712a33800aa9e310d368a3ef4a7a8de8e85d625b126e5bf219badb74a2afa3eba2ed8b466", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793899, "uuid": "fa3109bc-a2a1-4c9a-9ffb-d83cb0bc6c75", "value": "T17E4319C3B500DD7EF84EE337C5970E01B124B7A68A421F63B767BD27A9710944869E8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793899, "uuid": "4b630852-4ca3-4b2a-9944-034c8c6dca1e", "value": "1536:0fuEsMFctT9jpV6l8uDLd0J9epDDkKOK4TTPQO:02E54T9jpMjc9gDDkKv/O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793899, "uuid": "770f39b1-d5cb-4e55-be62-fa064ddf7ab5", "value": 59904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793899, "uuid": "02621a91-29d4-4165-bc99-d39ae730c52b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793899, "uuid": "884a6ef0-670c-46e2-b450-bf6a98e26aec", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c47ed9e3-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854923, "uuid": "fb9cde60-8a9d-4562-896b-9530cfd164e1", "comment": "Malware payload", "value": "26254ca4c53cc88e1af6858ae4c90785", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854923, "uuid": "ee9a728c-24e4-4868-8f48-5a573f618583", "comment": "Malware payload", "value": "920498571794602495fe5625c72eec9c95653e8134612cbf735557d34b50ed6d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854923, "uuid": "6b8e5021-253d-473e-9189-8c89bf605217", "comment": "Malware payload", "value": "cbda60c76ac1ef2f9f3ac938cc4fda62ea893aa2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854923, "uuid": "686d5fde-6a40-41c5-babb-7c417010d5b0", "comment": "Malware payload", "value": "42d075608538c914bcafe81355cbce4c536815c5b4fc082fdf7bc90a9c00dc0ed3d757d7d56174ef3f9d2e15d840c3bb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854923, "uuid": "058eb3f3-b7ea-436b-a3e9-8804b38a592c", "value": "T1206309DCAFE8BFB907830EB579CB839CA41698A558647C5DF6037149A8B3CA449610EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854923, "uuid": "87383e24-c21c-425b-a35d-25a581e9ec26", "value": "768:I8w/h62/jWs6oS+xISN0vtFrNEldkfScBYrwz2y8kTAlGB:I9l/AoSSMzMusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854923, "uuid": "01d6d812-b258-4321-99c2-9a217529de1a", "value": 69727, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854923, "uuid": "59edbb33-ef94-4244-a89e-d295b1ef2847", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854923, "uuid": "a808d872-182a-4338-abfc-e1483188f8c9", "value": "invoice-1645080830.pdf (18).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1740a67-e370-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766873413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873413, "uuid": "be6f04ee-4cfb-4d87-af4e-40190bdc1cd4", "comment": "Malware payload", "value": "7925902fa91e165b67ccb6ab3833c779", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873413, "uuid": "7c30229d-9a3d-40fd-8ffa-fb3b34abc708", "comment": "Malware payload", "value": "92551682197c1d0295549208e53f8479c096247846952147b4a59691cc269b53", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873413, "uuid": "47361ab6-ea37-4dbc-a9d8-deeeca11e246", "comment": "Malware payload", "value": "e0d8e8796bb424ea66907cc38f5705ce88557625", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873413, "uuid": "ad4fb9ac-4b1c-4f8e-9162-53b78e2af253", "comment": "Malware payload", "value": "1549b62461a1c91a99a395d16573ded0c0a72b2f1c54c9f8e8b1675d99d4c6149f1d37ecd4624119c5a9d75bb799b045", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873413, "uuid": "081eba18-310f-4c82-9119-c1af3700a383", "value": "T17015234BB66ECBD0DD2625B93DB64F0CD3A36AFF8541C05603B6D9CB1E23290AE1255C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873413, "uuid": "c10d760e-11be-4c28-8691-2fbcc4849b9d", "value": "1f6d6b8261119bc96407d03811834fd9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873413, "uuid": "9a280fe5-4881-4fc2-82ad-99e9c423bc8d", "value": "12288:p0qR70ulnNodAwxl2YFibRE665AOvXGdCrhObfJgnQydeUQ8jssd3IO:p0ZulnNoCwxEC665NvGqoIPQ8osxIO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873413, "uuid": "3e271c03-c773-4d13-a33a-f96a6c894bb5", "value": 912896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873413, "uuid": "87545354-96c6-47e4-b3da-e19731e165d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873413, "uuid": "e988fbf5-e76e-4db0-8e09-ebdeb4a8e9e3", "value": "2025\u5e74\u7b2c\u4e8c\u5b63\u5ea6\u8fdd\u89c4\u5185\u804c\u4eba\u5458\u540d\u5355\u4fe1\u606f\u516c\u544a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da78f58e-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766796549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796549, "uuid": "145ef0b8-a07b-40a4-8f95-6a3c4387c03c", "comment": "Malware payload (ValleyRAT)", "value": "ba5119d92e424c5a94143ce4b313888c", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796549, "uuid": "f712a887-2017-434d-9ca2-50a32885cbe0", "comment": "Malware payload (ValleyRAT)", "value": "92d70e07e1206453373a139644dada69c88fd664a14c90e70b3e56de66abfd99", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796549, "uuid": "4814cd54-1e60-4869-9fd3-28f3477c79e4", "comment": "Malware payload (ValleyRAT)", "value": "43d72c1d07b66bbe17fbaff976023f005271cbe3", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796549, "uuid": "ddf5e060-000f-411c-9782-464ddff7fe6d", "comment": "Malware payload (ValleyRAT)", "value": "aa4dc622fc61ec9360d55db1f3b86c19507a6b48f306068c3df3d970cfd002562a8075074f24e24e73b06cabf27f8f08", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796549, "uuid": "fed9cbf8-6f5d-4bc1-b4b8-84891649a918", "value": "T1B706BE12FB438761E8DE017925BB5BBE0A3D97188B24C9C3DB9528B99C225D1173F38D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796549, "uuid": "3e595645-f4eb-4829-85dc-76769c0d0575", "value": "bbf648e2675ae4549ce15c2271db3ace", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796549, "uuid": "c98be9ad-88cc-4a39-8138-0ad558413a78", "value": "49152:WaXV0ofYbttbe8ro5pqPBaNhv4WYm1pFccN9ltrGZvc0BzeP7qKH3YJQR9g7jVN:WaF0ofY3G94WNpFpHl5GK0cqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796549, "uuid": "45c89f81-b1ed-4ae6-bcdb-631eb9ea00f5", "value": 3739648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796549, "uuid": "1b00030f-bc73-4270-8561-0db8a1b6b364", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796549, "uuid": "2282b455-f48c-45b2-9c12-938e7a8c625b", "value": "HPSocket.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7f2890d-e35c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864754, "uuid": "359953e3-db7f-47c7-a2fc-d0d1e2363653", "comment": "Malware payload (Mirai)", "value": "a994f05a53cdb6f03c083d4b604759d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864754, "uuid": "5abfc113-da29-447d-926b-29efece6c6a7", "comment": "Malware payload (Mirai)", "value": "92e15a2b2915f7c78ea3d78b6767ae7060bd9fc6c7135d349be6fc68de2160be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864754, "uuid": "5a387aa7-110a-4576-a6d0-5ce0181e4a1c", "comment": "Malware payload (Mirai)", "value": "c4c840b00b5fe2a66154a2904e3abcbc6b1aaa44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864754, "uuid": "69b86606-1ec0-4962-bdad-2696e71d2190", "comment": "Malware payload (Mirai)", "value": "c3221f871d79444f33a2324c72eaf4b2ab4e5fa6e116d2036b5e126077c31b3676ed0a8958e38d29e8b86eb3f33af354", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864754, "uuid": "c1fd4980-7423-4018-9f61-559d4e530cfb", "value": "T102530983F440EEBDF84DD73B85570F01B234B6564A520B27B376ED97AA72094892ED83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864754, "uuid": "b4454279-77dc-43ea-86a0-78bd84b50af2", "value": "1536:X8aUEc+jU1XhY6jvNSm8udTB0Jx41JeGMpumvGETPRf:XOEc6IC4vcUQxGJeGMsmuk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864754, "uuid": "056a1bc8-9465-4cab-a62b-8f41d337f4b3", "value": 64492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864754, "uuid": "1f0b6eba-213d-40b0-9329-759e36b2f955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864754, "uuid": "f2ef880c-fe2a-4976-b29d-81cf2dcc0251", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c484b36a-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825288, "uuid": "3e595136-6430-4cbd-be14-aefd3b8814fc", "comment": "Malware payload", "value": "9c9009742cdf4b396b3581cd8f1ac993", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825288, "uuid": "f4abf0ff-89fd-48bd-86fa-3b4d81f392be", "comment": "Malware payload", "value": "9310568a4a9375ca187cb506400b98b4475d37630bfe5aacde71a51fecb06aa4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825288, "uuid": "bd18e48a-2efd-42ce-8312-2007f5122a9c", "comment": "Malware payload", "value": "266e1245a83025894a42fdc9a36eb0f828640a67", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825288, "uuid": "147d2758-d5a8-4ba6-acd4-e6a37243f029", "comment": "Malware payload", "value": "bf9f5c42b4fc16de09101a24f9ace2111fa67a8849a88772f33719945749209664fae2edfce2f4c62193141f4709190d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825288, "uuid": "bf2715b8-fb80-4c63-b03b-1954ae1de650", "value": "T1E2633B4BB86511663BDF2F596E8A82FC1503588F245A3C18FD8EF0E1D35FAB25B1254C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825288, "uuid": "25a93ecc-acea-437d-958d-16d26d5d44eb", "value": "1536:I9l/AoSSM9HrHjhqwj1seJorQdiwnd7eh2xh9z4RQBN3CQbWWD5U74ERk/4kCepm:I9l/5M9HrHjhqwj1seJorQdiwnd7eh22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825288, "uuid": "1910209d-639d-46e5-b337-383c4e41550a", "value": 70628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825288, "uuid": "62132eee-7304-47f1-a6a0-19af4b7249e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825288, "uuid": "753bbd32-4dc5-4ddb-8620-99feab0dd1dc", "value": "invoice-1645080830.pdf (92).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97305672-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825641, "uuid": "b603d7a2-5ae5-4be7-b111-d82eab594d5f", "comment": "Malware payload", "value": "cef6e5eebd6dc8abedfd07c78e4cbcee", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825641, "uuid": "88896f93-79e2-489d-8ddf-97d0bef1cfa0", "comment": "Malware payload", "value": "9341035749dd95c848cd744b968c8e17b1b95fea18c5c2254bfba7a4766d5c65", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825641, "uuid": "ef9f8681-5985-4b80-becd-96589e232dfb", "comment": "Malware payload", "value": "0de2f90a19591c9ae85a7dfcc25131d5f0d37374", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825641, "uuid": "f28786a9-0843-402c-a223-650e3933a4e8", "comment": "Malware payload", "value": "197e2610c0f931cffac725cc0445fc52a63efc891a70566dea91b5eeac5c3a7b858a84ca42f13fa117418d6668364ce8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825641, "uuid": "b007a91f-dbd1-4bb1-8267-c24c19147173", "value": "T121631A5D0807E20F0A6C2DD18FC36B111E7CE6EA1348D03C1ADA78B675AD3BB97A4563", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825641, "uuid": "84b94a7c-692d-4e00-a894-45c39a40d352", "value": "768:I8w/h62/jWs6oS+xISN0vm7kpKtxdkfScBYrwz2y8kTAlGB:I9l/AoSSMmvrusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825641, "uuid": "7307c43b-d8d0-41a1-bf63-c8df7c292781", "value": 73372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825641, "uuid": "b9cec73d-6653-41b6-90f4-f85e7e42622e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825641, "uuid": "029cf8e5-a532-4b28-ac68-f44cefca9cd2", "value": "invoice-1645080830.pdf (14).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1d870c4-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854516, "uuid": "33129b26-659a-4a05-b16c-eab398610105", "comment": "Malware payload", "value": "cae249abe3f4eeb632cf20fbd91ec531", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854516, "uuid": "96391cf0-bcd5-45f8-8902-f81e2ec60334", "comment": "Malware payload", "value": "9382725913e21881cbbd47e6b67fafc60e2128833f447b43b0606a6b171465f4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854516, "uuid": "5eff80bc-496d-4476-816e-66198e5bcb36", "comment": "Malware payload", "value": "ec419b4a0247a2c5ed4e6c2b1d4ec1dad5938b32", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854516, "uuid": "cd794ae8-939d-4885-92d9-c78dfce92cde", "comment": "Malware payload", "value": "ebafe8f9b29b52cb28f7d602396b5bee0afdb24c73e7be4f92a7cfe65c123d05b6005a6a225d92d6676d0abdad0248ff", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854516, "uuid": "bf21a14a-3275-4288-943c-03692fb8db26", "value": "T1DD6308A4DD01E7C9432F79697AABADA3D5C424693D38D335D00ED8AE3F49376086270B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854516, "uuid": "0548c64a-1323-4564-ac14-5cceb9f6c984", "value": "1536:I9l/AoSSMcVIVjVRVeVYVdV2VjVDV1VdVaVfV2VwV4V9VuVyVdVTVEV1V+V0VNVD:I9l/5Mci5jsy/UxhDDYdUWWnUQrVuHUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854516, "uuid": "7aeeffe4-2543-46c1-bbaf-39cf0d3e4fd7", "value": 71508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854516, "uuid": "64f8a114-4dca-48f1-8a81-c1d2bf8741ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854516, "uuid": "d43c39a9-407f-46c4-b374-d68c5779a7c3", "value": "invoice-1645080830.pdf (100).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc57a0ed-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854936, "uuid": "c4717750-84a0-4e0d-8172-29a340d81bcc", "comment": "Malware payload", "value": "46f4e699d0ab6984097d2ffe212cda5e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854936, "uuid": "ba10d85e-9fa7-46e0-a57a-a73956c7c179", "comment": "Malware payload", "value": "93e00029c7f633c81ae32c2fdf46ddb9fbbfc7082ca362f2943010bc70cfe854", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854936, "uuid": "ea9dd3d1-fe51-496a-82e8-4831ef814b4e", "comment": "Malware payload", "value": "c8627a23af960b59d59986593728980a00d4cf2c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854936, "uuid": "e081470c-ebe2-496d-a9ba-4b3f9d3318c1", "comment": "Malware payload", "value": "0b1a6bef3816f8f8179cbcfc20f70d94983d8277de487fa30f47354a4d83cb802e7310fff0d491a7d41c0c19fd7539b4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854936, "uuid": "de41f576-70ae-4a23-a591-701bf57dcbb8", "value": "T1CD732B43FF1E3CA6BBB079784C7D06D3795D91198CA3953786335231AA4DEE30A189E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854936, "uuid": "9ec87399-c33d-4f6c-a131-31ddf589b55d", "value": "1536:I9l/AoSSM/P5AQeUoY+PKbAx3GLk9zaoRwpKMgDmTXLwfrgAfrHe/dUu/lYnksf5:I9l/5M/P5AQeUoY+PKbAx3GLk9zaoRw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854936, "uuid": "3cf1f4bd-3ddf-4ee2-ab02-7c7207dbb4ca", "value": 73476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854936, "uuid": "ac09566d-37fa-4d72-94a9-142218097664", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854936, "uuid": "7444225c-f56c-4745-945b-142f655c45e0", "value": "invoice-1645080830.pdf (11).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fddd2b5d-e359-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863609, "uuid": "a67099fd-07a7-4827-94eb-b6bbdd51a881", "comment": "Malware payload (Mirai)", "value": "84fb6abf5e448269d0c41af9664bb011", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863609, "uuid": "6bf744dc-1616-4486-a5b9-badc578340a1", "comment": "Malware payload (Mirai)", "value": "944f0aaca00f9f74805f065f93b9c97d18209448417fa0da0c0536fa981a4fa9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863609, "uuid": "4b004992-96a6-4484-afb9-2572e1c59c5a", "comment": "Malware payload (Mirai)", "value": "b289dfdade4df2f7d0f83ec2ddc63768a28f10ef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863609, "uuid": "152c5b83-f6a1-4861-8b9b-50f184b9a3fe", "comment": "Malware payload (Mirai)", "value": "eb0662b97a7f991decd17e6c6a445430bdcb12488e035f1fd93d390eb63bef46eca5eee4ae9e4dfd87411df7de876d1b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863609, "uuid": "47b4b331-3617-4ecc-ad34-bd86e430385d", "value": "T17AA3E70ABB615FFBD86FCD3705B95B0525CD560721A83B3A7A70D818F25B24F0AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863609, "uuid": "cc439e11-54d3-44dd-be90-a8e7e1714bd9", "value": "1536:Cq48bRPATYQw1Yl4DM8WcQPtehZ9wCR1K4paqwUhYw3Eih0jOc+bVR5:CXYPAsQw1nKeHw+cjo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863609, "uuid": "a961743f-1702-4e54-a932-b874e6b49e34", "value": 103908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863609, "uuid": "8b3c8371-7648-43a3-818e-722236376c81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863609, "uuid": "84f49a56-11a5-4322-8e23-291e6d0a6dbd", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46d372ed-e2f6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766820782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820782, "uuid": "aa5505d7-3a6c-4665-9624-3ade8d39960e", "comment": "Malware payload", "value": "2e4d90f1429366be13e80053e72fa69c", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820782, "uuid": "bc1bdd6a-8999-4a42-9633-2df6e7a10e5d", "comment": "Malware payload", "value": "946ceab150603535b9d46cf2eec5c1ac47ec9413050591a5f11c388402468dab", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820782, "uuid": "988f8f6e-b2a2-4c6b-9079-d4e53f723a22", "comment": "Malware payload", "value": "eb0dfb6c0797cb2c65ff9ad2e69864a6391308ee", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820782, "uuid": "419a0488-b52c-4c60-9c3b-d8db121cc8c1", "comment": "Malware payload", "value": "1ffb20834159829122cfbf66e62784c25150cc25a90907d513b8834b9ca35ef298d76ca26801b837919f10615f53c214", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820782, "uuid": "827737fa-4729-42af-bace-e995b9ecd433", "value": "T1504126000EE71258E662C735ABE9B2678417B8A2ED7D6FE5014D8A402737241E4A6F2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820782, "uuid": "78437f39-8c6a-46f2-a833-29e2c6bbdbf3", "value": "24:8J/BHYVKVWO+/CWjdAt2VFv7kaHqaj5CCpgszzD3QwavarabxJlpl9l:8x5ae2V9AaKaj5CCpfzrdav4adrL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820782, "uuid": "e95ad914-47d2-40b9-a520-351cdabcc80a", "value": 2132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820782, "uuid": "a08e7434-6e0b-475a-a1b7-4b33b54ae9fa", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820782, "uuid": "516317b6-984c-401c-8789-d33fe1916356", "value": "3cxprov_104.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0c276de-e2c4-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766799458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799458, "uuid": "0041fbfc-ae14-4619-92eb-42b4120f034e", "comment": "Malware payload", "value": "babf01d720f2e8d53086009ee63e1ad4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799458, "uuid": "b3cce0f0-dc77-403f-b705-0229dd2fbba6", "comment": "Malware payload", "value": "947d508f76869daa6237a9cbc2fd156977f488fd3ade0136771ad6ff51599856", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799458, "uuid": "bc2813ca-d5d6-4fb7-bc8b-6874cdcf2fd3", "comment": "Malware payload", "value": "4989268f60f8229f7f662b0abd1fd4a891ae87f3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799458, "uuid": "c876e003-dad7-4313-b227-53da16beffcd", "comment": "Malware payload", "value": "d4100b2a513f158b0999d9309a20598d933e236e919ad6dfa73eeacb3d31733714eca0b4144df080fbfad9d082747292", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799458, "uuid": "02bb1424-89b8-4998-9ee4-eb97e509689f", "value": "T1D3E474A27F59AE0FC699323956A6C13473C77A8181E07032CE93D7091FAE274DC5ADD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799458, "uuid": "ad9f3781-8476-4ea4-926f-27b3ae91318a", "value": "6144:8pXzT1Af7gjEXMc4FpAePthg5mh+cQa43H4gnmWDimt2fDabOEAOhc+:8NzT1gkjE8cOPth0n3H4gd2f2HC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799458, "uuid": "3b759ea9-0a28-458a-8edb-46fccb29f8ad", "value": 663207, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799458, "uuid": "2f3a5f3f-e849-41ba-aea6-1a3c8cd645d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799458, "uuid": "1d70f3e0-a1f4-4645-b10c-3572016745e1", "value": "bizy.mips64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "594d77b6-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797620, "uuid": "1df16b31-2034-48e5-83ff-bf1f4d024b92", "comment": "Malware payload (Mirai)", "value": "7dfd7dc9610ebdeafafeea9698b00ac5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797620, "uuid": "18000a24-afb0-44c1-9f95-56b9b3458e9d", "comment": "Malware payload (Mirai)", "value": "9486dd72481aedc8bd23473249f1b0228a6a3d8b3c059893c26aa07f6e0c4cc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797620, "uuid": "6df87ac7-a4e0-4c06-952b-74f9922eb152", "comment": "Malware payload (Mirai)", "value": "fdc924a293a85de4805fe6911f27e7820e73a357", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797620, "uuid": "fb08391a-6ce7-4267-ab23-af51341b627c", "comment": "Malware payload (Mirai)", "value": "e20d811645c575e166742d86bc87e045d59aa0f7a2b5e7c0257e26de6ac4c815e148686997c3d72b8c64488b98346a59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797620, "uuid": "20b1f04f-5aa2-4c45-a48e-f3a1bc3ece6b", "value": "T107136D76C46E6ED8C18856B4E5318E781B13F401D2631EFB5F4689E68087EACF6093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797620, "uuid": "5afdd320-b575-4431-842c-ad146cfe5393", "value": "768:6aCwtr1zOsPeMUeXczPcBAFVkiI9BnljU5CnoguhCL:6aCwtrt1nXHBAzkiytU5ffhCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797620, "uuid": "48289662-2f73-48ac-ae23-8b8d95add7a2", "value": 43004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797620, "uuid": "bfdd19c2-e0b2-41cf-9ed0-2ac3bb5f9e88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797620, "uuid": "adb6250d-193d-490d-8b5b-7850384c5db7", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "620070a7-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855617, "uuid": "e8f63084-2c65-41cc-a685-7d247c126025", "comment": "Malware payload (Mirai)", "value": "017dfb14628b8fe7f7a3a7b2519a8d94", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855617, "uuid": "c0d74aac-5afc-4721-9afb-212be8eb48c0", "comment": "Malware payload (Mirai)", "value": "94d01bccf4f33d3baf0daa099f834af7bc6e8be50bb8743395742428e0faafa7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855617, "uuid": "2f53f219-004e-4699-807e-7502518accbe", "comment": "Malware payload (Mirai)", "value": "86e656dfe7a13b24c01e61857ee976930706ea01", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855617, "uuid": "fc268db2-544f-49fe-933f-db2357dfe1ad", "comment": "Malware payload (Mirai)", "value": "4f6d42dded4b9cb00fdf08ece3478b127cd461acbd1690665f4dea717889fd0c2b095fe30e5164126becff2aac3a7d6b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855617, "uuid": "2190ad7c-5c1f-4f07-8650-0f0bfb3eafe5", "value": "T1D1C35B82E6A2D0F1E68701B00557F3E68935EA305416CEC6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855617, "uuid": "d6c2d181-45d8-44b0-8dac-4001acdfbc96", "value": "3072:3atpsoRNjmj1VGCr75MoS9SrPwVrx5tiySw:VoRNjmj1VGFVrRiyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855617, "uuid": "b2fe8915-d291-4e6a-b404-5157b68cfedc", "value": 123472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855617, "uuid": "871a9686-2421-43a4-915c-ba34698629b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855617, "uuid": "d85bd429-c1fd-45a4-93f6-061e82ec4fbc", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abdc708e-e2bc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796041, "uuid": "5ad15926-ca46-4c0e-a725-68c19c16064c", "comment": "Malware payload (Mirai)", "value": "5a18c8365415222b21231a4f242b5293", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796041, "uuid": "e1452aa5-2e6f-4142-99d8-5db9fe06b1ba", "comment": "Malware payload (Mirai)", "value": "94dde6f837be882d4b70d79488acc902c776df4b69831b0e53cd3d5f09564377", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796041, "uuid": "ddc7eb03-d923-40c2-a902-bb4b14d7e1d7", "comment": "Malware payload (Mirai)", "value": "aebbcc9cdc5e33e8f231833111720e52d6e9845a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796041, "uuid": "0c303a4c-71a2-4241-a7d5-7bade49dd63f", "comment": "Malware payload (Mirai)", "value": "04a15d1a7bf406b33b441bf8b0241344ffefb0401df283a43cb1c47edd30a72030720ef4df8e162eb26453805201a6ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796041, "uuid": "a06cfe3b-b126-4f8f-8872-d1a77d82bb3d", "value": "T13B736A2269762D27C4C4B57B61F70734F1F6174A26A8CA1BBD720D9EFF146002117ABB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796041, "uuid": "cb752219-424e-4d17-8317-ac36c6b61b3b", "value": "1536:32WGeS09M5OjyL/HsRadBVWUwV3sZmPt+gAeAgE/kA7uh/:S/nfL/9fZulAvoAQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796041, "uuid": "0590f881-b79c-4adf-ad1a-8297a7f59ce6", "value": 74956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796041, "uuid": "10274e6a-1d29-4f3b-8f51-d615564bacb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796041, "uuid": "e9608d44-5fd4-4388-94fc-c9f7941b92a2", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20991b51-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825442, "uuid": "71614f14-3f8f-4607-88bd-ba9ff3311e4a", "comment": "Malware payload", "value": "6063b09aa39a877a095d5b392287d215", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825442, "uuid": "de6fff36-7e28-4e6a-8344-d39cf4eff4c5", "comment": "Malware payload", "value": "95c8018687cfee1fdc78c92d1afc76ee182be35a36603dfad460a686f4ff88fd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825442, "uuid": "af7d4f42-4ade-4f10-97e8-8f2c109096c7", "comment": "Malware payload", "value": "fdb1efc67c9c9615bcfafc1a70d4a28f48d01a27", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825442, "uuid": "478742d5-5be1-4d53-9095-b8813fd36d29", "comment": "Malware payload", "value": "746266570fc65f5e55503e0e2ea89c4752484a2b7ea489781352a7f694bd98bdc3ecac7c9a8f97309604e08be4efd110", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825442, "uuid": "5c83cd49-4119-4f27-8015-e835fc72314d", "value": "T134633A62FD23E46D20BCA467CF020B139E49CFA023635258D05C9565179DFAB1B3AF6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825442, "uuid": "ed1b8d04-dd0c-4fd3-b4b5-18575317d732", "value": "768:I8w/h62/jWs6oS+xISN0vHAnpe0dkfScBYrwz2y8kTAlGB:I9l/AoSSMsJusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825442, "uuid": "01933fb1-d03b-4fea-8a20-792466734ee8", "value": 70578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825442, "uuid": "f48ff848-86e9-4616-a568-df67ee615283", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825442, "uuid": "55136f57-cfdf-40b0-8174-37b2d32b9f0f", "value": "invoice-1645080830.pdf (58).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f6add24-e37e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766879342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879342, "uuid": "b1b779b4-8aeb-4f28-9d54-4b1fa13e1840", "comment": "Malware payload", "value": "ba502bdec4b0bb7109a3fa8cc1f0ecec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879342, "uuid": "e1c6726d-7197-47ba-8926-445b8a9f32ef", "comment": "Malware payload", "value": "9613725f26051fcfa0b0768a1ba85b8f152e42c981b95ec355fa5ee70318e87a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879342, "uuid": "3a6a3d7a-b93d-4e8d-b2cf-cb6b026d46f0", "comment": "Malware payload", "value": "9878f7512055a6b70ae37ebcfbb60fc8abb1f02d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879342, "uuid": "15f2e793-73f6-4f4f-8355-0fd864dbf859", "comment": "Malware payload", "value": "f7d6984872b7677ee52ce46997afddeb21ca627519aca476077a527c47b669b29fba1003cac59fc7262867d580a65821", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879342, "uuid": "12920a53-0525-49e5-836f-511cf9ba1514", "value": "T180331741B8819A17C5E422BFFA6E428D332663B8E2DF7217DD125F11778A82F0D77641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879342, "uuid": "a9c71125-d439-4892-8a4f-e19153f4d040", "value": "768:kyfwjVhBS/nFgicyj9pWFi/Yrhq+Iw9es3YHMLI6NFhxzngyzoYu:Bw5hTyjLsUYrhqfwAHiFgO7u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879342, "uuid": "576b537d-ae87-4040-be18-c68365357ea8", "value": 51012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879342, "uuid": "d8550503-2f0a-4ecf-90f5-0f6b3ece83b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879342, "uuid": "b7e80d19-0b83-453a-93d4-b1e5a7d0bd27", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "576671de-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824675, "uuid": "5ce85aa8-526c-4c1b-80da-d58513d851ce", "comment": "Malware payload (Mirai)", "value": "ee52012e7eff462786ff8088781df4ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824675, "uuid": "a6f0cc10-230a-4b5e-a457-81ce9e8ce068", "comment": "Malware payload (Mirai)", "value": "9613b5ea647ec01f3943ee7081ad43db64d236bcfc5845c48131aaa0c58085f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824675, "uuid": "a0930dae-585c-4720-97b6-bca5c74c9c93", "comment": "Malware payload (Mirai)", "value": "657da1e44400b74daf5fc1e98679726035a9a4b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824675, "uuid": "0db968b5-52c9-47bf-b92c-f1634579aef3", "comment": "Malware payload (Mirai)", "value": "96347bceafdbec8faaec9c97bc8c14505b820aa741642637df4ff451b12e369f0ab170d319595449af7e2546bcbab1d1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824675, "uuid": "8d89b3bb-eec0-4133-baf2-dada5b1a8932", "value": "T1D1832A52BD818F13C1D222BAFBAE418C372577A8D1EB3242ED247F90778689B0D67711", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824675, "uuid": "505f83b0-1c60-4361-8871-62d53f96d4bc", "value": "1536:brdc7OZJtDLnzAg0aB2iU2MCGiFy1R/FDVJsT8PRJShl61d6iT8wFSP:br5Ar0PGCGoy1R/VHi8ZG43T8wFSP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824675, "uuid": "c9524592-a804-44a6-b30b-bec199eab642", "value": 88336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824675, "uuid": "eea46ba6-7dc3-4641-adbf-abbdcb7dbdef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824675, "uuid": "334e3f3f-67e8-4d9d-964d-003da147204a", "value": "nova.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0fe1e4c-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855803, "uuid": "de65a884-24d1-4098-9874-37c3b88c01f2", "comment": "Malware payload (Mirai)", "value": "a0c8491105e6b1c96afe85845b14770b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855803, "uuid": "b7166388-0a49-4dae-a20d-dc04b89452cf", "comment": "Malware payload (Mirai)", "value": "97114a8b41f29ae181a0dd35434219f761ef142006fcf410a69f8cbf68174bc0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855803, "uuid": "0aa425a0-f14f-425b-a711-a039dd3d9ac9", "comment": "Malware payload (Mirai)", "value": "399006fe6112773ead336f4445863e5b8b82c023", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855803, "uuid": "9098f90b-bb3b-4eca-86d0-f1021958c15d", "comment": "Malware payload (Mirai)", "value": "22e49a6497a8a4014610a5b2d3bade3f4adab3fe7917abaa6d2f2c1db22822e5313de23f28eda4c49882c614ceeb1770", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855803, "uuid": "2b62a832-7047-4dc9-8992-56e4842d7f50", "value": "T14253025129ACF93ACEA2D5380F2401F686DC59A85493501F53CE7DF48E06D68EAE86CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855803, "uuid": "f66d05e3-d828-4184-b93b-603a02f9f798", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/VgImAQy:MaHJgMo8FwOA4zUFGUO3UhbgwQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855803, "uuid": "e022ef5c-cb72-40f7-8c86-920b4723877d", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855803, "uuid": "bae524d1-d329-48d9-a3b0-8b9e6dfcf25f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855803, "uuid": "79dfbcfb-c78d-46ba-a7e4-5cb9b58399f3", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87cadaee-e354-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861264, "uuid": "acc8736a-7e23-4e47-966e-3f792df94ba1", "comment": "Malware payload (Mirai)", "value": "b81f15a9739d34bb3c34a0990cf47398", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861264, "uuid": "e98817bf-bbc6-423f-81fc-0e996cdc8fe6", "comment": "Malware payload (Mirai)", "value": "976a418eb3ec3609f9869c7d496e9c3524427bea5a7a7ce51fda08f739641f58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861264, "uuid": "130c9421-f915-4466-a4e7-9791380abfff", "comment": "Malware payload (Mirai)", "value": "8c0c3eaceec2b71cd89ed1ed4f804194a555ff5e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861264, "uuid": "584cbe80-3184-499c-a93e-6e4ff087911b", "comment": "Malware payload (Mirai)", "value": "408b04252e4164a45403b52b4fd94ecac505c1b4b9e2cb533916246a5fabb885215e94284830e1b24ceefe40d6c1935b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861264, "uuid": "2efd2404-6a1c-437a-9bbb-6c1a4085cea6", "value": "T134534CC56613D4F9EC19163910B6F7725B32F435147AEBC3EB94FA32FC42641A90A29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861264, "uuid": "f3c058eb-b6a2-4f3a-962f-3ba89607185b", "value": "1536:ZPMItjZa75b/wLoVwz0lzF3TFXxVxW9CnUYmYlT0Z9mbIOc/RRE:VrRs75bYLJ0TTFXxVx9nURYKzcD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861264, "uuid": "7af95710-93a7-47e9-a901-181deb59da7d", "value": 66512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861264, "uuid": "137684bb-a149-4351-8f80-66c8c4dac355", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861264, "uuid": "444f3ed2-f1ec-402c-896b-bebb95cac576", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56bdb1ba-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824674, "uuid": "66660083-0f49-4418-9301-8202a10cddb6", "comment": "Malware payload (Mirai)", "value": "e6a315cc4bba01b581874e4d842d9588", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824674, "uuid": "9bd4f373-8a6e-44b1-87c9-85e40911064f", "comment": "Malware payload (Mirai)", "value": "97ae8bee5b993287cff0fe47f166f4d03e027d2f59352a600e278e3c5e578d9c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824674, "uuid": "f7dcf6e3-10ee-4b61-89d4-83cc54839554", "comment": "Malware payload (Mirai)", "value": "8ada3576371e17fc44e16cd004957a3e77823781", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824674, "uuid": "1686b98b-d94d-474e-8a11-ef79cc2ea425", "comment": "Malware payload (Mirai)", "value": "5ee406756f5d200aceecfc3905d83e577db968ccf1b5e7856f2bbbb9cac59c72ab73e8d0b76dbdc02ccecb0b5b2940f9", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824674, "uuid": "fc5a99c8-2821-4ddb-9976-fede703ddd3a", "value": "T1504150E932124A71AE5DDF2EB7BA44196EC0D0A66CFB9E45DCDD38A950ACF18200D642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824674, "uuid": "87cddb8d-817c-40a4-a6be-be4288d51936", "value": "24:It0s+DVpvg+oxkSJAHA2LHjks6Hc3SeB+o7o9oBusJqi3bz:iZ+DVtg+oxko4A2LDJ6Hc3v+OUgIEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824674, "uuid": "18919f1c-5444-498a-af2b-43a423c79941", "value": 2326, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824674, "uuid": "e909058c-b382-47b1-a44f-778f8c10147e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824674, "uuid": "502a043f-68d1-46e0-b84d-0cfe131a2b0f", "value": "nova.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c830d0-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811036, "uuid": "bccd3917-e81f-4cfe-b8c5-27a5c849fb1d", "comment": "Malware payload (Mirai)", "value": "6253ec18d4c60ca193efc16383109efd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811036, "uuid": "734912f6-e4b3-4974-91c5-0a19665641ef", "comment": "Malware payload (Mirai)", "value": "98846da7abeecdeab81f592a11785ac654b6689515d5828910155f051572565c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811036, "uuid": "46b9449b-7a15-4bfe-b91e-7e40cb6934bc", "comment": "Malware payload (Mirai)", "value": "4e21a53690ce1fc632bbed1c0395b324ffc94a7a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811036, "uuid": "71cd7d24-7b31-466d-9659-4c4b674a8288", "comment": "Malware payload (Mirai)", "value": "623382b146d402dc63a574334608422244693b142155fe68ca04844b3a7ad3d7161777910548e1dad61f563cdb5121e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811036, "uuid": "3c6176e5-b534-4944-92cc-2c2e82f51ed4", "value": "T1B553860A7E21CFBCFBAC863547B74E309658339626E1C584E15CEA015E7070E785FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811036, "uuid": "22d1497d-b691-43f2-bc43-f4f2006eb61f", "value": "1536:uRRNZTbDuTm/O25BVZdLNCSZqBaCK9xIqgQ3ez:+RNZHDOyzFNCbjK9xIq33g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811036, "uuid": "4619130f-78b2-4961-b63d-0312854426c1", "value": 64028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811036, "uuid": "c6910735-d6fa-4366-b1f6-d53ae23095d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811036, "uuid": "89ae28b1-3c98-4bf2-9cb4-62b26b3d782e", "value": "hoho.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8459132d-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825610, "uuid": "3f60e92a-f0fd-43e7-90d5-b4a36dce472a", "comment": "Malware payload", "value": "36c0070131f280b92474e29579028082", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825610, "uuid": "489ccd4e-4a07-4e06-ba61-24c84f98c402", "comment": "Malware payload", "value": "98ebe585244273aec8428e5da9e71001ef26c85365fadeb72eb88ffe259676a8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825610, "uuid": "11ed637f-3a15-4125-803a-2c328d187d8c", "comment": "Malware payload", "value": "cd3dfb5ab1cdd626ce68872781a0f1a093a70032", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825610, "uuid": "5f5aee83-9b3f-449d-86cf-d62254985e1b", "comment": "Malware payload", "value": "3fed8f3d3216404123c0589157d0e9159d1cf48607b6905feccf79b64e8bc821abdd2949ff09717b3d83ec52cedade61", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825610, "uuid": "832c0237-64c1-4061-9cf0-7a01fb04b2b8", "value": "T1B7633B5A2EA0727938188DEE3F58ACF675BD1EE03C98203C182711E7D4CDF855851BAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825610, "uuid": "1f2d0b88-8ae4-4553-ac6c-a685fa317a85", "value": "768:I8w/h62/jWs6oS+xISN0vOzmzFzFzIz6zGzDz5zNzAzUzJzdzGzizizlzbzVzTzu:I9l/AoSSMSY/usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825610, "uuid": "27367f4c-5dd3-4b94-a91f-35d1672abc63", "value": 71517, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825610, "uuid": "b0247041-9f08-4e4c-b382-c0acf45a7bbb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825610, "uuid": "b1922850-e08b-4752-85bb-b47d9733433d", "value": "invoice-1645080830.pdf (23).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10141080-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870512, "uuid": "46601a57-c375-453b-8e2b-62b2c9f7ba2a", "comment": "Malware payload (Mirai)", "value": "c957a8f332ad69b800708fac07cad840", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870512, "uuid": "f766cedc-b0f6-4b25-af20-011bf6f7e1c6", "comment": "Malware payload (Mirai)", "value": "9900698c1252200166062a82c4f29fee1f08045532b397a434083fde470d6029", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870512, "uuid": "15d65140-e00f-422d-8dda-294ca9259123", "comment": "Malware payload (Mirai)", "value": "757a6b3c1a82a73122b8f4870674b200dd5b8270", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870512, "uuid": "4287b354-395b-4c41-9074-3268469f5a86", "comment": "Malware payload (Mirai)", "value": "9ae7902db4c1a8aa128c862854f6e6b9928e85a0eb3ea50060580899a6866e8b38b118c6fbe41d2bfa55336ebd71f458", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870512, "uuid": "70f3f030-68e4-4764-8642-ea9ee30e00ff", "value": "T146A2F1F04734863FDD4FD6B6982E0ED3E5B3AA81C76F810B85DD3A490E868098418F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870512, "uuid": "65bb3754-6798-48e0-92a2-283bfa14a0cf", "value": "384:TnK2Zhdx3/ZEgG9zPJYlLxqj5YUYnmX7om9LcRdFTGZz4GRbJ3HVifZUHcGiFqci:TnPZrpZEgG9K5YNso73LGoZzXXMfZUPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870512, "uuid": "bf5054b1-3839-41db-b74a-13c6de738870", "value": 23252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870512, "uuid": "b6be6f55-76d7-47b4-831f-05f7b2bdd7bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870512, "uuid": "78522cc5-ecc2-4830-9d18-0ae6a44fda1d", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79ddf56f-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823445, "uuid": "2bd5f87c-55ec-4543-a579-eaa3f952574b", "comment": "Malware payload (Mirai)", "value": "79ffac1dc107b43b9f22263316960907", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823445, "uuid": "0c020525-022c-470b-a777-46954e083204", "comment": "Malware payload (Mirai)", "value": "9906227236fbe1b3fe57522286d478314e235ac9f1d9f66eb8af8a199f201b3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823445, "uuid": "64ca93a9-c5a3-4de3-a7b5-4fb4dcb6cef2", "comment": "Malware payload (Mirai)", "value": "86a935c8837144b90b5485eb2fbf599eb0e43c9d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823445, "uuid": "55ba8eae-28c9-4dbc-a216-0024f3af0a1a", "comment": "Malware payload (Mirai)", "value": "a5364cf58166f5e7e4f8a126a17574bb233b1a17b34a263758d7513ea348789faa0e08f9c6025f4a3505301188e87e1f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823445, "uuid": "8d4cd0c3-d71f-40d5-a1cb-7efc79319650", "value": "T19B04F842EA43DEB3E55310F202B787310E71ED7A6C66D542E3BCBCB4A9615D1A60A37C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823445, "uuid": "3caf8b84-01cd-46cb-a08e-2a940fa9b897", "value": "3072:nfmM6+/g5eOSSSvk4sOmdc6AIFX3PElOxi32KpzyPN7GE/flpGe:nxk5eOLLgIFhA32OuFT/vGe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823445, "uuid": "a9ec0823-d933-4301-8b16-89c16e1f0dcd", "value": 188900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823445, "uuid": "c343ab5c-3335-427c-9919-930d473d203e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823445, "uuid": "7ec0a5bb-717b-4649-aa52-b4aa0a971701", "value": "bin.i586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1d782ae-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830813, "uuid": "01351290-4880-42a8-bffe-cdcf7b515d8e", "comment": "Malware payload", "value": "a5445a11669d41f143ba6d9becc6980c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830813, "uuid": "24259894-32dd-4e61-a503-4c0148a2cbb5", "comment": "Malware payload", "value": "992d73b102d6b14c7bdebb1513fed0c86437ba26646b754f0033fcf478afd947", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830813, "uuid": "3b29a789-befb-4969-9fdd-714d6f98c118", "comment": "Malware payload", "value": "7dab137db65a6ddf373cbe8f0532746e0bb084af", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830813, "uuid": "6be94d7f-1ab0-4a88-8c32-7f4d562c831a", "comment": "Malware payload", "value": "eec3dde72423a0c9e5742a86e4717d45e242ca02d58bd1b0e88db70506e3d51da69345760ec8c3a9ce5f17f9a21d9731", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830813, "uuid": "b236efd0-6685-4711-b6d5-543e7580ef4c", "value": "T11E631A4B3D0AC39605F283B089B784992E2E6AA43973387C85C25775D529FD8C17E3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830813, "uuid": "6c6bb25e-1533-4df6-80d7-225b368f7fa5", "value": "768:I8w/h62/jWs6oS+xISN0v5VF6TFpdkfScBYrwz2y8kTAlGB:I9l/AoSSM5KusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830813, "uuid": "e38286a1-3062-4501-b654-9f387260cfde", "value": 68726, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830813, "uuid": "4468de90-84bd-4d9e-bf2b-906eb7d683f5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830813, "uuid": "80d92b4a-9397-405e-ab84-e926c1066aaa", "value": "invoice-1645080830.pdf (21).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0972cc-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830614, "uuid": "8fa757c9-2fde-4b47-a6ac-4c3cfd12916c", "comment": "Malware payload", "value": "4f16d3c709590d76f84fef40f6abe0a7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830614, "uuid": "19ae3f00-35f7-457e-898a-721de3932cba", "comment": "Malware payload", "value": "9947b919a4d35d7106d1c6e55836ebcc5bf8992e829847712bc4ed4abb517363", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830614, "uuid": "eb6d3159-9806-4b8c-b8e2-b708ed5eafe0", "comment": "Malware payload", "value": "65dbb607f2403d25112861f88735cf4da18cf790", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830614, "uuid": "9372195b-54dc-443a-a3e6-8d86f5d9cbb5", "comment": "Malware payload", "value": "c56733e97185658ac5b61cc3a97a0eae76acb7d7dd9f8772ed5042f4be8b8fc5332a5774267baa08aa7b05947c19d752", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830614, "uuid": "b943752d-a95c-4aeb-84b9-1d2fb58d34f4", "value": "T1176329D4F7A1726E4D0CBAE0ACB9D494D421D931CDC89B68F4526C08E8DDED6F20D3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830614, "uuid": "1d1f6f25-a585-4835-bac3-6ce499053912", "value": "1536:I9l/AoSSM2YqYuYoYXYqYHYmYDYFYeYZYjYvYsY+Y6YAYCY5YoYoY7YcYeYyYmY9:I9l/5MLfTZof4bkajeEwtDPhH+ZZs9jB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830614, "uuid": "598a1795-54aa-4844-a921-a9f5b0877fa6", "value": 70594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830614, "uuid": "4da859a8-ce4a-4a55-a0f8-24cf71ff1a7a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830614, "uuid": "e0acdcc0-1780-4497-aa41-ff08de4f159c", "value": "invoice-1645080830.pdf (59).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acebdcd1-e36f-11f0-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1766872923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872923, "uuid": "a5b483f3-91df-4c81-814f-f41aeb1e3c04", "comment": "Malware payload (SalatStealer)", "value": "41210b4085f35f9d5d64b2296d4d5593", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872923, "uuid": "f802ed39-521c-4c36-b278-d65ca80254bf", "comment": "Malware payload (SalatStealer)", "value": "9a7eedc07fbd202e87a38e0f8224e56ba239e132464f4c84714ea071fa352a74", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872923, "uuid": "535e371b-d11e-4a8e-b1eb-d76e3a30fc3c", "comment": "Malware payload (SalatStealer)", "value": "8bd052c08857a872708879e3d2982b831a811ac0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872923, "uuid": "cc7876b7-9251-4fd8-ba3b-cdf4bfb17770", "comment": "Malware payload (SalatStealer)", "value": "df9a0c049a60fd26c861c1efe2a8f62435886e03923e9edcca2762d7e7d95be2ddf35c4106393eb366bffceca3373ab1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872923, "uuid": "50fddec3-39ea-4f28-ab0c-1570f8d81d45", "value": "T161A73310F0D406DEEAB56D3CD652CB0AE618F49E67A1E7F240C400935DB3BD4996BBB8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872923, "uuid": "1164c404-dff0-4d75-979e-b3affa45f190", "value": "d59a4a699610169663a929d37c90be43", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872923, "uuid": "b479f338-12e1-441f-b0c6-1738d3c62103", "value": "786432:6+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdXvCh8SZKl9E7Jysg:wXGMK4XR3bLSCU/+6yPl3XvCOcKl67Ji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766872923, "uuid": "4643f805-7239-418c-8c30-8aad6d516c32", "value": 46310400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766872923, "uuid": "969ef147-5765-47cb-8155-90fcb30aaf39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872923, "uuid": "2c191adf-7b3a-4518-9711-573a2f244bdf", "value": "Terminator v 2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1379059-e346-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766855428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855428, "uuid": "c3a9192f-304f-4674-837b-64fa269993e4", "comment": "Malware payload (ValleyRAT)", "value": "fe1b658db35d7c3418a0270b7143314e", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855428, "uuid": "1555ca46-dcd7-4afb-994a-bf8e05883e95", "comment": "Malware payload (ValleyRAT)", "value": "9aec3a445e71559834feaff9d57d47d146b38d4732f7ad6adb46ba10e3ec2d9e", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855428, "uuid": "437ae2bd-551c-4525-8a49-03cf6a63bf21", "comment": "Malware payload (ValleyRAT)", "value": "6c503ebf7803fd2aae05c58a392cec2274f774ed", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855428, "uuid": "c2130a12-ebfe-49d9-b0f3-540a33a748e6", "comment": "Malware payload (ValleyRAT)", "value": "af752981e7798d4afa131c20d51b1319226100ea77a6c751300ab7cab4b869beda3e7d71d3ef0c9e3c07f03699a6db67", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855428, "uuid": "4e0529a2-84ae-4719-af0b-19be1073e3fe", "value": "T128560221B283C036D26E0177E969EF5E1978BE730B3105D777E87D6E49B08C2A275B06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855428, "uuid": "320b030d-d41e-4f5a-99ba-0eff6f99486b", "value": "98304:poSTy8wkVMhhJqUUnZSlEL2flLjHS7qrMumgiJ/377pOjfJZTqQ2hKy7zaPO:pWvqQWqfNWgkRq4vhlv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855428, "uuid": "55ff10e1-e312-475f-85c6-cd95a0c548e5", "value": 6327808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855428, "uuid": "da41689a-573c-4a1f-ac25-e0b34552b9e6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855428, "uuid": "3532c34c-57b8-464d-8af0-3ead4a658a54", "value": "hr.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "796f701f-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825592, "uuid": "faf936cb-6c99-4da9-ab82-e7075da664c1", "comment": "Malware payload", "value": "1bdc92f3ddb4fd0f5e7c43a663f15343", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825592, "uuid": "66c1f3f8-a69c-495e-8d83-f32e81dfd44d", "comment": "Malware payload", "value": "9afc3da4ccb95b3934f2caab381f91c1b94bea35b1f8c9f2bada30cff415af08", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825592, "uuid": "4aa0f280-fcc0-48ce-9a6d-4cab78a29706", "comment": "Malware payload", "value": "fd1b78490845bd620e1a5c94bdbcfb75cf69b107", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825592, "uuid": "00afc399-5944-4d07-bda4-8c203ce81b54", "comment": "Malware payload", "value": "9cbeda4b01c050c12b6c59ed7ff8e45d0ece426a4737db0cda3738fd90b56eeda4430995ff901c327437cc484774f32c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825592, "uuid": "e7b6c47b-2d7f-477f-b4f5-5494eb2beb2d", "value": "T156633D075C96F6F814A7EB364B6523D8FE8882D2D9F7C2FDC60A36108054AA4AD4FDC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825592, "uuid": "d1fb5977-c297-4e21-a7f4-2735951f9aac", "value": "1536:I9l/AoSSMBaCQezdmc4X493C0jBYDplp8zpdGpUWDZByKCASgSJ9dugk3gLDKXVN:I9l/5MBaCQezdmc4X493C0jBYDplp8zk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825592, "uuid": "ecd874f2-2a63-46bc-962a-48f406128191", "value": 72485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825592, "uuid": "4bb5ec2a-1506-4b43-8084-6e54cf484a50", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825592, "uuid": "9413e32d-4c9e-4374-a66e-f8fd6b1df45b", "value": "invoice-1645080830.pdf (25).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dad30442-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825325, "uuid": "69604bbd-1db8-4cf0-b2f5-cf1d6dd45581", "comment": "Malware payload", "value": "eaf98ef36d3785d1a548fcb54c5547ee", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825325, "uuid": "c030d91f-9980-4160-af1d-a0946bfb6446", "comment": "Malware payload", "value": "9b0d493a86314f70806fe19dddcbaf091ebd6d8cfb82be91c45cd81ae890687d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825325, "uuid": "ff3a308c-209c-4486-80de-57eb08003a83", "comment": "Malware payload", "value": "38b2e806d26067046faec941b9afef421a8e0cae", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825325, "uuid": "ed906182-43c9-4ca2-abaa-25b1cdb6cdc2", "comment": "Malware payload", "value": "89e1251a20cb18eab0e40e520aa4f60331b438d8a373129bc276bfcdfd8c013dea44e230cc2351fd6388e51ad2192b2a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825325, "uuid": "07963f0f-b98f-4efe-9d51-4cfa7679efd8", "value": "T1AA734A333A5337C069A0E560CC68AD15AF2E2F379599469F0D4F9568019620F3CD6AFF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825325, "uuid": "661bfead-7dc2-4488-bb44-2668020fa100", "value": "1536:I9l/AoSSMS6J6m636Z6V6m63606f696V6J6Q6K606j6e6e6Q636z6A6w6R6I6n6W:I9l/5MS6J6m636Z6V6m63606f696V6JA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825325, "uuid": "f3df3a8b-745f-4f8e-a674-7f5f53753301", "value": 74399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825325, "uuid": "a8f325e3-159c-4a8d-b9f9-4040114d10c4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825325, "uuid": "ea7370af-fbf9-48dd-9c39-749d223209f0", "value": "invoice-1645080830.pdf (83).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dd5ee80-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858133, "uuid": "432804f7-55ff-4bdf-a75c-c74763fbd919", "comment": "Malware payload (Mirai)", "value": "9832070b7463c7d8906209c15702c3c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858133, "uuid": "18fdf45e-07a5-4cc2-a617-0f5e92ecf0fe", "comment": "Malware payload (Mirai)", "value": "9b4c9edcadd35ef852548fc047296e0645dab1c40b3c171bc77df3d37eab4576", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858133, "uuid": "b16b5f52-2d32-4111-99d2-a843ee9cef4c", "comment": "Malware payload (Mirai)", "value": "ff681b5a5b9c313262d9dee3561a8f87325c9c9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858133, "uuid": "101d2583-ecfc-4327-8a42-a01b1adcb7a4", "comment": "Malware payload (Mirai)", "value": "708971872c733aad8a833e454e5aa929a0057c4762bb1ab5608b13ccd2609c2223ec65fea1c273ec247754ee9ac05d1c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858133, "uuid": "26d5409e-c9d9-4e2b-91c4-cc842a84c035", "value": "T1C7F36B41F68BC5F6C8074C7060A7F73FCB32986A4077D69DEF999F31DA23901921629A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858133, "uuid": "119fa590-35bf-4c72-8ef0-9f27161acfbf", "value": "3072:gTppGFeKwKdo/7q4mUMV6UDivOMNiooCfTkG7lehOB16/:1FeKwqo/7rmUMV6UKPgG7s/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858133, "uuid": "ce2a6f23-38be-41cf-b6d9-34cc65197b1c", "value": 166344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858133, "uuid": "660bb1d8-942a-49c0-a649-cf1d47142039", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858133, "uuid": "8131cee1-252f-448b-8501-ec7264011b70", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d8d6e40-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864978, "uuid": "7133cdc9-ef2c-459c-805d-0799b2338bd7", "comment": "Malware payload (Mirai)", "value": "7ac0024b46b298e9129de72f3b41093e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864978, "uuid": "817f458d-7abc-4f92-b131-f30fa8f59457", "comment": "Malware payload (Mirai)", "value": "9b526c4d80fca569606462d1b25793476d2d822d68ab3d3f66174a8421284d20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864978, "uuid": "9633b6db-290b-4086-b1b1-ba27d9da7b8f", "comment": "Malware payload (Mirai)", "value": "40af1a822ff64a39469c04e792d4020759288a6b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864978, "uuid": "1d29cf3e-0ac2-4276-bcb6-b5ae4b4d2529", "comment": "Malware payload (Mirai)", "value": "2c5b5e08239a62a030578ab13e8a6f73d8bf089b5c9d696bdb587bcf6026695a3dc42e91c7cd7de1777a132c27ccdd6b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864978, "uuid": "9c450dd7-467f-4fc3-ace4-fd3bb2d343c5", "value": "T1CC24961E6E328F7DF7A8873447B78E25975833D626E1D684D1ACD2101E6038E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864978, "uuid": "60a3acd2-08e8-498c-9c79-175666f269c5", "value": "3072:Xzhweyu9m3tdWn0LKrTbKRemHQqgglD7DUDgovNonVXW7:ueyu9m3tsn0LKrTbw+Jy7ggqNonVXW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864978, "uuid": "9fa50312-2dea-460a-ae66-d206184d9cef", "value": 217168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864978, "uuid": "6a63ce08-1484-4a19-86fe-a117f4e65255", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864978, "uuid": "6225cc58-411f-4308-af28-d1ad9d719a63", "value": "miraint.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9247eaf-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854582, "uuid": "df7e1ec3-6483-4fb5-abca-aa9652ac91e6", "comment": "Malware payload", "value": "fd52a93607ff07dab8b8a6c0631e7aec", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854582, "uuid": "f3d52ba4-c2d3-4231-a659-2f5f63c13f9e", "comment": "Malware payload", "value": "9bf34764b5d07f7c8686475f7218faa99d062e3cb963e99295764b979fdcd347", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854582, "uuid": "bf5ad5b5-6a84-4ac1-b90f-2a73cbfecf0f", "comment": "Malware payload", "value": "164d9dc09f554a6ac11b5009d55a7d650607aaa8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854582, "uuid": "c7145a5f-6d1b-4287-9404-f10c06679711", "comment": "Malware payload", "value": "bc98c297072afaecc032e6ae5be99a0d28531ee34e028dcd993530d8e9bdb30e3c79065a1621514b086273c27deadc62", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854582, "uuid": "bf8e8af9-02d9-476f-a0fa-d1197a9e5678", "value": "T1FB63E852BB96BA841E223E579CCD85C9C86652CD80FD3BE55C8CFD4D8C086C7A701BE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854582, "uuid": "2e1b22bf-3634-4d0c-b13c-38233116362e", "value": "768:I8w/h62/jWs6oS+xISN0vmhuoNpdkfScBYrwz2y8kTAlGB:I9l/AoSSM8TusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854582, "uuid": "4946db9c-40f3-42a9-a2b2-e54c89248900", "value": 68712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854582, "uuid": "f21e7b75-29f2-43a0-a326-8fa480bb7292", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854582, "uuid": "15b8be30-3004-4f1c-8e71-0032b83c17ef", "value": "invoice-1645080830.pdf (90).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ce98962-e2f7-11f0-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1766821168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821168, "uuid": "79788879-1437-48b3-a7c5-4b50d71d8aae", "comment": "Malware payload (OffLoader)", "value": "aa3ff114fd0970dd1f652864a9e14165", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821168, "uuid": "c0cab79f-5f5d-4e94-b839-e078c09efd14", "comment": "Malware payload (OffLoader)", "value": "9c02247c73a971ce02da067b517b1c44bc2ce48b3a46827c346f1de2f1cdea08", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821168, "uuid": "e509de8c-eb68-43bc-825a-cacfdf2e8cc9", "comment": "Malware payload (OffLoader)", "value": "6036184e86205cfd34a94c2a5cf1ce6257fe8a44", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766821168, "uuid": "cfd7b9cc-2e38-4af5-bb10-c0c28c53af9d", "comment": "Malware payload (OffLoader)", "value": "2834ba05bc751ad59d7c72353e774059f99cad17fee0b2968684014a9feb04b57dfa6fac23e32d05991afb4585ce0964", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821168, "uuid": "8deea370-5e2d-4908-8bb9-04bee371688d", "value": "T19495CF13F24E673EE46A5A3649729A50443FBE60641E8CA396EC3E4CCE391601D7FE47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821168, "uuid": "73e114b9-2dc7-44ea-acce-c234188ef92c", "value": "e8ac1646024d52d1534a88da2e8037cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821168, "uuid": "e2d48d1b-a30b-4cc8-b15e-cf062c2a3949", "value": "24576:pXkwiiUWhWXKaOEMrNyNf+jCyF7KDFbJnPrUXsazZ+Jsp1B34FGohdN1YL/iM7pY:pDXrMYCywnjUX9zZ0U12GIyNtc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766821168, "uuid": "8af865df-09a0-43e3-a552-84319b958f5f", "value": 2041297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766821168, "uuid": "68018333-3193-446c-bea1-1070194a1929", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766821168, "uuid": "16ebd8bf-2737-4886-82d1-0590b3dda1bb", "value": "aa3ff114fd0970dd1f652864a9e14165.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "821d1b58-e2c2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798548, "uuid": "d9724c30-e788-4796-8b70-060d22caaf69", "comment": "Malware payload (Mirai)", "value": "102998f664f14672b74616b47db86219", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798548, "uuid": "7cb9b515-4d85-4b21-b07a-a64e80b9c84d", "comment": "Malware payload (Mirai)", "value": "9c3d107ec8752a58e9b02a0f25fedee5ce88e738863263d8921a492187ba945a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798548, "uuid": "84f7a378-1838-4137-9ad0-220c71c051eb", "comment": "Malware payload (Mirai)", "value": "d96cb8d2013779906678267d33dc6c6e67cd655e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798548, "uuid": "f9196bdd-790e-4ffc-a426-65278641460c", "comment": "Malware payload (Mirai)", "value": "dbe4085bb7fbf7416be22f13b8290a2c9a10414936027b69931de5ae4528596675ce49fb9cf932c87698d673eb4b4a10", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798548, "uuid": "ba100b11-e334-4d91-b00b-062e2a98958f", "value": "T148E34C52FB808B13C4D617BAB6EF028533239B6593DB730649287BB43F8679E4E53605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798548, "uuid": "56a5d43f-f3e8-49ed-8aae-3a862f69f41e", "value": "3072:+fgYW26AuCwmKgczrqranXmKrJF1TN0ZafYMmAL+M/9z7Ds5Tz:LYW26AuCwmKJrqranXmKtFQcYMmAqM/g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798548, "uuid": "57f7c972-6009-4cc5-9d84-db20d5f5da99", "value": 148542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798548, "uuid": "f245bb51-e001-4e71-9455-73e440b91dc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798548, "uuid": "c93009cc-8259-4748-83de-c52f2d85256f", "value": "sdxkzX_UXA229x.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b07c4a44-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830838, "uuid": "4de441b3-4b09-40b4-89e7-0cf40ee1ed9e", "comment": "Malware payload", "value": "83248ca71607c2d2cb7e207548b22fc5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830838, "uuid": "09a0624b-b04d-4b74-86f0-5b85d7e22bc4", "comment": "Malware payload", "value": "9ca292f6ce8e46825b07f5247cf8ebf470e759471f06a4e76cb130ddb00cbc8f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830838, "uuid": "e705086f-a75d-4d2a-9a4c-a72798e55086", "comment": "Malware payload", "value": "b85eb6bffcb369e8e9887b6f50689bf3040c106e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830838, "uuid": "85946e06-5eee-44b7-aeec-597b2dbd5636", "comment": "Malware payload", "value": "e2a294102461c510ad162f0a1e8a7d43db4be1569c9894dae95a4a72471f053782b7e2b9c7d13938c74b62c6338333bd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830838, "uuid": "0e30aacc-b23f-45c9-ad10-fef1b4a4bf42", "value": "T140730ADFCF4A6F4560A2CEE1ECD6BD9887690760556BC93EDECEC2232B719254CB5020", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830838, "uuid": "01937649-9ebf-4274-b55e-4621353b9731", "value": "1536:I9l/AoSSMKvVpAIYPVNHbVwR78OgAqmF5yVPyGt8ElHZ18Rv2W8HG5vOomtWfe89:I9l/5MUWusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830838, "uuid": "add7ed98-df4a-4997-bf84-7804ec750300", "value": 75338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830838, "uuid": "8ad54023-2759-4882-b9b9-f820e4b50784", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830838, "uuid": "0f67ab4e-b132-4d88-9e51-06a3342bc03c", "value": "invoice-1645080830.pdf (14).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34d336c9-e325-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766840938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840938, "uuid": "968fa10b-bb97-4954-ae7f-9f9d3e50675d", "comment": "Malware payload", "value": "8e4f4713e5bc1965099752c1ddacba0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840938, "uuid": "0e20fe3a-8ffa-40ac-99b3-15475641fd91", "comment": "Malware payload", "value": "9cd22e33ec84f2f7a2a1c974408a715d57f39777d746774cb11da49372b3350d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840938, "uuid": "acf66585-eb51-4096-a266-ff9976d65ead", "comment": "Malware payload", "value": "9de028f517fa6233340dee535cda116af003f738", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766840938, "uuid": "9639cda5-d0ad-49fb-880e-c4bb651d9649", "comment": "Malware payload", "value": "dadd848ff7214bb69a7152adb4491a3f5ed7ca31a88ecf18a7fe8adb804770e4f032aba461fe0cc08a69adfb1c553ce7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840938, "uuid": "59509712-3b39-4b64-be97-efcb80bda7eb", "value": "T164564A03EC9555E9C0AEE5748A629253BB717C491B3123D33F90F7282F72BD06AB9790", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840938, "uuid": "b53d624b-351d-44a9-9cee-630def8901c9", "value": "49152:azSdv1QXazffrzoH6Oh1l9w3Bgu1oERf+0q8WAOfgmVSN+SUSZDpehzkiHKQKDKv:azWumLzKQDRJq8jO/0Jzrik1AqJEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766840938, "uuid": "bdca7bff-7e89-412d-8544-9069b068a4cc", "value": 6303928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766840938, "uuid": "4a65581f-29f2-46fc-8ff8-cfb18572dbc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766840938, "uuid": "3aaaa52a-4db3-4b73-9c20-0c7ca796dde5", "value": "netoptimizer", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06f0053a-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825399, "uuid": "c66c5514-c7c2-4289-b7fc-29e04629ec1b", "comment": "Malware payload", "value": "46d519ef35c7ca3df6162afe761ac0e8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825399, "uuid": "1721fe26-3080-4545-abaa-5591a48148aa", "comment": "Malware payload", "value": "9d501cc2445061bf9b40e7867f159422e9718ec5fa75ea123e73016b8fff2981", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825399, "uuid": "4de109a6-f8a8-403c-8651-68130c4da4d6", "comment": "Malware payload", "value": "0acc36c0a2919f13a374eb200574d8a0c49ee11a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825399, "uuid": "989ee346-eaeb-4d01-b2fd-21f1b1392aca", "comment": "Malware payload", "value": "92499f1f669997eff02ba283d9d2a07491dae9954bbf087316166fa4c4d735c614747f7806165432c6845f8c42732857", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825399, "uuid": "c3816ef8-44c9-4ab0-8aaa-55bd7adc146e", "value": "T1EC632BCE78C26FDB71A4585282B7A0FE991E441EFB734E9CB5F329394D43B90613A844", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825399, "uuid": "5d065f65-eae1-4577-bd56-08cdbe034fd1", "value": "768:I8w/h62/jWs6oS+xISN0vYwn66gGrdkfScBYrwz2y8kTAlGB:I9l/AoSSMYyusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825399, "uuid": "a29b41ba-da3d-485c-ab6f-263b8d8d395b", "value": 70592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825399, "uuid": "3e60e080-f81c-4671-9d2d-521721aee730", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825399, "uuid": "3d4d2b03-1e2b-4c4c-8432-671d16e566f6", "value": "invoice-1645080830.pdf (65).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a83231-e332-11f0-a129-42010a9c0007", "comment": "Malware payload (Amatera)", "timestamp": 1766846496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846496, "uuid": "0b2f0877-ef84-48ee-85e6-4fa191168fb5", "comment": "Malware payload (Amatera)", "value": "5e8ff1073c3f0550f1e3a36269d199f3", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846496, "uuid": "27d91df0-11ab-4fc8-973c-250f3557814a", "comment": "Malware payload (Amatera)", "value": "9e1b717c2329a99b5546b4ec68b8d88e45d7169c82c2ea104dbb4df0f071302b", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846496, "uuid": "2dc23fd2-7529-4c3a-967c-4e287595d4de", "comment": "Malware payload (Amatera)", "value": "01e96209bba53dd7da7513f84f57d6b98be01cfc", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766846496, "uuid": "c8443dd0-be8c-4bb5-9166-74549c44d68e", "comment": "Malware payload (Amatera)", "value": "70c8944b0532b62c1a9b59f482563fd3789dd9b99ac5460482f390637923b5d5e7879b649e189e0e2c93c7d0279b3ed4", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX4.file", "colour": "#2D59D7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846496, "uuid": "8a38afe7-e4f8-4c07-91e6-e22f067bc13d", "value": "T1FE266C027AF44462E2B75730DD3AE1346779BC685BF581EF32803ACD2D70691BA39726", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846496, "uuid": "86f0c498-e22e-4913-8ced-e1902fa0c3be", "value": "650950859441331a9f1e516af9bf66b5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846496, "uuid": "17ab63e4-bb02-4d4d-91a4-4c032a40a8e8", "value": "98304:RBgbED81ZGJ3HHMEsVUR5e7cfjJNJAz3GpHEFZ:RBgj1ZPEsV7wLJAz3GpHSZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766846496, "uuid": "7ad8154c-0719-43f7-873a-3c02e1b4029b", "value": 4433520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766846496, "uuid": "49042764-d4c2-416b-ae02-1a9e7c95fa2c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766846496, "uuid": "2c042150-d0eb-4d91-a2ed-6f17c3a8c4aa", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50406d9f-e2b9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794599, "uuid": "4cf3f9cc-df6c-4243-a6e7-85279d867cd3", "comment": "Malware payload (Mirai)", "value": "317cf91406215fe4d42cf06b1f6bc32e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794599, "uuid": "e45d5a77-5eb1-4852-91d9-502689a39e99", "comment": "Malware payload (Mirai)", "value": "9e69401f5500a4f10ced6eb95dc4db934ad4fe1eae7d3caeeec66360a41352bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794599, "uuid": "57eb4fa3-3e55-43f7-844b-37f0f781184d", "comment": "Malware payload (Mirai)", "value": "5b54dde1f014d38321e65eca7e7066b7f7e87c3e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794599, "uuid": "ff4d1616-e016-4809-8c16-076e0bd4d65d", "comment": "Malware payload (Mirai)", "value": "a06cd2b79af4d4d3d8af44a940bcb6a84e9ddc1be458e669f59788d9ee5dd51d0b1903952d8ffaa785c23ebf6fa150b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794599, "uuid": "b9c36641-d252-4393-a556-1ca4333c5f6c", "value": "T103530161B3017D0BFDAB257370EE0148D266AF1880F630E7A1B55FDEF9C2258652865E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794599, "uuid": "8d9d330e-b38e-4212-aec9-81317c5977de", "value": "1536:F49vjIhAXjFI6Bta+kV43UKbNyR54QMRuH8B4+c4EJ:aNj2gFILh4ZbmYG8B4vJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794599, "uuid": "c7e2dedc-e138-4799-903b-3b91b7913f53", "value": 64528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794599, "uuid": "40eb1792-c017-45bf-af61-1d0f0b87edb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794599, "uuid": "b410e6b0-19e6-4f06-a3ef-47cd2bb5bf65", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19f85c7e-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830585, "uuid": "6d09dfaa-9f1e-4143-b94c-15a4c8c3c534", "comment": "Malware payload", "value": "a85ed066be6883574c963d0b39894957", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830585, "uuid": "40eebda1-33bf-4c5d-b9d1-a0f268cd9d74", "comment": "Malware payload", "value": "9e69d06c2cb62cbea88f3de52d80cb5243ec5fa942cd20e9511e3a2333c93c3a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830585, "uuid": "ff40c37f-c326-4a6f-827a-780399cc0009", "comment": "Malware payload", "value": "91fc675ccb4eb9fda95ee97137b29eac0d863a9a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830585, "uuid": "49e33079-1ab0-43e6-8811-a460ac1a0d7f", "comment": "Malware payload", "value": "55ad8d5182858cb7aa4507b16da89ebef92dd6a8a0437a4872c90b83eb87d536d92e9a1dd33f2ad84e14aac2ee4c67eb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830585, "uuid": "9c1698dd-9792-4876-acf6-aaeb04cc864d", "value": "T1BB631BCD60202764AECEBD29399E81271B3EE90175A6BDDDB41763A36CECF47910074B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830585, "uuid": "cc36dca0-3031-46df-a22d-9a416b19b8f0", "value": "768:I8w/h62/jWs6oS+xISN0viCReBWN0DDdkfScBYrwz2y8kTAlGB:I9l/AoSSMPRX8usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830585, "uuid": "abfe6e76-ca25-4a12-b2ef-6cd54dbfe58a", "value": 70611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830585, "uuid": "188794d7-2db2-4436-8d53-4df7db550a34", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830585, "uuid": "aa6b4fc5-f7cb-498d-8743-457400dadbcb", "value": "invoice-1645080830.pdf (72).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf45358a-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825306, "uuid": "50bbb7e3-9a60-408a-9899-4210e97b9d48", "comment": "Malware payload", "value": "ca76a7fac048df07b3cea4a23203d10a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825306, "uuid": "1261fba7-d622-4ef5-818f-28450079747d", "comment": "Malware payload", "value": "9e99763d7b5aa8cc284792a37a579665159cb9fb2ba2589cdf232283e95b3b16", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825306, "uuid": "2e6349d7-99c9-46dc-9ba3-1219596dc7df", "comment": "Malware payload", "value": "26fae58536a3f3937c93ddaec07670cb2ccdfa0f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825306, "uuid": "987fe717-91ee-4f5f-8de3-ec6b0c809118", "comment": "Malware payload", "value": "107e998a73a38d8de9be232bcf1d06efafb28d93d621d9148c2906e4406dc513593ac0f548c253f46169767926e00e2f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825306, "uuid": "c548de09-9932-4846-991c-92e683a543a2", "value": "T1F7631B3D7E6AE835539D2EAD9F232D844F0AA3E15D34D19B3B53CF12C605B246E1292C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825306, "uuid": "7731bd59-b785-492d-a580-8094b7aa5c92", "value": "768:I8w/h62/jWs6oS+xISN0vrjNcbperdkfScBYrwz2y8kTAlGB:I9l/AoSSMXhusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825306, "uuid": "854337e3-f5c5-498c-81b3-cb3f90afaf48", "value": 69660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825306, "uuid": "45838b51-1044-4317-ac67-47ba688f3c12", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825306, "uuid": "7e8067ae-6734-4790-b82c-e25ee00d6e15", "value": "invoice-1645080830.pdf (86).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64e19fdd-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830711, "uuid": "cb3791df-c2b8-414c-b7d9-1edd23d12cb7", "comment": "Malware payload", "value": "edfefc088b0ee62f237e677fc93289e8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830711, "uuid": "5cad198a-fc52-4536-8152-e8606f84a2a3", "comment": "Malware payload", "value": "9eadc9b6f7fb69775a1e35244bf8d2253d06b65483e491d9b57bc57ca6289d31", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830711, "uuid": "9c33b84f-5768-4983-ae3e-a176ada16273", "comment": "Malware payload", "value": "6d56475480915e812bec9a64e474281d789f9f90", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830711, "uuid": "16641260-e10c-4a49-a66a-b696b79c634b", "comment": "Malware payload", "value": "bc3de600db849eab757995f0eac398d4c52cf5c20dd949e588d4cded9a96717353da78c11143405eb271512df021dcdd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830711, "uuid": "b9f8f1d9-2a16-4b87-a030-e7e1e08803d7", "value": "T1AB634D5E66D0DE8624D369C0993AB154727051C91CE3F8B106B91045EBEE382FF26FB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830711, "uuid": "4a8ebb9d-5dac-46d6-94cf-4de41e104695", "value": "768:I8w/h62/jWs6oS+xISN0vdDdwo4DWkRCz2A1FROx1X1XciAEugtwgJI3zEc6uHXB:I9l/AoSSM2RusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830711, "uuid": "92326af8-173d-4267-bed1-0a0ed2b56201", "value": 70576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830711, "uuid": "6df0eb18-063b-4256-bd3b-54e5bd59b8a7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830711, "uuid": "d79f466a-7bde-44b9-8569-99efb5a16ee0", "value": "invoice-1645080830.pdf (41).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a98b770f-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825243, "uuid": "9ea24a2a-8cae-47f3-9a7e-d294ee875d69", "comment": "Malware payload", "value": "ff60897850cc443aa3e126e0d278a633", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825243, "uuid": "9f3bee5d-f68e-478b-8311-ddf37cae5219", "comment": "Malware payload", "value": "9fb61872acb4bb9df87a0e8295d1e33b7f9ef0335b920957ad0b502bc954dcab", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825243, "uuid": "7f26f47d-bf4f-4854-8274-1623d189c261", "comment": "Malware payload", "value": "8624316ab7fe08ad44dcd685aeadb0a8bc4e7d21", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825243, "uuid": "dd8b1835-e993-426b-9cb0-1ef0165ceef2", "comment": "Malware payload", "value": "abace8b6baca8dc1af17b3bfdff1f6f13d360224815c0fd09b4a9b2492cc90479638789e9dd0cf02dc57e2d2194baf59", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825243, "uuid": "4b18d94d-9320-4cae-8d1d-5bdb04dfda99", "value": "T1C5631A3DCA1128F224D7A9C7A91635E8D868DDFA7581442FDAA0F779DFBB4C33102912", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825243, "uuid": "37629a91-e050-4da0-80b8-4390560e4cd7", "value": "768:I8w/h62/jWs6oS+xISN0vy8NaN/0dkfScBYrwz2y8kTAlGB:I9l/AoSSM1lusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825243, "uuid": "28ea907a-920c-480a-8678-b8dfca01f1cb", "value": 71582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825243, "uuid": "79d2ee48-222b-45ac-a1c2-82518c154ec1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825243, "uuid": "e2579226-b175-495b-9c21-e1f0b8d9aca6", "value": "invoice-1645080830.pdf (98).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91d76238-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825632, "uuid": "f0982156-ecf8-495f-b6ba-f5925a9c585d", "comment": "Malware payload", "value": "b08c4b4f10dadd0713ae068af2d1f7ec", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825632, "uuid": "f0e1cc15-18f8-495a-9edb-355ab28387d3", "comment": "Malware payload", "value": "9fc1a1a8c68bf32ec5c7ac67badf275ba4eb1179c99386540b13d0900606164a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825632, "uuid": "81d4a2db-9113-4b22-afa2-6f0fe230b9ee", "comment": "Malware payload", "value": "1742ffc277f8febc2f5651c3b54b6efe4f319545", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825632, "uuid": "ceb3c9a8-67a0-4413-83e3-94391e5c1d9a", "comment": "Malware payload", "value": "28029fc20ca3811182822e675bb88dbbc06255361aae760d398f8cb636c67bcb19920f67863c6e03ca0930bdeeb0500f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825632, "uuid": "a11c5ff7-d450-45dd-867b-40f055fb73fc", "value": "T117632C7E8F316CE47C51A368B9E1786E3CC65A1338B11828ED53A244E09F972ED4B5C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825632, "uuid": "2637cee7-e1c2-40d3-b99a-3f77d9b5bf11", "value": "1536:I9l/AoSSM9qpCRM1i43mT6mswwCHDlI7gUpZI3x1ks1h81skxcgucja2Ti6NgCQm:I9l/5M9qpCRM1i42T6mswwCHDlI7gUph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825632, "uuid": "589e272e-a73d-4057-803f-4e8caf76545a", "value": 72522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825632, "uuid": "d3232606-8a84-4c15-92b7-85074a2ba07a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825632, "uuid": "b9edd7db-83ee-437e-a7d8-5b6f50081384", "value": "invoice-1645080830.pdf (20).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbeaae09-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825381, "uuid": "90bda2ca-6ce6-41a7-ae86-e4a980ec8317", "comment": "Malware payload", "value": "c17d832191339afc773b2b0f69c824f1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825381, "uuid": "2fa35e87-37ac-48bc-bc66-01cfcc64e11b", "comment": "Malware payload", "value": "9fff6d8a9bb9b22d5f4b2b54d0a6f4acf457f78e811f11e240ecc5d1244d60f8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825381, "uuid": "a53584ad-3827-4f06-9c59-ce70d95723ec", "comment": "Malware payload", "value": "3bed1a7fc142c2af6dac798709875c1cd77fe777", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825381, "uuid": "4534ce5b-87aa-4581-bb8a-beeabbdc5170", "comment": "Malware payload", "value": "585a5ed1d9ce329cf57ddb4308a8e728afe8135b07b8a1a1cf4f34c426e61f88e99c32729f3aa76a5b5f08e32819a95a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825381, "uuid": "6981e258-2523-4fea-bfb7-a83d08146fc3", "value": "T1E9631A274D70F9F9B86F60A11797B2E131A99D6574B38C2F0622B893DE4C73278891C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825381, "uuid": "4df518e8-0bba-4bea-9d87-7871fb36afc7", "value": "768:I8w/h62/jWs6oS+xISN0viZuZxZGZCZQZ5ZvZAZ2ZrZWZF6ZYZ1ZDZuZiZPZRZkb:I9l/AoSSMAsusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825381, "uuid": "b87a17af-e962-4dd2-b0e6-cd861a034f92", "value": 72581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825381, "uuid": "a8fa592f-ccd7-499a-9086-5cf2a1f5919c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825381, "uuid": "daf4c61d-2b21-42d8-b58c-6eea77fd29f0", "value": "invoice-1645080830.pdf (73).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0cda096-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830436, "uuid": "7469edac-8f34-4c04-92d3-7094ef0415e5", "comment": "Malware payload", "value": "9d82f2eb114489e96bb5e85a738f3a46", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830436, "uuid": "6f9993f3-875e-4e80-8094-4b6200ea30f9", "comment": "Malware payload", "value": "a00e75cfd4975db6dd33ed0c8b94e1a9b60a12992761d9105bf6741868ef150b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830436, "uuid": "74026105-b463-4299-b1a0-dab2a8e71959", "comment": "Malware payload", "value": "50af83bfd1f6c96ae3094c8eced7539b20d63b07", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830436, "uuid": "f98efcca-724e-494b-ac7f-6a0fb449e57d", "comment": "Malware payload", "value": "e33426f2de938d1e11e12a017d38ddd8e20541356c7b208a989c561fd89f7b8059e132883f8c4cd494858778a5317811", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830436, "uuid": "4881c9d4-56b3-4c2f-9845-ff0957843948", "value": "T13C734D8E50892DD2D2E878BC8ECB4E9A292F375D4658F9345C3EA57E401ED238F195C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830436, "uuid": "49a74c28-2d4f-41b8-8837-5332bf995fd4", "value": "1536:I9l/AoSSM5xELkJB3/xCByLxshPphv1WfpWSIu7VeZsdQbsdlVFEexpka7/Pk/Wo:I9l/5MlzusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830436, "uuid": "5449173d-76b9-4052-a80b-8a98372a8f0b", "value": 73413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830436, "uuid": "97727a4d-d1f1-4037-8f1e-a4b15607b90c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830436, "uuid": "7e021fd2-96a9-437c-96a6-ceff8e7e3445", "value": "invoice-1645080830.pdf (97).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb6985ab-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865216, "uuid": "fbbc958e-75ab-483c-b32e-28382e2c9906", "comment": "Malware payload (Mirai)", "value": "de787d8d4eb5149dbe735a5c3f2fbcec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865216, "uuid": "ea5b8730-4fa3-44e8-9665-1aa1c3609c21", "comment": "Malware payload (Mirai)", "value": "a09a6e119cd7de31aa391a1110e127a78e5baf8909a415ba2a28ed1cf0ed255f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865216, "uuid": "6edc7725-e2fc-47b4-b71b-0a2f86e886ca", "comment": "Malware payload (Mirai)", "value": "22b6e6743107d785976c6f4ee3a4748821beb2b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865216, "uuid": "1d49b13d-78e0-4208-b779-eeaeb21ffbdf", "comment": "Malware payload (Mirai)", "value": "7e269894cd805fcc678323e097634ba51a3f377ed6247f91f8199391536b1e9669c1650662dea35ba7f875d4be24318d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865216, "uuid": "4689c410-14fd-4991-9225-6074698fff3d", "value": "T167338B76DCAD9E59C15C59B4B0748F7A5B03400096872FF6859AE679C003E8CFA8E3F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865216, "uuid": "af28c5b2-0f43-47d0-904d-ed247450291f", "value": "1536:1eiP63QV9J2q8Uzw5Ly9sCAiJDITAbVR:1dQQt5zWLy9stEkTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865216, "uuid": "efcf844b-2b28-4b53-9f86-2071830faa43", "value": 54572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865216, "uuid": "fb30e64e-0935-46d0-b81d-6260a4214926", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865216, "uuid": "78b801c2-71e7-4dfb-87ac-1d07c9cadaa6", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe99a373-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854591, "uuid": "d0d0c1b6-974c-48d6-80cb-e1c549294c5b", "comment": "Malware payload", "value": "6fe737db0bb90f0f0e83eaa3e7e5e1de", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854591, "uuid": "7236d3f2-74cb-40e9-8bd6-acbf8156259e", "comment": "Malware payload", "value": "a0a52e8041412b70ed758412e3fb00395cf8dee8b1b75cedd9c758849eac78ad", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854591, "uuid": "2e650ca2-d590-431f-930f-4c12826e5451", "comment": "Malware payload", "value": "8226a586152696d032f78fef1b034c8807e10925", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854591, "uuid": "7d50155c-e2b0-4ca2-bd6d-85b6281ecf33", "comment": "Malware payload", "value": "0b8ebc226d6898a183d118f03bcf1e0fc82c3fb4eafe6bb974f524b6b1b95755e5bddf26011b62479453d150089516aa", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854591, "uuid": "3f367f2c-050a-40bc-9d81-a49e0e573a1b", "value": "T194634C5B5BB329AC37993140BE6A07A64F0C0E5EBECB32CCAC935744C492867395CD97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854591, "uuid": "58059bc9-4f90-4814-8a08-559e9441f280", "value": "768:I8w/h62/jWs6oS+xISN0vP8EI8EA8Ej8E38Eu8Eb8EC8E/8Ev8Ee8EZ8EG8E58E8:I9l/AoSSM0twusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854591, "uuid": "b476077c-40f9-4f6f-90af-377841245f09", "value": 72459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854591, "uuid": "6f3137e9-fc70-4270-b619-193696606e57", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854591, "uuid": "d1e30133-40b0-4835-8a86-b9637047f169", "value": "invoice-1645080830.pdf (85).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf64ff86-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830890, "uuid": "0bcdcf82-3976-4be1-8973-436e2f32f0f2", "comment": "Malware payload", "value": "3b3602312ea5f10b537e8bac0f1f72af", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830890, "uuid": "d98f6060-4a59-4e14-97ae-86938b6af5f5", "comment": "Malware payload", "value": "a0f79884a9bbf11c599a44f37e8ce486bae7dd9d788f923527c81ebb819def8d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830890, "uuid": "6b7151f0-3f59-4c5f-9919-05418bec1c2a", "comment": "Malware payload", "value": "13504fef201a7b79d8c932c95f4c446c94d136ac", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830890, "uuid": "e4cff8ce-e8ab-4fbf-b769-2baa8b1b0621", "comment": "Malware payload", "value": "bdc4e75a07c0db6b5ee8bb1ffd2e21b522cd3b8e2e7ebf5ea6d712b555d2cc3904fe813a1feedb00dfb1c58d375fa15a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830890, "uuid": "19772fe4-1f23-4cf1-907e-97d343770239", "value": "T1EB631A406B536D8C9DA043A15BEE8DBBAF8A0FACCBBFD8F04E8D763C55539A11149053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830890, "uuid": "86cc64e1-1729-4854-9927-e71a3163833f", "value": "768:I8w/h62/jWs6oS+xISN0vtxJllyMQE54lQtbwMVkeyFwlPVGGVpAZpTcLF530Fjl:I9l/AoSSMMOusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830890, "uuid": "581a8fb8-a9b7-42e9-b055-ad373f312860", "value": 72533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830890, "uuid": "1e289727-71ac-4432-9a38-2deb4755a567", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830890, "uuid": "5f07d01c-230c-4bde-b1ae-c0651329e699", "value": "invoice-1645080830.pdf (5).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdc9732d-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830458, "uuid": "967a0d08-97f1-4ab8-86d2-ac5c38500cd7", "comment": "Malware payload", "value": "9b5e7bebc95b15ba53b5d4fae12fbccc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830458, "uuid": "44727ec5-4f6d-4469-85ea-64aee1e11c93", "comment": "Malware payload", "value": "a105667cab771ac7ecbc27040b2375773d360921a6eafc232490f70a3dac9860", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830458, "uuid": "dfc50fe1-afa9-40db-98e5-b7f18983b3fd", "comment": "Malware payload", "value": "3b085e29e75d801c20d85b595ec645968415e67c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830458, "uuid": "b96820d0-b260-4578-9fbb-6255cc130ee4", "comment": "Malware payload", "value": "028c537c1da58e5b1fb23a79023ad07cfe0149f99958b4b0f8318965da6901dee5ebdbedc85e59f38864d8e9ca179703", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830458, "uuid": "c486adab-0286-41c6-8d84-172206e55001", "value": "T102634CDC5B35375A64A03809DA9B4D4C963C1E3A1C1B4890B22F95AB641EBB77F7830F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830458, "uuid": "58adce8c-14a3-4ce4-b67a-a7d952144655", "value": "1536:I9l/AoSSM2x3xLxvxKxmx4xCxLxoxXxrxsxqxFx+xpxZxHxzx6xhxRxpxuxWxpxw:I9l/5MqhtZm6wetABNsGTyfvRV23HfCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830458, "uuid": "d6211179-73a9-41b7-b445-23f56f99cc8e", "value": 72505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830458, "uuid": "8e49fa68-0853-4636-91f5-4b9d2d22adbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830458, "uuid": "15177062-f0fd-40c7-a008-912d95cbc515", "value": "invoice-1645080830.pdf (95).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7443b9c1-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823435, "uuid": "2b9c3c2a-f9ae-4176-a814-80e4bc9df5dd", "comment": "Malware payload (Mirai)", "value": "b16a6bf18254151546459512ed5661cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823435, "uuid": "a1ab47aa-e960-4c11-a713-5a74b29de186", "comment": "Malware payload (Mirai)", "value": "a10c06e314d6eaebaa336a7131331ba5adc180461796cbf7584474e43e6e5f2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823435, "uuid": "ae8a9191-53b3-443d-99c8-9b3c32153c7e", "comment": "Malware payload (Mirai)", "value": "808b33a23b6b8e7e35596843011c33527e62def6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823435, "uuid": "ba96d36f-6ccb-4fe0-8ab4-8f8583d235b9", "comment": "Malware payload (Mirai)", "value": "e545f9b184012034bd5b1bb94bae15c7a65a1f5d0b90ee87d211bcf6c75035607f5a3bd6618311520211f689f1c01fb9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823435, "uuid": "34f88e24-cee4-4026-ae55-89f375fc4d4b", "value": "T17E244A02770D0E03C1532EF0263B1BE15BEFFDA128B5E681755EBEC59271DF22489A99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823435, "uuid": "a01d5ba7-84e5-4726-ac6d-fbdc3f126e9e", "value": "3072:jbcIyzNIN+02tWxeeTTc5ooxoCNsc7ZnGVlS8IRj+4nGc/:GNIgnYeMQ5zxBsc7ZnGzSjjV/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823435, "uuid": "9c6ea682-9022-43e6-b91a-29e35238bf38", "value": 217844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823435, "uuid": "a2fa7aee-ae38-4452-8608-05901490cb01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823435, "uuid": "2ab58d89-f3ef-4510-84eb-eb04e7b0bf66", "value": "bin.powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d393c76d-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "a713668d-755e-4451-a524-0c7375f4e537", "comment": "Malware payload (Mirai)", "value": "ad6700d5d4678cf7d1bd0846e1957f7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "a503df1d-fd8f-4320-9bf5-81edc16aea8a", "comment": "Malware payload (Mirai)", "value": "a11a9ce363af2d01f73d16dee702fadb279f90dd9f408cce06889c42903d111e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "5dd6d13e-a762-41f1-8c68-12544ff5325f", "comment": "Malware payload (Mirai)", "value": "41b75a14623bfb8b928f3153df508381211ccb81", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "ae4f6214-42c5-456b-8191-88d7f6997520", "comment": "Malware payload (Mirai)", "value": "a5d6a93d6b622703419b44df98f29b40386e865f51030cbd9c46dd1b194841a874cd85b52f82a3af0643b1334f7ec930", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "2da6bcae-4ba1-46a6-a546-e9623eba1251", "value": "T12DF2F117A19A524EE029233618E9330E6864CB2DA8C37893CBDC51776951B8E5B3C7C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "fe695bf3-1761-4f53-80be-3c974acb6fd7", "value": "768:gzbGjwng3vdUIAYwjEKvqZYOtYsZneCsw6GBloGlvKSnbcuyD7UHQRjV:gdnAK5IWHA4wdBloGlvKSnouy8HyJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797396, "uuid": "308fbb9d-ad62-433b-9b2d-46dfee138935", "value": 34888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797396, "uuid": "cedfb63d-8c0f-4743-868d-a48d35c762bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "6383b9f0-9029-4b63-a39f-ec9520df404b", "value": "Space.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f1f92b6-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854699, "uuid": "74e6581c-cdce-4244-b60f-f00da87b4f07", "comment": "Malware payload", "value": "e921a5d707df8df966894077120c1e23", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854699, "uuid": "3d084d7a-d4c0-4705-b3f8-4e9e75d96c01", "comment": "Malware payload", "value": "a191522ab8430d29b99b8b88c830067d5e2f4fb6102861331a67351af2a8f3fb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854699, "uuid": "b0a29075-60a2-4aa3-8440-f1b38fe1d4c0", "comment": "Malware payload", "value": "3ac840a9610e25f67ccbe2bb7e6ce4725e55bfa1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854699, "uuid": "cc02df11-3fad-4169-a854-de8cd15c6971", "comment": "Malware payload", "value": "c77b31744cd3a54652fc0e7b16cdb2f393c2d798710e66577078556e114d009d7ce97ccdb89e4a16356a2eaa997352a9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854699, "uuid": "7e61a601-ceea-4861-8e55-2d0b8cc48497", "value": "T12E6309DF35A088026608BD7AD8BAF9DC719163BE8B1046B3952CB51F520998D737C38F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854699, "uuid": "6b449d48-74f1-4acf-8fbb-6d0385aa2ded", "value": "1536:I9l/AoSSMzJOjWjc8mF06JRQWZnKLfseIuriMa/O8DtdMYfvrTluClpHd9BpKFVA:I9l/5MzJOjWjc8mF06JRQWZnKLfseIuG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854699, "uuid": "c5e2211c-eb54-4218-b2fc-1c26ff9930a4", "value": 71627, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854699, "uuid": "7ae725e1-be8c-41a0-9f89-f076c5fbe56a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854699, "uuid": "d7592869-00b8-4570-bc43-52114403522f", "value": "invoice-1645080830.pdf (59).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3da86a4-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873793, "uuid": "07dbf802-2d7d-426c-9fb9-ba4b9c856efe", "comment": "Malware payload (Mirai)", "value": "19b4643c9dfc8c0cfcef3d79dd3f0e91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873793, "uuid": "49d2ff85-0c9c-4e04-97c6-ad76d69000d8", "comment": "Malware payload (Mirai)", "value": "a23c37a7a9bbd950c8def56e4141dcd516a135c757f98dfecdba46028cff58ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873793, "uuid": "1cdadae5-571a-41fe-a5d1-281f6fb0ed39", "comment": "Malware payload (Mirai)", "value": "a4ce1afa284fdb6973df7f941dedf7d7b0d3ce25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873793, "uuid": "fd72b9ac-d9bc-406e-a684-243d51143f4b", "comment": "Malware payload (Mirai)", "value": "456d4e4fc90b12e43e0ffe7b600dd2164628aba30352fb657b706565078ca866b6e2aa2a9b91b373fd9cd41ee598ed79", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873793, "uuid": "baaf6494-60d5-4a20-a4ea-817df7a5ed60", "value": "T1DBB3C609BF910EF7D89FDC374AAD1B0228CD559722A83B757638C928B25B24F19D3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873793, "uuid": "b83d0172-5eaa-4d05-b8da-a206803b27f3", "value": "3072:G/4vZqIYcLJTnGdjNuMQRgZWqLYj3MIMi:G/y7XVLIMMQIWqLzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873793, "uuid": "c421ae07-b4b4-4f60-8a73-610dac199d6d", "value": 110984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873793, "uuid": "e9225032-5e12-48a5-a8fe-44b68a15c4ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873793, "uuid": "562ebb28-939a-4645-ade6-feb57f4415ca", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9108ad0a-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857843, "uuid": "e6239dde-67a6-46fc-89c5-bf65a510beda", "comment": "Malware payload (Mirai)", "value": "77409fa0ae05a5abe857f069ef8af247", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857843, "uuid": "8d081b80-c730-4f83-b53b-073b8b267c32", "comment": "Malware payload (Mirai)", "value": "a24b9d896a468e9b781e3bbae0afe4dbc3fcd5813fd4f8d866b5d00d2ac64d22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857843, "uuid": "b4833609-eb1c-4f9f-9fe0-01618ed8eda7", "comment": "Malware payload (Mirai)", "value": "c671760665be84978a381d85f0306ce834218d68", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857843, "uuid": "9fb6376d-10d3-4a16-83bc-7f39ba97ab6d", "comment": "Malware payload (Mirai)", "value": "9ca7fb035d1abf541a8e5768aa03451af338fdea3445291f33b60ea619544a1e04bcc34f3a3c76d929cc6f3ebfd1947e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857843, "uuid": "137c92d3-d75c-4d8d-88cc-ba2971ae1d6e", "value": "T1B4430886B8818B16C5D413BEFE2D118E33272778E3DFB2129D115F24778A86B0E77906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857843, "uuid": "91e80923-79b1-4026-bbe6-8237fc68f931", "value": "1536:TJnWvXAfEDv/0B4uys4QObRrMoijWFoD47:2QfS0Hys6FoD47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857843, "uuid": "09781ef9-d8bd-4a52-996d-7158d8ed7a8b", "value": 58572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857843, "uuid": "c5634b41-dd5d-473f-82c5-b577031a5d39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857843, "uuid": "e7d144ca-3550-4396-8e10-5bf926ea62e1", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f861284-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825414, "uuid": "e866d9a4-c30d-40a4-bb99-a3e631436f15", "comment": "Malware payload", "value": "1b4407de3154f686309ca71fbfad4c40", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825414, "uuid": "1caf143d-40db-4365-a36a-f54d8d35001c", "comment": "Malware payload", "value": "a33104908b5f8b32a05706f9b4fb5959086d0c0c34a14ac70c679cf5ea280bfd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825414, "uuid": "9c333f2d-2e38-4c77-bb31-83a9a4c463d4", "comment": "Malware payload", "value": "71704de822aff7a7259c17b5c8d54ff679e6f6b9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825414, "uuid": "9dbf8938-6fbb-44aa-ac43-172388a85ceb", "comment": "Malware payload", "value": "13f6c7ec2083178b0bfc07346a0224eaa7dc5df27b57cab852b1daa26b0886629fc427c83cb2d508ad39501e63eb9a27", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825414, "uuid": "280b5e21-7d41-48c4-83ad-0c2ff72541c0", "value": "T13B633B725673B34B9818FF2CB3572EF22D6F8231ED28429869831B60AE61DD54CB17D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825414, "uuid": "aaddb44c-0d9e-4600-a894-930413db5b25", "value": "1536:I9l/AoSSM8SNALXSjvZiBddCP58+m6TlyG5tZDIAZUEZWFZ1QZ8/xoA4FaYo6YoK:I9l/5Mz3usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825414, "uuid": "acc9bb4d-715b-4a2f-8d37-0ed50b35c8e9", "value": 72499, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825414, "uuid": "cf528adf-0cc0-44c3-80a1-79e0dc354035", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825414, "uuid": "8d0b29e5-7e8c-4c91-b459-c53e48165c19", "value": "invoice-1645080830.pdf (61).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c2bc80-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825555, "uuid": "2b56f6e6-b881-4689-b89b-b7c9e13b3310", "comment": "Malware payload", "value": "deb388998c32e2afbf95c554602f5d96", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825555, "uuid": "c3e0bbab-a349-4e1c-9f8e-8203e9904b65", "comment": "Malware payload", "value": "a374b3bf47629c0a609e54698c23bc420ef8cc344db4553ffb28a27f1d4e1f09", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825555, "uuid": "0df43762-5524-4d29-b0b4-7d7ac9932f77", "comment": "Malware payload", "value": "3e6fe400f78e98f121fec4e4a83c62d90c8e63dc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825555, "uuid": "d7257b34-8eb0-4ddc-8112-9ddd950e2874", "comment": "Malware payload", "value": "24e7ce45597544de4a0c382ad70f5e1606e213bcbac9169fc45713c328b8da3ff6ba0bfe0b14f049dcc02e5e74b21986", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825555, "uuid": "76decbbe-bf14-453b-b535-788ed37ca8fe", "value": "T1D0731A6EDB30388EC724666599701B41359B7CB3FC3E9D8608F9B6B5934AC841F630E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825555, "uuid": "1c6743a7-8517-42c7-bd17-99d7ab1ceec3", "value": "1536:I9l/AoSSMLOeO6OUOvONO/O5OgOkO6OJOpOKOeOTO0OyOyO9OhOfOsOHOZO2O/OQ:I9l/5MLzfRsm2yF5p083ziBzpg2KBWs+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825555, "uuid": "84a71ec9-b518-4821-ac6e-58046fd19d0a", "value": 74495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825555, "uuid": "c31d97a4-759d-4d49-85ef-f6e022af363e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825555, "uuid": "2d99a361-975a-4b6e-a197-241e5cdb36af", "value": "invoice-1645080830.pdf (35).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34bc35b5-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825476, "uuid": "9b0cf649-6a3f-42b0-95d0-18a7f80b7647", "comment": "Malware payload", "value": "5d7c8c94c96346aee90ab3d3a5adf2ec", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825476, "uuid": "4268484c-bdea-40af-9ff7-1fa84ca83c83", "comment": "Malware payload", "value": "a3aaf15060362a9ffefe653081c0fd28197115f37d7b7527916b3cfd5bd7ccfd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825476, "uuid": "5fb47305-1239-4b73-913e-0fe9cc49af3c", "comment": "Malware payload", "value": "5fce2a50496392cb3195ea48a2001e8b7be4a73f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825476, "uuid": "b1b236c1-4d5c-4f12-b26a-ab8426784ae6", "comment": "Malware payload", "value": "1f7206d935ba31db9a4fd686ba0d88b96322d32e1f3faf45fa25b107c8b08858812a0211a02e5f36f0dc78573d6266f8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825476, "uuid": "2d3ea2c1-e9dd-4403-879f-3b834f4fae6f", "value": "T1E36329AD7F27D7150692B2649FCC30A6E8470211CBDB0159EA9CFB5AB172348B32DEC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825476, "uuid": "71282116-061a-463b-8709-26d71e2e8383", "value": "768:I8w/h62/jWs6oS+xISN0vaG/HGXGMGOGLCGyCGyGdGQGBHGOGNHGhGUG8GjGhGWP:I9l/AoSSMfiywNusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825476, "uuid": "223f38e5-407a-4af9-b39e-65d4720cb600", "value": 72506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825476, "uuid": "e9552241-6674-42cd-b88f-a3150e9bbbfc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825476, "uuid": "3c1f7137-1a85-46e2-86f6-59392da82a83", "value": "invoice-1645080830.pdf (47).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70ff502f-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830731, "uuid": "d087cbdc-a386-4750-bfa9-eae2530012ff", "comment": "Malware payload", "value": "fa78185280d8d861ffe1c304d248ddeb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830731, "uuid": "5fcf8408-c86c-4bbc-b96b-c9af096ac697", "comment": "Malware payload", "value": "a3bbc21bcade29ac8f11a1cb78849eaf56596f6984c91fddce4114658f7b0c66", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830731, "uuid": "caf0d7f7-bd5c-477c-80b6-69bf3b1c419b", "comment": "Malware payload", "value": "60072400b820b7845370343884bb9130127864f8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830731, "uuid": "f6324c8b-393f-4285-a3ee-0872a5a4e332", "comment": "Malware payload", "value": "4df62f8c6996222a87868caa1302430738840a3988a296b243396164da206aef9ce019bd5e6a5a5a6cada71b0c00c105", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830731, "uuid": "89dd4f0e-fdef-4867-a339-af1059ee3882", "value": "T109636CD5A6613CEE214DA29A4CF01E8036ED1145C47AC60E9F016417C37BEAB8BA7F7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830731, "uuid": "8ed684bb-1a47-4783-bbe7-a2066d09a848", "value": "768:I8w/h62/jWs6oS+xISN0viB2wMYdkfScBYrwz2y8kTAlGB:I9l/AoSSMiNusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830731, "uuid": "dccf68a2-0004-46a1-907a-6f63484df6b7", "value": 72562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830731, "uuid": "789051ba-f1bd-49e1-b6f4-283ed1c7a830", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830731, "uuid": "16b2697d-f206-4783-8b53-2b49c8466857", "value": "invoice-1645080830.pdf (39).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22b49822-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858088, "uuid": "3ce75a46-ca1a-41bc-9d3a-f789fb8baf2f", "comment": "Malware payload (Mirai)", "value": "6b8277c4718de50621a132d876f82a67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858088, "uuid": "e701d7e7-cbae-4094-b3a9-f302ad0a5810", "comment": "Malware payload (Mirai)", "value": "a438e7c4879658104218fe7b1bb7a166157b1d630be530ca197e87d1e5bebde5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858088, "uuid": "23a4318a-81dc-476b-8ec3-62e74bbe6725", "comment": "Malware payload (Mirai)", "value": "5bbe1aa2fa40cd7399a1c03a3e7e74bc356c298c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858088, "uuid": "184a30fd-6912-4f7a-86a2-8a5e969b6db2", "comment": "Malware payload (Mirai)", "value": "dbf13cf7a992b35e097f653b8bca708ea5383ee2be1f1680bc2787461e5c16647a441cf9fd83cbb2c086eadafab77315", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858088, "uuid": "11e698d7-c2b3-414e-88c8-e5de93e67934", "value": "T1D8432AD7F404DDBDF80AE337845B6901F520B295CA421B3277A7FD63BA760885869F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858088, "uuid": "c9d1ad5e-f05d-48a6-b546-8ed9f91cf646", "value": "1536:bcA5uEgIcVAsTDUp5rkp8umePAJEkn555LWp37TPUf:YxEg7pTDUpW6dEs555LAg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858088, "uuid": "ff761a7d-b81b-49b4-a744-33052542724b", "value": 60552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858088, "uuid": "5e0a91ed-af0d-40ab-8119-04f0b034df9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858088, "uuid": "f9691de2-ef19-4cc8-9ebe-df51716e630a", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dee1d576-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854968, "uuid": "258da7e9-ed05-4f02-9b3e-0b027f01a929", "comment": "Malware payload", "value": "8b003a7fc7d425572f2d0c9d8690b963", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854968, "uuid": "1b25d138-19c5-4aad-9cf3-fec2cd2b8b30", "comment": "Malware payload", "value": "a47780e571668ed8e2d67b3252aa7608ca637bd7f910d15d5b4e049b78ce08ae", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854968, "uuid": "ad0e84f3-941b-4855-9fc0-03aa84e0bba4", "comment": "Malware payload", "value": "dcc79b74ebc8fb331e855d04941f391a79e06085", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854968, "uuid": "8872d37d-346a-4bf4-a1c3-a35de3ba6890", "comment": "Malware payload", "value": "d7b8a60877984792d2de7a6d9fbda06f670ee5ee0cabb0f291eeba02a6821094fc61181d59374406a8d192637b0f3860", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854968, "uuid": "0092ec96-c83b-4735-aa5a-0294b13e0f99", "value": "T1FB632CF77A8819ED9F30560559EFA8925201190BCAD7360D50C0EBBC5E2F387AF269CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854968, "uuid": "74666b9e-b3fc-447a-bc4a-1d757b3854b0", "value": "768:I8w/h62/jWs6oS+xISN0vw0Gy4vdkfScBYrwz2y8kTAlGB:I9l/AoSSMwHusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854968, "uuid": "cbf60648-5e98-4e9e-8694-63f685061412", "value": 70563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854968, "uuid": "d2a784f9-cf59-4b22-8adf-7b361786927a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854968, "uuid": "b5bfbe8a-ae07-488d-8583-3df96d3d7e66", "value": "invoice-1645080830.pdf (4).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb702ca8-e377-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766876463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876463, "uuid": "54d96033-b573-406f-a605-404ae6248c2e", "comment": "Malware payload (Mirai)", "value": "05b8b25568a793e3fa25d556b0956c75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876463, "uuid": "db8b6844-4c07-496e-a18d-a914c8afb268", "comment": "Malware payload (Mirai)", "value": "a4a2b23178e523d8ea4cd80377836642693fdc35decf6a08844c13915924e02e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876463, "uuid": "796277d7-9fa0-4293-a6d3-5a993c3c376e", "comment": "Malware payload (Mirai)", "value": "8fc545d7782b9f480692c21924aa036d8ca0afc2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766876463, "uuid": "96ad0765-32ba-4825-ad06-02b474698a27", "comment": "Malware payload (Mirai)", "value": "f0c1dde443e555ca144e39b22211d972c5a63f78d6404ca5214be2584521dffc0cf13431037a4437afdc2ebef1277796", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876463, "uuid": "562a13b9-c604-4da0-8010-03c64b911b7c", "value": "T1D1436B41B3084943E1575DB07A3F2BD193EE99A02164F386BA1EBE8D4176E33504BEDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876463, "uuid": "ed531773-a497-4ef9-9d87-a3b437bf8061", "value": "768:swOxxZv6hm3+eyz6bQwKsGJUwXDC+fkbOnnugn5pfcxyuh7Rq:sTvV3+LzQ7u2cDtfkqnDpf9uh7Rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766876463, "uuid": "407e543e-5d26-42d4-8c17-86b897af171c", "value": 58644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766876463, "uuid": "0f334ebf-edab-4ee5-ad90-8af5a71b22ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766876463, "uuid": "a2c456b6-5eb6-451e-9484-818f9e6c7da0", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cb926bf-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825409, "uuid": "fe5dab53-cd33-41b4-9fb2-155cd2b218b1", "comment": "Malware payload", "value": "380a869527ff86b8b2016e8d53650150", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825409, "uuid": "870de791-f53b-4821-802d-0f232400244f", "comment": "Malware payload", "value": "a4a616b9cac4a2614151602729d9a15bc710110fe4c734d8428e1719016dcea1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825409, "uuid": "cfccbf06-7b85-4289-8e35-56aeb76b369f", "comment": "Malware payload", "value": "7bb4b11a5ebee291b8e70331bdd66eab35e0b0b7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825409, "uuid": "d59bb6ec-7ffc-452d-9140-c860f51528f0", "comment": "Malware payload", "value": "03af328313a75d6a4bf3f762f61a69c9608f3464d26693cde29b33591f7009831d54e21dd35181ccda5ce3acbb9c103b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825409, "uuid": "e3f71e11-093c-4b33-a377-143c5a0f0a06", "value": "T159634CF80E83C5BF16CBC7F794CE0C7A382252859C95EB165C5193078A9F70588BDE9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825409, "uuid": "c192c40f-79ad-45be-b256-bf8122127320", "value": "768:I8w/h62/jWs6oS+xISN0vNk9yvDkD17Sk/9VMV0pvLyv3PgRQgUNekKeZJ5cdZ5j:I9l/AoSSMlHj/jZusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825409, "uuid": "08b431eb-49c0-4bcf-afa1-8bf64be410cd", "value": 72491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825409, "uuid": "8726d55e-930f-4373-9b10-728118d6362e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825409, "uuid": "7f3e0df5-3530-4e9b-a36b-e02df8368238", "value": "invoice-1645080830.pdf (67).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ed49253-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794140, "uuid": "3afeea88-97e4-402a-804b-348ba38a19c5", "comment": "Malware payload (Mirai)", "value": "0be41cad93ada2b627d48a1dc71f3b79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794140, "uuid": "a538a873-d835-400c-8e46-dd2366299808", "comment": "Malware payload (Mirai)", "value": "a54375613b9acdfa1378f8b07d29265aac9c1d036a595fdb7a97c283eb58eda5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794140, "uuid": "0ce4e529-cfb4-4309-88a0-bdcf30c775eb", "comment": "Malware payload (Mirai)", "value": "ae998cd5f07cabdd3be729a4f0da3fc88a7d1c3a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794140, "uuid": "1b3ac2fe-4467-47a9-b882-15f44d25d057", "comment": "Malware payload (Mirai)", "value": "5cae72e4710d7acc2c04512c639085586dd82c5cf2b190b063c24c9cbd99ba5b75d3754c3b7300471a2146942535597c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794140, "uuid": "f6e81cf8-e912-4079-a624-eab717623487", "value": "T162D37DAC2E4E3DE2D3C7D37DCE084E21712B74B4C22152B67D1213EED29ADA695F0961", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794140, "uuid": "8e415952-f33d-4b8d-a272-b7e53724218d", "value": "1536:uRqwkwQ/vnJEg6Mov1YLxSdxQ73rMW+EO1uDPGhb/1u1RqNGlce8zVE:E8CbdUSirMW+EOuiu3QGWe8C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794140, "uuid": "78e9258b-0d53-4add-98da-d42392e92614", "value": 132960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794140, "uuid": "0515ddd5-3b54-4273-b788-8e9b28f585da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794140, "uuid": "557c03a9-ccb5-4ad1-a324-25226d14eb42", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ffa0b83-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858083, "uuid": "b9fd6143-4ee2-4d78-ae7a-d74e8cfad17f", "comment": "Malware payload (Mirai)", "value": "1259071f5ad10fd9446a3d72a57454d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858083, "uuid": "c8b86f00-5e88-4b8e-9b60-7dd45c9e4065", "comment": "Malware payload (Mirai)", "value": "a554210ba2f4ecbaff1ad7e77293a00fadbd460da752169dd30301fada75195f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858083, "uuid": "48f05f90-a09e-435e-86ac-4e15e7f49a2f", "comment": "Malware payload (Mirai)", "value": "6e7e4ac368df57da469bec9a6e5c5bec130dffd2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858083, "uuid": "9149d40a-c760-447c-9749-c1911aa75b17", "comment": "Malware payload (Mirai)", "value": "cc3a54e4f462fcc8f2765ff388e57c34c3c74cecf49530456b7dfc03a01703f366ce7975ee36f790eb8ad4aa4cf093bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858083, "uuid": "752b0370-a7ea-484f-830f-9f846ca7cfae", "value": "T10D630214777DD6B0F4B24D34AE5A40DAB54B237D80EF527CAAA48AD60AF0C093C36E53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858083, "uuid": "6a3b3217-b637-40ff-832d-daf60ec17879", "value": "1536:qsRTL2udixZE6fSiPBmbuZxyiC8Qg7LL24PzWSy:qsRvhdi7fSi8buZcxgCSiZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858083, "uuid": "b02e276c-dc7d-463b-8a65-b90f6096ef1b", "value": 69804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858083, "uuid": "a4feb1eb-b82f-4b43-af2d-d487814a4e3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858083, "uuid": "dd321a9a-1477-493b-9aac-e5e97e9b80e8", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86696988-e36f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766872858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872858, "uuid": "08807e6b-1f2b-45e3-b4ee-85eabe830aad", "comment": "Malware payload (Mirai)", "value": "a4310bbfda05382f60cd4f06f06a04d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872858, "uuid": "25e29749-e84d-4b4b-8573-4ca92a316648", "comment": "Malware payload (Mirai)", "value": "a57112ae6e87ea9284268d0b4517945177946f3ca6688eaf1040ab2689852e09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872858, "uuid": "b1c30867-4300-4da5-91e4-9d9c269ca668", "comment": "Malware payload (Mirai)", "value": "a2089f519a92d1425da8f38b61ded3d10c9309b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872858, "uuid": "a02de79d-1fe7-4319-b992-c3cea792c7d0", "comment": "Malware payload (Mirai)", "value": "7fe4b41f42889ee48ec23316b195140d7eee8722dc3396ccedbe650c28349fb199157c08a9298120f735b7b54531edfd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872858, "uuid": "27f065ed-de3c-4dc9-b191-4ba32d305cf3", "value": "T151539D36C97AED99C55946F8A8308E791B13B200D6932FFB5F8588664043DACFA0D3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872858, "uuid": "6a9f0204-11f8-4200-9a93-6bfd3ee8c433", "value": "1536:ga2wtvXuwo3yeb39nsfGBUNWIlCo/T9LDuJ7R:g98ur5r9szNWIlpJXuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766872858, "uuid": "4d0e9886-14bc-49c4-a4ca-23e01af25013", "value": 63016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766872858, "uuid": "100716f2-b6ea-4eab-b5b3-2e0eb6097529", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872858, "uuid": "aa2ec4b0-e764-44cc-90bb-f48b3b694e4e", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6c4e747-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873798, "uuid": "50f94433-1005-404c-9f9c-4606e84df2b1", "comment": "Malware payload (Mirai)", "value": "30075174f67fe8799ead875c6485b661", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873798, "uuid": "395f0b80-9915-4cd2-9eb2-1d4b7e004e8f", "comment": "Malware payload (Mirai)", "value": "a5de87f2cbf06af08fb7433e956ec25a05d5ac02a991b3e786277bf91a788ea3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873798, "uuid": "30c1d06a-7c51-4d14-8942-51cdaab288e5", "comment": "Malware payload (Mirai)", "value": "fcbef7e875874dae55440663aa9df352122db889", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873798, "uuid": "bb61f6d0-29f0-4f5f-8c23-35ff2298c662", "comment": "Malware payload (Mirai)", "value": "1870797883a293fbbc5add0937ffa579bd06574ad344f6afca1cfa461bc91a1aee531e720ac4c0a886c8a97b61e3a140", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873798, "uuid": "fd9e2406-6ee9-448e-a029-30110fc9b972", "value": "T1FE834A17F98081FEC89AD13843BE7636D82274FE1378B25617D8EE362D89E201F19C56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873798, "uuid": "89b32d33-7799-4a2c-93b4-aadcd63113f7", "value": "1536:2LifgZqXMY4IJAPBC7HalmJZN3+NscDgFLUVz3ED:2L40rFAAPB2almJzONs8glQLED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873798, "uuid": "ac3e6d89-df3a-4bab-8d7b-bc84bf7d44d3", "value": 83864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873798, "uuid": "1757a3fe-6be7-4844-b103-6df134bc7436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873798, "uuid": "d870d15e-c89a-40dd-8167-5f9d61ec3bf1", "value": "ub8ehJSePAfc9FYqZIT6.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8a6a7c-e340-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766852732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852732, "uuid": "73274511-5217-405a-bc12-9cdf23d2f61c", "comment": "Malware payload (Mirai)", "value": "213819b33e9a2d78c1306b8cf708d3a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852732, "uuid": "2da1354c-75c2-4cbc-9535-92e13c53f7b3", "comment": "Malware payload (Mirai)", "value": "a5e822e95782c339804964086af4a25162ea3d5d9626325c17f7319020d7d9c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852732, "uuid": "63110c04-4564-4e6a-99fa-d748cdf2fb23", "comment": "Malware payload (Mirai)", "value": "46e5e24186b7507bc4e4499b0996fb47292d79cc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852732, "uuid": "aeaa5d3d-3331-4f11-aa12-8b68d8c72551", "comment": "Malware payload (Mirai)", "value": "d3b28ae252005f3168b02f120e7126ea7e6401674babc83b7f28ff3c0753f058170a4e0c8690000ca21615de4f5a0e15", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852732, "uuid": "94392959-f612-4de6-9e61-93db63c00a39", "value": "T13853025753DC2280F6CB003ACDEF86911E50D91E1700EA7686C85CC3FE35B56A56EBB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852732, "uuid": "a06b028a-04ff-438e-9a93-4f439a9d60cb", "value": "1536:bmzWLZp9KFQmS5j+EB1oIW2H5TQucA95rY7Rhnouy8Gyt:bmzqp9KFLovjjW2ZTt9NY7RBout5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766852732, "uuid": "c198c055-6dbe-48f2-afe2-0563f7d11bbe", "value": 65212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766852732, "uuid": "b78a4549-3e91-4e3a-899b-557bab8082e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852732, "uuid": "96b6ff14-4224-4018-b3b9-5d2f4e3369c8", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "235377e6-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793664, "uuid": "7921f35a-284e-432c-b813-b7402ea2f575", "comment": "Malware payload (Mirai)", "value": "9c79d12b1c5790ccac94228ddd87269c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793664, "uuid": "21da6d8e-c8fa-4a89-9d1f-08a36462ecf2", "comment": "Malware payload (Mirai)", "value": "a6546ecfc48d24d7d6ce8c6fb163e5c85ba5dff081c8ed6f710959be8a1c8195", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793664, "uuid": "975a1e44-676e-4c0c-9540-67980347224e", "comment": "Malware payload (Mirai)", "value": "8595c228ba4bd15d8996a53ba83d747d85493346", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793664, "uuid": "e566c509-265f-4034-9e69-c5baa545aec6", "comment": "Malware payload (Mirai)", "value": "b71f866dcf57999eacb581add473170dccaa93a957319548ad1f1bab3fef4fb71c60a110bafdec791a1e18ea2459afcb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793664, "uuid": "6c395b74-c3f4-4a5d-b16e-4430307f043e", "value": "T1A1D34C87F400DFBCF806E33745870516B236A7A035A21A77A23B6427FD711EA682EF44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793664, "uuid": "d15dacd5-bdc1-47a1-9549-29597f9f7411", "value": "3072:WOBUWAkqCpwvDy+49uNUHA7msOS7RBOtAjLc:XStoGy+suNUg7XjOKjLc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793664, "uuid": "663d4291-13ef-496b-ab97-047695151879", "value": 130512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793664, "uuid": "6f295673-ac08-4b7a-826a-23990b67c4cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793664, "uuid": "c56c552f-1540-420d-8200-9cb466aa98f6", "value": "rondo.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2d42b82-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825661, "uuid": "2f6e1817-9db8-4e48-9d8f-8d8b7a3817ba", "comment": "Malware payload", "value": "5b26b53e4e93a0aaf074256a294f1e16", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825661, "uuid": "b038e06c-0038-49d2-a9d5-13c45777cf60", "comment": "Malware payload", "value": "a664b88fa0ee5762465713fb9632957e319e8183e997d6eded0ae93ce6c1df31", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825661, "uuid": "aa3e4863-352c-41e5-af67-b5b3aab8d6c7", "comment": "Malware payload", "value": "f9003ce95c17524d6e1b4dcaec230739bff6f6c7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825661, "uuid": "e8d30c02-0e9c-49db-85b5-55a0d9b7b322", "comment": "Malware payload", "value": "99c43d65dffd0ae21363ca8cd5b48a4d783807fb86e6f42c196714815066dede2dfc8f21bf9a81a9e376140281b6a791", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825661, "uuid": "1a1ae2a8-f31a-46b3-9279-03f6d9b004d7", "value": "T15F635B86D3B63D36E913F5F31E464E643C006C118AF3AD1B18073BEB6486AA6513769F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825661, "uuid": "66dd42bc-749c-4228-a267-3aa4987f9197", "value": "1536:I9l/AoSSMe6/1yUGFJNyhyNJeM7WlHUnrUIhPUKu/vcMWRVKAZXf03ryK83GXJQK:I9l/5MudusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825661, "uuid": "e85c9943-5472-4a29-9cc4-c834ae7ada00", "value": 70581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825661, "uuid": "98873cc0-fa69-477b-ae6e-44d920a557cc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825661, "uuid": "1d8746f8-ed7f-460a-9518-e6afdc1481ff", "value": "invoice-1645080830.pdf (12).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b555bd17-e373-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766874655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874655, "uuid": "07425f9f-4fd0-4a7b-9410-953af4f44a48", "comment": "Malware payload (Mirai)", "value": "a7c1bd1936b9be92e9078be43fca3af3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874655, "uuid": "807b948d-c763-4832-a838-6a8d801f55e0", "comment": "Malware payload (Mirai)", "value": "a6dc5f2188b8eeca53a923134fc1e3548ef70d15423d7231500d940ce068dd77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874655, "uuid": "90edf044-479d-4c3a-8d7d-ca6824632a78", "comment": "Malware payload (Mirai)", "value": "7fa76c3b12f0f104fe0b15cb8864482c3969c804", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874655, "uuid": "7a930d8b-cbb7-4187-a1cf-337e05de8b67", "comment": "Malware payload (Mirai)", "value": "5fdd6f0a64dd3cce22d441dbe8595930f1ffee61a0640de17d0fd91fc96278487f7fecf45fa64c3f01dc332b46983437", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874655, "uuid": "a74ca220-e7c2-431a-b3a2-2251d9428526", "value": "T1E9735B42B3184A03D56759B0293F1BE183FFA9A021E4B78AB50FAF4A4675E331446FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874655, "uuid": "5cb1ab4f-a609-43a4-b013-45b689baaa30", "value": "1536:4kVepxKzMyX3VUoSFOvLlNBicwihzxzgMZuh7Ryt:d889vLUcwc9uhAt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874655, "uuid": "ee0c186d-3705-452d-9920-cdab7e31ed0d", "value": 75452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874655, "uuid": "903c3c49-0953-4ef2-8b74-da2e22e0dc56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874655, "uuid": "08396821-2d8d-418e-a013-235df10f0f54", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "561b769e-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824673, "uuid": "7b31308a-343e-4bf2-8c60-6166cc23b665", "comment": "Malware payload (Mirai)", "value": "fc8bdd374b1f99c87e76ad19bbe847eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824673, "uuid": "8a699cd2-3511-424d-a35e-f1f87cdd0c18", "comment": "Malware payload (Mirai)", "value": "a70520481cba5c494f3335e0c375734bdb8eac1f29ada5c8c24886035f728328", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824673, "uuid": "48ddddd7-0135-466c-a540-4addc4c5706c", "comment": "Malware payload (Mirai)", "value": "0f8909143d480d028ca9637ceb17a9889bf52a60", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824673, "uuid": "bab91a76-6f64-4dc9-81d3-bc14b350337a", "comment": "Malware payload (Mirai)", "value": "ba8147520247abf06b0dede3639d252450601cac3f33034d9171a96e0da44b901cc73b2428bac488508b634d9ea6b4ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824673, "uuid": "05a333f5-fbcd-45c9-a337-3ba3af2fc590", "value": "T151A30606BF110FF7D85FDC7706EA0B01298CA91B15A63BB57534E858BA4B6CB19E3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824673, "uuid": "8984eff8-af2c-4522-8780-8570617d6daf", "value": "1536:WmR4bkFj8v2VWlrL4XE+QIeMpIEkLS6Myzs7Zk3g6gl61d6RnQD5:WmR4JriLpTkLhyCg4gS5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824673, "uuid": "3056dc48-5533-4c35-85bb-79b5c0d42ffe", "value": 106756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824673, "uuid": "09f9f99b-2ade-4aef-9066-e58963f42206", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824673, "uuid": "23e7e514-7cd2-40ad-910d-d8e8fe3932a3", "value": "nova.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ceecf81-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830698, "uuid": "1ea3bbf8-8687-4815-875d-942ea61c47cb", "comment": "Malware payload", "value": "1376d07c7540cab4764f1cc1bfcbacf8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830698, "uuid": "5c52b17f-a5f2-4560-bc58-b79baf3b0273", "comment": "Malware payload", "value": "a722aee4d2842d83d38efaa0332d0e54b674988f9a0e3956789b683807a8913f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830698, "uuid": "7e5453f9-ad18-4e2d-84bd-10bb9d0c7b3c", "comment": "Malware payload", "value": "e00ffbedd2a80def35c0543fe7913408bf31a2d3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830698, "uuid": "811af529-ac10-4419-b62e-05438efd6cc4", "comment": "Malware payload", "value": "0ce563b6cc023607b355cacd8b657dea28c9511d23f49530295972a9397963bbba06f3f0a9088bd4c0aacd5c8cf8cd57", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830698, "uuid": "7b2e0d12-6669-40cc-bcf9-8fb62ac4ad27", "value": "T1986309CF36A4084764EE5DDCDF2A976A08F326908CE94654DEB9B913590BD2CCCF3906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830698, "uuid": "4bde5f5f-33e2-480c-97c3-ceb90adbdc02", "value": "1536:I9l/AoSSMzZsZjZWZ0ZhZcZ/dZRZNZPZ/8ZfZVZmZ6ZnZvZBZuZ2ZNZyZOZDZwZU:I9l/5MzJ+QH2c4JyDusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830698, "uuid": "90560507-240b-45cb-ba0f-cc537e31306c", "value": 71574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830698, "uuid": "bf78dbf4-c1fc-40c0-ab16-f2a0d3dd6ded", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830698, "uuid": "952cdb4c-ef2d-4538-ad5a-b5be5ae3dd68", "value": "invoice-1645080830.pdf (43).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84acc1ad-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860829, "uuid": "46fdc450-32b6-4025-80a4-243923836de0", "comment": "Malware payload (Mirai)", "value": "8806c4876b71893832ffda18fde8fe77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860829, "uuid": "a050dc84-ac9f-4e4d-905f-e4f33d76a0bf", "comment": "Malware payload (Mirai)", "value": "a769ad7b3a8af4746b326cfe60055d7e175a9b387629eb454b9af6681907d1c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860829, "uuid": "c7707d59-b51f-4e90-a740-0e0a26f7bbb9", "comment": "Malware payload (Mirai)", "value": "6964e1c1c62a6c3e1df4493b8a458fef071911a3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860829, "uuid": "ffce658d-085b-4fb4-8c02-c6fb73c4632b", "comment": "Malware payload (Mirai)", "value": "415ed3986c503bba286791100999da5940d6f158acfe6d760a2bf5fafb88eaaa727f086e0cd61dbc57d8189e6f0d10eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860829, "uuid": "1a47695b-96cf-4b85-bae9-a7fbef99a46d", "value": "T1BC733AC1B94BC4F6D91B4870806BF33FCB32E53A8075C25EDF5B9E66DA336419216298", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860829, "uuid": "2816c1d1-1884-4d57-a805-1fac033c0956", "value": "1536:UdSA+YJPYcTGFcLwo3kPHPbuDWqIpLlpANA9/yfO8on:LAFJgcTyekXbD3dlpAO9x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860829, "uuid": "1ff6102e-42ad-41da-ba64-bb5f13cc3558", "value": 79376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860829, "uuid": "12ffcecc-aa36-4c6b-a686-4f0ba4478cac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860829, "uuid": "334aafe3-c01a-4d62-88a0-33b15495e677", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c32232e-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859580, "uuid": "54d327a0-fade-490c-abba-3939603da956", "comment": "Malware payload (Mirai)", "value": "e9275dcad00c42add9a0bb95ea770bf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859580, "uuid": "eff784f2-a5ff-432c-ab76-1b71d1a6376d", "comment": "Malware payload (Mirai)", "value": "a7e4cee67940c4cf4de6c65ed3cdb7be580f8cdc75c679ecacb6f97a29675866", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859580, "uuid": "1cc1b56e-f432-4678-a3d4-b774be38b36b", "comment": "Malware payload (Mirai)", "value": "6d93953c1f6b8cf87dba4da00d861f143d765872", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859580, "uuid": "872310f0-0756-4cd1-84d5-af735e277e11", "comment": "Malware payload (Mirai)", "value": "0e7f6ee65d22231c09044662ed360480db6eca4a5bfd96910a32f83a7fc74c48889a8baf29ce74b1cf9147901890fdcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859580, "uuid": "13c824ed-64d5-49bb-a5eb-8ad055991d3a", "value": "T159A3C41A6E419F6DF76C833547B78E24A75933D63AE0C641D26CD9005F6034EA82FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859580, "uuid": "28a7656e-2f8a-491a-8d79-2414fa6fccd5", "value": "1536:OHSkOeYmDDoE+DR6miIjiSNckKmPemy8emm16irGw4Evg2Rk5CCRbVRL:fkOhmgPiIjfck0fvpnCRT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859580, "uuid": "d6313002-9dac-4dc2-b1d0-957414037208", "value": 101956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859580, "uuid": "cd36fe30-5a9f-4530-93ce-ce9a0ca2c4cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859580, "uuid": "5112af28-b577-4c93-bd6d-2f5ad5aac556", "value": "jklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c9c8062-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854668, "uuid": "a0e82387-b896-4736-8f3c-6e429593a667", "comment": "Malware payload", "value": "095aee8ba735c0b4a3cd4b0cf1eb4f82", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854668, "uuid": "4d9818f6-9b76-4499-aadd-34c744db383f", "comment": "Malware payload", "value": "a815f7da29f215344a92768b1e0b256f5d96ae1e16b7f7b7ce2c2593fcd6df6b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854668, "uuid": "dcf62a1d-ae33-45cf-a468-a130e08ae6d9", "comment": "Malware payload", "value": "b64ee4c84696a9ad2c705cf9e1238195abeb98d2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854668, "uuid": "36a05b20-a5ba-46c1-ab86-8ceab9db27bc", "comment": "Malware payload", "value": "9b58d4d94ce0c42c1fe0d7c2eb676acf3a214506d89df46da5cbf6d9d91de9d27b8d210815ca45d06f01670dc4a95674", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854668, "uuid": "d7a2dc37-9369-4f6e-8bc0-1ce6f5372e6a", "value": "T113633BF1DE7089EB07BB7BD6CF2904FF09793AD1E786541C7312FA541990A42232E16A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854668, "uuid": "76908aca-45ca-408a-9900-189bf5a98140", "value": "768:I8w/h62/jWs6oS+xISN0vRnVuV0XdkfScBYrwz2y8kTAlGB:I9l/AoSSMdTusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854668, "uuid": "5f4fcc46-f049-4973-9718-dd175382de44", "value": 70553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854668, "uuid": "40572a60-73c2-4a9a-aabe-8d8e4c39634c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854668, "uuid": "86ed2886-595b-4348-b92b-18efa6a3b202", "value": "invoice-1645080830.pdf (70).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ee2b02f-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861732, "uuid": "c30019a6-8c57-43ae-9a43-108704c2715c", "comment": "Malware payload (Mirai)", "value": "ee932b2ab9c2bf32ad30debffe77b40f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861732, "uuid": "d6f45719-a3a2-40f8-9001-36ebf8ecd1be", "comment": "Malware payload (Mirai)", "value": "a86817d66fae37ebca1532c44fa04f0fd724469c56a8ce179352ab36f1150fb0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861732, "uuid": "32b02efb-6814-4ea9-b5e8-c08459761305", "comment": "Malware payload (Mirai)", "value": "bee9ab055b24580d6cb169b631f59a884dd8c47c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861732, "uuid": "ea4220cc-3853-4689-9b54-d5f7cedd8b85", "comment": "Malware payload (Mirai)", "value": "6cda1fab183c0ea52b25f2c360d5dacf2f3186ba049cf486cb4bf8a845e16c02c45e5b3279b329680be978d84396221b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861732, "uuid": "2b893a03-32d9-4ea2-b271-6faebdceaabf", "value": "T117E33A02771C0A43D2632EF43A3F27E0D3EFDA9124E4F644251F9A8A91B6D365586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861732, "uuid": "61b1d982-6b64-4b5f-a9b5-e3dfa78092b8", "value": "1536:0Buw8OdjB76iyT3EyLTpfkg7oZxFDJqHeAftxsxwbwDfmfvC1vAcwRbiZJoeGqkP:0Buz3iK9MgixNJ5Ajz8DKv9cIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861732, "uuid": "986ecb3c-4acd-421e-9636-c979b949e638", "value": 153396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861732, "uuid": "55312613-6222-4262-9a65-13f65cd7e94e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861732, "uuid": "98857e71-2541-4ffe-a378-a10ef797862e", "value": "miraint.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1492c14f-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859353, "uuid": "485968d0-683a-42a7-8fb4-af7876b2613c", "comment": "Malware payload (Mirai)", "value": "a7a750afcfa5879f694d2e9895d543b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859353, "uuid": "7a451b62-cbf6-4bac-928e-c5dfb0a91167", "comment": "Malware payload (Mirai)", "value": "a8d3d872c411453914f05b9170d109e6cd5c0cd4d55eca70a2504978eeda7c54", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859353, "uuid": "9e44d26d-d7df-44eb-ae98-0d5c922a9c94", "comment": "Malware payload (Mirai)", "value": "58cc8ce1da3afdb34ef8a206aa28bce3f56a4340", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859353, "uuid": "344b336e-ca19-4e7f-b32d-e5ce18ba55e9", "comment": "Malware payload (Mirai)", "value": "3b0908edf8c359c3a83b78c0d0d1dc78ef3ec120f83bfe304a6ba07d6f31961500bb792fb3f9140413e16c8208f64391", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859353, "uuid": "5c9d7709-28ae-4c8b-9c7f-0899dacadfdf", "value": "T12A24C61AAF610EFBDCABDD3706E9070129CC641B22A83B357974D528F54B64B4AD3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859353, "uuid": "eb7e4ac7-d891-462c-a282-a5ba7f186afa", "value": "3072:5xs65RQfgj5FREhiIfzV2Exf9K150OzRqdwvfkw:5xs65VjXREE+zlfg15B3Hk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859353, "uuid": "0785a96f-f9c2-49ce-832c-1feaf4b7b8a7", "value": 222740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859353, "uuid": "0737828f-8485-46e6-9a0e-0a39b1defb90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859353, "uuid": "8d9659b4-fb9e-4663-a50c-ae8bb4d82840", "value": "mirai.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc71984e-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854910, "uuid": "80bb8651-c058-4fda-b1c6-4cef27a193dc", "comment": "Malware payload", "value": "fef204e24f6d1f4fbe109eb2364ea3dd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854910, "uuid": "7551bf24-6b1b-4605-b8a5-e3de4f07043d", "comment": "Malware payload", "value": "a971cfc4e6af8734e76ec7e2c8c3822a530c987ec9d111a9bed962b9b4c866f0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854910, "uuid": "0dc2182f-9fc3-4832-a629-b345ad6c0c71", "comment": "Malware payload", "value": "5ca45f2fe73c9dec88098d62b03bad9c92c278a4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854910, "uuid": "51f9a44b-1c30-4c7b-a1d3-74eb04aedf5d", "comment": "Malware payload", "value": "5f29d3bca7878f94a3e1d6f18a74ac27c68778bb1bc099e33062b2820f0866cc4e0c98837a30f3e850d37d1a9dbd91b6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854910, "uuid": "b2c319bb-16e5-4a97-84b0-73bce864c8bc", "value": "T19D7309924E52E84E381AB9637CE660FF00F99CD65413B8EF6CB5DF4288E1D039E50AD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854910, "uuid": "fb90d043-dcc2-45dd-b446-3dab987074be", "value": "1536:I9l/AoSSMYZVRq+ytFwgAehz9zPJUYrdZC/kCW579kTjIRfSj+48qQK+9r0qo4XW:I9l/5M/HusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854910, "uuid": "3270923c-836d-4927-aa87-8e7762fc315f", "value": 73469, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854910, "uuid": "06654ca6-d60e-4868-b55f-5082d1a3b8ee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854910, "uuid": "c1b7dcf1-3172-4227-8def-f25dab6cc41e", "value": "invoice-1645080830.pdf (15).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1f3db3-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823452, "uuid": "3f9f0bb9-9916-45cf-b548-9d967bc5025f", "comment": "Malware payload (Mirai)", "value": "1b30966a222806acb8316ea05c257cbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823452, "uuid": "91aac7d4-8901-4976-8006-08188719a04b", "comment": "Malware payload (Mirai)", "value": "aa20b1b3c649d416790104eba8c35ec8cbb7b922da16425a654924384094e05f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823452, "uuid": "31307320-f9a3-40c8-a920-e49aa0ff121a", "comment": "Malware payload (Mirai)", "value": "83fca1bf4178397a83e8a7bad666ab7de4aba3f7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823452, "uuid": "0230956f-f58c-44a7-adb5-0c0f4259069e", "comment": "Malware payload (Mirai)", "value": "f25971bd0847e7ed7d692afff085ce21ffd5cf4b91a01ac56f3371a392d03f63f29aa273834a9fa6f76a52f48e3ea049", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823452, "uuid": "4849f0be-617b-4c37-bd82-2495cbbae7b9", "value": "T1BC14EA46BD518F23C6C311FAFB9F429C772667A8D6EB3102DD157FA437864DA093A201", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823452, "uuid": "3743cde8-e712-4cca-bcfc-beedc59ea636", "value": "3072:pimS/z//o55nnTAHfWfib62OKTEADIN6kPLUrF6ZkgwJJgjj27nG6gPL:fMzXInk+6e27TdDIN6ILDkxzgjjFPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823452, "uuid": "979b320a-3d45-49bb-b411-9d99b5a9589b", "value": 205404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823452, "uuid": "e122e453-b8a5-40cc-b908-a8a4c8c82902", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823452, "uuid": "a95b735f-b34f-4872-b31f-6f4025381f06", "value": "bin.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e10bc63-e37e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879340, "uuid": "2ae8ba77-9cd2-4157-9b90-74e625e22c8b", "comment": "Malware payload (Mirai)", "value": "11f8b814d37901169ed9fe8ad7b02b78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879340, "uuid": "293e0a29-9cdf-4d0d-b030-df8d07bc6731", "comment": "Malware payload (Mirai)", "value": "ab4e751d1b6b2e6f3297eb3d0b6f94ba73a72bec70b56ec9cfe06cdb75e01a8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879340, "uuid": "5032b605-edb3-430c-96d0-a36a034372bd", "comment": "Malware payload (Mirai)", "value": "11433ae995bef19bfb5095e9397166e687f9e5b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879340, "uuid": "388385a0-57b2-41ad-b9ad-a388accf8968", "comment": "Malware payload (Mirai)", "value": "7e114c7b4c6bd3ad7e6113693636a841f0b4d8a1b29d24aefce99071416813811e9657ceec714bc2e353113ef792fac2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879340, "uuid": "25b70fee-94fd-494b-abcf-20613a3a4c6e", "value": "T1BDA3C60A6E22CF6DF768873547B78E31979837C227E5C645D16CEA005D6034E682FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879340, "uuid": "fee67bda-5265-4e5c-995b-3b96919baa7f", "value": "1536:Jz22Rm8+ZMpTCg32KokwhvCGEiGKYiGGm2K7yAVzo7S4x24buh7Ry:UMl+Crox4VzQs4buh8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879340, "uuid": "3b00ea68-ce31-4794-9675-c403407658e1", "value": 98884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879340, "uuid": "2d1222f9-376a-4939-9ad4-e44a99b52c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879340, "uuid": "d3f3c628-aab3-4361-936b-0c25681cff18", "value": "jklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da0a5986-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854959, "uuid": "83d2f6d9-4040-496d-a694-330b1583f4a7", "comment": "Malware payload", "value": "2cfb5f2f5aad99e85679da60e2fadeb9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854959, "uuid": "4d40d943-627a-41cc-8a36-43840ab7a7bc", "comment": "Malware payload", "value": "aba0c34ddd5afb95a3c463b32c051ddce20bf634441eb740e6313ba50e721617", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854959, "uuid": "c7b1b6c8-b948-4ef5-be1e-ca1e4da5b685", "comment": "Malware payload", "value": "8fd180301a4f4d9c25a1148c3e0ffdecb3f4b26d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854959, "uuid": "9d894818-c165-4edd-8b49-05a9c6c40c46", "comment": "Malware payload", "value": "806e51415cc0d98c3d56544ce3cef3c00d25e8e68386f5bf9e7cf494664060a2984b14ccafaba49af1a0f59c82623d5d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854959, "uuid": "7bf1318c-2603-4cd0-b720-6d56c6677fe6", "value": "T1E1633B3A0BC59EF42D9322439DA2E1D59EAC93D451930C9ECA1FE7D390098A73467CDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854959, "uuid": "ddeba475-70c3-416c-9ab1-aa7bbb313680", "value": "768:I8w/h62/jWs6oS+xISN0vLyNAn6j1jKEdBYxwLA5lbjEIP8YX0wT+FDxKzQZ1io9:I9l/AoSSMzeWusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854959, "uuid": "411798cd-5e0a-4fd1-9776-7c1f801c5593", "value": 72523, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854959, "uuid": "92c04a5a-c11f-4ecb-aaa3-15568c78e009", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854959, "uuid": "1ed4b634-c4d9-4202-90bc-d528d90e9c2e", "value": "invoice-1645080830.pdf (5).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8081f75-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865210, "uuid": "4a19cf9b-29b6-48ff-8cff-981e56762981", "comment": "Malware payload (Mirai)", "value": "8020415109a55105915e15d82e763674", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865210, "uuid": "a1437355-fde2-40b7-8367-708ca3d7d8e7", "comment": "Malware payload (Mirai)", "value": "aba2f50aa7790f73e18ed57840e91796ed08f83ea2a1313147d428cf5fe418bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865210, "uuid": "50749ac5-3c0c-46b6-817b-d98ac72b5d5a", "comment": "Malware payload (Mirai)", "value": "90be99670d4e6a9b2d4078df1665f81fca385c62", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865210, "uuid": "43c78762-f18f-4730-96f0-dd0faefac1a1", "comment": "Malware payload (Mirai)", "value": "0002f5fd711b45f3be0c7b97a7d2cde6e01691de2c108c17a612f37bc3aa13993c621d9ca3e5bd422ea4f5eedbeacecb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865210, "uuid": "2189a223-1dac-42a6-a012-21d0fce2868c", "value": "T125F32945FC918A13C6D562B7FB5E418D372627A8D3EE32039C256F21378A95F0E7B602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865210, "uuid": "6e45ff68-0032-4e96-9afa-b96295fa7323", "value": "3072:cHElPKP/uFgaojZei79BZ9av/o8phR4PcFBqK7q07Imjr6VR/:cklPZjINx6QMhR40Fcn0bjr6VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865210, "uuid": "6eba9ed9-6de8-4c9b-993b-e3153b61c09d", "value": 172032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865210, "uuid": "ad5d2941-1074-42df-99fb-c2cb1068df67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865210, "uuid": "fc8035f6-7433-42c6-a200-2c09f91e2d22", "value": "mirai.arm5n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d0d66f1-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825651, "uuid": "4717eecc-c13d-4c0d-b62f-60d06ee26921", "comment": "Malware payload", "value": "abb887e7e22e7788a07bfcd07aa578ee", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825651, "uuid": "b3fdd106-e546-40d4-b21d-b45c70ad4f90", "comment": "Malware payload", "value": "ac7a6aec9febbcc47003e55933d476d752a9856b6a31d1fbcd218d9642eaee22", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825651, "uuid": "613a1b15-f710-4a21-a7d6-3d612c476034", "comment": "Malware payload", "value": "40d4470e2553c7afc0cbfe1f1c1e5142e715bcd2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825651, "uuid": "df7527c0-86ce-4d48-b962-79aa0eb5f485", "comment": "Malware payload", "value": "2ecef3c13feb832986042ae2e881af8320a55cf8453e3c61cc9e16b7287ba73a22d289cec5ed36f946a201c6a527134a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825651, "uuid": "640b239b-62a5-4311-9d62-3cc89f3e2656", "value": "T19C733A476FBCFB165BBC6BD4290503A4C5A0BB1402E610B6E9B5221FD8E2B34753AB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825651, "uuid": "0da34fc6-8d76-46a8-984b-39260a66f75c", "value": "1536:I9l/AoSSMfFhzRa2TFEgWAJT+alBpSNnqfxuUt5oZ5lN9iDkDan3DauA6oOn8oFn:I9l/5MfFhzRa2TFEgWAJT+alBpSNnqfp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825651, "uuid": "dcd8e06e-4fc8-4b1a-8bda-2f889fcabeff", "value": 75377, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825651, "uuid": "36ccf192-e445-4a01-af15-cd7d882147d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825651, "uuid": "9c75dcdd-8357-4f93-9083-94eb4e954563", "value": "invoice-1645080830.pdf (10).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ecbc590-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823453, "uuid": "e9f6d116-b263-4a6c-a86f-710ceffd4232", "comment": "Malware payload (Mirai)", "value": "69dbf744b914b4e73c716fec352f3c27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823453, "uuid": "cdc2c5ab-fcd8-4769-8cd9-085f05bcdb1f", "comment": "Malware payload (Mirai)", "value": "acabcda6009ebede699bf0345534393b98e4c9148fdb8ccbebc7222b84cf4339", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823453, "uuid": "8c02f27d-659e-46e1-a0eb-8c1291b1cef8", "comment": "Malware payload (Mirai)", "value": "584d8cddb97a1b6f70a5bc736db8e82f703550e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823453, "uuid": "f890f8a5-7d79-47f6-b670-8f12bd4ccc31", "comment": "Malware payload (Mirai)", "value": "d66c2fcbf260570945b93b9d48def44d221b7d9d0077044e38c845447bde0e46524eabc79a27650e28b73246b645d795", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823453, "uuid": "3c16e7d2-aeef-43fd-8604-2646fc4c6e60", "value": "T16C343B87F900DF7EFC07A2B244674915B130BF6A18620677F122BCE6EE390D5196BE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823453, "uuid": "b72397c9-95b8-4b81-a1df-32a4ba8b6b9d", "value": "3072:jokxoodmgTijXVVxRTL7JL4y5aRnQgP6CTzrOifgWAzqVdjbidL/uWQlpAtSe:jok2WqLrqy5CnQgRTHfJAz1LWXAtSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823453, "uuid": "93378671-975e-489b-96fe-43c537f26c38", "value": 232184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823453, "uuid": "ff5b3c81-f47e-48ad-9c4b-bcd8595f4908", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823453, "uuid": "00124279-fd2f-427b-bbc7-1d0a45af0527", "value": "bin.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dde8e30e-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825331, "uuid": "d3eada0a-00cc-4124-a245-9eaa4da927a3", "comment": "Malware payload", "value": "6ae4d5603c0dc2ba8b61a11deae97e38", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825331, "uuid": "23375e43-fb14-48b8-a3d8-abc1c5e70649", "comment": "Malware payload", "value": "ace9183d9e8bbb4a2be1b20bc937edc64210ddabd3585098bd0cbfcea7925edc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825331, "uuid": "b4813181-7428-4cd2-bb40-12a85814da60", "comment": "Malware payload", "value": "a89f6581c91655768ce83118d831264c36172093", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825331, "uuid": "8d294f6f-2b77-4b0f-b051-1c2b3b74ca5b", "comment": "Malware payload", "value": "98cf30b56cabd6d182138984ec90314d2b423863cca07a43e00f4248daeda9884a4254d643f30dce0bf3bd9718f533ae", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825331, "uuid": "211e8ffb-79db-405d-bf5e-5a6061c1e973", "value": "T11D632BDD6357B67C623652208BD046971660F8E0F9EF079072452826F3EFFA8950EAF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825331, "uuid": "5b408719-6b54-4f55-9dc3-4c2379fafcd6", "value": "1536:I9l/AoSSMGSZl4+M9KinKdRcBS26I5Zb7BFcg86rTSNkvN5y96TmsPukSLHwrNux:I9l/5MjKusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825331, "uuid": "63b8a29b-8748-4c70-8b31-afbf89364f7d", "value": 70605, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825331, "uuid": "bae25fb2-3429-4e59-9627-f09248171b0d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825331, "uuid": "acf8ccda-f8ed-4a6c-b1c5-90762fa542f8", "value": "invoice-1645080830.pdf (84).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f93279-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873800, "uuid": "07cc9099-4043-466c-8369-2dff1fc7f90b", "comment": "Malware payload (Mirai)", "value": "83f55f621d5374db04b27939ea1bc3e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873800, "uuid": "1ad034b4-b1fa-485e-b5d8-499f1178eacc", "comment": "Malware payload (Mirai)", "value": "acfc1c72df1ddb40c4c1467dbbbbdee1f57705c78601c0693089cd1ceb82ccc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873800, "uuid": "97d34545-5bc8-4f02-96ce-d965067f7666", "comment": "Malware payload (Mirai)", "value": "8a9d3321637994ce00001970a8227f51fa664a9e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873800, "uuid": "722615d7-e6a0-45c7-be21-22c517216c8c", "comment": "Malware payload (Mirai)", "value": "8f6270eec7f7046f38686a7cc71297a9df8bdc3d366ffdfe89b3be298cf56dcea489768b434d2c1afeb5d9bcb2ca61f3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873800, "uuid": "577a973c-0a4c-44bb-ba08-2cfc6a309360", "value": "T13793289AF9818B11D4C1127AFA1E164E371307B8E3DE72279E24AF3037C656B0E7B855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873800, "uuid": "4f623f45-2188-48fa-bac3-b52041d487a4", "value": "1536:D4n7TGi7Ev6NCcXlGzXr/EniEj2saRNrSctIpigVmTaIBy7kU5G7wPYtr:AykNCazj2saRuVmTaIkIUmG0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873800, "uuid": "5e22d678-2d81-4e86-b57d-3bd727dee1dc", "value": 95752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873800, "uuid": "23372940-27e3-49e1-ae02-7daaaeb2e86f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873800, "uuid": "0e2abeb6-97a8-4f21-bc53-8f9000bb68b1", "value": "ub8ehJSePAfc9FYqZIT6.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "149ab802-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854628, "uuid": "3734035d-c913-4b39-84f2-9db237ae5a08", "comment": "Malware payload", "value": "4edb7beafaf7bbd8e5fee91ddba5c090", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854628, "uuid": "d067f8cc-8428-46ea-b54f-1b7351ad1825", "comment": "Malware payload", "value": "ad212ccb62082ce7dd574427ca1794b3631afed75eba95e633f210a3cebb10c6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854628, "uuid": "f9fccbcb-13af-430b-8ac1-9a45a57eca07", "comment": "Malware payload", "value": "d835ffcefc637b482abc08577d92170ccbd6dabc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854628, "uuid": "1d874216-1a61-4863-9321-9ab5eb401dde", "comment": "Malware payload", "value": "70ba3b01ddea0828b279ce64eefb41e41f94e96f2c4f69f1797dcc67f2294dc72a7418990c5ee260cfa96023babb5281", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854628, "uuid": "92dc60d3-8d2d-449f-ab3f-01269b47ed27", "value": "T176732A07EC52F9E3662AB040B3D8C159CDB4E61BA0F6F3E3E963465CFA0A5C27552702", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854628, "uuid": "bcf8ae3f-f1ca-49b9-8cfb-6b9c487d0eeb", "value": "1536:I9l/AoSSMuTwFrunZk9F+f7TLFHm/iqomLHN/OMQ8HJQs7AdNDDcZD/AQfDQMAYK:I9l/5MNJusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854628, "uuid": "6efd8ee2-bddf-447c-8646-da38e235cc0c", "value": 76343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854628, "uuid": "94578b4f-9881-4416-b757-e0670601af36", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854628, "uuid": "a87616ce-5ff0-4c48-8b75-f80e7bf4d607", "value": "invoice-1645080830.pdf (76).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e65572a3-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825345, "uuid": "8314168b-37dc-4630-b03c-2d418b570626", "comment": "Malware payload", "value": "c991d0ed7f08f45fa88206c336f7fb31", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825345, "uuid": "27a91d2d-5e90-4a78-a56c-0a00f480ad14", "comment": "Malware payload", "value": "ad3506907938e7b3eef738443828961688a5662f1d555615e54a44dd16eb0445", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825345, "uuid": "75b8ec06-498d-49a4-967a-72c1712c411b", "comment": "Malware payload", "value": "a94c2ea221c34ee73ecaab168666a5be22c38137", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825345, "uuid": "90c20007-9b29-4463-87da-2b7b0e531c05", "comment": "Malware payload", "value": "0f6583a33b7f36dcd27d02d53a1ac1ea3803a28b409eeb183268d09d95011a484094300fa97297e2485172baadf41663", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825345, "uuid": "3e5135b6-ed28-4215-b3ac-c3a6fc830268", "value": "T180631AB19D0122B72CFEAABFE88F82E57C64209FCD0994095B863737055FAD2B01D4B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825345, "uuid": "eac2c9c4-bde5-47e4-9084-d1b8b7b79adb", "value": "768:I8w/h62/jWs6oS+xISN0vIh52LJ4IwYwd5RJ+0BTL5TdSw5SXZI51ibo/NTx6Rrp:I9l/AoSSMSVZrvprusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825345, "uuid": "658f729e-f1ea-4e80-854f-a4763a3023da", "value": 69656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825345, "uuid": "6f76e324-8e0f-4433-b4bc-d3335f37262d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825345, "uuid": "8dfdc82b-4798-4555-9137-bc8fc5d0c037", "value": "invoice-1645080830.pdf (77).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f9a7e49-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870323, "uuid": "1706f550-0796-43d2-b066-dbe6427c6ef8", "comment": "Malware payload (Mirai)", "value": "762315f43fbc91380801c4b69c79096e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870323, "uuid": "d7570f3d-3170-4944-8990-5b2fe606694c", "comment": "Malware payload (Mirai)", "value": "ad45604bd066963ea096d052e0431abe206517a6b7958d1d2060f8aa5c3e8b9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870323, "uuid": "6d3972cc-a895-47ba-8c51-61fc3a20a538", "comment": "Malware payload (Mirai)", "value": "cacb50e7025734296f8848bf7a27f5fedaea1dc2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870323, "uuid": "715196d1-dc75-4c02-be5c-f098e316c5e4", "comment": "Malware payload (Mirai)", "value": "151dbb1c1124969d216f9fa0bca2f94861ec6f12b8ab03c1e5d0d22be6e3fceed60d1a1e33030eef79ae6ba447eb6c55", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870323, "uuid": "17fd2b00-af8e-4a73-b1da-a287eb949791", "value": "T1ADA2DF4CB7093DF6ED7856FD121D98A9B200F8D2B64887914319C145A1FA38C3126EEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870323, "uuid": "31fd3201-0f70-415a-bcc4-9de34cdc2ea4", "value": "384:M+Qx+Sp0r3xUdnuRJNVHpvIjUBIRN2o2lZC0He+GNzIfI5JY/HDe7AFR9qVowZX0:cx+SuBU0RJNVGoSRNefCWzGyfI5WP95R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870323, "uuid": "736b139b-ef1d-4bf2-8ab6-10c2df090dba", "value": 21320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870323, "uuid": "8c6aae74-5640-4c22-8b40-b222f72002c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870323, "uuid": "5465d55a-20d5-452e-aca9-1608b942d252", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb4748f7-e2c1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766798322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798322, "uuid": "a1a7aa6b-a2b1-4bd9-bd58-6c5b81821402", "comment": "Malware payload (Mirai)", "value": "5de4b2298aaa3083b9fccb75d14b0455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798322, "uuid": "a8bc95da-eb58-4411-9d18-816e8de343ec", "comment": "Malware payload (Mirai)", "value": "ada01205d3d8c266eddb42fd6195a43c7c6241d0b59e98db78f086ec0501fa0c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798322, "uuid": "a6770354-c56e-4916-8450-237ec78b12a8", "comment": "Malware payload (Mirai)", "value": "24a8e9ba285305039871778e1b0d1bc2ada12fb9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766798322, "uuid": "b90b561a-d9a2-4452-b7bf-390ea06de25b", "comment": "Malware payload (Mirai)", "value": "d070588269c2c5734c0ac6cc0cea357829c02f4ea45df9caaa4320645985db7f38e58c9e74f856db76800f0f0ed2dbe0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798322, "uuid": "f73fec2c-1a92-4cee-89af-9edf6e53e1c5", "value": "T1D1232A91B8819A13C5E423BAF66E41CD332623B8E1EF7217DD225F11778982F0DB7645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798322, "uuid": "a8375966-075d-4f85-844a-5d811d3dd8f1", "value": "768:J/9Bp3RW4zp5Ycn0l1ReG1+6uw9BYCnSHNIG6M3hM8GNFjmkSo:1PpBWN1Rel6JoCnSWvGN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766798322, "uuid": "c94e3d34-21e9-43da-b80d-06def588772d", "value": 47976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766798322, "uuid": "ddc18085-2bd3-487d-bd4f-65cc1475f05d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766798322, "uuid": "21986e21-76b4-42a6-a1b2-00aa5d6812bf", "value": "zerarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "909ac396-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830784, "uuid": "88f05b0b-445a-455a-85e0-16a31f34e1c1", "comment": "Malware payload", "value": "78ce9b6077818b6a808b1446a1b8e5e7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830784, "uuid": "9de276d7-f439-4ccb-a0d2-be4af5c058f9", "comment": "Malware payload", "value": "ada17181c70a9f82e16e2beebfc3ee3cb339b12748e68efe7537c533250647bd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830784, "uuid": "b4d51944-d3e4-4202-9e5c-dff0fbd7dbc9", "comment": "Malware payload", "value": "a05b6dbf70100deae3bbdba1086fdd66692dc2a1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830784, "uuid": "72743670-d1c1-4dfb-8c54-cb17eee6b46b", "comment": "Malware payload", "value": "0d67a678bcde7e2a96bd2727d75719c3ceeea0bad5eb239e3bf7333b5c0fad4bb49719fd43db15160093c9bd13b09913", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830784, "uuid": "3dbc760f-420b-478e-8e50-786d72a9e038", "value": "T165631A1D1209998BFCFA6A870E4179EB14619C6D8EA43E6C5BA7E00179DFF2D6C001DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830784, "uuid": "47302eeb-aef9-4aec-b073-a258de22752c", "value": "1536:I9l/AoSSM8ojyWU/c6kK077wF8x5tTRM8yFvXOjeOK5P+xlLVo0LomEFeD2Al/2C:I9l/5MOdusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830784, "uuid": "4f6a0200-072d-475f-89dd-0076e5dd4b00", "value": 72493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830784, "uuid": "15d6e64a-a7b1-4c92-a7cc-e93e99e0915b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830784, "uuid": "89df9be0-83a5-4b0f-ab53-0aa97da01feb", "value": "invoice-1645080830.pdf (27).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea857144-e303-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766826640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826640, "uuid": "9ff33b21-0d89-407f-907e-9ce5bbdc19f1", "comment": "Malware payload", "value": "4304cbd286b1f040424b2d623249f311", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826640, "uuid": "76cae1b3-0097-458a-8384-d90c9918e05a", "comment": "Malware payload", "value": "adec2bf3cdf2ad11ab9174611cfced67ba28a63a8c61ffb7fb88c4670e9e7377", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826640, "uuid": "2bd97dbf-a57c-4263-bd9d-997a9092c960", "comment": "Malware payload", "value": "53035b5d18372e33589eb86c98b851413a0d6d80", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766826640, "uuid": "e1d2bbf1-48c8-4c72-ad34-50afd61279e7", "comment": "Malware payload", "value": "5aff775a3295e5fba0b9513fbb7971b824f22c8aac8f8ee2ec71409fbda185f511542a37847f5dd9d74bac798615e0db", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826640, "uuid": "eb287efc-853b-45c2-8198-5b54110d5b12", "value": "T1D512F8BA71C002F666A74C46D1D38A7C8C169FE06273CDB7D9844EB799F04086F5D792", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826640, "uuid": "b98725d5-2a93-480d-9f5e-cd000571f164", "value": "96:Ax0iRoLngDa35y5YLOJsfZqIn2UeC6/ZZ8o++z:g0goLngc2CQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766826640, "uuid": "df574bb6-f67c-40fe-a5ca-7aaf6d1afc9c", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766826640, "uuid": "789e22d9-7305-4631-a80e-1e05aa9408ef", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766826640, "uuid": "be0eb178-54ee-4ac0-8bb3-11a44838542f", "value": "rondo.aqu.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b96d23ea-e35d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766865213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865213, "uuid": "b35b2e8f-b857-44ad-b8cc-9de535b821e9", "comment": "Malware payload (Mirai)", "value": "dff1765d08ffe4661b92176c8cb12e78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865213, "uuid": "106ff304-275d-4f09-b4ac-88617d50668c", "comment": "Malware payload (Mirai)", "value": "adf5568f31a414bc681677f71c6db0f5b842f3b173bc32c39d3ecd68bac3980b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865213, "uuid": "4a459210-9eee-49f4-b6a1-6c2f06fc94f0", "comment": "Malware payload (Mirai)", "value": "76c472d81e91c8c1ec748c31e2a13c1e70cef631", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766865213, "uuid": "0e207931-dde5-447b-9ed9-1e50ee8f6c08", "comment": "Malware payload (Mirai)", "value": "53f803df5858689a58eb30672e614ed0c6f6626f958a552fb639e84ac1389925a0a2219564094013c12c2b293c114de8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865213, "uuid": "81cd647b-0769-48e3-b9d9-effb2f0c6cea", "value": "T10F833B86E000CE7CFC4A977B84570F05F524B3555F920F77A66AFDA3AAB20944D2AD83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865213, "uuid": "b092989d-519b-461d-b993-02f5c61ca7f4", "value": "1536:eaGTBI7Bahmg0kE8WItVRHXYhzCJwKEx18uZb6PbxNZ0LsRrywHLETPa:eaGTBpE8WIRIQJT4JbGNCLsRrprb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766865213, "uuid": "21fc2211-c29a-457a-aaba-4811492836ac", "value": 83168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766865213, "uuid": "cf0c7907-3bc5-4e74-a20c-10826a4c279a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766865213, "uuid": "999e5324-79db-40a3-8dd6-77b0ff272a2e", "value": "jklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3477a2fe-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854682, "uuid": "32a90fd7-5beb-48bd-960d-cf6d6397ffba", "comment": "Malware payload", "value": "f7a81b10abcc306bd0e1a7ff77a2dc35", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854682, "uuid": "08a9feb8-4b8c-46b8-9f0d-0e673238a537", "comment": "Malware payload", "value": "ae4876a9d28c3e4f247d0e2c028802d7b77617caf747102dfbb3374c36df23a2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854682, "uuid": "0b4cb559-04fc-422c-aeb0-540cf7f2a125", "comment": "Malware payload", "value": "a6bc5b6f4a2391fcfef14fd5f427d90d2a67e8c4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854682, "uuid": "d68b3ad3-a8e6-4466-949a-8e125e877d8c", "comment": "Malware payload", "value": "eb703b70ec96eba416602d34e83d97fb4317b73128b2735d2d6a327a8c572f0c9b7859cbf83603be442ffa8dbdaa15e9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854682, "uuid": "c256019c-5778-4a45-aca3-430edf9ee144", "value": "T1FB73D8DF5533842C475EE18CF30644DF9A4ACA6AA0C7E13C68D78E8514C4BDA2277A6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854682, "uuid": "e09cca45-7134-4ef7-9184-954167c03490", "value": "768:I8w/h62/jWs6oS+xISN0vqij1fhdkfScBYrwz2y8kTAlGB:I9l/AoSSMdnusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854682, "uuid": "2e23cb7a-7f5a-4fc2-8f86-acdc65b7d530", "value": 73458, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854682, "uuid": "987f282f-76f4-4ba8-a364-c4ad133431c3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854682, "uuid": "35351f7f-d009-447e-b595-a0567ad050cf", "value": "invoice-1645080830.pdf (64).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180493d0-e36f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766872673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872673, "uuid": "1b5400d6-e922-4a55-9083-cb8777ddca58", "comment": "Malware payload (Mirai)", "value": "253bd48f495f36ec838954198d9990c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872673, "uuid": "79cf3cfb-34ef-4c76-8015-eb8496124900", "comment": "Malware payload (Mirai)", "value": "aeec2dc2fe8d3ad6072eb511b4c4532b630b9d8f30624bcb0531fa9b45936eff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872673, "uuid": "ce246a9e-db02-48c7-a436-946a51db63fa", "comment": "Malware payload (Mirai)", "value": "4f70b426a156ef34c54e5846e0a102f8d4cb6286", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872673, "uuid": "c3dcbb44-216b-46bb-80c0-adbf4ece8ca5", "comment": "Malware payload (Mirai)", "value": "0fd86cfec01e40e3e37ba150d40b362e3a9ba3f6204e3d632da5bd7bbc38caa47bb0098519c980b4a97a36355092a152", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872673, "uuid": "7f3fee14-9a95-4fdf-8dab-34b865340a7c", "value": "T1C5630886B981CB15D6C556BAFE0E518D331317B8E2EF73139E14AF246B8B46B0E3B405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872673, "uuid": "abe9cd77-6026-4459-b82d-7799ca5b851a", "value": "1536:GdnuiZqdMaANsYL3JGtdKDxYOe3BMziY0gOSyWODR7kNYatuJ7Rf:li4dsb3YtdKGy0gOSyWODRANntuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766872673, "uuid": "84a04ed8-622a-4a33-8f54-fd30fc5624d5", "value": 66732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766872673, "uuid": "e0aeb930-1975-4c7a-b25a-4fe5534a812e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872673, "uuid": "04fb8b9f-423a-4354-8004-1c092d2f4b0b", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9fc6bff-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825297, "uuid": "85cd655e-add8-4a3c-983e-fdf5bc72f320", "comment": "Malware payload", "value": "59c8659118f5d4ad42c3878b80197c87", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825297, "uuid": "bba84fbb-1185-4aaa-bb27-6e6e4a6fd849", "comment": "Malware payload", "value": "aef9d765a49f9291029b8dd6d14f597be9325c370a50d06da308deecadb52428", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825297, "uuid": "e04635c3-1a75-4d05-a0f1-d5aa25bacb5e", "comment": "Malware payload", "value": "aab2cd49414c2fba703c01ca016b82757c30be30", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825297, "uuid": "8cbf07f9-fd47-4fce-ba2a-96faadea8876", "comment": "Malware payload", "value": "c07d04c88a0766017039329094509fc4c18f18100c7512ae79a22f10d7678952976c0cb2ae15a3c22ee6d70e981e8aa0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825297, "uuid": "79a56783-cd4c-4504-9a1c-7ca01937df9e", "value": "T152633BEDFEF4D09C7803EA17CDBC04564C0BCD7D86A5A4394BAB386345A5884AFA51BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825297, "uuid": "1db43359-675b-4ecf-a303-c41be320e8a9", "value": "768:I8w/h62/jWs6oS+xISN0vtZOkV0LkDBvUkk6VU9UxZoHwr9Rb9N7MWiuvLRrGx0A:I9l/AoSSMCYusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825297, "uuid": "d05d46e6-c1a5-4487-b108-ccd32863d908", "value": 72483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825297, "uuid": "c62c37ab-bb9d-455c-979a-fc54ff74cf8b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825297, "uuid": "1d091be4-3b65-4455-8a8f-1957e4256362", "value": "invoice-1645080830.pdf (89).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "905bbc6b-e34c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766857842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857842, "uuid": "2dc9fe6b-4c32-4c03-9062-82c8e7d6c268", "comment": "Malware payload (Mirai)", "value": "f7f115c8d3b28f46c867a35d17aa1395", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857842, "uuid": "c9495404-7290-411b-8228-996a29a1cc0c", "comment": "Malware payload (Mirai)", "value": "b07369e07e6224461212eb2468fd2795b4649f718f2ef082aa598e08fe23e3b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857842, "uuid": "3385c336-cca2-4201-95f6-058d613f7c59", "comment": "Malware payload (Mirai)", "value": "49e5855db3cd6ead3430547e0b689693970e57ba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766857842, "uuid": "dcd481d3-eeae-4be8-9209-bc905504a7d2", "comment": "Malware payload (Mirai)", "value": "42a55bd9380a582044faa95ef34edc8c6685a703265ec854429ee9639fca6a8b0a4d85963246b5deacec5877e010b72b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857842, "uuid": "2e5f7ca7-9017-4e70-9899-062498f096eb", "value": "T1DB34DA0E6F228F7DFBA8877447B78E24975923D622D2D584E1ACD2011E2025E741FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857842, "uuid": "9fa8f7de-19ba-41de-ae08-a2f1aee345c9", "value": "6144:gEsNK5FybkaUK8DsSFPy7mMZGKbY2f5vs+:gm35funs+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766857842, "uuid": "7b8e779d-bd24-4011-a16f-e542556a7ab2", "value": 248516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766857842, "uuid": "77501e89-4009-415c-9180-e24485cfa4f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766857842, "uuid": "a24117c5-7541-4fe6-a654-2416cc83c273", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b2c4ee-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858143, "uuid": "d30f1c19-bbf9-49bd-8434-59a12d718eda", "comment": "Malware payload (Mirai)", "value": "539832c1a7fae6bfb601fe9ad93730cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858143, "uuid": "3d122ac0-5039-4a5a-8fc0-9c56a60c1b77", "comment": "Malware payload (Mirai)", "value": "b07834dd5e4724cb4364ffb90e24ce93958ef3c04e3761a117705e35cec33bd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858143, "uuid": "1bad8d74-35c3-4620-ae8e-bc74a02630d9", "comment": "Malware payload (Mirai)", "value": "cd14100d422d0ee55bb82c853447b456906a0c43", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858143, "uuid": "31bb1119-a130-4e7b-94b6-fc8a97610c9e", "comment": "Malware payload (Mirai)", "value": "7eb6ec106ef0a0881944c0745dd7a3168069b64722ce031dca0885f5146592ddca5d08cd748107f839cc613ae44019d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858143, "uuid": "1a4b218d-4acb-4614-b9a7-c3dd0ecc436c", "value": "T185043946ED418F11C5D622FAFAAF414833136BB9E3FA7102DD245F6023C6A9F0BB6552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858143, "uuid": "1102c42f-0b77-4e80-b571-1c62db584822", "value": "3072:7IID+63OnvXFVDRQm+GG8NRdzVKKaLoCz9/H2BKSHQer5uGe6hh10KVyW:7IW1e3RQm+GNRBsKaLoCz9/H0XQCAGS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858143, "uuid": "98bf27d8-53d4-424e-b4d3-e008721df7fa", "value": 182704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858143, "uuid": "0d4ddce0-1f8c-4f47-af9b-b2a11ce532e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858143, "uuid": "bbba883a-f832-4715-bcbd-b2b497b6804d", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed84150-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858323, "uuid": "ba853c26-f0d5-4bc6-9aea-324820228734", "comment": "Malware payload (Mirai)", "value": "21483095f0efb2c0f05a29d9c8ca3293", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858323, "uuid": "41b92050-8951-4ffe-a617-2b04b720f145", "comment": "Malware payload (Mirai)", "value": "b1b62501cef37dc78003e4b888bcd1a7f2111a3254487a1ce8869a5ee5da60ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858323, "uuid": "42d9562a-6a98-4510-89a2-bae1cda9d31a", "comment": "Malware payload (Mirai)", "value": "ef9a6a4c2dde2b83bf3413c5ee3085a6980c7ee5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858323, "uuid": "29dec2ab-df6b-4670-95cf-d569f492ea3b", "comment": "Malware payload (Mirai)", "value": "de2c45743a24d729f0c01233948c80aa4bd6e32e0ac2c01800ea99ca85828bbfc0ab1d822014ddc13c446305b7e4764c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858323, "uuid": "2b2b0302-383a-4c81-9cb2-f31c68c5c895", "value": "T120F39D73C8216E98C624C4B5B0B1DF792B53A52592836FFB69A7C2B14047E8CF6093F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858323, "uuid": "7866c858-ad76-42b2-abde-a8b7fffc257c", "value": "3072:48CX0SY38dQeWGsrGfj+3rujRuqXSWyMZUbx96hh1st5:483Jevsuj+3uLfyx1vt5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858323, "uuid": "919cbad8-2c63-4968-911b-691a282a9467", "value": 170848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858323, "uuid": "8bc44343-d973-4a10-bb3a-2d6096b019d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858323, "uuid": "4a2b9d2e-ff59-4b82-b328-4b90962b0ced", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbee119d-e2b8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794350, "uuid": "1d6800f8-9a2e-4ef2-8df4-fb7909b1f570", "comment": "Malware payload (Mirai)", "value": "21c82d0c1cf56828614b50522ff67b10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794350, "uuid": "e76cdf1a-fdcf-4f92-8592-e791472b8a22", "comment": "Malware payload (Mirai)", "value": "b1bceb0d0765938a3be09bc348aad1b1431c0eea1564cbd33b34adcc6e4436cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794350, "uuid": "6528b8a0-f802-4ce9-b9aa-d867e3da7e13", "comment": "Malware payload (Mirai)", "value": "d7a4959b76f675c5453a15f9ce2e2bfdaa0eca08", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794350, "uuid": "86a995e8-286d-4f7e-9aeb-9380898d02b1", "comment": "Malware payload (Mirai)", "value": "dc9fa6ebd0cfa320a78c3763ff09b2a4c7f055aad24f091ae72e90b1bd76a1e45d9355028cff093b805dc877cf3843b0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794350, "uuid": "27206413-1289-404e-8e7d-cc6c5f945ab5", "value": "T199731B81BC91D612C6D566BBFB6E81CD331653A8D2DF32039D11AF24378A82F0D7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794350, "uuid": "9d4da80f-c4e2-4ee2-86c0-71917f397e38", "value": "1536:RCGaYdpu5REYwGwm4OTHGAUZOxuk6fdPAaPbVR:RCGaoGeOTHGAUMxR61PvP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794350, "uuid": "aabb17d6-7ec2-47f1-8ff9-e10e79d07764", "value": 76648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794350, "uuid": "a3155748-c2ab-4588-a149-f9c90ef844ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794350, "uuid": "6622a19e-9b9e-46ec-b783-c6c0b662b6c8", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f139ed6e-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766879909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879909, "uuid": "d3280ff8-f62c-451a-923c-fb0db326c3a9", "comment": "Malware payload", "value": "8eb509497876720e514ffd489d68bb52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879909, "uuid": "5322b459-a40c-4135-8571-275f9337ac95", "comment": "Malware payload", "value": "b2a3139dfeeb155f06b9c9426e35a701265d7ef5d660e8b98b9cc8f3b9a7a26a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879909, "uuid": "5a4839fd-a8ee-4455-a777-cf4acd5c87b7", "comment": "Malware payload", "value": "f9435a1afe96a6afc14711f93088b0553b702a80", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879909, "uuid": "ae571a89-bdd5-4306-b096-e359e30e9593", "comment": "Malware payload", "value": "bb3b33445ca1bed651c49beacc49a3629aed14e27aa147b5e29fa4843ddd8e2f8a886760f1e4007233329761ddd74a0e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879909, "uuid": "6768f114-f1ef-4067-aef2-43c17f213333", "value": "T189F35B41FA87C5F6C817487060ABF73FCB32982A4077C69DEF999F31DA27901921629D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879909, "uuid": "9a3f0c38-0fe5-4619-81d3-cf858e176a85", "value": "3072:wh04I2N7ldkrYJqbueBySjx+9GLtfwsQnZUQ3i1KO/hIB1TmH+:wjI2N7/krYUbueBySo/sbNEOemH+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879909, "uuid": "b0306c12-c4ec-4cf9-b5cd-66a4ccfe20ce", "value": 162760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879909, "uuid": "548c233a-009e-484a-9140-2b677cb18989", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879909, "uuid": "0f38df66-5284-4d3f-bf1a-4f08991d8868", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab14f1d-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793945, "uuid": "ea0dda1f-4e22-451c-8164-001fa2bda281", "comment": "Malware payload (Mirai)", "value": "fe7eea0a1080f6c0b1a7dede6c4cc0d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793945, "uuid": "f5a05063-4dbe-4684-aa1b-10959ced914a", "comment": "Malware payload (Mirai)", "value": "b2a94e08f088f5695738e4db2838806a3693e5da68b9f0d07a313e7731fde5e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793945, "uuid": "a8c916d0-0508-4ca1-86bf-7221958abbc9", "comment": "Malware payload (Mirai)", "value": "7ba8e8cf8a8459e62c8b6253e237f3928bbed10c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793945, "uuid": "fe0c51a6-655e-4f4f-8424-7fd930a381c2", "comment": "Malware payload (Mirai)", "value": "ddfeb41e09ad71690aa1a013fdb33dbf35f7b39faac35c4387afbd7c1350346c6698a0ee53f51b16a8c5a9aabf1bcd98", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793945, "uuid": "bbf43a07-6c39-433d-bfd1-8bc934079ce6", "value": "T17C34C706BB611EFBDCABCD3746E9170129CC540A22A93F367674DA28F50B61F4AD3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793945, "uuid": "8f08ae43-299a-4515-9ac2-135a92061e03", "value": "3072:kqFo5MENCtXi2tEj/SeF1x30qN/Jr2f6k:LSOtZtExHh06k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793945, "uuid": "ece19a18-5eb3-4af8-b703-56a0b112fb1f", "value": 230624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793945, "uuid": "53048769-f880-4fb5-8665-79962483acdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793945, "uuid": "11d98ae2-3183-4640-811c-fe3d11936b44", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d232a4d-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854750, "uuid": "3344f0ec-1549-47e0-8627-0e39bcdd0b0d", "comment": "Malware payload", "value": "22eb243535a83303a3811ec63a71ce4d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854750, "uuid": "a9fc7bef-5408-47fb-91cc-181c1ab67765", "comment": "Malware payload", "value": "b3855b1d5a94f98d172971911f1df673b53b883025688bfa8ca5715990005416", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854750, "uuid": "52e963bd-6a75-4cec-846b-f54ad5746689", "comment": "Malware payload", "value": "12ea954e0f9fb080373e161f8b7ab46a175e6cbe", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854750, "uuid": "c51d8027-9328-46ba-bdef-db401f4758eb", "comment": "Malware payload", "value": "d8c7fdc9bd5248c01cd5fc7054a914c5851c9548949f2289ccc936842781b2f80096ea69a4a98b9f6a9adbc6c52dd231", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854750, "uuid": "fdb516b5-570f-4c82-b078-5623d58d23e0", "value": "T16C7308447CF3271517AEE3E06EFB12790FD6946912A0E51B782E63A6F06F3DB2420563", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854750, "uuid": "34341754-890c-4288-b096-8a75e425067d", "value": "1536:I9l/AoSSMhDW2vYrbqGf7PFd7LvN8leeqDNqmrKWAbAv8M/7uKg0uCz9FyKJ5iKp:I9l/5MK0usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854750, "uuid": "55ea2c84-97cd-45e5-8de0-035ee493b95f", "value": 74385, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854750, "uuid": "a8d9eedf-9288-4908-a52f-f47ad119daf2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854750, "uuid": "4c3fd8a6-b7e2-481c-b40d-ec4b92347959", "value": "invoice-1645080830.pdf (47).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f32fa42-e2ea-11f0-a129-42010a9c0007", "comment": "Malware payload (RondoDox)", "timestamp": 1766815750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815750, "uuid": "a85e0284-3699-4766-9ada-fe7784e64e54", "comment": "Malware payload (RondoDox)", "value": "8a50bdbff104a251b62e5c1e579e88af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815750, "uuid": "66df7591-3ee1-4680-81e8-21688df350de", "comment": "Malware payload (RondoDox)", "value": "b47c43c2d4d5290d6a492c036e991fde05f3b30b03967ea65d3cbcb4272c89b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815750, "uuid": "531edfbb-d617-4cd8-abcb-6c6bdc215a0b", "comment": "Malware payload (RondoDox)", "value": "cdd50978f2aecba411f8a6c6c0c4c93c10770121", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766815750, "uuid": "34be2703-7e59-46e3-bafa-b408a173216c", "comment": "Malware payload (RondoDox)", "value": "1eda7ed5e1e50ef30235214e038c58cfc2ad405fcaeda71b658cdcf5e078b633380ba7cd0a2ef51d095f373535495097", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815750, "uuid": "9aa260ae-2a58-43aa-ad33-ac19dc590d4a", "value": "T135D33A6AEC819F51D9D526BBFA5E8189335303BCD3EE3112CE244F2527CA92B0E7B405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815750, "uuid": "7af708cf-3588-4f60-97f8-db9f499d6268", "value": "3072:f62JgLDiTgwI0XFclqDG9SqHfayrpWXUEnQbhvRgXmphp+Aj:S2JgLDiTFTXqoK9SyfayrpWXVQbHgWpL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766815750, "uuid": "f9cf9131-e868-4db3-8776-964597e1ee69", "value": 141608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766815750, "uuid": "d18e592a-90f6-45e1-8eb4-8dcbb01d5486", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766815750, "uuid": "91899c4d-3766-48bf-9a96-0ad5b80a3e2c", "value": "rondo.armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b52aadc-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823447, "uuid": "a2c986a9-76d8-424a-be40-7f417b42fea7", "comment": "Malware payload (Mirai)", "value": "0ce5931041f75e637c3b9a5c1e7b13c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823447, "uuid": "418e210f-87f0-4a5b-a632-537cb6bab046", "comment": "Malware payload (Mirai)", "value": "b4c7903cd87c512f715f72aef428a14db228b4837815d4bc50be962813ddf014", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823447, "uuid": "6ce8b940-ff15-42ac-a018-242067962a2d", "comment": "Malware payload (Mirai)", "value": "35edd01a5eb6fc89291401561c13be29f5758d3d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823447, "uuid": "4c901e8a-069c-4a6d-8f78-995467dc1f55", "comment": "Malware payload (Mirai)", "value": "50d43bbcbee0bb1de17d0abaaddee15a2540af47688ee42cbccad9077c967518936c7ae669e8a73d225f4eb751ef84a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823447, "uuid": "e5cdb159-4bfe-40ca-8516-9d56dc5c1503", "value": "T138143B45B643CEF3E45304F111B3963E0B31ED394826D595EBA8AEB4DA33AC166163AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823447, "uuid": "37509976-87eb-4457-b8e6-439d56879097", "value": "3072:7UoWnXHc2U9aqu2Zhs6LF5hAh60a6q1U9C1Glpzi:7XW3bcaQhDUMUC1Uzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823447, "uuid": "57b45337-aebe-454a-a7ba-071fe69e8403", "value": 192996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823447, "uuid": "77ab1733-e3ed-4263-8db9-63a8fa697e8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823447, "uuid": "1f1601d1-89e4-4f15-9eb1-02f2f6ede38b", "value": "bin.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ccd95e9-e350-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766859581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859581, "uuid": "b531563e-3065-4f59-9f53-9dc517de5c97", "comment": "Malware payload", "value": "34181061ffe2ebcf9c297963d06ec447", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859581, "uuid": "1c1632e0-da62-4cd2-88be-8b8a95daf10f", "comment": "Malware payload", "value": "b4f94a47cb7e2e029fdbce6e5fffbac757c0694911e5dee251f39ae99287e4fb", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859581, "uuid": "f70d7d3a-cf56-4f6a-a519-9679efa1c1f8", "comment": "Malware payload", "value": "ca0885cea9e642e52dad3758ed37c25ca1b87dfe", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859581, "uuid": "d546c86c-c0b1-4185-91d3-0157b68bf0e3", "comment": "Malware payload", "value": "eab208e1ad0e5458a19ff7a7ea2f4fa8cb95f8ef6e45b62354d048756d9228dea38146523ec225c95d1b5fcfbe751100", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859581, "uuid": "e8de0ce6-2cc4-4613-8cbc-5f121e1b6491", "value": "T1D25161AB23144B31F609954FB7F63376634EA0926EDBC604E944086D4ECBD4C36DDE84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859581, "uuid": "c14fa582-fd94-45dc-9b14-c3e1ce2dbcae", "value": "48:kEP4A42JMiR8RbiB+tNtuZGsGscvy8KHcNcbw5RPLv0/2LbAbhM3iAY:eX2JMuAbiBGDuZGubwk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859581, "uuid": "7a2fe651-d1bd-41bd-a64d-142b1ea45349", "value": 2829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859581, "uuid": "a2c41cc5-5886-46fa-86f8-4a1a8e70a9a2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859581, "uuid": "4784fc09-aec4-4246-958e-ed59891a787c", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dada99cf-e2b9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794831, "uuid": "9b27570a-40d4-4df3-ab3f-cd875f3f6e50", "comment": "Malware payload (Mirai)", "value": "aa30e1bcb03cd316c8b56a204952748d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794831, "uuid": "93441933-963f-4afd-872b-26fbd169ae5a", "comment": "Malware payload (Mirai)", "value": "b5023520ad05e0fa950b2c45b35d04df9c513d86519608d95c40cbd441b2d93b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794831, "uuid": "dab5f1f5-8ae6-4416-97a8-4e4fd25c50e4", "comment": "Malware payload (Mirai)", "value": "4543bb5ca3eab9b65f0d9922eda49a4fb0be5514", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794831, "uuid": "96e658cc-1306-483d-aad9-99e1dbec6e13", "comment": "Malware payload (Mirai)", "value": "20ee716914e4cf0394899b9783c40ab62aba0dfda233694846d4179b3e41af2693b21df6e388ea48198ab0500dddc8c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794831, "uuid": "f4616c46-f602-4840-ad2d-a42dfede4c5e", "value": "T1CF231891B8819A13C5E4237AFA6E418D332663B8E1EF7317DD225F11778982F0DB7642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794831, "uuid": "44d8197b-f1b5-48ee-a84d-4765423f03aa", "value": "768:0JFRN1QeRiEn1ga773rR/Rt8rS2N60ukAu33MH5NFYzXewo:WXNCeH731JCrSBJ3U5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794831, "uuid": "94ab2a66-1423-4b87-bbad-47f03c8abc5c", "value": 48024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794831, "uuid": "0e9b6cae-805a-4fc1-a57c-b975d6094ecb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794831, "uuid": "208d34db-0795-4336-b032-8956c6622971", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aacdbc67-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830828, "uuid": "209d45bd-8d05-4f35-bec6-231c257fd70d", "comment": "Malware payload", "value": "9036f60039069e44adf786431c0ac2cf", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830828, "uuid": "c161621c-efd4-4c5f-be05-32ab51523967", "comment": "Malware payload", "value": "b51d962a30244f17dccbc8cd77868832dbf641506f189e1402a02ede0ad6b7d5", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830828, "uuid": "e00d6f1f-0727-4c16-a10b-2b6c1b1a3fdc", "comment": "Malware payload", "value": "668464c1452fc48853452a4c1d8aeb79d3bdb7d8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830828, "uuid": "abcf4d01-1f4f-4f8f-8fa7-7e56d87d780f", "comment": "Malware payload", "value": "567e2d62685e2e9443c4ba0ffa42279616acb7c318754011cafe6a4ce0c54053c36ea5dc42f4a4226f3c4798f5651a33", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830828, "uuid": "bea12c42-f9bc-4702-8e68-22aaff39ed5d", "value": "T1387307D21A1368C872F9931CA9D86CC332CBBD05D067445627ABA4E2D5286E8E437FF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830828, "uuid": "db168693-d60c-4f4d-9adb-c943b26c1fb5", "value": "768:I8w/h62/jWs6oS+xISN0vunRffxdkfScBYrwz2y8kTAlGB:I9l/AoSSMUZusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830828, "uuid": "71765598-c0e4-4512-af5c-811d28cbe73d", "value": 76311, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830828, "uuid": "075a8fe2-39f3-46bf-945e-254c5b089e88", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830828, "uuid": "a70cd33d-6fdb-48e3-bd78-ca158ae48284", "value": "invoice-1645080830.pdf (19).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "246dead5-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858091, "uuid": "c9b539ad-9989-4e49-b798-baf08b79f361", "comment": "Malware payload (Mirai)", "value": "e286b5d229b6088bdce06375ae23ca06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858091, "uuid": "39584c5d-04ec-461e-9939-6844307ee3a0", "comment": "Malware payload (Mirai)", "value": "b5ee10acc9eac1242b19700ddada7e865a5f2a611bc1f8a1f49f40800614ad3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858091, "uuid": "06720180-5c2f-4a66-8396-83635a2fe6df", "comment": "Malware payload (Mirai)", "value": "2e190fb0f5efdfdbc4edd69e729ef7d3b4084c26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858091, "uuid": "df9e63f9-c795-4b09-9039-be1d2cd7e992", "comment": "Malware payload (Mirai)", "value": "9cc798dffb5dc0c60107066e0965e4267ffbdd4e2bf15542200ca57560d92461537779940f37447662bf147483269778", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858091, "uuid": "52a938c3-6a74-4684-ae89-a750d62b38e8", "value": "T17763018FD92242BDEC3F41354A3B03D2B1B2915D198527BF8DF9C5EE16A149E812AD82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858091, "uuid": "f62c6594-d4e1-42e9-8e49-b6a3bb862382", "value": "1536:DmHvOzCR1onWnwOvgoRJ+IHuZBojEi9c1FJlNbhoivx7rsla:OqhguZqTWJvVXAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858091, "uuid": "798c2252-a8f5-48bb-95c7-fa76a53e26ea", "value": 72068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858091, "uuid": "4b5db25f-db34-4ab3-9f4d-c5c65d03f5e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858091, "uuid": "10d628d6-c3f2-444e-875f-a5206bd60ba5", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "862c1ad0-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1766797266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797266, "uuid": "fbd5b5cd-ec40-4363-9cc4-7b1db50091fa", "comment": "Malware payload (Gh0stRAT)", "value": "f6d1c961079cf7f05c1053724fa23dfe", "object_relation": "md5", "Tag": [ { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797266, "uuid": "916d56cd-f3f1-4614-827d-c4afc3396e61", "comment": "Malware payload (Gh0stRAT)", "value": "b64f52ee31323774fa3ce8a78f33706f870289629235b914c477d991a054fa2c", "object_relation": "sha256", "Tag": [ { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797266, "uuid": "e6dad361-09fa-45b8-8f27-6474b6d44052", "comment": "Malware payload (Gh0stRAT)", "value": "e28831a63114eba4f9d8f1c4d2b23d28a1d82967", "object_relation": "sha1", "Tag": [ { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797266, "uuid": "a56511c0-31ae-4a0a-9eec-1e2d4193a39f", "comment": "Malware payload (Gh0stRAT)", "value": "b9ed66f8f9d2af10fc86a633b888f6bba78ca22830f5787e85603592d544e99b7e1c7a9c93befcbcfe848b1974c879b9", "object_relation": "sha3-384", "Tag": [ { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797266, "uuid": "839f756b-28fe-4891-aa81-14857c32420f", "value": "T1D6373325769BC532D96C407BEC68FE5E04BDBE63073011EBB7E83D5A88B08C19335A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797266, "uuid": "cb48d2c5-b8e7-45c0-bf30-18ae8d5fa0e1", "value": "393216:2s/ATjRbpM+0XaPpenZ6z/637v1GhC5a3Cyq5DDEpz6E1G7B6T9tr/bRoq94A5nN:2a4bp90Xesu64hC5mtq9DEnXtHRoqx9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797266, "uuid": "9c5efafb-d3e2-46c6-a4d0-1e4c165d9ed9", "value": 24037888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797266, "uuid": "bca8cb17-36f7-4c80-b68d-620e1c669735", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797266, "uuid": "fc6ac130-0659-46d1-9313-a84572339886", "value": "MSTeams-8953.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1752f2dc-e36f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766872672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872672, "uuid": "67222758-8614-4174-9011-ea7a01d42848", "comment": "Malware payload (Mirai)", "value": "dc9e78189a201499fd6fc45d7471c3b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872672, "uuid": "74598621-5982-4699-bbe8-0782b4f11c35", "comment": "Malware payload (Mirai)", "value": "b65841b7dde430ca538eb9414f241cf4198f0e037f7d65750a7ae82b7adf0dfb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872672, "uuid": "41506cdf-db53-4b15-84a7-b643b1e9faa2", "comment": "Malware payload (Mirai)", "value": "21d236065e5efd18461c899c896120a9282b878a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766872672, "uuid": "d742f305-2fba-4074-974b-6b02142ac548", "comment": "Malware payload (Mirai)", "value": "607455b12d4274bed4d2e6d918db7d6b1998afccd60a8697a0116fa9f5d44f0dea8f477ab5d1c6586884359dae1071f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872672, "uuid": "0085169e-dada-4912-97b7-18d1cdf2db91", "value": "T111045CD7F800CDBDF90BE73B44134905B130B7A250935B376257BC6BAD3A199192BE8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872672, "uuid": "f0b5ee87-8f1a-4431-834e-75d3e9f0d651", "value": "3072:/Sqq4JhzVw1pqjrZlWW+6WcEJESPC3iPVbjbiMLfyoyyaXhYfHT:qQhzQ6x+6WcCE33i9LnyyOhYfHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766872672, "uuid": "ac7a2d58-a389-48aa-bb0e-1c9a2601539c", "value": 189312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766872672, "uuid": "54c61bec-8d3d-4812-955a-8a330af39263", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766872672, "uuid": "0c26dc3d-a089-4503-a9a2-0f9dfbcac0ba", "value": "mirai.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17875fe3-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825427, "uuid": "cf096390-93ef-43c0-bfef-0e9f0977529f", "comment": "Malware payload", "value": "3dacc656ce7d0f52c70782a34e90bbf9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825427, "uuid": "afc02f99-a29d-432f-a327-6d98a2e92eaf", "comment": "Malware payload", "value": "b66ba5925245b341a223f4a44c5e63473067ad88a646d8ebc2d84aff09686ad0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825427, "uuid": "3ab83776-7c80-4007-95e9-a0d8f485b9b1", "comment": "Malware payload", "value": "4098b57b40feb584a257e9b2c8932cdfb6864ce0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825427, "uuid": "a21255c2-4222-43f8-9b18-2252202dd6e9", "comment": "Malware payload", "value": "bed134aa8e02f6a5838f186717c61cc92eaba7cf10990c5d0b4b2a7c6e848f58ef06e23769aa800d0cd96a0cad16019f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825427, "uuid": "cb8b6d12-2572-4374-bf3f-2086a64671fb", "value": "T16A634C880C416EE02C7F3408BD05766687719E22DCEDE4E9E5B7FC28B4A56B750B9723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825427, "uuid": "5d0acdf5-3db4-457d-972b-aab352504d74", "value": "1536:I9l/AoSSM9leXScTi/GfdA+GBwK+cy6DWASOIz2Dz3oBql9sk9B7EPJXDa9wDai5:I9l/5M2SusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825427, "uuid": "bec14bea-c920-4f3c-868c-482f0e447b81", "value": 72429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825427, "uuid": "740deb98-346e-466d-a18e-a014963c2be5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825427, "uuid": "ebcaa1d0-4d3f-40bc-bba2-d2748bcbd44a", "value": "invoice-1645080830.pdf (59).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a699514e-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825238, "uuid": "c6d99ca4-30a3-4f1d-882b-4071dd79a115", "comment": "Malware payload", "value": "11e3353e01e03bd9fdb26a4ba678b285", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825238, "uuid": "cf72724c-e9bb-4801-83cc-d6166b2d4052", "comment": "Malware payload", "value": "b6b727afda3a802a01ca7e1d29a88d582dbf656d2876f1f693b3a540067b3212", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825238, "uuid": "1be9d2c3-efd6-482a-bfb1-c0d268d9870b", "comment": "Malware payload", "value": "f9c7f4e5ae7d88d7d65a0a4154627fccf75e07be", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825238, "uuid": "685d9c3c-b552-4bec-a0c4-0b7b0bc60b53", "comment": "Malware payload", "value": "9bf11d4e069625396ff0b89322e3eea06937e583087cdab69e510c237a78dabf48250fe0e8238d78073524077aac68cd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825238, "uuid": "6697b487-924c-480f-9d94-2a8d555bf6ce", "value": "T1E7730ACE1FD3A3DE149A227EA7C82D9CACF7843F1C54C1D4DC05AA676B6C8E68710919", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825238, "uuid": "e9c4d0dc-febd-4e9b-aa04-b3878dfb0e2f", "value": "768:I8w/h62/jWs6oS+xISN0vuG4maOdkfScBYrwz2y8kTAlGB:I9l/AoSSM3PusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825238, "uuid": "8ad43562-8755-4b52-ab7f-8699d7852f05", "value": 73405, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825238, "uuid": "a1543dd3-4451-41f9-897e-c5446a616f7f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825238, "uuid": "2418a636-f979-4ca5-8c7f-22d2dc108b5e", "value": "invoice-1645080830.pdf (101).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4292f257-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858141, "uuid": "ed798d18-e183-43cf-bd35-a45a6e7d032d", "comment": "Malware payload (Mirai)", "value": "52e0994277b919bc6d29d8846bcf8881", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858141, "uuid": "72c1359c-f7de-4e61-adb1-678edb1bb900", "comment": "Malware payload (Mirai)", "value": "b72c29cc73c5aaf8d5b779f06a390ee8e9f010ec8d218a6090a2e7e9e36f4e22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858141, "uuid": "d41eb395-dae3-4eb9-8e27-2f265743e0a5", "comment": "Malware payload (Mirai)", "value": "9470f3ddbc58b2a46926fdc0815ae23c6445285b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858141, "uuid": "cb5ac8f7-4c4a-4301-bad8-732d3d70aa0f", "comment": "Malware payload (Mirai)", "value": "bb18ad764eef4669ffcff7860c4be67de0a53a68b93b1c2ded898959fbcf2ed0c8908598a885d50ab6e1ae7e69f553f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858141, "uuid": "f3d2013e-ac26-4987-8ed6-f946940a4760", "value": "T13E144B07B5C080FEC499C1748BFFB53AD932B45E5238B19B6784AF222E4DE701B6D684", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858141, "uuid": "aaa9778e-07f3-4fa3-a73d-5ee50ea72621", "value": "3072:UiTtblP90eZzFRXYSUeFkBj92sLfkU1yrrBI6YIaUa40qpNHyb9m1Uh+x1zQ0:UiT9lP9DzFRXYNGYMrsILa2t7Q0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858141, "uuid": "3baa9284-705e-4683-9bcf-9d81cd09303c", "value": 196840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858141, "uuid": "e04f5829-311e-4219-adcd-f7106bd5ac54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858141, "uuid": "412d1e5c-984c-46fa-9f3e-f0f6d486bb52", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f1d6bd2-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825628, "uuid": "63e0f43c-c986-48b6-b54d-6c7d5303813e", "comment": "Malware payload", "value": "c613e16c46da0dfb91ab433c1698b1c5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825628, "uuid": "285f3f84-7445-430c-bda0-74e233051818", "comment": "Malware payload", "value": "b7703c359e4932e2901df0dec881601ccf3c5d5f799b57b87993f91e43163e65", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825628, "uuid": "ac1f7538-e37c-4cab-abc7-b148d1c8b4af", "comment": "Malware payload", "value": "9b562fdaf3fb98024c73042fd5ca6b4d7fe82bb0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825628, "uuid": "146773d3-d9b5-44ce-bbac-034864b9a348", "comment": "Malware payload", "value": "664a79d92ccf082dd360c3b4b9fdfac8219cec65bc35955635decac39b5c790e84a82e0a6f39b420ef479a8aac6b7846", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825628, "uuid": "26fa23d7-176a-45a7-a061-8c83384414b1", "value": "T14D634BB1E4C90688C28A7115FB19E8CD2094F46492AEB3E638F387D5419BF13990BF4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825628, "uuid": "f25b8d62-9d8c-4f43-9208-c6d4bb6afb9b", "value": "768:I8w/h62/jWs6oS+xISN0vgoGyj3nEdkfScBYrwz2y8kTAlGB:I9l/AoSSMZUusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825628, "uuid": "d72d599c-b5da-4cc7-855f-c75796c1b7b1", "value": 70655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825628, "uuid": "9eba5cac-f23e-44ef-86f6-b4655de398cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825628, "uuid": "e35e6096-6e82-414e-957f-ee31c1f2a7c5", "value": "invoice-1645080830.pdf (19).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0687a80-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861735, "uuid": "0be78e30-bfbe-4d07-894a-32395b4ce21b", "comment": "Malware payload (Mirai)", "value": "eb2c7a6adc13a46b39fb54579963877b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861735, "uuid": "a22504b5-7a7b-4e6c-8cce-45495bccb295", "comment": "Malware payload (Mirai)", "value": "b7ad3c75e668c6a97877078c19cac37318bed068943b90a2837d502b061dc33e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861735, "uuid": "93beee0b-d1b9-4f06-bf4c-ea53d1fd0f79", "comment": "Malware payload (Mirai)", "value": "b291f92107d4df49493f18815158bd13925c7cc1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861735, "uuid": "b1fa5151-7327-460d-9559-468824750645", "comment": "Malware payload (Mirai)", "value": "baae2fa085327a5f47326765b6a8eef6db193e682858d195299af62e44c8e60d7e1a62b6da1ba937a0c0246475226edc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861735, "uuid": "609ccfef-10e6-4319-9641-5afc4170b0ba", "value": "T156E38C32C8356FA8C664D5B4F1359E7C2B53A52182572FBA19A7C2B64083DCCF6493F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861735, "uuid": "e82300d6-7df7-49b5-a82f-83883ed236b7", "value": "3072:RQq9sRcYjnBptXE9RdjdAhbh4PkosWeRUW2/VR:RBsR3j5URdpA1mxeCW2/VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861735, "uuid": "5b11cd63-202c-4202-af29-87bc2ba45a1d", "value": 156256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861735, "uuid": "d39581a7-8d90-4349-bd6d-16cd2d7964ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861735, "uuid": "6f01865b-dc9d-48c2-9ad9-602f71d62370", "value": "mirai.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a682921-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854611, "uuid": "833ed8f5-9497-41a5-8776-160aaf8e01bc", "comment": "Malware payload", "value": "04bc8adc2f8cc2deafa18cfaed21d85d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854611, "uuid": "583a8a0c-8b18-4c35-9afa-9a97bb5b9bcf", "comment": "Malware payload", "value": "b7f318a31722627f1d72cb7b0ec639aa46b94f0315ebcfdd77de52c6dd6bebdd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854611, "uuid": "f0deb453-f673-4552-8ad3-2c33989d6816", "comment": "Malware payload", "value": "0f0c0a2f1acf05c4c8913f56356fb1516b1f30ca", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854611, "uuid": "c8bb3517-f72d-4b25-95f5-143bd4baa7ac", "comment": "Malware payload", "value": "37e816131503aa74e85bcf3d6b5f38cb53c6923c5235955a2f277bdb1c5033249da7b756a6115f2faa4f0424ba29c05a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854611, "uuid": "a118e314-4c35-40da-a669-c906df7b997c", "value": "T16A6329AFDB7A255640B073D8156FB7C6C18A841ACDCD145CA812D873C02EF2B7B99AD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854611, "uuid": "1d94f9b7-3da8-45c0-98a3-8f7d63007ecc", "value": "1536:I9l/AoSSM8z0AiBvSMaJ5cxLqjJtjRZKKZVoTU8YpJtKoJtZRLjai5A4c6Z941KM:I9l/5M8z0AiBvSMaJ5cxLqjJtjRZKKZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854611, "uuid": "1a3dd413-676f-486f-b5da-6473d58b2274", "value": 72445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854611, "uuid": "786b0238-6969-4d78-80e3-47a08ba9964d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854611, "uuid": "7372e4e1-6e02-4bd6-ad29-5054febb0f38", "value": "invoice-1645080830.pdf (81).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8941370f-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854824, "uuid": "98ed9214-97ff-46ba-bdf0-d14094aca0b5", "comment": "Malware payload", "value": "aa39705dfbf7fda5c4468cf69de3e81b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854824, "uuid": "2a9789ca-831b-42ee-9128-dd969f33953f", "comment": "Malware payload", "value": "b810a87cd770fb965890e5490144f4d68690e2c48795f4040f6131f5bc7ca7a2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854824, "uuid": "0624d43f-0c76-44e3-895c-76dd742c07e2", "comment": "Malware payload", "value": "e0dbd5330986628ddb76b020e523ea3a0a12190c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854824, "uuid": "a41541fd-6f8a-4061-88dd-8c7a72a45ed3", "comment": "Malware payload", "value": "c4b4192e277b6a9911ba24151dab60ea17fb7e8ad523afe924dfcb01ac4a032a9e6b47d88730287f9764c077bb23ffa3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854824, "uuid": "7aabb93f-d3da-4fbd-993f-b89879dd260c", "value": "T1496319092C53983D9ED1C63CA6DEE0994980DE0C4DE0A7400B6F66B6C6CDD7F5532AEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854824, "uuid": "bde8bcd0-25b0-4721-a611-744af26d89c7", "value": "768:I8w/h62/jWs6oS+xISN0vHNPxzXdkfScBYrwz2y8kTAlGB:I9l/AoSSMHvusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854824, "uuid": "b23986eb-5aa7-4404-885f-15f155274a94", "value": 69643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854824, "uuid": "6a62f11c-c0f8-4215-9c50-3023f4e6181f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854824, "uuid": "1dc9c0d6-4b22-46ad-b702-5fb17aa87b1b", "value": "invoice-1645080830.pdf (36).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e12f5c-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830505, "uuid": "b93bd41b-24e6-4735-bf3a-8ae073b66923", "comment": "Malware payload", "value": "5ec2431b82a4c34a54fab4f38cb6c92e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830505, "uuid": "e6389726-1329-4d8d-90eb-82a36b5b08dc", "comment": "Malware payload", "value": "b8751e32347771e086274beaec8a971bf4cab538d431f8d70837c9251f872b76", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830505, "uuid": "430c2ad6-c716-4b21-8c26-0a4f61336089", "comment": "Malware payload", "value": "8e590d01fa5ac7dbbcc3670a49e4dcaf35edbe1d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830505, "uuid": "87c6f718-01fc-4af8-9890-99684e2e4a5b", "comment": "Malware payload", "value": "32af9f2b020fbb794bfde9abccb45f9db6cb540984ab9917c880a670c66c18ab0f88aaa8124e87a69eddaa1ec1211967", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830505, "uuid": "ce439dc6-5088-42a0-b45e-07b7262522a9", "value": "T1C4634B70C4B6790F19CA5B15B3D0243F8A1F2656E58529CBA6AC3A370BC3FCA44BE475", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830505, "uuid": "3814d028-d40e-4777-a38e-b2f1dcc69c4c", "value": "768:I8w/h62/jWs6oS+xISN0v6IzIFIZIWIwIOI0IUI0IrjILI0IyI6jI6jIvIqISIOS:I9l/AoSSM0dusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830505, "uuid": "1685ab44-8f73-440e-a653-ea36281a4a86", "value": 68710, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830505, "uuid": "c1ad1809-56a9-4be2-bff8-4a310f0b7ffb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830505, "uuid": "b9a3281e-6215-4c6c-88ba-eee8a9403b65", "value": "invoice-1645080830.pdf (83).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f212fd69-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830518, "uuid": "17f6c34f-18b8-4386-b7ad-26171894a0bd", "comment": "Malware payload", "value": "62426364f45c8c64c0c4507847a812f4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830518, "uuid": "f4d8a7aa-86bb-4f89-9d49-7baf7422bd88", "comment": "Malware payload", "value": "b875e37b21785efac2ba6f5ee4f8bcd10eecc4a51e1b35885a7be2e8b6d35b53", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830518, "uuid": "aca50e13-d506-4222-ad15-456c613e87d5", "comment": "Malware payload", "value": "44c82e53204f60c21c9e63023dccf96c66abd487", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830518, "uuid": "e1152719-672f-4837-bebf-4fb63adecbd9", "comment": "Malware payload", "value": "8bb50643a51e155d7d70f9e4136cc39c286b3ffeb593685e036e83cab7094add04a828c3d0f6e668d6ae11d6e9faa5a0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830518, "uuid": "335a6a01-d89b-42cf-ba64-eff112fc18f6", "value": "T100631A30AB326E3D1CC2B0E14DB6B1A7F75CBB208B051D14485F5A167DEAE266F27486", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830518, "uuid": "6b418989-b380-44ae-bf5e-fe59b0549fd6", "value": "768:I8w/h62/jWs6oS+xISN0vsDiWQjZdkfScBYrwz2y8kTAlGB:I9l/AoSSMT9usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830518, "uuid": "64924d7e-cb23-4f3e-b328-736e8f63cda7", "value": 72454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830518, "uuid": "75b6baa0-9c95-4b71-97b9-b59744eacb38", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830518, "uuid": "995963d3-d4e3-4c4f-9b31-f49f339aa1cf", "value": "invoice-1645080830.pdf (82).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8409408d-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879726, "uuid": "d75702a4-6e88-4706-9d31-c0ee93579858", "comment": "Malware payload (Mirai)", "value": "d4dc17c50830852137867f9b568ce074", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879726, "uuid": "0770c248-ce68-4046-b716-ed53da2ab5fb", "comment": "Malware payload (Mirai)", "value": "b8b5a8fe602a1c462b26975455ff6bdb1bd3f079c693b618631dc16d9dd9de8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879726, "uuid": "9b36a09e-7b6c-4488-ac4e-94ddb1ed3843", "comment": "Malware payload (Mirai)", "value": "20199c5a34ad80310626b0f043d39f1a8ca5a65b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879726, "uuid": "5cac888d-669a-4786-a4ae-dcb8d0186d77", "comment": "Malware payload (Mirai)", "value": "2eb78d5bd9c45299cee8fbf500be59fe2d3156a2b1be073f94d9361c992a8548309dd8c91afd9ef33da4f5f7ad78885a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879726, "uuid": "9c075d45-8446-4cda-b4c9-978623424fd2", "value": "T15C142B42E9418F12C1C211FAFB6E514D37136BB9E2EE7202DD246FA037868EF0E7A555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879726, "uuid": "1f903c28-0cd7-4b18-a6cc-4abf4a9234ca", "value": "3072:2QkOcLWn5008cgQtW4EXCib+aRsu0DPT81kTpq8ZZj6hh1eRDi:2QkLWV8pWgXCi6aKP81iq8ZZ/RDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879726, "uuid": "8f553b80-36d2-4458-9499-d11e0f95222b", "value": 205264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879726, "uuid": "f4d2942d-6a09-479b-817e-6f9e14413cd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879726, "uuid": "d7f3a432-c729-4abf-a75c-32f94c508bff", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b19ead27-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825256, "uuid": "7dcd2716-e8da-488e-ab37-39864a6d2067", "comment": "Malware payload", "value": "b09c79df176ab57d718fad0c48a83f7a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825256, "uuid": "e86a13e1-9abd-4f78-805d-43fb28d150c2", "comment": "Malware payload", "value": "b8f6953d8f411f7d4a7d171517d56c9356b011e120d1bf2f1dd8df948771dfe9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825256, "uuid": "2996d44d-1244-47cb-868e-21b369668a78", "comment": "Malware payload", "value": "3b67755e2b3cfa6292882da2f821b1771692217a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825256, "uuid": "8dab6cb8-caa4-4a3f-8251-f0bf191c5792", "comment": "Malware payload", "value": "f7df7918e4e80e78ea54be25ce07310fa9049fe13292fff0ea42ca00e3199e30323009c20a9c83882213067a015f2fb0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825256, "uuid": "4523a39d-cfb2-4e67-9101-2ed42c040253", "value": "T1DC7319C09F5600FD5F318811B6FD198909047B61AFF67DBECD6AED5BA88E8107EB2085", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825256, "uuid": "44642ce1-cc32-45b5-aadf-120521929b93", "value": "768:I8w/h62/jWs6oS+xISN0vwu5YlTTzdkfScBYrwz2y8kTAlGB:I9l/AoSSMw1TusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825256, "uuid": "138d3bed-8f66-4843-b9e0-0c0dfab10999", "value": 75373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825256, "uuid": "e3283a9d-a72a-478a-babf-74445fc0a67c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825256, "uuid": "e880c792-c2d5-4251-80bd-920ce8341e43", "value": "invoice-1645080830.pdf (96).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35311768-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830631, "uuid": "f2205dc0-8992-4363-80d7-220c89a22680", "comment": "Malware payload", "value": "c4d975726ce16dcdb0b204302b18f885", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830631, "uuid": "68dc30c8-ed54-43b6-a294-0cc035ee3552", "comment": "Malware payload", "value": "b9087262c43b95872dd38e9ecb73aabec8361afa88c74ccb2b66641d15aff630", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830631, "uuid": "54e6f81a-475d-4d13-9a39-5347f285bd7e", "comment": "Malware payload", "value": "8d46aa5e8353db1b854db2452cef8e4cabd3d613", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830631, "uuid": "fadb9db5-1635-40ae-979d-785fda474807", "comment": "Malware payload", "value": "222b02c756b9d76f05c5d4f03c38c54fba21fa218b0c95b3e2479c832ec48b45e0d7d58f0d81c5c77f7c9514d12d79de", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830631, "uuid": "256f491b-0163-4878-bc28-93b7ddf1e28c", "value": "T10B6318AC92756D783B50E06D5D52B0B883027E6A1533447B6AEF2BD3F752837363194C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830631, "uuid": "2c481ea8-2192-4b31-8040-e78b54af42cf", "value": "768:I8w/h62/jWs6oS+xISN0vPh82ac5dkfScBYrwz2y8kTAlGB:I9l/AoSSMJJusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830631, "uuid": "2eb99562-b5b0-4181-a77a-f2bc1681c854", "value": 72527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830631, "uuid": "7c66a632-ed45-43c2-bfb7-26da559bf237", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830631, "uuid": "881c6613-8700-4a7a-b96a-68850e9248c1", "value": "invoice-1645080830.pdf (62).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9c43657-e340-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766852731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852731, "uuid": "fa7938df-54ce-4512-a5fd-5080edc7b780", "comment": "Malware payload", "value": "e32ab792c683f482a9b638edaa8d3d43", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852731, "uuid": "930bd62c-3ad4-4292-a9da-06422bfb0c4c", "comment": "Malware payload", "value": "b99e72a22ebea864ebd9752214c24454dc767d810dc41f020e0ff9010d4cdd1a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852731, "uuid": "05b1a4aa-bdb5-498e-8d96-8e60fccccaa3", "comment": "Malware payload", "value": "7ab88221d71ffc7573a742d1ade9ed49b0207e04", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766852731, "uuid": "7ca4a58d-0578-4faa-9f33-661a018f2ce7", "comment": "Malware payload", "value": "bef44f91f2d5e54c76e9d62dda668bcc949abe0bdf1e8349774f2926d5c2bc77d161efdcfb1df8e852c5a8e6563b2428", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852731, "uuid": "402d861b-beee-4a79-a52d-5e78abe68a41", "value": "T1BEF047CAFE20601748ECDAD7F869D9E0B01E0752F5708BEC9B8188D7C545F18320AFA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852731, "uuid": "763a03de-798d-4a65-97a3-e606aefed068", "value": "6:ST8q0ARF7x0ARFAPFsWBX3AjC9wGjuSisab7rbYWvWmkNvLKT:lAx5MPBBg+GGNismbJOFNvLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766852731, "uuid": "8f0cdb4d-1dd5-4428-94a2-06a42bad26a8", "value": 557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766852731, "uuid": "f033df4d-c85c-4636-8dbe-d8022a4537c6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766852731, "uuid": "f3a792b3-1268-4210-bc76-16a2b8d76bb0", "value": "ohshit.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143ca61f-e35b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864076, "uuid": "94fceaa7-0bc0-406f-b33c-031d6f28b1f1", "comment": "Malware payload (Mirai)", "value": "66bb3f6a183b98ae5c6f5dc145694c5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864076, "uuid": "fb206ff0-83ab-45d4-aef0-e87d8931d72c", "comment": "Malware payload (Mirai)", "value": "b9a526c5f11282cd49d75ee54433cc161967fe364615e524aa176338481671c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864076, "uuid": "60a4fc9e-e47f-4613-af54-2c6a123e3f97", "comment": "Malware payload (Mirai)", "value": "c7a6235cc29306d5853919c4ed63412a1319331f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864076, "uuid": "7c788fe4-83cc-49c1-9906-e8c2b1e386ff", "comment": "Malware payload (Mirai)", "value": "c883a583c6d6e59ee7ad4144b22c412244bbbbafe29c11233b329cd575035dce6b8c5daa77dcd25947c768fdb7103cde", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864076, "uuid": "73bcba7a-d26f-4536-8fd1-4158a8816677", "value": "T1B3335D2179762E17C0D4B8BF62F34724B2F61B1A36A8CA5D7C720E9EFF1194061136B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864076, "uuid": "d605f303-1971-4fb5-ab04-2db5fb175272", "value": "768:KAoPq9eKOKrBnoVbJUytFEImNuUhtB+pO+5vzarGzKV:KAKSeTKrBnoVbKytFEImNuUhDc5vzO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864076, "uuid": "9d9d6a55-9659-4115-ae26-dc45a510ebb0", "value": 54012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864076, "uuid": "d458a312-ec4c-4d23-9ee0-116f3f0c345d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864076, "uuid": "f8a399da-1192-4d4f-8475-85488972eb22", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41ea9b48-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854704, "uuid": "d55fd838-8d8c-4edb-8bf5-e4cdc9b3e7ef", "comment": "Malware payload", "value": "6e59ffdc30b2b407d822b7a0ff9b05eb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854704, "uuid": "0dc2382c-f0a0-409b-bcac-618630fc2d42", "comment": "Malware payload", "value": "ba223db4bcafc72acd507cd21a0ab2dc7c536a21b8c360be8bb7b8275c927dd0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854704, "uuid": "b23d319c-b86b-415f-8a68-c5e7a9cc334a", "comment": "Malware payload", "value": "dd8f513da1b3455a3de6ee196ff97fa7895c8fb6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854704, "uuid": "f932bc09-4151-4583-a10f-8e8b068d7648", "comment": "Malware payload", "value": "7cd0b96bfdd5b9694a41a53cdcd2169ad9fd2e90b9c3cc10d0e9b9ccf4d81330a782ce8c9f0866bda3627ddad9d96ce3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854704, "uuid": "d89f4909-e3bf-4d90-a15d-52b9691a00c0", "value": "T1B46318F4BDBE6C79C57E7A30CF04091B6F7A42255A6126F979453C302F084B89C1EAB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854704, "uuid": "69eac03d-2af0-4a11-baac-7e312e889c31", "value": "1536:I9l/AoSSMbIGhmLmXN/N1nJJFOhBQbuoNKPCKjZKOi5eVBvOh6k0Q1P55H6TH6Qm:I9l/5MNMusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854704, "uuid": "904be619-9220-429b-9d4b-02097e278792", "value": 71561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854704, "uuid": "a6edaaf0-c7a2-4bfb-9e83-264cbe98eb5f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854704, "uuid": "909050d4-880a-4336-b0ec-e1d4f57cbd45", "value": "invoice-1645080830.pdf (60).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0141c86-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861788, "uuid": "086fe8d4-3925-4a35-909b-9c5bdaf51336", "comment": "Malware payload (Mirai)", "value": "feeb9b8c5c657c8324025de70f8d2ac7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861788, "uuid": "7ac0681d-f320-4d4a-be63-90051a4afc1f", "comment": "Malware payload (Mirai)", "value": "bb68dcec91105bdc119b21224b543be40b21a585ad6f69e35ecb88816f9b2c0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861788, "uuid": "954a848d-6fd6-4388-b9e9-2f8b60e9c72b", "comment": "Malware payload (Mirai)", "value": "f3e77dd759e172a69729931e9d97014427a86df8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861788, "uuid": "93203851-89eb-4b07-b93e-a8b6780e4bbb", "comment": "Malware payload (Mirai)", "value": "4baa4346b208818f24528c867fab99eeae982625543b2d2f0008d99c6999148d2fd7c9c3aa0946403647820484bd44db", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861788, "uuid": "8170478d-7cdb-467c-8378-e2f0896c8e32", "value": "T124736DC2AA47E4F1E8170572613BE7325A73E53D006DDA83D369E933FD13502A66A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861788, "uuid": "36db21ec-64e5-45d2-b81f-fc68ed0688c2", "value": "1536:urL23nc6jELFUNDu1b1QROY3EYwfP8yhL3cj6yABKH:uOs9JUdu1bMOY3ERP8YzQ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861788, "uuid": "3557567a-4b1f-4c97-9d18-ee06f3793920", "value": 75280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861788, "uuid": "8ad70588-af47-47d5-b1ea-975e2ff15995", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861788, "uuid": "4cfc9982-2f33-4a41-8839-992a1bc4ddb7", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5bdd9f5-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870360, "uuid": "aedf99dd-42f6-4d9e-93c4-643e8f88b0d0", "comment": "Malware payload (Mirai)", "value": "4a369de61ad9a9c4e4daecc77ce93845", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870360, "uuid": "7a88cd55-535f-4012-a026-d399fd4fc332", "comment": "Malware payload (Mirai)", "value": "bb69ded0b4b252170d294b28b4fc78d8e490f00d77b3bdcc482257dd8401c8a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870360, "uuid": "8930166f-2cf6-4acd-9abb-4c11ba2d7c6f", "comment": "Malware payload (Mirai)", "value": "d85a61e8ac441da6c97a51af175f5e9598dc3652", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870360, "uuid": "3aaf0a7d-a55a-477d-96ca-512a8e7733f0", "comment": "Malware payload (Mirai)", "value": "d1627514e0c7d2bcbf8d92d980cb65577e6353c442e436bfc79ee8c3ad70c8b4ec7524c9f647ecc2aea59ddd3c60d0c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870360, "uuid": "0525aebf-e95b-4d3e-b4d3-3bca7ce029fa", "value": "T103630991B8818E26C5D5027EF92D118E332267E9E3DFB2229D205F243BC652B0E7BD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870360, "uuid": "24b7576b-7c6a-4e13-8b2e-fee1072b189b", "value": "1536:atnHaUFB7SY4ct9isJkMns6lAeIgNE9xhlPTcFIvZcgIaiWShV0KTT:CLP7L4g9fJpFFCZShV0KTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870360, "uuid": "3946f533-1d52-4dea-acac-00e0b09dea33", "value": 70960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870360, "uuid": "abf288c0-ad02-48ee-aaa2-c1c25717fcf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870360, "uuid": "dcbea67f-5530-4bf8-8ef8-1c161eab2e5d", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb06cc2-e333-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766847287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766847287, "uuid": "e7eb2a60-48f4-42bb-a250-5cfa32a8de83", "comment": "Malware payload", "value": "88cc9e9a1e3238c32af3910da8ecbd1f", "object_relation": "md5", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766847287, "uuid": "3b69073e-fe00-4406-b936-5ae3af5e89e8", "comment": "Malware payload", "value": "bc6fcb450024b38f113f01cf7873657aede61549758191cd33d8597ad808f8e7", "object_relation": "sha256", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766847287, "uuid": "2c06797a-cd30-4455-8717-7640edc5392d", "comment": "Malware payload", "value": "5578ce07c3bfbe4312f2b79a6e1a5e56844f5404", "object_relation": "sha1", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766847287, "uuid": "e59856df-5c27-4490-9f98-2b3046179167", "comment": "Malware payload", "value": "4866f570b2c2fd467bf36b42411e4837d4c4b3f4344105044c0632cb8edfe699de4d50695754832529699e3d9d766a3c", "object_relation": "sha3-384", "Tag": [ { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766847287, "uuid": "7abb5b47-2f26-4a2f-9a05-c31c1e687abd", "value": "T181F73321B1B7A954D62F677FE1A9AF8944307DE27307C8ABB3787FB649B05820171843", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766847287, "uuid": "77dca604-bc56-4ede-9746-74f9fa4cde42", "value": "1572864:OhEie2Xs2lOqptHMX3oRN8K1QHMSaZiEG0AglZCnapDlMWq:Nqs2lOqXHI3S1QHVaor9naFlMWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766847287, "uuid": "0bde386a-17d0-4f81-8398-f87523707cd5", "value": 74363904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766847287, "uuid": "9df61679-d7d2-4b92-a291-ce1510ca2baa", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766847287, "uuid": "49222bfe-b574-46d9-8a59-467648805d8a", "value": "WPS_Setup_X64.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2926424b-e2c6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766800117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766800117, "uuid": "a4a1cba8-0d0d-4c20-8265-baa2e2b9e7e0", "comment": "Malware payload (Mirai)", "value": "57e94745e8a13e4fcecdcb45545e4df9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766800117, "uuid": "b5b8d230-3dd8-4298-8c0b-61dd32ae9d55", "comment": "Malware payload (Mirai)", "value": "bcb9650b8e5636b5d05b339fa34c08d5a074bc153ed99a83efcd5372c401bdff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766800117, "uuid": "f04d1fef-347b-4efe-92e1-e0358270b9b8", "comment": "Malware payload (Mirai)", "value": "60021593b3e044c9cfd6db3cfe56a864bb41b8fa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766800117, "uuid": "2e46c013-ddf2-4ea2-8381-f2323128a323", "comment": "Malware payload (Mirai)", "value": "2ccab87a8237335a29684d49a96745e7b76a803ab06c799f59a29a86c07547312ce714eba5a1b798776f7d4dabc11baa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766800117, "uuid": "d8ffef5d-0432-4d49-a0f4-5543ecb9b077", "value": "T1A3533BC4A547E4F6DC1A053020FAF7B35F36F4391229EB87D3A5E572B943602B64A29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766800117, "uuid": "90540838-0f4b-408e-818c-43b44464cb7e", "value": "1536:9vLNw81os3wq+9NY0I6+3tz3ecA3BAYD9c1CeCx50KauRR:9vRl1osAJg0L+3QJ3BzsV+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766800117, "uuid": "ee48d8a2-d6e5-4c11-9517-f8c5c1273f41", "value": 63856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766800117, "uuid": "1a55b953-1eb9-4309-86dc-5c7037f35231", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766800117, "uuid": "b8806ac1-8477-40a5-9971-e633fda7f12f", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43733dc8-e2f6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766820776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820776, "uuid": "0bb90d2f-5d46-48a2-be3e-d00e91534b33", "comment": "Malware payload", "value": "6c5deb816c6ecc2bfcbee284abd937d6", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820776, "uuid": "04a4389e-63a1-4bf7-9fbf-f3832e23bc00", "comment": "Malware payload", "value": "bd005aeffd718f10ef0f972ed3e0a44a9b210f9b3243ec0bca12ad954e44655c", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820776, "uuid": "15b9244a-e08a-437f-a84c-ced77c125687", "comment": "Malware payload", "value": "ceade9fcd33d42e153e98f60a50bab20878adc36", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766820776, "uuid": "60925284-6469-47ef-945a-a464eae7059d", "comment": "Malware payload", "value": "6254deb6e7cdb8b278226079963a68275d4a86de637682e33eeccd3e7dc6ce928a0ba839ec9cddb3f2e12ae98f13d266", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820776, "uuid": "55bf26bf-4fd6-4d06-8e09-2e53a652834f", "value": "T11E4126040EE71258E662C735ABE9B3668417E861ED796FE5014D8A442733281F4B6F3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820776, "uuid": "345cfe49-68d0-4e99-82cb-87d1c10dbf4d", "value": "24:8J/BHYVKVWO+/CWbAt2VFv7kaHqaj5CCpgszzD3OmgarabxJlpl9l:8x5aA2V9AaKaj5CCpfzrOmg4adrL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766820776, "uuid": "8b492d4b-9a19-43c5-a91c-d714b4d17689", "value": 2136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766820776, "uuid": "75f8baab-7df2-4ca9-abbd-abc512615799", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766820776, "uuid": "4bd8ed4d-3bdd-4164-9491-fb9644c571bd", "value": "3cxprov_224.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c8c389f-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854722, "uuid": "136e066c-ad10-4edc-bfa9-f0a69208ae89", "comment": "Malware payload", "value": "c9a35be1fe44ad5027beee6f43533d0b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854722, "uuid": "94817be2-e7d0-475e-a27c-552e12bbae1e", "comment": "Malware payload", "value": "bd0e2a0f216eedd0303bee2cbb68d484d53c95a87fcb130f57639b59a03602a3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854722, "uuid": "9d0881ce-23ca-42f1-af08-c5d2a552fdee", "comment": "Malware payload", "value": "4bc94edd086c05c9b99dd641e03b97518e574dd6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854722, "uuid": "496b7e0f-1743-4018-b296-c7201919f9cd", "comment": "Malware payload", "value": "00d44d851c83ec20e0d0a413c5aff282501970d76476c80753d7d8f9c1ba1acf8708ccb5874ffdc369f207ed58123a93", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854722, "uuid": "daf99a83-a879-4ba5-bd4a-e8ef860869ee", "value": "T17B733CA99C129F3ACDDBCDCA3DDF01E942005D80575E61BE2426B2B25B4105B6C68FFB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854722, "uuid": "b8815467-e061-4152-9c85-c146945cbf17", "value": "1536:I9l/AoSSMEZPrRvc7VifeZ3olJW/Y3/46ELyU4ITTpvLEespsTpFU1W7pR7ck77i:I9l/5MEZPrRvc7VifeZ3olJW/Y3/46E8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854722, "uuid": "4af58516-a6ec-4613-916e-5cad57d8e36a", "value": 73428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854722, "uuid": "e7d7f8a2-db53-479d-a771-cb4b7f6d23ae", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854722, "uuid": "222b6624-3d76-4bba-b5d8-b0b535fb47f8", "value": "invoice-1645080830.pdf (57).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ac4820-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825721, "uuid": "39462642-b2ee-49a5-9747-cab7b661c322", "comment": "Malware payload", "value": "e9fd8bc5e4632ca99cf124255f84c196", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825721, "uuid": "a41c775e-c720-4fab-933c-0768d53e5d96", "comment": "Malware payload", "value": "bddde6ada0fbae65d0209f8d33d80c0f2ede7c2a02e751aa4451de61dc539af5", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825721, "uuid": "3ba7180e-09be-4432-8113-fa5b0c005a6e", "comment": "Malware payload", "value": "ca77b0988e66ef9f172c8feef8223c093aebe438", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825721, "uuid": "0a861224-1bb8-4671-8925-fe11a3ab4f2a", "comment": "Malware payload", "value": "1295d717a538045b16bc01c3f14431696d85634fc74aa95ede45c887982546fb3d6e71c36776d74fc20bdd4caf18fca0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825721, "uuid": "03f208b7-4f0c-4f27-a1d5-947020a119f4", "value": "T1D46309861D5160828EB0B144EDDBB16DD5E5D4408D3ADE216CFBF06F198E3F33258AEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825721, "uuid": "b413a1f1-22fd-43a6-a8c3-03f5cb2f0b57", "value": "1536:I9l/AoSSMx1a1t1P101A1/1t1S1V1P1Q1g1V101q1A1W1R1Y181n1d1a1d1H1K1w:I9l/5Mx1a1t1P101A1/1t1S1V1P1Q1gY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825721, "uuid": "f528bb7c-dc1d-4a68-8c32-2aed7c3995ae", "value": 70675, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825721, "uuid": "295edcff-0b4b-4576-b4dc-3a6f9f8e9bc7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825721, "uuid": "14ecc8d8-14c9-4d0c-9985-2708fc032377", "value": "invoice-1645080830.pdf (5).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fdee6ec-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766858620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858620, "uuid": "55b7c5fe-6fea-4452-bce2-3813912deee0", "comment": "Malware payload", "value": "a364377508d3ee220c5a5ced0e7f406c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858620, "uuid": "015c8f22-4493-41c5-b47e-c86826b75467", "comment": "Malware payload", "value": "be036f4c0348442d1724ef5b802c55aaec35a8fc7f1bbec6599f7c64f5a79301", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858620, "uuid": "691e8641-7f8d-4982-88fa-dc00b9b095c2", "comment": "Malware payload", "value": "64ce9bb0a782d4d34b1f247639ab58e0a0962e57", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858620, "uuid": "83e7e26d-c2f3-4976-a260-00f204215795", "comment": "Malware payload", "value": "f6d2966753d9b1f06d75466bb2f880ee020f5baf699a01381d115dfe2f096de73c2ca9b4216a03d9766083578f7eda25", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858620, "uuid": "dbe8fc9f-6449-4edb-a43b-bee59921b340", "value": "T17B234C42721C0A57C5A35AB0293F16E0C3FEAEA120F4B689650F9F5A8675E371086FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858620, "uuid": "7c5881ce-3211-49a9-83a3-c4d258914480", "value": "768:FEleTUEHmAN1RS3/lSkO17uyaqw+MRtABEfZSNEWOwCjaSGZ43GL:qeBn37uGOASlWUaSG2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858620, "uuid": "4c4def51-0489-43b2-a3ba-16d1a1f520ad", "value": 46048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858620, "uuid": "18b00ac8-0b05-4a46-ae8b-52db00befd0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858620, "uuid": "cda0906d-2c77-4582-ab08-559134841087", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a1ce70-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861495, "uuid": "235f9e64-4f8e-4c03-9b27-867e5978890a", "comment": "Malware payload (Mirai)", "value": "941303d37c5b3dc7af4121d99a4829be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861495, "uuid": "d619f506-85bb-40d6-9603-53c0b8c0a9dc", "comment": "Malware payload (Mirai)", "value": "be38ca8c4419f8c57404c111109082c05a177c6df5a17b6a7609de86b70426d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861495, "uuid": "eac2527f-c7e3-4a25-9d4d-2771f0d02c60", "comment": "Malware payload (Mirai)", "value": "c88e889aa4dfe0c70dcee8dacc96b6c889741afe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861495, "uuid": "38c759c6-6c40-427c-a273-d2c73388e359", "comment": "Malware payload (Mirai)", "value": "9c0d4f9ba4654c18fb94aa01a5a2edfe0de84ae76ddc78f5a44aca85f80738664909e30a723ea477c7e521ccf825a914", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861495, "uuid": "52c8853c-32e7-49f3-a877-305993e1c688", "value": "T137836B21AC791D2BC5C0A57B21F30336F2FB574A26ACCA1E7E720D8DEF152442517A7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861495, "uuid": "05d1ea0c-ad03-4c2a-a3d4-375817daaec7", "value": "1536:AM+Stfco6FyGihlGagCpZeXPPZNuSFuAGH+KqEtKK66RdAb/xDd7uhO:Jf3d9W6snwzTD4dJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861495, "uuid": "c025a083-957a-4d2e-b206-bf95b692a22e", "value": 83236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861495, "uuid": "df0fab9e-7de6-4a61-9057-6c33989d0853", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861495, "uuid": "efc84cda-0b9a-43fc-95c9-af1e96035756", "value": "jklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a045a965-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870324, "uuid": "37d30f0f-b554-4c29-bc8d-966503880c37", "comment": "Malware payload (Mirai)", "value": "0c36428d45cefca07890ed29c6959078", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870324, "uuid": "f9506291-6839-41cc-997b-0ec6b232dd98", "comment": "Malware payload (Mirai)", "value": "be4dd79f911e7a107883a92faa184c9c89184a7882c0c963c3c639523824fa69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870324, "uuid": "4fc53e7d-eec4-4049-b39a-8c4679e3d5e3", "comment": "Malware payload (Mirai)", "value": "38fb3bed958106ad3ad47d66a03359744ae9eedf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870324, "uuid": "634a64e7-d276-43af-ad9b-7202f51db69a", "comment": "Malware payload (Mirai)", "value": "5dcd7cd4622138a487895d933ac7426b74170f6c3959de47ebffb59708f532fe52d2e11c389a31a41af0679cab251775", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870324, "uuid": "81c01abb-4f7e-4a74-8d9e-c191937dc01b", "value": "T17923F1608B1A9EB5CDA32CBCC02C749D750ACE68D7DB7CB3180E535E69C2C5A50E7897", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870324, "uuid": "79fee6e0-ad8a-4c35-8c6f-4b1297bb50a3", "value": "768:N+1scx6CLtr5pmArZpSaPb4/4snz9q3UELgNCfDziyEpMm3EuW:NTk6C5bZpSaD4/XyLwqEucEP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870324, "uuid": "5e36c4a7-6cad-4e4c-9e4b-d2c8cb32426d", "value": 46456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870324, "uuid": "a8f34245-61ba-4367-b66a-6df58bdb7906", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870324, "uuid": "17f9d9d6-0468-48c3-9e1c-3ca3d1c3aa4e", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dbea6f6-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854375, "uuid": "2a0a1d37-48e1-4629-a579-2b68faeee876", "comment": "Malware payload", "value": "0fa5caf302a4d6cf2b1e6b75df950d03", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854375, "uuid": "e9de9d14-797b-4d82-b13f-c61de8d28ca6", "comment": "Malware payload", "value": "bedecb838890d650c0e90334d2110251089d7d661c26f17179d90763b99ccd14", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854375, "uuid": "8f673ebe-c591-428a-aa7d-5435f8840c9f", "comment": "Malware payload", "value": "94ce12c88011c146b2ff9e533d46194fc7add34f", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854375, "uuid": "556d7f2a-39f9-4cc5-8b19-b704a3a45a36", "comment": "Malware payload", "value": "713559ddfe2d398a79b1317f4f2dd4d61456a9b05a6500ff4692b9c911f8359365f5a4a91c347e12cb6ffd654666f7c1", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854375, "uuid": "ff89d205-050d-4062-8b1d-ea67b2783bec", "value": "T11251E43A724D7D43405308E32F7EB35BA3A6E0FE3F250D998027A6538A67AD91027579", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854375, "uuid": "ee5b7adc-c6a7-4aa6-aa4d-d5047340eaa2", "value": "48:A2AuwpKXg5YyHvIu7eUYBzMKZfT+8DbmW4TVqTIbHyF2dxEESm6cq10kTdrRq:A2vwpKXg5YyHv37eU6RZL+8H14TVk2Hf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854375, "uuid": "58589ada-d759-4ed6-83d1-f1cfd96b8421", "value": 2811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854375, "uuid": "7bd6e626-8742-488b-93f2-da86f2a7296e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854375, "uuid": "0ef602a6-2106-4260-8174-92919f541619", "value": "build.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78d28f26-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830744, "uuid": "398ae8a6-370a-4636-883a-7c5493ec01f5", "comment": "Malware payload", "value": "71675534caecc9e6bb422875c31e3d07", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830744, "uuid": "115c0921-75fd-4c22-a815-a562e091d438", "comment": "Malware payload", "value": "bef71ec81f86f320e9a1a5a77c209eb4054464384a08b11285a7860a86740650", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830744, "uuid": "b187f628-b424-45f1-ab0e-a615d0cb1946", "comment": "Malware payload", "value": "f442e2438bb4a2f6e106e3307d122e4ce8d72ca6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830744, "uuid": "4eaaa0e6-67f6-4f89-8f0c-23bfbabb0753", "comment": "Malware payload", "value": "9a4715522d1e022214d72dc7c0d24804dcdab79b7d902e6fc9ec23baaef8c21e6131e5096a8a5f80b061aa0468dff789", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830744, "uuid": "f1ec3ef4-3c0a-4c77-ab8a-ab9a6632a91a", "value": "T17963FA4DBFD1F9888527828CA2D5933F4E7650F58D41B7287A8FA84C853C44EADBE274", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830744, "uuid": "7d791d92-10fb-4d1b-97f5-2a526eed5e27", "value": "768:I8w/h62/jWs6oS+xISN0vDxhY4f64I4KEigCr/KNqHQoImEx4Jl+Co9ohi4htpge:I9l/AoSSMPfusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830744, "uuid": "fd79b841-218e-4c2a-8d8e-bd295c30ea50", "value": 72542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830744, "uuid": "624f562f-dce2-419a-a943-d7c5444c13e9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830744, "uuid": "33621fdd-738c-4cc9-8015-c9410aac50f6", "value": "invoice-1645080830.pdf (35).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77e536bf-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854795, "uuid": "7f2b59e6-6dc9-405c-8768-af9bb11b9901", "comment": "Malware payload", "value": "119be601b59ea8b9e1bd216f2a8001b5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854795, "uuid": "a170b42b-4063-4223-af59-0926e702c2b2", "comment": "Malware payload", "value": "bf1603b4ac16975d8848b45923962551bfc8f5a03c6c52e4ae74952bf9e067dc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854795, "uuid": "8bfc5370-e16e-4706-8764-c927b43e181f", "comment": "Malware payload", "value": "bf3f612bc2825d339c80b80b62204129c418c4ea", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854795, "uuid": "b9ab2603-ccb4-48f7-a9ba-ad1941030ce1", "comment": "Malware payload", "value": "3374cd1dc281e963d7c8374ec918ae4eacd8085976d79180ead7cccf4602bb6509a1f3ffd7ccdce569cb67b1517a03e6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854795, "uuid": "e36d7385-798d-4f57-b07e-fdda316b6122", "value": "T1C66309DE5F47EB6BA3F248CAAC66E6B8D523935064530654E87C20805BCF24F481FDE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854795, "uuid": "da40318c-808d-48c3-8b92-9418fe603018", "value": "1536:I9l/AoSSMz0S0U0Q0V0w020u0r0N0R0k0S0T0u0k0T0Y0n0e0a0A0q0P0y0d0e0S:I9l/5Mz0S0U0Q0V0w020u0r0N0R0k0Sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854795, "uuid": "6b43bfc6-4120-42b2-9446-1892c3a62084", "value": 72516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854795, "uuid": "464f1005-8163-49d5-8582-0b0d15387a0c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854795, "uuid": "f4c33b7d-ace5-4a2f-9e60-0091f9532a6b", "value": "invoice-1645080830.pdf (38).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e5603a9-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825573, "uuid": "7e2e5d11-4c6f-4e2d-bb36-0a9fb72f99b9", "comment": "Malware payload", "value": "4bef8bb8972cffb69a3ea6c7d78e773f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825573, "uuid": "9b897828-78a5-48b2-830e-2f0a79bfa2a5", "comment": "Malware payload", "value": "bf84f0716876c98bc8ce7121b88b15c141e49c222edc6026cf2fbd6fa4ad6c15", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825573, "uuid": "ec65ff11-8464-4239-a3ec-9c8f2e2b5dd0", "comment": "Malware payload", "value": "5604328ae301923d3d4404094de7035bda11489b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825573, "uuid": "9f60bbcb-e527-41e0-86de-7434f77147d7", "comment": "Malware payload", "value": "a44cdd757b01e95be06bcc9a8e056eebe38a5c83078129ab415506bcdf75be479e0d04335555e12932880030d6afcb1d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825573, "uuid": "2ec2b58c-a914-44ef-add1-16a090af9402", "value": "T13263F84E6CA923B732F0441AFA939557412DBD705E277834C27BA337090ADC46E72BE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825573, "uuid": "8ca53823-df1f-4226-9e99-ae0988844c5e", "value": "1536:I9l/AoSSMXAa6uMsy4jkH48Aq+6nYXryrcI8ru9rnKTXFCCa6/cpBubYtnMjnr6m:I9l/5MvmusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825573, "uuid": "f12ecf98-60f5-4cca-aaff-7b9da8e1604f", "value": 71547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825573, "uuid": "54508dd9-ed45-4ac5-9b4a-ec104e4081ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825573, "uuid": "6cd3aebe-ae3f-4558-94b5-0aa66c51ee2f", "value": "invoice-1645080830.pdf (27).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b94b0c70-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830853, "uuid": "26671989-c9e6-485d-b1c5-b14c0193fa92", "comment": "Malware payload", "value": "825c56c1db82facceeb6294a4e22361d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830853, "uuid": "8614ee04-aa1f-409a-bd8c-eb595edb39bc", "comment": "Malware payload", "value": "bf8ad892f66f0330b54022b217574340c46c656ce21ba4740fbdbce42400908c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830853, "uuid": "7f6f2e0c-7c2e-458b-ae7f-ac3a33cd1018", "comment": "Malware payload", "value": "089c8d679a5c618a4a8fbd58765a10c4ebb2f71f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830853, "uuid": "c53e0ff5-a5cd-4d3e-a942-b53c43e6c389", "comment": "Malware payload", "value": "041bcd962762cce9130392529c531b07f415efe1c21ecda890c18b4eca68024ed89c4c019df76346d0034b5e472426ff", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830853, "uuid": "c0c16a6f-3491-4654-b020-4b6b908b8df1", "value": "T15B630A133DCADFAD8252B040C8435AB03A65F36109DB745BBC7B94B1F698B4F8D50B5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830853, "uuid": "86655023-a6c7-49a9-af45-dc4e64a2f69c", "value": "768:I8w/h62/jWs6oS+xISN0vQp/lgmdkfScBYrwz2y8kTAlGB:I9l/AoSSMQfusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830853, "uuid": "f264dfdf-63a7-4f00-bef2-4146cac0050c", "value": 71459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830853, "uuid": "e115f71d-1c3c-4d83-b7da-f55e02c35d95", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830853, "uuid": "dfac63bc-c614-4793-9fb8-e1a0bb9d84ee", "value": "invoice-1645080830.pdf (17).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dc244b8-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855556, "uuid": "b2efc977-f904-4f2d-9571-84a48ec03e1b", "comment": "Malware payload (Mirai)", "value": "f4da4339c474467cf47310c0a6ce71d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855556, "uuid": "6f262074-5a78-417e-a277-aee1e60e184f", "comment": "Malware payload (Mirai)", "value": "bfa93d870e79ed6bf6700edae9d54ab129bcc5742bfaaac5ca445f4cd847e7d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855556, "uuid": "9be225ec-eb59-4aad-93e7-04fe596d2627", "comment": "Malware payload (Mirai)", "value": "4a81c5411291e18c14ec7e923e4ab66e47e860da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855556, "uuid": "d4c54a41-2681-4c45-808f-f53767891f71", "comment": "Malware payload (Mirai)", "value": "396caddb6746f7a64b056133eb49150da5ea4871cc3706ac55b72109d3935c23e1070cef814c3eea383fc79189336a60", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855556, "uuid": "b33f7433-14f1-47d4-b697-fa81bf77a84d", "value": "T1666301CB6EB03F27C0DCA1B5703815CACC3A9E8AE253868DC7E1E7554B3952655C8B1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855556, "uuid": "ec279c15-4a15-44ed-827d-cd001e88b25a", "value": "1536:DaxZLmYKVDNSl2y08yumeJyGYVmIMGCnVN+:DaxZLmYKX+t08jmeJhYTCVN+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855556, "uuid": "c969ffed-01a1-4dd7-91b5-910a36fb799f", "value": 70468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855556, "uuid": "3999bb72-0d8e-4708-842c-2c42d4c81180", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855556, "uuid": "0fff9854-0c1d-4afa-b53f-add68177840d", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdd5edcc-e304-11f0-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1766827102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827102, "uuid": "756263d6-7c03-4f76-a8dd-c8bb7b42227f", "comment": "Malware payload (SalatStealer)", "value": "68df5a94c0ad61f6b1a2a13de070fef6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827102, "uuid": "ef45aaf0-2385-44f0-8d66-6e5a9c0e55d1", "comment": "Malware payload (SalatStealer)", "value": "bfb55fd8f5cdaf3afc166d5343d08fd29a894361ca123cec7029f1a1588a89a3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827102, "uuid": "36084620-e7d9-4c5b-9d43-778ec48a7a64", "comment": "Malware payload (SalatStealer)", "value": "bacccc3d7331209ee21ec7d9cbb9df4089584071", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766827102, "uuid": "9c320e6d-9e41-409d-afff-8bad13406286", "comment": "Malware payload (SalatStealer)", "value": "c036101e62b182c2aa1faabf8b9ce42dc9b21ee952e67ec65081633ce3624ea6604f111e6cc7b530d9d4994153388c27", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827102, "uuid": "3362aa55-adeb-4ddf-99c4-c9c5ce5cdbb1", "value": "T198E5331B24C18FDFD32449F09B73D9433481FBA68C2D71659DC65036A992EB863F2B89", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827102, "uuid": "7f24ee4d-f2ab-4419-a890-a4ad67c53821", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827102, "uuid": "f78ee138-d013-4e16-a4ea-5602f35408f5", "value": "49152:H20tp3iHt6yJ4O8eXnKC9XoJDPDXYLpOpWKLPmQoJZV/UWJ4Ix8IUJZxd631OJNH:WuX+4OrXnKWXCQdPYP3qVMqmIUJucf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766827102, "uuid": "d874fdca-00db-4c5f-af3c-c12b6a6ec0c4", "value": 3246080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766827102, "uuid": "fe3f5c5c-3f09-41ac-ad63-6d5e5a947d08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766827102, "uuid": "43a76938-9bd2-4633-a8f1-2a1fa6168420", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f5c50c2-e356-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861974, "uuid": "9a782582-1d4f-4dc8-959f-cf538a035438", "comment": "Malware payload (Mirai)", "value": "5d542076edbe71fab170a791a3850cbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861974, "uuid": "1cceef76-6b1e-40a4-93d7-f6e5d78728dd", "comment": "Malware payload (Mirai)", "value": "c08cecc872e4ce04ccbc26fc70c6f365cf0459036abd0f4bca3023352ac34a53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861974, "uuid": "ef02be4c-9c24-43b2-8a73-4e5fbaf18b0c", "comment": "Malware payload (Mirai)", "value": "1e3e586359e86e3ae0d64130e6a22f5e70ac0279", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861974, "uuid": "755881bc-dd20-42bd-b6f2-908112309f93", "comment": "Malware payload (Mirai)", "value": "fe559b8e04c753cb242f37ce987756e72a9b74b0bc4f144fc5b822f384c8bb95230ca98d31f6a1af66d1583c7890e9ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861974, "uuid": "7fcfb404-cba8-473c-8152-a8f35dbae459", "value": "T18703F130F92AEC60EFEBDCB11D4B92C39B724F4B87B58EC620453FD50A45936A6005E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861974, "uuid": "66c7cb8c-7115-4c3f-89e8-258d8a2a7311", "value": "768:bp4Qi1kpkpRENm/BW2PP2V85iooJtdsTofs9NLKFOnP4uVcqgw0IK:bmxfpX42Pe8wtJxsp4u+qgw0IK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861974, "uuid": "e513a74c-ab0c-4106-aa40-62678bafaf0c", "value": 40248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861974, "uuid": "09ff5502-d32c-4d77-a603-2457c9ab660c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861974, "uuid": "fde1d792-737b-421e-b060-16eb82e2a64b", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "416ee067-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858139, "uuid": "41cc9b4e-82fb-4e35-aad3-ad01bb2d5c9d", "comment": "Malware payload (Mirai)", "value": "60e42331b1df497072047d5ed8b8a5e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858139, "uuid": "ceacc679-cbb4-463e-a956-d9131b483aae", "comment": "Malware payload (Mirai)", "value": "c0f9c09b950cc2c28ae5dacbb09d9086ca81e854c92f7512528af907ed23692c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858139, "uuid": "5b481f3c-494c-420d-805b-5ed4b751bb71", "comment": "Malware payload (Mirai)", "value": "5529951feb2f7849977367b8c88789411e297621", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858139, "uuid": "1e25df25-7ecf-455a-9c68-ea06fd86d75c", "comment": "Malware payload (Mirai)", "value": "09eaa67218867680b45021b47ea74402d4324408542a2463e56ec6fa0d3a317f474422190f76632d8e9371e39516373d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858139, "uuid": "604b7b08-ccb4-4fbb-b0f2-6e30790b0a38", "value": "T13C045B02730C0D47D2672EF0263F27E483EFD9A225E4FA85655F9A8A8171D371589ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858139, "uuid": "b9251980-fe6d-4a35-ad35-ea217a72ca14", "value": "1536:F6dbtv5ndB99Sb93w9x0c1sTBn6dEZfSnSpeil+a1ahrvA5l0u20kptlKTqGqb6Y:F6LfJ9xB1OkOp/+vs5X6hh1Fdm8d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858139, "uuid": "195fd65d-670a-46c0-a5a6-f2c9b979e88f", "value": 189052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858139, "uuid": "62538286-5903-489e-ac41-64e0ae19452b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858139, "uuid": "22ef63d4-bf64-4cd3-a55f-244646589557", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f4ad7a2-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858082, "uuid": "589262b5-54c0-419f-858b-fa1106ec5307", "comment": "Malware payload (Mirai)", "value": "6280560045dea2bb62da6ac40c1dafe2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858082, "uuid": "94ff2036-c901-4068-a29c-12c2ea6fe34d", "comment": "Malware payload (Mirai)", "value": "c20d06f851131ed25bfac63d10354cfa94cbf785fdc820890e3b924eebae1438", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858082, "uuid": "fb0985e6-f678-4583-88c1-1c85251e8b82", "comment": "Malware payload (Mirai)", "value": "48f24c28dcbbf9c7acabbfc2daf1e6b1750336b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858082, "uuid": "87fe5529-8381-4e0b-ae21-e274eae56093", "comment": "Malware payload (Mirai)", "value": "2896608e88ef009adbb9d414eff96acf05d3a9a853442693a6f3e9e47f8779797ae5d3ac55e776a73949d9a1352379cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858082, "uuid": "7c677c43-dfe6-44b8-97cc-317f20e875b7", "value": "T10153F112E0EAA649DD3C577588ADF9133BA1C34DF59C8EF99344703BCC1AF28A616342", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858082, "uuid": "ed361248-175f-49e6-81a8-1e1f3b8a0391", "value": "1536:Y0PbkOeOSmqn2/2TCsEnWdqWBMohJiq58fmfDqnouy8GyS7:fPbkOhSmePTCNnWdqWhiBfmDyoutu7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858082, "uuid": "69dd2326-6db9-40e6-a480-92a177f51b69", "value": 65064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858082, "uuid": "978171c3-ef23-4e47-bfc7-48ea614965ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858082, "uuid": "903d9a67-f472-4d18-a417-8551ee7ed569", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f21f1ca9-e370-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766873468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873468, "uuid": "31e565b6-3f84-4b8d-a35a-416a3ac9fbfd", "comment": "Malware payload (ValleyRAT)", "value": "72ee5433101910d088335f296d40173c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873468, "uuid": "f721f16d-8e1a-4017-8225-7781e91ef20c", "comment": "Malware payload (ValleyRAT)", "value": "c22b66b65e97b7f87d3582315776c92f5ae64a487355ac5bfd0fae1bbccfc987", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873468, "uuid": "640c2f0c-6bdf-477c-a34c-0dc3b1114ff7", "comment": "Malware payload (ValleyRAT)", "value": "ff1ec87936e4a2dd6bbd30cb71f8427b0ff7bd23", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873468, "uuid": "69338f27-fb12-4adc-9971-bfeaf783f21a", "comment": "Malware payload (ValleyRAT)", "value": "24720adbc7634f44a74c39b351e1da3073c7bff0a59512f2eb16876b452eb83788093859ee1157ed255759449a2efbfb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873468, "uuid": "21a82044-e302-482e-94d6-4c6cffa47053", "value": "T1F0273356C50F44D7D4601178841B809AE087BEEE7C31E766E688FFE2B53B94A4AB710F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873468, "uuid": "7676685b-995b-4934-a2c0-e74cf8e8d61b", "value": "039d1617d5f0788dacbd04b35a141ebe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873468, "uuid": "7319a804-27be-4b53-94d9-394d8e675596", "value": "393216:7kEol82RuJC4qyA5387rzKoID80+2JAlAjUngDJcQ8soQTODUi961hw5:7kEol82gNqF8Oh++AejUgDLjoQqDUsQ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873468, "uuid": "8b299a6e-2586-4e9d-9ad1-6e362fa4d819", "value": 20983157, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873468, "uuid": "55a4987c-78c8-4e98-81a9-dea9a7679a2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873468, "uuid": "9c48736e-8ec2-41d7-ac25-a27eadba7c65", "value": "install.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54bc264d-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854736, "uuid": "e255fd1f-345a-4458-bf96-3f274786db6c", "comment": "Malware payload", "value": "67622e595e0c0ec470115bab40141f2c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854736, "uuid": "e920d0fd-3692-49c0-909b-1ff5744828f9", "comment": "Malware payload", "value": "c2374a1719668f44fe912bd4b2b5536192b0f8763f2550e63beec2bcc4de194b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854736, "uuid": "87842e92-afdc-4ac1-9183-40991b66bafa", "comment": "Malware payload", "value": "7230787b149015ca9bcbee01bb82de35d274bc54", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854736, "uuid": "db39fdca-7d85-4437-9de1-368d73adbc0e", "comment": "Malware payload", "value": "9d4f1f80f3f32b83115baeb80bf0e4a32fcd5ce9592b808323c6df856f667c465245c90198f02a899e2a255877970834", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854736, "uuid": "472752f2-ae63-4e6d-a6e3-d645cf61ae90", "value": "T1AE63E89F4F11B1FB6EB2F3E8943621500489894403E091E1AF06BF97B57B328667A7F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854736, "uuid": "f095fef1-dda2-4873-a490-ee104d9c8afd", "value": "768:I8w/h62/jWs6oS+xISN0vB4p7LNd3BSbdkfScBYrwz2y8kTAlGB:I9l/AoSSMBq7LLgbusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854736, "uuid": "1cc776ac-0def-4702-ba15-73b4ce879849", "value": 71560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854736, "uuid": "7bf5a320-9f3e-4702-9780-be5652f4546e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854736, "uuid": "2c825b91-902c-4510-abad-575726e83d33", "value": "invoice-1645080830.pdf (53).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fabec46f-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830533, "uuid": "4ce29eb5-22c0-43cc-9e59-eef9f7e637cf", "comment": "Malware payload", "value": "f84025ca45fcf5107bb61885314f2c20", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830533, "uuid": "97b00611-9645-42b7-bec1-c4f3d2ca89bf", "comment": "Malware payload", "value": "c26bf9e294566eee1c56c9beac5cc6f69e3744b10e4d4f3a594f0a5efe40161b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830533, "uuid": "5f6bdb70-8c5a-4d79-8296-ca2c8c949ab4", "comment": "Malware payload", "value": "510daaaedf122d64de1b53442507a643bf872e6f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830533, "uuid": "e11d1e5b-6e5b-44c2-a06e-5672485476d4", "comment": "Malware payload", "value": "4e896bd7d00d01ffe860ec201d2538f1e481dd1e7268d70c92c9cf5a349406b16ba1523e5b7f4f677bbddde2fee10ad7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830533, "uuid": "572f5244-8740-47b3-9d03-dde1ff1a48b4", "value": "T10E731AB433CE3BF803D637C50B7682245FB9BD09C691D5852C2DD9B5BC066A5AA3036E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830533, "uuid": "5c280082-8bd7-43dd-8ecc-1c5a91da2dcd", "value": "1536:I9l/AoSSMvrhFUQoD5Jt3qiCqdOiA9l1q52nh2CvAvQso/roCRMaLxa+zqwEpz3Y:I9l/5MUBusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830533, "uuid": "e34b16a2-8b46-49a5-8885-c3bd85b569a2", "value": 74469, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830533, "uuid": "e9bdc5f3-a223-4074-a201-67b931947feb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830533, "uuid": "2b41f4ea-31e3-45e0-a45c-25aab1f51a00", "value": "invoice-1645080830.pdf (79).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "819c00d7-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825605, "uuid": "f94b3215-070e-4eee-a574-55b353101f1f", "comment": "Malware payload", "value": "de20263e00beba333a2ccd60158bac01", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825605, "uuid": "a5f4d51c-7a85-4ff8-8ce6-0cb79d0bc32e", "comment": "Malware payload", "value": "c2919c61cb562b27ebd9801de3c70afe6308d9a612183d6896ed9adb18146c63", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825605, "uuid": "55854165-56da-400b-a0b4-af5245a6c0de", "comment": "Malware payload", "value": "6a20849e97d8473a59e8f8d758131198d618f6c4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825605, "uuid": "c997f330-f777-45cc-918c-f90fbb2ff6f7", "comment": "Malware payload", "value": "b19fa1dbcb47b81548855add0e12b00b2fed08c6ab2fa32dff0a0e47b56bfd83b02318dcd6a1f4004d1de6d709f8a798", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825605, "uuid": "450a28aa-5fed-42d7-b9f1-880fd57c62c4", "value": "T18B633A1AAC373D5E2A5B2045667B131383864193BADDA42DA6D2FC01F3E537A5F330B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825605, "uuid": "3b21834f-7f22-4180-859e-d496f4240667", "value": "768:I8w/h62/jWs6oS+xISN0vhmVogUydkfScBYrwz2y8kTAlGB:I9l/AoSSMspusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825605, "uuid": "323283e6-7120-4c38-b0c3-686eb6217cb7", "value": 70564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825605, "uuid": "2086e969-a4fb-464f-a058-2bd858067850", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825605, "uuid": "50c8ea01-77be-4f76-bc3e-e5c6ac64d307", "value": "invoice-1645080830.pdf (22).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "951a2a87-e2df-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766811035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811035, "uuid": "a5b5d471-fab3-4337-8903-154933ac5be4", "comment": "Malware payload (Mirai)", "value": "478e7f5d02d7a34ae45059c25741e233", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811035, "uuid": "c4c35407-fe02-49bf-b011-9bbbfb3ac590", "comment": "Malware payload (Mirai)", "value": "c29ef94ba9a1b606f7b46b64481d873cebf413f7f20d1271e3b54b17fff21a4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811035, "uuid": "19e9ca8d-6328-4edf-b2b3-76b793293454", "comment": "Malware payload (Mirai)", "value": "dadf9ecfe9a5832c50293c53ed1276ae16fdaf4f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766811035, "uuid": "ecd65768-6db7-4c69-91ab-aa7bc2d7cc09", "comment": "Malware payload (Mirai)", "value": "b761af9968fda77080c33065aef4288e92e4dfc3c4e8b31390906af69bc757a274e0d83f969f8159f5bcc841db68212c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811035, "uuid": "b2156256-7d4a-4e46-b13e-ff0b24af35d2", "value": "T143137EA2C06DAFD8C1488674B8288F781B53E445C7536FF99AD945A68047EECF60C3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811035, "uuid": "7c7a8469-f05d-4268-b943-206f3076ed3a", "value": "768:NanapGwtbGbh/EEZYePDznRVrgrq7OhGdv/qzCvoBJbCb:Na4Gwtq6ECrq0Gp/qzLLbCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766811035, "uuid": "58a0dd97-66db-4ec5-9ae5-1e159bc5c59c", "value": 44348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766811035, "uuid": "d58d99a9-4b00-4160-9479-83bcddc21e29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766811035, "uuid": "9654465d-9792-4436-ae7d-6d69c9787899", "value": "hoho.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31cb051e-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825471, "uuid": "d487b678-ee75-44d0-92b3-a618eb1d9152", "comment": "Malware payload", "value": "f084fbf3d33dc61f9d6f41eff5691823", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825471, "uuid": "5c6a3df6-eda1-4ce6-bf05-326e73de21e3", "comment": "Malware payload", "value": "c2a6f7adee150944c0c534f44383b14520348bc8b0346f28bb6021c2bea72918", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825471, "uuid": "5b4170db-922e-4c3b-9acc-fd66f68d1fd9", "comment": "Malware payload", "value": "020344ba6e03e897d97afabb05080f526d6d354f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825471, "uuid": "9aa12493-05f7-410b-8e85-96ae29ac4e5c", "comment": "Malware payload", "value": "85be850d757277007183bec1fccb3d658de06205dc72732069bad987a79bbd8981a200b8d5dae55f4873b1fd75e6a8f6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825471, "uuid": "35218e9e-0e5d-4a7a-8988-d171f673062c", "value": "T1A9733B8F7F3BA31B1CC663B5872008AFF73ED845194E8CA08E856D8914516B9FB5784E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825471, "uuid": "32268081-28e5-4fed-ad10-999b1721f875", "value": "1536:I9l/AoSSMsuSXy1sVbOdpMKXYss5TVa/g3JipTf2gWCsQ4RAFcaFZEFmGwqzVTq7:I9l/5MoXRusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825471, "uuid": "4e3ac7cc-4e23-4a6a-a6fd-1f586880b0e9", "value": 74380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825471, "uuid": "f0bdadf7-5fd6-4f4e-b82a-bd22d06b6ce6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825471, "uuid": "5cfc8451-ee24-4c82-aa9d-5bb4760438d2", "value": "invoice-1645080830.pdf (53).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8dcfefa-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830476, "uuid": "e886b377-5e38-4ebb-9150-603238841af2", "comment": "Malware payload", "value": "76b80083e50b60a0eac899e2a3507e5d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830476, "uuid": "20ec1870-565d-449c-b740-b59cc2e72251", "comment": "Malware payload", "value": "c3af99959116212a3157057cc955d178cf91bccc20bb9b38312f70132c7f1dc8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830476, "uuid": "53c6380a-e145-491c-803c-aa5cb3f88f33", "comment": "Malware payload", "value": "0b20c23f42a30848d40cac9ba71b1310308c9760", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830476, "uuid": "c8bd8e74-4f33-409f-ad47-8a20d27f6630", "comment": "Malware payload", "value": "6e581aac442f294e05d772cd16c3fdc1cc5aa18b01f6c93af96451c91d92ad02ad7c721c1a3c9f557b2de7a5d011bec3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830476, "uuid": "029d64a0-1395-4dbd-a450-46f68048cb65", "value": "T16F632B2E2421ECF0B399C6FEA90C05F5B303E829C97BA2DA359DF910174F9E44B555E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830476, "uuid": "dbb5ae01-41be-4734-adcb-0fc5189909c6", "value": "1536:I9l/AoSSMhzzT1bMGHBxHkiSUK03YKdQpd5N3/Q9uxQtzBxtloJN0XmzRgHNusrm:I9l/5MhzzT1bMGHBxHkiSUK03YKdQpd9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830476, "uuid": "571c2d27-dad6-48a6-b8bd-4fd214e1b07a", "value": 68705, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830476, "uuid": "0dfee8c4-bc05-4775-8ab9-f83f3c37d409", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830476, "uuid": "41488925-3da4-43ef-8bbe-f0ab963f8b81", "value": "invoice-1645080830.pdf (92).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7947f3d7-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797244, "uuid": "e8d01735-ec6e-4374-afe7-8516fbcf251d", "comment": "Malware payload (Mirai)", "value": "aca52be072dab8c913ee8649d8e83505", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797244, "uuid": "b8c11866-ce36-4788-9a3d-f2aecf2aef08", "comment": "Malware payload (Mirai)", "value": "c41b47f9e5287c09ce277940a90fe3a73953a72ca05bc927184eba1f88c14cf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797244, "uuid": "a8a1da7c-38db-4f9e-9182-4f016704e947", "comment": "Malware payload (Mirai)", "value": "ceda7bcc971e5a763ebd886f8f5d8e498fc2e482", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797244, "uuid": "96e68071-012a-4921-b0d7-1326f404d352", "comment": "Malware payload (Mirai)", "value": "1df81428b075be1969de4ff45baa97d2262626b60b2aba8c8f39bf802b0f09a08dfdd74949eb49c7c13347a392f384e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797244, "uuid": "0b51b9d8-857c-4180-bed0-06b58dbf8d7b", "value": "T1DB733B56FC814A13C6C1127BFB6E468D3B2653E8E2EA72039E259F3133C751B0D6B895", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797244, "uuid": "d54f8a62-d95d-47f7-ae2a-39f69b4a393b", "value": "1536:uBaqoO0WqzjYUNK6tPTzDP0POfmqxuSdvNM:uBaqD6tPTUm5NM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797244, "uuid": "5cbbe2f2-e5db-4d4c-a529-4aee6696be1c", "value": 79168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797244, "uuid": "03f73cc6-f820-4f9d-9980-8df6c379dad2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797244, "uuid": "fa567b54-d99b-4895-856c-5c20a8b5f272", "value": "Space.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f9e4a52-e355-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861733, "uuid": "cfebdf0b-3d8b-459f-b3af-3da2c40973ab", "comment": "Malware payload (Mirai)", "value": "89ef2dc073c24c6e02e71e24378e3b7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861733, "uuid": "18a034ef-f007-4d21-bca3-d59368338064", "comment": "Malware payload (Mirai)", "value": "c4306cb4631d098b231291fa846c1d8eef99e7450382cde792455976d5b1404b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861733, "uuid": "c1a9094f-9a10-4d62-98fa-42b847b3a8eb", "comment": "Malware payload (Mirai)", "value": "c2f5ac9118599c3c9b36078722e1633d034e6307", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861733, "uuid": "1f4293d4-001f-4592-8088-80cbb457f769", "comment": "Malware payload (Mirai)", "value": "a4bd4dfe5c846edbb83a843b9acff1d573618bcaa2dcb6cca96834af3ee0882cb05001a892ebcbbc1c10483ed7407c35", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861733, "uuid": "4611145a-ac46-4844-b38d-85dc97bfea51", "value": "T1BD03E1D754F6B609D23AF33C1DC9CDCED1A4E2494288C2B41895B17983E9F3BA5316C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861733, "uuid": "6080cfb8-d83a-4dce-9319-84d06205d386", "value": "768:I6dO68rHwx/S+/dAjw0kwjtSn9neruO/pahiAZPcVTnbcuyD7UHQRjZ:I6z8r0WhSn9nahaUAZyTnouy8HyN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861733, "uuid": "4eccb57e-a44b-4059-922e-dec031eea77a", "value": 39732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861733, "uuid": "3fb95e0e-385e-44c4-8f07-7361cca577c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861733, "uuid": "d4edb0d6-946e-4889-8f25-63e4555b7525", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eb6e4fc-e356-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861973, "uuid": "8083e205-d53b-4c25-acf9-b76df7abc4b7", "comment": "Malware payload (Mirai)", "value": "6fdd1122f15605a0d24df3e0d32d0538", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861973, "uuid": "97f376ff-ed44-45ff-b62c-b8bb0f1b6bba", "comment": "Malware payload (Mirai)", "value": "c4f393e3621d8588d90a2f804f4c358cce90e260b083f9c3d8fd5f183e178f05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861973, "uuid": "1ac93ad9-68a8-4ac7-bb0e-e7d9c036ee72", "comment": "Malware payload (Mirai)", "value": "23138aab9ec41763482d14931a86b181b249c961", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861973, "uuid": "edf57d3b-de73-4db2-92c8-4c2665839bfd", "comment": "Malware payload (Mirai)", "value": "24934186eab34edb8a2d08981e13fd1bfe06441448d7a95b4b500df90f7031c79f7e913d5af6c7eaba62ab4fe381ccc8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861973, "uuid": "becfec3d-f0f9-44eb-a6ff-d24f1332f1df", "value": "T15773D60ABF614EBBD86FDD3705AD4B4535CD860722A83B7A7670D428F24A14F4AD3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861973, "uuid": "23e3468d-8599-4421-822e-d3acf0913333", "value": "1536:cCjruig8H5RdKK6+4ZUFg6ikLYc3Hxnejd0HnlbVR:cCYMRk+vv/Hl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861973, "uuid": "9328fe3a-4d10-487b-94ed-637c7580c417", "value": 76652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861973, "uuid": "930237ef-2998-4a8d-aa2d-860bdcba2ce9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861973, "uuid": "e912b529-ca1f-4c0e-a171-c519f7cb7911", "value": "nabmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64ff1ca0-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766860776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860776, "uuid": "4aa472b6-f090-4c54-a1c9-70233eec103a", "comment": "Malware payload (Mirai)", "value": "b366770185d9216a995c692b0bd22b7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860776, "uuid": "9ce4e187-6bdc-49cd-bbfb-50785c105361", "comment": "Malware payload (Mirai)", "value": "c52089b4ad90e875e9ae8c0b38276a3fe961848b34ac3f8e4d55817dad9e24bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860776, "uuid": "e9585782-af58-4d66-ae17-10c571f3132e", "comment": "Malware payload (Mirai)", "value": "7e62f1a6b8e0127d458d2cc8081e3a3ac7fe63ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766860776, "uuid": "e19920b6-8c47-449f-9f66-bae9030fd886", "comment": "Malware payload (Mirai)", "value": "a85ea63e9c1c52e1084fd448f9f862dd8fea99557266efb6046c8372481a11efea4941166247add272495aa42b485296", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860776, "uuid": "c6e4304c-a43c-4424-8970-75fe8406470f", "value": "T10113029DD4AA48DFD21A19370ECE1AEF7E52B28D17BD5A4883238D468D5DE3CD487038", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860776, "uuid": "6f6445e3-3f0f-4bc2-a727-9899e73f4910", "value": "768:vvqfVhbICh+ZSSr4k/ynG68ftKun/KBx4hwpIJvxNo0hISS4m1PWkUW:3qf/7+ZSSr4+yuIAeUwpsNo0hISSvF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766860776, "uuid": "5bb36153-38e9-4a65-87c2-0841f79b9393", "value": 44292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766860776, "uuid": "74112cfe-f1e9-4f9f-a7ea-9ead1c4a19ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766860776, "uuid": "5aa2285d-f51b-47f7-a9fc-9c937b9e38c8", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f1b17e9-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854726, "uuid": "a17a71f7-8f39-47d5-a631-24689461bade", "comment": "Malware payload", "value": "38b5dd70f95202a3ecf06d310fa0cdb6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854726, "uuid": "de0d09a1-88b8-4aad-8761-f17bd2cbec43", "comment": "Malware payload", "value": "c52156d1902518f8f36db14fdfeb895b593172fb4df0223d71f22037fffd69fa", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854726, "uuid": "eb4e3b47-2031-4e08-8be3-2ea9c13f5bfd", "comment": "Malware payload", "value": "edfd5ddd427b53ab16a5c226fdc30f92a0c5cda8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854726, "uuid": "4be9925e-ae88-4951-972c-ffc40f6645b3", "comment": "Malware payload", "value": "974502e745ef1ae6a13d907aa790dbcd324ea097f4e0f4db3359afb4af208819a2a1ce378e7025fa1700408688ba7190", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854726, "uuid": "d5515f76-28ea-42ac-ad26-158172f481a1", "value": "T110632A6D4626FEB616A312189F0A16B8459B1FA11CF1D430B56DB00A3F8373E70FE9C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854726, "uuid": "7881f651-2fcd-42ac-9424-e0fbe0394c23", "value": "768:I8w/h62/jWs6oS+xISN0vAv5nO/dkfScBYrwz2y8kTAlGB:I9l/AoSSMy2usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854726, "uuid": "498e130d-d6fc-459c-addd-35d76a2a2143", "value": 71641, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854726, "uuid": "d4e0baf2-376c-4155-adea-2a44f73ec67b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854726, "uuid": "f2f9d0cf-f6fa-445b-8317-e42c157243eb", "value": "invoice-1645080830.pdf (58).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bbb6b56-e35c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766864545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864545, "uuid": "3bfcf56e-6ed9-4d68-8666-d0dc1c436d23", "comment": "Malware payload (Mirai)", "value": "e76249029b8c14341a053ab966424d29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864545, "uuid": "5a64aeae-02ac-4561-9e79-07d195fdb30b", "comment": "Malware payload (Mirai)", "value": "c54a5d752f0273ab71c1887afdb69745d522fff0706056cbf118427eb60525cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864545, "uuid": "c103c067-c0e4-49df-8ef0-9015181b63ab", "comment": "Malware payload (Mirai)", "value": "b6e84e26773248a2b3df2cf89fb2edeafbb6d879", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766864545, "uuid": "94260b11-a43e-4a82-bd6f-e83f87f859d7", "comment": "Malware payload (Mirai)", "value": "b1bcb3eb17c16f1013e90a7bf005e27d5f69f702797432ee920cd6b407e443b723d22870b2e0b4e3fc917d786e4623ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864545, "uuid": "5ba73fb9-716f-4f01-89b2-9088c3b3f404", "value": "T19C73A54E6F319FADF67CC63587FB4A20974423D627E0C685E26CE9141E6034D682FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864545, "uuid": "960bf96e-95ee-46e0-b789-4650dedd49b3", "value": "1536:RlhwcOcgKiDOVcpQSqsdocVylOyNxyVTGVVjGVV/bRS8p9kIvCBOTAbVRj:VcDOZSqsdoOylOyNmd9EBOTAb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766864545, "uuid": "e3e9bdc4-20d0-4e8c-b27c-5a757e2a97e1", "value": 78048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766864545, "uuid": "bf3b5e4f-d423-49f0-8f22-d75398269bd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766864545, "uuid": "ef10cc52-8f3e-4e66-8a42-870aa1328d06", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f628cb00-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854577, "uuid": "2f524a6f-f5d7-4a9b-be55-3fa82c934d81", "comment": "Malware payload", "value": "26288da73c0a71b2c332f2c97c5b7bfd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854577, "uuid": "6f108064-bbc3-4c4f-9f2e-2b3e074a14de", "comment": "Malware payload", "value": "c55b5dcc7b47631159469214fab9f7286699db404dea77297aa9ec72df5303d0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854577, "uuid": "e7e23e8f-8949-41d6-ba74-250081225506", "comment": "Malware payload", "value": "4a399f51356f8232739b53431da6a96f830d7d16", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854577, "uuid": "8e413ad4-b0f3-458b-a19b-cd4c32658ffb", "comment": "Malware payload", "value": "6fafea0cec65aea7029bd87d5dae628e0c61d1db1f011a86832d658bd27da3d6a50dd8817d74bfd952860e3c4e9be652", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854577, "uuid": "47d46c66-c4a9-4ebe-b4fb-953c1aa47f8d", "value": "T178633C9F919E686F3CAEB89BCC2E798C35FFC0667DA7A65273807005054BD54439E0CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854577, "uuid": "5ef1d7c9-acfa-4006-8dbf-10e760a0d74d", "value": "768:I8w/h62/jWs6oS+xISN0vrIRh3NT9xdkfScBYrwz2y8kTAlGB:I9l/AoSSMMZusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854577, "uuid": "a7a634e9-62b4-4a80-9f87-0433bb0ee2d5", "value": 70682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854577, "uuid": "d1ec19f9-4ab5-46a1-88fe-e29546d99365", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854577, "uuid": "6101d77f-1de2-4a73-8b75-08da0a3a5dab", "value": "invoice-1645080830.pdf (89).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e53c1f-e2b9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794600, "uuid": "6403184b-3628-4968-9b0e-b3738ca67d4c", "comment": "Malware payload (Mirai)", "value": "639fc1d04b1ce444a2fe4ca2ac704ca8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794600, "uuid": "680950d0-497a-4f0b-9f77-b7c7e4f2d4a2", "comment": "Malware payload (Mirai)", "value": "c55bf5c4d29000767bc6720352cf698aae9c83e1653f0979b92262cd87b5d3fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794600, "uuid": "b9341730-a131-4b49-aede-04222992ff11", "comment": "Malware payload (Mirai)", "value": "d0caec10fb64eec08f1113a3b0b2c4fe8fa8001e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794600, "uuid": "331c5b00-4026-4f86-821a-02693c97443d", "comment": "Malware payload (Mirai)", "value": "2318b3befc76a899013b05a9a210b90ff6d5452c843c151efbac5c44f332b12a9cf53ce98cc7698d2554d3da7345b98d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794600, "uuid": "315fd947-a5c7-450d-9ac5-3ab12ce17f52", "value": "T16F734AC7F401CE7DF94FAB7A88170E01B62573959E420F27A666FD636E320984C56EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794600, "uuid": "d939c2fb-ecdf-42e8-82f2-aad6744ff2c8", "value": "1536:R5aX+edfT+f1EMPotamVZmBUXQvW8u3ZbTCi9vWf0Qi1I08TP4P:R5aX+tE1t7VsBUXW61LvS0Qi1rTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794600, "uuid": "79de3830-4d90-4dfa-abb9-abb8c4ffcafb", "value": 73540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794600, "uuid": "2bc3a6e5-9aef-4a6b-a12b-cce0946d2426", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794600, "uuid": "5d3607e9-5a06-4f23-8494-f1a0c9afbd85", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4b18da7-e353-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861017, "uuid": "4ff6304d-c295-4947-b19e-a3fd5e769031", "comment": "Malware payload (Mirai)", "value": "24aeec3dc24b5b7455b7f0fe83f0d424", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861017, "uuid": "e3465821-2978-4587-9f76-7e80e97d84e7", "comment": "Malware payload (Mirai)", "value": "c57cc489d8cec59af022d14b7771a977a72a8520ca7dbd9888cab91692ee2c6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861017, "uuid": "883156c3-8d8c-432b-99a8-7d044cbe0ef9", "comment": "Malware payload (Mirai)", "value": "1c594bf89044bae912fe071a3859f1177d83a4dc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861017, "uuid": "1ccd4377-df88-42e9-bf15-df14acb14622", "comment": "Malware payload (Mirai)", "value": "36d5556d33e9e72f5aa0ffb1c96cc5765c2780c154c3e808a391e20d307102e16a3719f2725290ac98d1bb6af673abf9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861017, "uuid": "ea530533-ef70-4ca8-afd1-6c3248d141b6", "value": "T14D041946FC818B11C5D512BAFE1E028E33132B7CE2DE72129D246F647B8A96F0E7B515", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861017, "uuid": "b4059069-7b2a-48a1-9fe0-d8cd7a58569b", "value": "3072:7DGNYMCtskIt0rGlMOQd/pjMUR40nQSBteXxMH8daiDXBeT1Yvf6Vs:7DatCtXIt0rGlMOQd/pjXRx+Xxqcasy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861017, "uuid": "1d82acc9-5382-44c6-a3b5-8ddaebd2a7cc", "value": 182908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861017, "uuid": "4066e52e-c4c3-4879-a027-6f76c2f33b37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861017, "uuid": "9db2f513-3a6d-4b64-b781-4f1ac4f64b4f", "value": "mirai.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "def510bb-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879878, "uuid": "58afb288-c139-4b8e-ab4d-501b3679ed43", "comment": "Malware payload (Mirai)", "value": "e32ee9d540a540e46009c62313182e83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879878, "uuid": "580bcc4f-e447-4e82-b7af-6ad1c1137e6c", "comment": "Malware payload (Mirai)", "value": "c59f5419fed44be2debb0726ec8f989288e0b6c97548ed4acc9b337835706753", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879878, "uuid": "94a15a0f-18a8-4a18-aacb-154175e710ef", "comment": "Malware payload (Mirai)", "value": "bad98a201226421c30930cc91450132464a2e8c9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879878, "uuid": "7aaee95d-78ee-4024-85d7-51a568c1fe71", "comment": "Malware payload (Mirai)", "value": "3cd1d4d4afa1546306fed2b0ee9b30f7f947f143ef1d8ce6108b3616201cc87d4bc61a82993e2b59cc34249b9cd372bf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879878, "uuid": "9031d5fa-aa2f-44eb-904a-e24dc18715fb", "value": "T10383F996B881CB25C6D452BEFE1E518D331317B8E2DF72139D106F247B8A86B0E7B542", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879878, "uuid": "946b775f-f405-4910-863d-adba5f725590", "value": "1536:mNn0dFZtjA/IxrNhqwImAuQm+lK9pZDar3GMox3HtMZiIAbEk4pTZ7QbwY1tuJ7s:ppj5rNgwIuQKhar33AbEk4pTZks0tuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879878, "uuid": "3777febb-4379-43c6-8867-1eb9abb8c11e", "value": 87228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879878, "uuid": "a53b9b0f-5d57-4d52-872b-e06c927a572e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879878, "uuid": "19c90df7-f757-498c-8e81-873268dae365", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1005dd3-e338-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766849334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849334, "uuid": "faccfc5c-4534-45ee-8c1b-7abf95f4bd47", "comment": "Malware payload (Mirai)", "value": "3b1745f763b5e37672161b06276c2fac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849334, "uuid": "eea557f8-761f-4239-820a-28754b06f07a", "comment": "Malware payload (Mirai)", "value": "c5d37b6ab40c3dab6512dd1b516f73229616aa48cc911a3b1b0beb1481fde542", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849334, "uuid": "214ebdca-54a6-4976-8d67-1d31e492e95c", "comment": "Malware payload (Mirai)", "value": "f837a687a24c9120bc795fd629f573eac7778ca6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766849334, "uuid": "1af5590f-ef16-480a-b7e5-18d05b484791", "comment": "Malware payload (Mirai)", "value": "920b29fa3e4b3160b09e4a16136cf3675c7111d3da42b08d129cb157b143f8cf3dc97298c4a9dde24ba2333d42dea943", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849334, "uuid": "e5cd241e-cc3c-440d-a5b9-c12e5ccf5000", "value": "T11DF34BC7F800DEBDF90AE73B48630805B130B79114935F37625BB96BEC3A1994967E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849334, "uuid": "4e320fa0-3b91-469d-bb3d-fd697d3d3c8d", "value": "3072:2oEqoMKsESNam6ZYZmQ2cC0bC8aIPCQKRD6VFjbiYLcTKcyMhVy6:2TDD+7CUC8VPgRDYLSyMny6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766849334, "uuid": "0555e146-0d31-422f-ac63-a9a4975ae18b", "value": 170688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766849334, "uuid": "233f9857-6caf-4dbc-be76-ae74960e515b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766849334, "uuid": "4b1be9cc-aaa2-45a9-8430-6387519566ea", "value": "miraint.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03f7900b-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795330, "uuid": "e72fc5c3-425f-4bbf-be1e-2bcda6799034", "comment": "Malware payload (Mirai)", "value": "e1b896a314924a0a3d764d57b4ed7efb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795330, "uuid": "522763ef-3e63-4690-9a53-2978b6164505", "comment": "Malware payload (Mirai)", "value": "c662bb886503cbe4a6f68c4bdd8cfd73e77bde74549e0bc6bd00405c213a30d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795330, "uuid": "03ff9ac7-4f65-451f-adb4-9bbf70bfbf91", "comment": "Malware payload (Mirai)", "value": "a5fe3d366531b20fe1b037657f1d5f288e989d5e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795330, "uuid": "a8afce08-5bef-4a1e-9f78-89e8134ad0d8", "comment": "Malware payload (Mirai)", "value": "e35acbed86e562e23fd8517daa36c2338f1180ae4eb3a9a7a01f70bd3b8c1b5c7f05cb5700dfafde580f53487415a9a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795330, "uuid": "efdb7d15-3afd-4903-a5fb-0385fdbffb57", "value": "T17403F175A2C4D9C2C4A0193CFEABA8C295594A3C408FA6130679CDFCFEFA54957ACD42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795330, "uuid": "39505f3f-a11a-4d7e-9766-29f5287fab59", "value": "768:yYMZq9POoA/yUsPDZNvVj2q4T8bCfB9q3UELy8:1M89ssrZNvJ80LT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795330, "uuid": "2179a428-3acb-4e68-878c-420557aa1bdc", "value": 40372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795330, "uuid": "153878f9-86a2-4377-ba44-289cf4cad046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795330, "uuid": "da0317b2-a7df-4fd8-96b6-be9a432957da", "value": "Space.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d24b0a82-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830895, "uuid": "2a23d581-113c-4bd3-91ea-522f532ef734", "comment": "Malware payload", "value": "220101f9eb51a36ba62f3d5ee72e7314", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830895, "uuid": "bcdad0ea-a781-48a9-9b43-1889ebbccb30", "comment": "Malware payload", "value": "c77b954e27f1bc1f73f084480c10dd90b1eba8edcc502fbe8bbdccf66e4750fd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830895, "uuid": "2d5b9d8a-327c-4f42-afcf-723ec09c6305", "comment": "Malware payload", "value": "b9e627b3f7910bc2b9d084747819197a9ee5188d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830895, "uuid": "1fa290a1-29b0-4fb0-85c2-008a80865c19", "comment": "Malware payload", "value": "8de334098b37a0d94e03e465997c95b8df6f68b9f2e88ed4696498313d3278955a0b0b0a0b53129dfe2c0307621b7cae", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830895, "uuid": "b84bf9a2-065f-4cb0-9676-4ab16c87e079", "value": "T177632A981F38DE4900B68B77C21D6B99E2C8131A4CAF74BBDA62BE40EC9C195C4DD45F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830895, "uuid": "32661324-e01f-4f84-bfaa-9fce24b7d6e6", "value": "1536:I9l/AoSSMXcMM0YPtYT+jCWFxtk/Xf1jGNAGqJ7BkYVNJ9fP3x27VoO9HT+JI/K1:I9l/5MUfusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830895, "uuid": "9a21bd80-9bef-42a1-a73b-9a1d159c61ce", "value": 72532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830895, "uuid": "be791b26-60d2-4c57-973b-1bd91077ffc7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830895, "uuid": "914d8f3b-b65a-4ddc-b921-2a33bb0baaa6", "value": "invoice-1645080830.pdf (6).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a3b0b45-e32c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766844088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766844088, "uuid": "e859241d-d36e-405e-a322-96aa765c50fd", "comment": "Malware payload", "value": "bd16e5c339d836e17ecc4e40993fadba", "object_relation": "md5", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766844088, "uuid": "25608bf9-5c33-4f5b-8753-0387d1a7a086", "comment": "Malware payload", "value": "c7e02b2346e2b88f88db7ae1d7a1cc48d5ec03728c86aa64fc966f0843103112", "object_relation": "sha256", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766844088, "uuid": "115e45fc-23a3-4bac-837e-066ec185bbc1", "comment": "Malware payload", "value": "79cfa116d3487c2e1c7e803c0c98b079c4a395ae", "object_relation": "sha1", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766844088, "uuid": "14359ca2-d2d9-409c-8b87-fa23bf2a1d2f", "comment": "Malware payload", "value": "194c48fc13f2441462f776d7644c0d01b89a46a3dd4c9409e3a91cb0ced91df799dc288a75c588706bfd0159dde6ede7", "object_relation": "sha3-384", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766844088, "uuid": "a526384f-1522-4aac-8e17-6c3bb4186d59", "value": "T19F851282A79015B2E8F4D73580B74F360B767CA48B91275F4148F42D5E333826A37BAB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766844088, "uuid": "e4c26432-b512-4a0f-9788-0c6d256db139", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766844088, "uuid": "8eaa7e7c-fc53-4800-8520-95c3fdd24447", "value": "24576:+7Z3YxSw0Wwy9CEqGinUe1aV1o/MR2JPtk7q6+nEq52FoHa87O04aZOo:q3mqZnZsejke6M15VF34u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766844088, "uuid": "5950f039-88e1-4ea2-ad6c-24cf554e6ff1", "value": 1829992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766844088, "uuid": "25ecf0c8-82e8-45d7-8865-43b3d9ac4e26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766844088, "uuid": "64e45d5b-be54-46ef-8b22-ca207a7721d1", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90d1b1ae-e33a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766850112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850112, "uuid": "c4dfa706-9c5d-463f-86b3-7772a6e6b97b", "comment": "Malware payload", "value": "81de2aaca8f504a6085b8f5e894be729", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850112, "uuid": "1dc0c573-eb1f-478a-81ac-92ef2aef4f4a", "comment": "Malware payload", "value": "c848d6431e722ea0c6a118439b2aaec84fd9aa3912a7d84fb7fd748c77d33f61", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850112, "uuid": "66badf34-9728-44c0-b8dc-9cfbb61a5a35", "comment": "Malware payload", "value": "58c29e6a2963da290ef66f69eb787bb92f9e74e6", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850112, "uuid": "dcc3de00-287c-4272-98d1-24e7b7d45db6", "comment": "Malware payload", "value": "c10cc436d8aa294a04b951f7287cecd874a8dec3b03ba00e00010a654c77f221e056cc0e7a3c470c739dc6807ca2f2ef", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850112, "uuid": "aaefae23-ff59-46be-8b85-13625ff4cd65", "value": "T1AF64BE42A7FD1155F4F7ABBA6ABA4141893ABD656BB2CADF2080411F0C70BC09DB0777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850112, "uuid": "d8abed5f-ee1b-4810-976a-93127b187055", "value": "b10596a614daeaf025ce254fa50b488b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850112, "uuid": "96efdcef-4422-4600-bd42-7c655da07c1c", "value": "6144:Z61ASP8Jy69RkRI9gIlLk/xl7GgrbnCIR6gyRRZu:4L8DkC9vlLk/tbCIjKPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766850112, "uuid": "edd36cb1-f2cb-4483-97dc-ee89faf5104a", "value": 326656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766850112, "uuid": "f35ed3d5-d393-413a-b2a1-72c92ceedc03", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850112, "uuid": "e47bfb07-4dfb-423c-a41d-6046354a84de", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "341a1a30-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859835, "uuid": "e57f41a6-2a24-4088-96e2-7d88a7cae1b9", "comment": "Malware payload (Mirai)", "value": "18be7718e46816d88cf8d94ddc0081aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859835, "uuid": "fbbd5914-7dda-491c-a5b0-b1b6b5f48102", "comment": "Malware payload (Mirai)", "value": "c8dc2c1a336ee47976f7ff589415d6a1d0b2c2e23701e35a66c79f3beae12b25", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859835, "uuid": "b726f3b4-0847-4b52-81a2-2cc5548f5d9c", "comment": "Malware payload (Mirai)", "value": "0f7f86d5a1d3e1475d519fa4ecdb4426ee6fb09d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859835, "uuid": "8485b872-1985-44f3-9c9d-521e3c750175", "comment": "Malware payload (Mirai)", "value": "14a700f7bb83924438d4872f1ad3cff64b2683906ff5c65fbf3aa7c94cdb39b0d19930b0d1f4ec05053ec350ffc736a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859835, "uuid": "a04bde3e-ad58-487e-8da8-6bcaaf0efd9a", "value": "T1FAF2F1F8554BD4378020F236EF3A4485321F4BF8F9FF365A0764A1A9AD9518709B4897", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859835, "uuid": "6cc26588-48bd-42d5-8b37-73b1bd18e8e8", "value": "768:Yxviz/PdNzQwTAFfxpOQkgzmgq/A8GTs0skbSrjoFYBs3Uozn:YxKjPdbsE+ztb8l0skuHoFYszn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859835, "uuid": "103af85f-e8c3-4e18-9035-50b6e240dde3", "value": 34764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859835, "uuid": "7d0d593f-858c-4de8-b6b6-8386c5ada555", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859835, "uuid": "2dab920b-4e77-4e22-a945-977b888da460", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b26ce76a-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873791, "uuid": "e04b9ff7-6988-4f37-99a9-f9ef1fc821aa", "comment": "Malware payload (Mirai)", "value": "e303619ee91f746eb7f1950bdf91c04e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873791, "uuid": "d220a3f6-3f83-4e31-b86e-1350368f5d0f", "comment": "Malware payload (Mirai)", "value": "c964c4e8e0efa883cb269361ffa8569bf5af464f7946af17fc9c6ccfe25c3a6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873791, "uuid": "c6037cba-0e9a-4119-9dd0-0d75aaabdcd6", "comment": "Malware payload (Mirai)", "value": "3d72edf872a5deaabffd8f47b55c198ea638b0cb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873791, "uuid": "a3e5167a-ad3d-4e21-9897-5338e484d1fd", "comment": "Malware payload (Mirai)", "value": "d8163c5dc3ab9624685382fc4329f1234a09b8a935a7f2a57d105747c850c8975b991633c9ce3361308cb53bed85f811", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873791, "uuid": "27f2c86c-87f1-422a-ad33-d29fb62a513b", "value": "T191835B01B3880D47D1571DB43A3F2BDADBAFD9D122E4FA852A4F9B468171A33154EEC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873791, "uuid": "71300a60-0407-43c2-9c8a-5fa0de32cb7a", "value": "1536:73uTuBTusGAoHoMXyBaw35cawIGhBpVl/0xTL45Y8C:73HBTOHryBtwIaBGx38C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873791, "uuid": "01c6a842-0a6b-4bb8-8fbe-c187d549a2ac", "value": 84052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873791, "uuid": "bdf1b0bb-a1d2-4aef-a462-981acfebc0e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873791, "uuid": "5143c894-f79d-43cd-be53-bc672ea00518", "value": "ub8ehJSePAfc9FYqZIT6.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d7e5ce3-e350-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766859582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859582, "uuid": "ef3468d5-c136-47c7-a8d5-d851ac4530a5", "comment": "Malware payload", "value": "94ac48613b5e781118108c71a623c302", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859582, "uuid": "c271b744-6307-4e5f-b965-a0a1dc062a74", "comment": "Malware payload", "value": "c9724019722450b2d78032f094ddc7c532dd7d8104b4266488cbb3d7d7a332a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859582, "uuid": "c2389a83-45eb-4f98-8dc8-a114ddaa9643", "comment": "Malware payload", "value": "19a4791112741f557467113effd2a7ba1f2843c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859582, "uuid": "57c8b286-9800-477c-b42b-3e79ebf084f1", "comment": "Malware payload", "value": "a3885dac42d7c3d56e5e7e83fb99f37ab2539f3dfc3df7be270438084278d5f5033f8a333676ea3268175f36f8de9f56", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859582, "uuid": "1b55327f-3af3-44ae-83bd-209975debde0", "value": "T1DA4422D9C40C5E91EEF3E0B0A526A474723E4F8FEBB229F5C0904A6F1ED36057849E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859582, "uuid": "d4204ca1-b589-4b3e-9d0a-7126ac222f36", "value": "6144:TJ3vfr6BT8ppgxscOeC/X/9lxXXGLrKJaU64SQbRgMqWd+IHOeIp:VL6BT8wGLbYLrixxSkgT8+MIp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859582, "uuid": "469326b5-b243-476d-adf1-0677e41e7e71", "value": 257840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859582, "uuid": "5f641c11-5e2f-4a26-866c-1c4dde07ab6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859582, "uuid": "16121bc9-cc93-4d77-9383-ea603f837f70", "value": "app2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f863eb2f-e33b-11f0-a129-42010a9c0007", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1766850715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850715, "uuid": "fb10388b-c34b-43f2-b99d-f7f035a87071", "comment": "Malware payload (Socks5Systemz)", "value": "abd064a628ee7f96f8b901230b91d4fc", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850715, "uuid": "03fad08c-3d43-4989-bf1e-0b40b9fe3524", "comment": "Malware payload (Socks5Systemz)", "value": "c9853ee50270d7981657529511db6c594bca6c6ddd779a912a280f1ac1973b4b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850715, "uuid": "16ab5c67-2518-499f-b772-6b1c3b3b5e67", "comment": "Malware payload (Socks5Systemz)", "value": "9e9c5381b1e4830c6eaaf46c8d30b471fa653974", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766850715, "uuid": "2ca815b5-6729-4ac5-98f3-8676a4a37abc", "comment": "Malware payload (Socks5Systemz)", "value": "e14c34135d62170accb6d2e82e2781dc74e4b0b459ea02c05987f4fcacc058be745bdf3b71272c966e0ffd5552dc3c51", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "U", "colour": "#417F84", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850715, "uuid": "bfc8b36f-91ff-491f-a243-3db7479bd3e7", "value": "T188063383AFF1D4B2C0D22B39ED4626B09979FD675E351B096B8C4CEB753626E841C348", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850715, "uuid": "b6675464-5d14-4526-b57f-bd777b21c6b4", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850715, "uuid": "be55d710-3999-4ad1-81a9-fd3f071add21", "value": "98304:MFz7JtiXqGrCbjSq9wYVNB19uJ1/oIPat/wC:+LPGuPX3VNB1cJ1g2yT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766850715, "uuid": "77a6a1b1-29e3-4565-be21-6c8af4fd0dd2", "value": 3970161, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766850715, "uuid": "6cb83485-0eb1-43be-8d0f-8e2c42866489", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766850715, "uuid": "387472a3-7c79-40d7-9bda-7543c6f2fc22", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58da1d3f-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824678, "uuid": "1a76d000-9d0e-4f25-b6bb-ae53eb5e4118", "comment": "Malware payload (Mirai)", "value": "f7dad046312d521ba3c9a936abb8584b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824678, "uuid": "46271549-2d58-47f6-870f-9628f0d426f9", "comment": "Malware payload (Mirai)", "value": "cadeaf2784755859c2516684bca9450d8291bacca9b904c456692318f30ec759", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824678, "uuid": "83b67178-c519-42c0-9439-0376c8494fe6", "comment": "Malware payload (Mirai)", "value": "1aaf633e0233547804a220ea6a391372b5725717", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824678, "uuid": "35cff741-07c5-458a-bfda-1d6ffcf4cff1", "comment": "Malware payload (Mirai)", "value": "0647f0f25a1da6859bdf086a40302ed42a0c4440c391a81272330395a38425d067cff513948e7b8efb64235ee1014f1c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824678, "uuid": "3e2f3cba-56ce-418d-9bd3-fc5731c17fb8", "value": "T1B5736BA7DA16AF46C04761F061F28E340B13BC1989A71EF5D5A5EEE61003EE8F9193F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824678, "uuid": "678fda1c-23af-41b4-85c9-ec54b899fc46", "value": "1536:Ua5SIbjF3r/Xml/qSy5K36ZjPMGQCssCPxj/M5l61d6g:UsvbFTmTx3Y4GQwejc4t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824678, "uuid": "fca25e4f-5028-4f8d-af32-682560ac8533", "value": 76040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824678, "uuid": "cba01af4-8964-40cc-adf8-02aa2c1f647c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824678, "uuid": "0b9dbe63-5fa8-4d88-ac72-bb54364e248f", "value": "nova.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "215b9bde-e2f0-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766818142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766818142, "uuid": "a19d29b0-1036-4674-8cc8-bee8a373b5e4", "comment": "Malware payload", "value": "cc1912cc1b754c744732437fad21f834", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766818142, "uuid": "949d5711-fc46-4de7-bf61-6e5971212bec", "comment": "Malware payload", "value": "cb3bb1ba41adcfe1ecd626b2ef182a96b0ed876b266bef4ad0a20bc6097cf1a4", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766818142, "uuid": "586d1ccb-0656-4bde-a4e7-0a7eae73226c", "comment": "Malware payload", "value": "ab1a034f54603e1a485c0f9a4766aadcd1b1ae2f", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766818142, "uuid": "ab5712d9-2905-4d09-b96b-9d49da72bf7a", "comment": "Malware payload", "value": "1c64782683670a0adad44277bc7dce22dc44b8b2dd3f79a66d94a24f43632e0c29caf6de4543ee08ca078fc43dd3ba18", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766818142, "uuid": "d72bff33-e0e9-4f41-bb56-b0152f95dfe4", "value": "T127E1D7C6ACF32418740B806DCBBEA6587069A057474ACD9CFDCC72A8DF0C5A49622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766818142, "uuid": "f1854ce6-d225-4282-a495-00695369d45e", "value": "192:OZyIE/CTK/e+0llHYoHsfOBro2Tc/OMSmy:OK/aYoHsfO2/2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766818142, "uuid": "87df3537-9216-42f0-a765-a26e6278a2b0", "value": 7373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766818142, "uuid": "ce9b05fe-a72e-45e0-b86f-0573cc3cc15c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766818142, "uuid": "349ac9ab-024b-4504-9c44-7d6c0c5f2d5a", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f00ab909-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879907, "uuid": "5a343ec3-c3d6-4fca-a948-a2e9e7593a6d", "comment": "Malware payload (Mirai)", "value": "107463b247606605ad414c784422e88e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879907, "uuid": "3bdbcb27-298d-48f1-9c70-f5a4177ebdec", "comment": "Malware payload (Mirai)", "value": "cb71c4d6c32a12cc39b5399b3a363bf37be71745b5a6e91c2aa7f75960149e2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879907, "uuid": "f24a0219-c72f-4632-ab02-74fae2a6dd08", "comment": "Malware payload (Mirai)", "value": "d6b58f6b3a1cb38d3203cd95fd07c12ec53e7d7f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879907, "uuid": "fb765cfd-a5b0-4f12-b953-534404a42881", "comment": "Malware payload (Mirai)", "value": "8bf7f7c63be02310ebd3f53dfb7d6148344dffbcb9d8ce9cf93ba8555ce69a2f2f0b032872d0235ae02704089865619d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879907, "uuid": "e8d5010b-67f9-45bc-b5eb-1eda3c59dbc1", "value": "T136E37DC5F743C0FAE85605B1107BBB369AB3D43F242BDA83D3B95A32EC51601C51A6AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879907, "uuid": "8d7c2cf0-d055-48ed-a903-50722ee1c16c", "value": "3072:t76XRxjzXlN8Hu3JXeLzxwcDj3kIRVYVviREHJhIB16y:96XjHXlZJXk0MmvWATy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879907, "uuid": "96efc2a9-d4fe-41b8-90e2-437bc10f9233", "value": 154056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879907, "uuid": "bf79ea9c-2632-4031-b26d-6283abab84cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879907, "uuid": "82836253-1c69-402b-9722-44ad522574df", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f6f8001-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830594, "uuid": "58fe4968-8238-47fa-a5f2-a1eff0a3b3ab", "comment": "Malware payload", "value": "aa92925d0882554150a8fca90458c4af", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830594, "uuid": "73a2a760-9960-4ab4-8300-fe29ab6eff9d", "comment": "Malware payload", "value": "cba1dccee783b1ebedcad11c8d9fbf69367d1e00642cfb16c6511f4d9abe0a66", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830594, "uuid": "9e7527bf-cc1c-4cb5-9b9d-f6370bceb0d4", "comment": "Malware payload", "value": "8d42b284c9c3aef8f5d3789f302d394657c4e9f8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830594, "uuid": "19420f82-f2fc-42bb-b6c2-f7d7f414e987", "comment": "Malware payload", "value": "7bb1ac3fea8676b23dc8edc08c690fab568d87bcb53b20ead7682225627fcd38d3e3334d15e16a0e09544c73e6818419", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830594, "uuid": "efe14fc6-b5b5-44d6-8a83-5a3e31928d80", "value": "T10F732D31BCA53C5DA96EE9D7413EA013A70C7A36171EF886477DFE090A3BCB14BA2511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830594, "uuid": "144ce1d3-32b8-4453-9af7-6f30b5f2ff43", "value": "768:I8w/h62/jWs6oS+xISN0vvLmAeQniMCv9NcOzUak35rrc2r310DDh+yEvpFEyLya:I9l/AoSSMepusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830594, "uuid": "c82cc268-ccf3-407b-8112-7a2fc819fedb", "value": 73417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830594, "uuid": "3e199008-1747-4c11-bd06-c7b696b77ec0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830594, "uuid": "8bfdfa6c-7d5d-4c93-88e2-7b4872588e09", "value": "invoice-1645080830.pdf (67).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "026326c8-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795327, "uuid": "f05360eb-3847-4179-928a-ffb5774fdfbe", "comment": "Malware payload (Mirai)", "value": "8515d1c313ac6f937c4408c576dcdb86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795327, "uuid": "33de190c-1fc6-4ffc-867b-5c306dfd6a89", "comment": "Malware payload (Mirai)", "value": "cbf2ff33a5a94f42e63eb4b97c252933faca443a227c84d745b9779b6d75d6c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795327, "uuid": "bc00a5c3-9717-4380-8c06-355bff580734", "comment": "Malware payload (Mirai)", "value": "bfbe7fd2a4f8858358420e3fe9116c57ba9aa80b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795327, "uuid": "c88fc474-8844-4490-adcf-057e62fc59d6", "comment": "Malware payload (Mirai)", "value": "c9c43f10c400a3997ae1d892f7b75f657499b3b61e0f89f2176bc66de76308e5318c17438dbe4ed547feef52cffc59f5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795327, "uuid": "fa27bc8d-4419-4a5c-b909-cba6e654c9bf", "value": "T1B4F2F268E7AD1D86DFA86E3A8FD497CB77531B9136A55D62F044ED038C670324D421CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795327, "uuid": "4495939e-0727-474e-901e-857917a347e6", "value": "768:h7160aX0xrtYumD426amc2JskNYH9y4Tqwu9m774uVcqgw09U:h7160akRCrrAPNYdPewj774u+qgw09U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795327, "uuid": "e55484e5-e62b-4e0c-bb6f-662a8029c95b", "value": 35108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795327, "uuid": "71007925-2fbb-4358-9aa4-76485e7a2e5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795327, "uuid": "1028e396-5ad2-4e38-a2d9-dfe7a35515a2", "value": "Space.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3371a615-e351-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766859834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859834, "uuid": "bc33b511-3e34-4584-aae8-7eb64a224545", "comment": "Malware payload", "value": "4016642f2d29f429433994833692dd2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859834, "uuid": "1a2b6e6c-ec0c-4a7d-a2de-906585e6c159", "comment": "Malware payload", "value": "cc0a7cd941ce7ee0fe87e2d54f04275896ebc7fd4874a2d8b4ab5238a8a917e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859834, "uuid": "02a0680c-43c0-4fbf-8c63-4ca681be1292", "comment": "Malware payload", "value": "2f9a12b92f2b0e0ca29a634894404f30a4216eb3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859834, "uuid": "7f0c4f77-2d04-41bc-8daa-54a8982cf146", "comment": "Malware payload", "value": "9d9f347a68e2bf216e9317fd30aa7cd297a76c69a8152dcac66e541cbfeaa34c055fe1509a8252cad3b8097d728258e7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859834, "uuid": "82ab0802-8f3a-4e90-9439-e347f5525de0", "value": "T14CA4E096F3172E85C9D78535288682815B5DE86B33F283463B439C7B382D7778F68389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859834, "uuid": "389d415a-4fa4-409d-8530-444d419aeab6", "value": "12288:K6crHm9z0SqNxVywg2JthnJfmzMK8pYw4d:KAGFNLy5+tJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859834, "uuid": "a6370c0d-54e3-4c6c-97fe-b3d6c3a4b061", "value": 449080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859834, "uuid": "848ca20b-1ffa-435f-b541-e839440fed40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859834, "uuid": "d4f38965-5c42-4650-805c-8498fc35d3f6", "value": "mirai.gnueabihf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a9944c-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797619, "uuid": "f7a6dcc3-efef-4c37-8878-1bb5a2633550", "comment": "Malware payload (Mirai)", "value": "621c5996d9e60c8614699fb0e87413ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797619, "uuid": "84b5090e-902d-4d2e-ae96-f4851c07f29e", "comment": "Malware payload (Mirai)", "value": "cc0d1964c820c73d7021ca5883225b81ae1de1b2300c07b0d101cacfef5d9495", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797619, "uuid": "ada646bf-e2b5-44a9-9f79-79457d3f3969", "comment": "Malware payload (Mirai)", "value": "2c270c39471bbcfaf8b32cd8d4e8340156401eb3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797619, "uuid": "52af95bd-1256-473d-a561-aa7ee62420ab", "comment": "Malware payload (Mirai)", "value": "59c47aa809248af26c374343b86e081e5e0c6745bc446ff0b06deb56fc5d62d2bab0b2f1fd51c3872bc4d3a2bda371ee", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797619, "uuid": "86455acb-4ad3-4f71-a7ad-fb5f60d1f8c5", "value": "T11F73194AFD819F11D5D665BAFF0E518D33530B68E3FE7202DD24AB25678A82B0F7A401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797619, "uuid": "38ba3387-b1f7-4c25-951c-306390ce96ff", "value": "1536:TeBn+D5qO2z9q/A3ir4yRRccYXlF948QQqKllCYiG1iB72c7ZoYm+obVRit:TpDYe/8yRRxSlF948QLk1C724uqo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797619, "uuid": "e5e55b8f-7fc3-4f73-9acc-0cad2de64534", "value": 79184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797619, "uuid": "d0bcd75f-757b-4404-8836-ba1d943b5412", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797619, "uuid": "765de648-480e-4cb8-a9d8-80706184fbc5", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ec12a89-e37e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879341, "uuid": "4e7e5f2e-83f6-41fc-a36a-dd5a55631dc1", "comment": "Malware payload (Mirai)", "value": "7d41e461b4715da207e57ab2505e29e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879341, "uuid": "95178ea2-ff2d-450d-aaaf-648f4d7c6cc6", "comment": "Malware payload (Mirai)", "value": "cc660d9cf7e581b1edeffbfeb351c2a39c7abb170136eee3cb86a993f369b502", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879341, "uuid": "c7883819-2c10-40e3-b8d5-395c2d4a6436", "comment": "Malware payload (Mirai)", "value": "6e83d6c29ae08af081052f30f8fcdea5100b83df", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879341, "uuid": "90880c10-0619-44db-b6fa-feb7746fccf9", "comment": "Malware payload (Mirai)", "value": "84a4d00b5b6170be7a35798b84de455f60f770324f624784fc84ad7910c42df881b05736bb940768d0c7f70c4dcf8a19", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879341, "uuid": "2feaf6b0-bb0a-496b-91de-79fdd15f29f5", "value": "T18BE38C72C839AF98D269D178F5349F782B53A51181532FBA5AA7C2B54043ECCF60A3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879341, "uuid": "7909734d-b86e-4a66-b118-90aa1841df4f", "value": "3072:BwHnR+6FFG6FPeVU67uG0TGrgp8W6n+4p/VR:BSR+8F/PeVJ7uG06a16+4p/VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879341, "uuid": "baeee364-0f87-4260-ba02-4d329592c2a7", "value": 156672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879341, "uuid": "682da402-4c44-4723-b275-7859ffd77c76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879341, "uuid": "4f263685-3bc6-48f6-937c-db4aa0cadc8f", "value": "mirai.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e15a4424-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854542, "uuid": "18064e27-7819-4eed-933d-02dddffac84e", "comment": "Malware payload", "value": "ef9daaa52f50649a6f4975801be0100a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854542, "uuid": "5503298f-530b-42f6-a629-115072b04071", "comment": "Malware payload", "value": "cc924f8be43f712fdb196a596d0b44275fd9a3688548757f881edf5f10d61e25", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854542, "uuid": "6114fdad-9d34-41e5-85ac-4f41cf4ffe2e", "comment": "Malware payload", "value": "ab171f612a53c87350a8b6083fd3e3547596dfb9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854542, "uuid": "5e36e69c-ea42-478c-984b-d97996db20ad", "comment": "Malware payload", "value": "4b49f1e9206ab252ccfabddf3144c3ec319582b84cccf84a01040bd252cc0dc16fd4002e2eeac07276624251544f5894", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854542, "uuid": "c932564c-c5de-4bb4-a0d8-ad05f8ee4b63", "value": "T107732BB4D853CCE6816583198DDA3ECFB5B373246B5D7604994A2FD3000FE7168C6ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854542, "uuid": "fc3036d5-991d-4760-9a5c-a46058e33bd2", "value": "1536:I9l/AoSSMkW/WRW5WVWPWuW5WVWPW9W6WqWxWyWwW+WtWJWmWmW6W8WDW2WdWaWs:I9l/5MuMusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854542, "uuid": "a4dfe983-3f2c-4968-a77f-744ba9cb801d", "value": 73429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854542, "uuid": "10e2c569-0129-48ac-b8b6-410052acbcfa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854542, "uuid": "06f32968-45c8-46d4-a277-465ae7665dde", "value": "invoice-1645080830.pdf (91).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a013b778-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825656, "uuid": "cc5527ca-f598-46e4-9589-e46712620e54", "comment": "Malware payload", "value": "65da3a321cb3f0164eff91e7004650b1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825656, "uuid": "d50122f4-65c9-41bc-8b6b-1a06e6edb978", "comment": "Malware payload", "value": "ccb6995b785f215101f38f0ffbcc14cc6a73dcc33325bcee11ea13321961dc20", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825656, "uuid": "72b5fdf7-64f7-4a33-b093-6a1c159b9dfb", "comment": "Malware payload", "value": "5e959ac82b835456fee7361676a1bce990ed1e6c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825656, "uuid": "21004f7d-cf89-4346-b365-14ac3a5dd699", "comment": "Malware payload", "value": "4d8d445d6b3114902c5602def29ec6a2876904d458b065b427506f020b265995eacd378579edc92f2b8f29ceec73555b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825656, "uuid": "abef43a8-608d-4a18-beca-0c27b320aebd", "value": "T1567308BC3CB2E61611B8A4F64D1836977636FF2252C1D06D94CBBA5802165FE6F30F68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825656, "uuid": "03f30c8e-8a32-4340-a315-25230839b840", "value": "1536:I9l/AoSSMgOBOBmOvOGOhOBHOJOzOmOsOdOxOcOlO3OXOIOVOMOZOjOmO1O7OgOa:I9l/5MgOBOQOvOGOhOZOJOzOmOsOdOxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825656, "uuid": "a491cd11-1a65-42de-a70c-1f26db42d0f0", "value": 74460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825656, "uuid": "eae0152b-0387-4c75-be65-08f81eabd5df", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825656, "uuid": "9161fd6d-39ab-4db1-a264-e736e5fa38a7", "value": "invoice-1645080830.pdf (11).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0ca9495-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825335, "uuid": "1ccfbda2-a22a-4062-aa8b-596301b36009", "comment": "Malware payload", "value": "4cead4044583e5cb8ff1f3ca7ec95890", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825335, "uuid": "b631fa6e-f747-4985-b076-80bd292a968d", "comment": "Malware payload", "value": "ccc98da5cfd3bb49e49cafb58424890b46bda0d84dc6ea56a918ae3ff975e22d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825335, "uuid": "2e3bc7f5-2375-4ee6-bc69-758b58beb5fd", "comment": "Malware payload", "value": "86d3ceb998b083ff44e89f8d778a455f205be047", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825335, "uuid": "7544b714-4da2-4d54-95e3-c296ef802759", "comment": "Malware payload", "value": "560f410243461dfac6dbc1fda4e0ce72623bb6eb14c1aff22c1488293b86837234c8c9cbe0e3f9ff4ba89af6d1a0ba24", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825335, "uuid": "a825deba-2072-44b2-9bb3-3279131301b0", "value": "T1F0733B506E177EC62598F5069EDFA2D209400CEC0F7DE673171AF20D494B1E92FAF9A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825335, "uuid": "ab9e42eb-1cb7-454c-a401-89b676212c48", "value": "768:I8w/h62/jWs6oS+xISN0vs5JSYnsdkfScBYrwz2y8kTAlGB:I9l/AoSSMususrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825335, "uuid": "b64d49d2-44c6-4247-914a-7ad925e886d3", "value": 74401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825335, "uuid": "a7e5b935-6e38-40ab-a5c8-968ea8b5d47a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825335, "uuid": "41fcab4f-7f77-43d2-a33d-3c9c2aeb4449", "value": "invoice-1645080830.pdf (79).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de9502f3-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830486, "uuid": "ec1cc7d6-c5b5-455e-92b2-696a330afa1b", "comment": "Malware payload", "value": "f2e5d6e287107b0db562f63b2aa4df6d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830486, "uuid": "8c2107c9-b301-479e-ac68-de3af9867df4", "comment": "Malware payload", "value": "cced76d65b3bf1183c80b54fcb317121984cbcada02ef35a94f00a5dce03eaf0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830486, "uuid": "1b122b04-ce35-4b12-97e9-42cbfaaa8420", "comment": "Malware payload", "value": "8198a1a83b025e6e27dad6c8f794ffa867a6df88", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830486, "uuid": "12502cfa-477d-4640-ab95-65608bd4fe5b", "comment": "Malware payload", "value": "5d1f205036fd08a8a8487298e57f476b00f9f82e54adb654a57d2f4b5fd20522cc71a05dc74734964d56cc87d7f916a5", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830486, "uuid": "4dabb149-2f17-446d-b59e-ccf11a680fa8", "value": "T135731A8E5C752E4EA5CB3C0DD0F0BFD8ABA0A1945D82F6274212D7178BEDB3125279B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830486, "uuid": "de5cba52-34bc-441f-8d56-6b4ebf19dc2f", "value": "1536:I9l/AoSSMnGruGrlGreGrWGrKGrUGr/GryGrOGrRGrWGr9GrnGrcGr7GrfGrnGrT:I9l/5MnGruGrlGreGrWGrKGrUGr/Gry6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830486, "uuid": "00c32c10-9f19-4bf8-a9c4-d1ec58df90ad", "value": 75395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830486, "uuid": "d2fff520-294e-495f-91a3-64e006a1ca6e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830486, "uuid": "3a982f8e-4c29-4699-ac68-5b1741e9cf49", "value": "invoice-1645080830.pdf (86).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2dfc158-e369-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870356, "uuid": "eae9c3ee-d4d7-4a0d-a38e-fd2807852336", "comment": "Malware payload (Mirai)", "value": "9fede75edbe1386a2192da2985fc4c5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870356, "uuid": "7a2de560-25a5-406b-acae-51c017ac0ca6", "comment": "Malware payload (Mirai)", "value": "cd29866c3f7b9d1c0a1baa2b36b9629547b68aa314696fd87f20929798153b6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870356, "uuid": "8188ad16-405c-4317-9fa4-045ba4c63e7e", "comment": "Malware payload (Mirai)", "value": "90378d0cd7adaa36fdeafb1068224eaf91ca2c30", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870356, "uuid": "99cca259-affb-445b-b6f2-b5729cd1be8a", "comment": "Malware payload (Mirai)", "value": "39a8d3e02bb2da9ee4936c2bfa3efdbe69f0235518cb548824b4244b4781282b11517436de01902a6cb942e7f179a7e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870356, "uuid": "09e3d918-9aa4-4889-8f98-824a8755b9f3", "value": "T141334AC4F643E8F5EC4705342932FB369E72F1BE626CE943D7A09623A892741E405E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870356, "uuid": "7d2de023-462d-4747-9ced-6c1f918f0956", "value": "1536:9RbDZurtjtxHeW/tuNYdNveibpcr0wWM2dCka:9RbDZur5txb/tskBbq4nMOTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870356, "uuid": "fdcb6b76-400c-4388-b891-10461e5bbeff", "value": 50608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870356, "uuid": "c94206ce-c38b-4598-b2ff-713ad6b0fa63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870356, "uuid": "44395e03-49ce-4748-9f4c-15edb978381c", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2ebe011-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797395, "uuid": "bafd2a06-549f-40fa-912a-5e4ef40fdae4", "comment": "Malware payload (Mirai)", "value": "bdcc9b5d6335d0f944b33ca259ad5712", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797395, "uuid": "df7580c2-3130-4772-b25f-278a52c6f8f5", "comment": "Malware payload (Mirai)", "value": "cd33b7554eaf8402ec38060d3da63acc42bbc5ada252a91eb0da223c6d4257d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797395, "uuid": "6a903e13-6d02-4da9-a68a-8caf452b6e1b", "comment": "Malware payload (Mirai)", "value": "5510fde86302f97db7ea35b2aacc031f6477a868", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797395, "uuid": "5172e56f-dca3-4a21-b7eb-23fb9ec19272", "comment": "Malware payload (Mirai)", "value": "aef080266c630dfef06ae71be0580eecd65e259686cbff996a85a4db2474eae64f80881f5cdf4ee53bca26acfd97f310", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797395, "uuid": "dd14d415-2eed-44e5-9319-df922a2c403c", "value": "T16453C30ABF250FB7DC5BDD3B06A9170425CDA50A21A97B3A3A34D91CF24B25B49F3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797395, "uuid": "5c5cabdc-db91-4a7a-b163-668cbb88b5ce", "value": "768:2iaGe0LGIR/F2OJZImKJVoBjMn/W84eE5EgeMgUeXROwk6lXiN4k1jmO:2Z0LP92OJZnKJw4n/QPtRgU2RzZa1jt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797395, "uuid": "cc6958f6-dce4-4f11-b0f7-9629b8b5027e", "value": 63552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797395, "uuid": "3fc39e2c-d33f-4e46-bd2f-761c8334785d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797395, "uuid": "284120a0-e9e1-436f-8988-fee5af567345", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f51aa30b-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830523, "uuid": "bd5335db-6d36-42a3-8705-2982c6a46b39", "comment": "Malware payload", "value": "5c66e96f44f6a00085714a6f46aec9de", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830523, "uuid": "37b866a5-a5cc-4e1f-b4dd-6688c119ec4a", "comment": "Malware payload", "value": "cd7184f51d482e49bf452876802767b41fe6c46d0bce99a9ce9eb732b8cea69c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830523, "uuid": "d20f74c9-3198-4e00-9b08-93075f58c43c", "comment": "Malware payload", "value": "bf415f79c1b2d13de990e0c2dfb0fbc970defeb5", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830523, "uuid": "82e70938-8b26-4dfe-b6e9-963464b8e74c", "comment": "Malware payload", "value": "026fde6e3ccd00b5f9a6266e477ece00c179eed0bfc55133e5e5b901419287a453275b40b5b9fc061ef5fa98607868b2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830523, "uuid": "2f05fc79-37e9-4c93-8fe3-df5f95e1a3f8", "value": "T1B5630BA3AFBB1E79939E25E2B70D3D2CA3A953355873BC6617AFA4C345480061C3F406", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830523, "uuid": "84ee5b6c-977a-4d8c-aec4-b9fe593ab0b6", "value": "768:I8w/h62/jWs6oS+xISN0vvHnuzrdkfScBYrwz2y8kTAlGB:I9l/AoSSMvyusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830523, "uuid": "be758437-8f53-4bdf-8af1-ce13f608124c", "value": 72461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830523, "uuid": "438d98bf-70c2-4b15-a063-5264056eae90", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830523, "uuid": "029319ed-aa73-462c-863f-f4007bd536c3", "value": "invoice-1645080830.pdf (81).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5766bdb1-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854740, "uuid": "75066890-d59c-4582-9299-0f632da43477", "comment": "Malware payload", "value": "bbb5267dc218708fb28ac0b1a6612636", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854740, "uuid": "7815e2c7-b7d1-4aec-b6b1-74614a502e77", "comment": "Malware payload", "value": "cda2670e31ce396c7a2ea4e782f053b0cda44149db52ca394759b5a20e05f339", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854740, "uuid": "9021ec11-cb58-4d07-bf69-de02838a4576", "comment": "Malware payload", "value": "d357e11c8916a1fb42f477658e203b03542b2dee", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854740, "uuid": "4b2736ef-1097-4e82-880a-e9f0c9521365", "comment": "Malware payload", "value": "601d90bacb0299db207d876dc0fedabc7add7f5f1fabd9f68e1641423232e8cbc454dec6ad37ab092d1a32572fa68968", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854740, "uuid": "e93939ea-efdd-4b94-8ffa-ab9dc3b2a8a8", "value": "T11E632B6B90B4329EB42E7D11ED7275B1141A1EFE429309CD86C2FA474689823F36F35B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854740, "uuid": "488dcae1-2b91-41b9-b5f3-020461ee145e", "value": "768:I8w/h62/jWs6oS+xISN0vOlQ88rm+m2XZwAC08U2om3CQUrae/er1349qAZuz3rN:I9l/AoSSML1usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854740, "uuid": "29e3a739-8ba5-40ff-91f6-c20427d5a86e", "value": 70646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854740, "uuid": "28c22ff0-9569-4a47-b880-da7ab9b9e630", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854740, "uuid": "1c741006-3f5a-4f1e-b976-932c6e80e4a3", "value": "invoice-1645080830.pdf (54).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b489c7d-e371-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766873537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873537, "uuid": "19c49d61-e058-4858-b795-08e0405b6db7", "comment": "Malware payload", "value": "b89072e77d01cbf6a80bf878da64ddea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873537, "uuid": "3c8aba7a-6ad3-4f8d-83ef-b43dda751b14", "comment": "Malware payload", "value": "cdf2219d3bba3dc84ec5e32de4f1eff9e600b745a79439962b814801330f7e9d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873537, "uuid": "72b04fa4-2453-4421-be97-56e2f8bc5c38", "comment": "Malware payload", "value": "ab3871f4aa818f11a388e0f599c7e83ec92b9309", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873537, "uuid": "8e410719-bccc-455f-872e-b3420d427361", "comment": "Malware payload", "value": "4d24a4dd995144d46a817835c32c65511b83bb98de247200725b713ca6f7d3e30598baeecfdf64460c8bc5a8988ba951", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873537, "uuid": "50ab9dd4-a2d2-4625-b9bf-24420e7c65e8", "value": "T1408633503AC56DFEE3832C3ABBE5C541AF59DDE7079277B7B3C8730A50908A2794121A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873537, "uuid": "95fb8370-109e-4890-bb32-fc27be3b8cf0", "value": "311d1e93d89e02a2908fe4b6d6a25ef7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873537, "uuid": "96e138df-a967-41cf-aecc-eacb118e5b83", "value": "196608:c5CXPYfc+hc6qWZA3HepcpEHNBL/d/zKbhdyhZcf:c5A8cec6tZA3HVpEHnR62cf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873537, "uuid": "1ceb012f-7140-4f99-a994-81aa1da521a9", "value": 8570901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873537, "uuid": "cec76993-994a-420f-b7c2-1fcec750161c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873537, "uuid": "31ca7d00-9a54-4ad5-b366-92a80aee34ec", "value": "ldplayer9_ld.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcc3c347-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825275, "uuid": "adbed6e1-d4f6-4f1a-be4e-b5211e0a3c3e", "comment": "Malware payload", "value": "166196218254da5991ad94d951a1d833", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825275, "uuid": "d3a97393-4d4a-47e8-ba8b-1f5d0a4a33d9", "comment": "Malware payload", "value": "ce2f78653210703a85b353e622fc3a6f9e96a4b9f3644af41a99cea8c5fc1f41", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825275, "uuid": "ca1e0a45-5ead-404d-9485-ea81c272c6ee", "comment": "Malware payload", "value": "3d73c91f6e77417c9e655325035a17ecab8cdc94", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825275, "uuid": "f8cce948-df1e-4ef7-a87c-9a631544aef9", "comment": "Malware payload", "value": "f6d5521cb695fe9e0a213d522aaac290260685e5030ad3ac91696b9e98bdd4caf3b60b66d0e2eda338947d418180cb32", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825275, "uuid": "42e69211-1981-4bbf-8978-46c8cc927fd1", "value": "T11C630AFA5C11193E20719904F2CED93C0A32D597EAB13D675E8679C8DB412B6EF068CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825275, "uuid": "ea8afb6b-73c3-4897-b813-57cccca09996", "value": "768:I8w/h62/jWs6oS+xISN0v0y5M7102oAR8yVp5hfjVaSv+zvTQgI1UW9IhW9ZmQ5b:I9l/AoSSM3ZusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825275, "uuid": "f2320742-e2e4-4ee1-9c03-8ee053454fff", "value": 72486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825275, "uuid": "56f40fd6-fc56-42a5-bf6e-b98c9caed38d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825275, "uuid": "04d9805b-516f-4f17-8f23-507c69656b45", "value": "invoice-1645080830.pdf (94).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e21c038-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830619, "uuid": "f8ad9d73-6d04-4303-ade4-81edba625fa2", "comment": "Malware payload", "value": "dc068be0a572d0788efa1254dfe387dc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830619, "uuid": "0abd82c9-81c3-45b9-863d-5d18673f832e", "comment": "Malware payload", "value": "cf6f9e490eec9b7e0f7bba0578c7a1abb23018fa8c91c15f1a2ceb8948777af9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830619, "uuid": "7d7e1216-e9da-42e4-856d-cad01cb9164f", "comment": "Malware payload", "value": "002f493da5229c3bc031e86f91eaaca7c4e985d2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830619, "uuid": "9008ce7e-725a-4234-bda5-f90c4ba8ebee", "comment": "Malware payload", "value": "b3d27a9040347d1bd453ab1f4ff292e4caa9ed3e4e6a2d7ece0cf462c051f3b19d81f1143ed38613b1d52d61d8b0e661", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830619, "uuid": "bc37a5b8-fdb9-4da6-aeff-6756dd08f2ef", "value": "T11663F8729A754D523CBCE2FE73D54E0DFC7679039B3BE64EC25C2A04C676AB09860912", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830619, "uuid": "48be9a1d-7048-4415-a9fe-cb2023dfbdbc", "value": "1536:I9l/AoSSMx2dAr9gwaNjHeGCb8dXk7Yc+o6ZapZFKDHKzNjkF/jnWT2UjXg2GmIk:I9l/5Mo1usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830619, "uuid": "a2c127fd-57bb-4c28-b212-f318d4ad10bb", "value": 72453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830619, "uuid": "aaf43480-61cb-4502-a8e4-7f7c79cb60dc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830619, "uuid": "00ff9e4c-d950-492b-a0a8-a012ad1dea8d", "value": "invoice-1645080830.pdf (60).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3a5cd27-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854868, "uuid": "4435fdf7-97ba-474e-9dd2-b73a02a78779", "comment": "Malware payload", "value": "8d95c29f5a2b5fd304fafa5d77e67cbe", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854868, "uuid": "6fb428d5-d815-4079-9e16-b226bb2b5ed9", "comment": "Malware payload", "value": "cf8e7dc8c5a884fa53c1bdf6809fe1c953605d03745603ecc3a6e2a8041c5f9d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854868, "uuid": "e7b4fa74-e900-4ab6-9b28-eed87ba751c6", "comment": "Malware payload", "value": "64ba61392eee645356a0d86deda243b8d4b1d79f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854868, "uuid": "abfb164f-4650-408a-a630-31a720f83d3a", "comment": "Malware payload", "value": "62e63e6c521cbe148ff109fa0d655958734a52a207e2073515c8d066b97b4b07106be085446c39b50740baa28a46a288", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854868, "uuid": "2fa4783b-81e9-4126-b4b1-cd586fa66a2c", "value": "T14C731A832E19E9C7F127DC525DA13DB57EE312C2E889833B5C5576500A4372F6E32BA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854868, "uuid": "68bd8b95-2a70-473d-ad4e-c850d9ec275e", "value": "768:I8w/h62/jWs6oS+xISN0vcfJ39IdkfScBYrwz2y8kTAlGB:I9l/AoSSMUCusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854868, "uuid": "e5d1111b-db0b-416c-905b-691e97d71453", "value": 73462, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854868, "uuid": "26fe632d-4962-4642-a9f0-687c6a15ca45", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854868, "uuid": "e89e4ba3-e72d-4f3a-a769-e12fc8c3a4f0", "value": "invoice-1645080830.pdf (27).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2cfda3-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858619, "uuid": "5e84cfe1-7821-4482-8a5d-98972bf64908", "comment": "Malware payload (Mirai)", "value": "0571dcf7f180a70e4ac948d16364aa99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858619, "uuid": "3d6ffe12-b66d-4551-8774-2674a9c04eb0", "comment": "Malware payload (Mirai)", "value": "d04d2a728846ab440f942adeebfd31dcdef40004d0a0e9c4288fdfc07095d7d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858619, "uuid": "945e0d06-9bd2-450b-8852-063a7d56efe9", "comment": "Malware payload (Mirai)", "value": "636b83849be869e41d2e16baad025b19fd982b93", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858619, "uuid": "9cdd9784-b5fc-4b0d-8fc0-733f1f543b9b", "comment": "Malware payload (Mirai)", "value": "65d0250a52470831e516c6d91aaeab9463f3a8e5c82df4e1fe41788063cf968e573ba7a7b4a4f8f5cb808ae74de0ee7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858619, "uuid": "645ea9eb-7fca-4036-a5ea-2585260d9f43", "value": "T18B736C4273184A43D5A74DB0293F17E283BFA69020E4B78A754FAB5E8376E325047F9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858619, "uuid": "721ea67d-f6fd-46e1-be0d-1199d59dbccf", "value": "768:yCzG4zwpmRrFuekn/zKM/J7e+yPk5a3mcGxfWra0sZa+gPxSve/lFHQ7WtbVRLY:44kc2/JnauaWJfils7gPxSAFH3bVRLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858619, "uuid": "3296ab99-a90b-4bc7-bfba-83b94c4c50d9", "value": 79140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858619, "uuid": "ab193a36-038e-4630-baeb-1a974402b53d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858619, "uuid": "56d37b0a-da40-4bb1-a6d5-f33c9affc295", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9486c0bc-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825637, "uuid": "d27d3838-8992-4247-bfc0-7a88596ff219", "comment": "Malware payload", "value": "c223a1dab47162e4631425852fb4fc4b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825637, "uuid": "627c8804-0424-475e-87f2-51f49c06220b", "comment": "Malware payload", "value": "d0e94320ec531447d1041381f648f13a52db7558c8323857010b0c15c4a66e21", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825637, "uuid": "53257591-9003-4423-b86f-a0e125bda8e4", "comment": "Malware payload", "value": "86d41b71d0819c9e8db31c8293725cc0c9b202be", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825637, "uuid": "2ea38bff-10bb-4dd2-aab2-6d49e873d043", "comment": "Malware payload", "value": "7127c15e38e0eb2784e173cd6b05f5bae8424a44228a28bec67d4b75c87e67427ec9b5015ce60f0b1fbd89891cd557e3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825637, "uuid": "1d9f038c-7d6c-482e-a0a5-c080f5b334cb", "value": "T12F631B24EA1102EDE7915FB9007C9E20911163606FFB968ADC875A368D5AEB33433DE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825637, "uuid": "0f490c3c-3190-45a4-b561-81d009f577f8", "value": "768:I8w/h62/jWs6oS+xISN0vaxjvWvmMriXfmkuEMhv9ca9hSKorDWGs5A3iZOHfPDo:I9l/AoSSMRwusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825637, "uuid": "35387f41-d676-45d1-afaa-4eb9dc2e2afa", "value": 66766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825637, "uuid": "e823d239-8caf-4fef-ae56-4564d44bd603", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825637, "uuid": "e7ac4c83-38db-440a-936c-6cea4d2cce45", "value": "invoice-1645080830.pdf (13).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91595253-e336-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766848395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848395, "uuid": "cf0e9c0f-4235-481b-9dc1-a0ee49ad2c0e", "comment": "Malware payload (Mirai)", "value": "58fdf6269b52128e19518b1ea0658566", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848395, "uuid": "708a1a59-b479-4556-b993-01d1501a3abe", "comment": "Malware payload (Mirai)", "value": "d12407b08ed4ce5d582c0d3fa32aec04f3e02f330e8954b3ea6ccb97c9141c1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848395, "uuid": "a8b24c53-b1e4-4055-a0b1-b532c3ab335b", "comment": "Malware payload (Mirai)", "value": "507ccc8940b44997275f7aa7bc3d89f7afcd5885", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848395, "uuid": "75fa58c4-d173-4987-b1f9-9e51617c3306", "comment": "Malware payload (Mirai)", "value": "7ba5fa4676d2b66d02250b4ea74dc703fbf52a26adf52384c26c8a06929412cad378ee89e132f7df41aadf80a55f850b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848395, "uuid": "c903b448-4a97-49fd-bc23-03a4b59be77d", "value": "T13634DA0E6F228F7DFBA8877447B78E24975923D626D2D584E1ACD2011E2025E741FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848395, "uuid": "ec3ffb77-ffa8-4ef8-8ab5-d6173007f73e", "value": "6144:aEsNK5FybkaUK8DsSFPy7mMZGKbY2f5vs+:am35funs+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766848395, "uuid": "6da96dc8-7873-447c-a6b8-5ad6b0c08876", "value": 248516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766848395, "uuid": "3ad43bd6-6332-4c93-a825-5070ec0739f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848395, "uuid": "4f146809-b804-4cde-8345-9739ee4628d3", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3af2f8ba-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855551, "uuid": "8ddada5d-9b96-49e8-9f9b-8c53852958e3", "comment": "Malware payload (Mirai)", "value": "66580cbeff9d0fa107b0327ccadb6707", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855551, "uuid": "d69a333d-3058-46c1-bbce-514ae594e663", "comment": "Malware payload (Mirai)", "value": "d1ef83a90c34d48cc2f36bd46b759e6befaa2aae6a48778df5e729aebeae2ffd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855551, "uuid": "f64da310-9ed5-4948-8525-675673e3a2ee", "comment": "Malware payload (Mirai)", "value": "a62e334b77546df229c9ee1ea5b9448817eed199", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855551, "uuid": "bdaa1bdb-4328-4123-acc5-ede0da8d47b4", "comment": "Malware payload (Mirai)", "value": "0837462f770c9639528fdd186a1d1d6713e106a8bf1513258c96109074a79b3f2259a91d1adc54fb5fd034c14366b9ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855551, "uuid": "11ea4db5-d76f-496c-9e0c-b1a0b665dd33", "value": "T1177302B121A6DDA2E6B1843353837D5ABD23C87A03F453FDFC39A72EB486E10584C55A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855551, "uuid": "6bc716c5-5236-4363-8ec1-46de00477b6a", "value": "1536:a8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmjIorb:hzRnwP0bMQ2RijvDZZ1rYGhG13MSb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855551, "uuid": "3ef0ca7c-f498-4ccc-844a-368e34eba6a4", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855551, "uuid": "6d89cb69-ebb1-4a6e-b36a-0665e1bcd12e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855551, "uuid": "c806490c-ecb1-4b7e-b13b-da440452b7ea", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6baf7a53-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825568, "uuid": "80a35aae-e281-4580-b7f3-c810a8b3fab5", "comment": "Malware payload", "value": "1088f61e42e83351df159e9d503ba5d6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825568, "uuid": "3e041fcb-9447-412e-88df-dfec99ed0b53", "comment": "Malware payload", "value": "d333fa2e4b06756bca2da8fcabf9c595d6f826ccbe02c87f8a2af56f0153eaf5", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825568, "uuid": "827bd59a-a0e5-4b9d-a615-1eed0164d5e3", "comment": "Malware payload", "value": "f1294d56374f14b719adfae567e4a9959744129a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825568, "uuid": "d8a6a715-86d6-4d2f-97a6-f00e630076d5", "comment": "Malware payload", "value": "fc0932347406e5b8b17c6eb1268da022d075e71a344eb9339c3215f54d4aea9ffd3ccdf28b7698432eb6e2a736e17586", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825568, "uuid": "63b37398-6b71-45ea-ae96-c718d406c0c4", "value": "T1C3731AFB3C66FD8438135E542D8CAC426531A4DC54A0E9EA39CE9EEF40D5F6CBA69D00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825568, "uuid": "378506d2-0d9d-4c2f-bd2f-5e71318b1551", "value": "1536:I9l/AoSSMsFFX7+9zC8Jgh2To5RagfA8w106jypdyWUJW/NQoFaZ3oUqy/0rF79P:I9l/5Ms+usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825568, "uuid": "b2695544-977f-40dd-9c7d-1460d4342a21", "value": 73470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825568, "uuid": "c0cb6d9d-d257-4ca3-a7b1-c76e44609e21", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825568, "uuid": "dcc9c5e9-6099-42d6-8d7c-a27b5ad77ad9", "value": "invoice-1645080830.pdf (32).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "174787ca-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859357, "uuid": "63e7bff4-dc22-4294-ad21-ad0d95a365d2", "comment": "Malware payload (Mirai)", "value": "6d97a001724e0e919a05527c09f50246", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859357, "uuid": "3b46a135-b5fd-4cb0-8703-f8aece1c0d49", "comment": "Malware payload (Mirai)", "value": "d37bc245dde908cc9ceeeff030b9887cdfeb98efb46f7afd9202f100908f01b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859357, "uuid": "8130db33-1cd1-4feb-a225-2eeae1b2fdb8", "comment": "Malware payload (Mirai)", "value": "e8e33440fe07c2cea5e3b8e69790eb90e83da495", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859357, "uuid": "88317b2c-ec29-40b3-9483-7e0d7a150a54", "comment": "Malware payload (Mirai)", "value": "5ba6c4eb22ba7cbe2959a3c7c0532eae87cf797b6fbf04cdb8e3350e3bb1f8f145f429150ace0d6eae5c23fe3d9cc5ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859357, "uuid": "6c62d04a-a436-441e-b9db-89a74ac3157d", "value": "T13A23299AF4059D7DF88EFB7E88224A08B531735511830B3617AFFDA36E722581C62D87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859357, "uuid": "a7da4102-7955-49a4-8339-d245ace71393", "value": "768:ylWepMR+wqEm5RBEwnvKPTCtAcOhT8urafXWC/wxDQhsDsQQeKN:90M2Em5RBEevUTCtA1t8urC7/YDQ6Lnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859357, "uuid": "73e5b7c3-9710-49ee-9b7a-30650053e8d3", "value": 48896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859357, "uuid": "ddebfe98-8638-446a-9f4f-a73e48da717e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859357, "uuid": "7e78d61c-a97f-4860-99d5-5e573b010a75", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "808a0d7a-e2ba-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795109, "uuid": "a3459031-012d-47ff-a516-ccf65021baee", "comment": "Malware payload (Mirai)", "value": "f7976876a8fc1bb4bc70ba00660daa81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795109, "uuid": "e096d7fb-e4ce-4fa8-ab59-528dbaec2626", "comment": "Malware payload (Mirai)", "value": "d3847dbe485537de59220c8b3b76b6c13ad5943dc47b69583935a5e78372ca22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795109, "uuid": "11218bbe-0e3d-4dab-bb26-c6d375d0719c", "comment": "Malware payload (Mirai)", "value": "62786a13430accbf3fead2edb562771f22b007b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795109, "uuid": "b8306f1e-5d65-4154-a7d0-16aa97a2bb83", "comment": "Malware payload (Mirai)", "value": "0d3323bb9d51b78931d49631b5553ef31339d356b090fba69ed670a55cbbb016677c02c50392e6df329cf63bd7e8cc53", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795109, "uuid": "9f06277e-5122-46ce-932d-903b1831a502", "value": "T1FF144CE7FC01DDBEF80FE77684034C09B230B76114521B3662A7BA6B9D3A0595973E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795109, "uuid": "ff246b7f-849f-4805-a99f-15df843e6813", "value": "3072:N18+Msv9w7ySiwfGw0iAjwxEy/JJ3MieKuunpqBimVwjbiPLJogSJy1:TMSw7viqGZny/H3MiessBikLJSJy1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795109, "uuid": "792f063c-c2b1-4cd6-899f-700286ff0280", "value": 191948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795109, "uuid": "c2721181-5b16-47cd-994c-60a8ebb50cb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795109, "uuid": "501fd238-dc49-43fe-9588-48f6f2b6dfbc", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53318187-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825527, "uuid": "43c5b3c7-5e4e-4769-8ad0-5acf7a760de5", "comment": "Malware payload", "value": "a50df670872993f0b3e609f0fec65353", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825527, "uuid": "6dd3bfe4-9341-4a4c-942b-3614f7b34287", "comment": "Malware payload", "value": "d3b297fa4e7ded3acb5c986fd993c155417a0ec0513a22f24c35719f944fda0e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825527, "uuid": "3e574ed1-c07f-45e1-be72-a7838638a4d7", "comment": "Malware payload", "value": "5929885c1a180dbfe601d9abd5d4f4638de98413", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825527, "uuid": "3bfed22c-08e2-4580-ba6f-f1873b784e3a", "comment": "Malware payload", "value": "f498e17b17f3e66a4c2359fb87bef28e47dc58ec06944a01f9dcc2343918277349db9c6bb347e3dd7dd58a0917cb90e4", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825527, "uuid": "5ce881b8-a445-4396-941a-4d5a75f547ae", "value": "T11C632AD64F10196843A45257DEB840A3263D6BC534CB3C39E606BAFB9F65366E3BF024", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825527, "uuid": "a133cb3e-5d9d-4805-b53e-32a34ba8a90f", "value": "768:I8w/h62/jWs6oS+xISN0v2tLtVtGtOtbtBtFtBtst1trtd+tytstr2tf+tr+tatR:I9l/AoSSMa6nusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825527, "uuid": "aa165a24-4032-45c3-bf44-211e88f46a95", "value": 71629, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825527, "uuid": "c4243a42-90b0-42a7-9171-9fe0d947f918", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825527, "uuid": "8bf87b2e-8c7e-4734-98fe-a9bae1bad0c7", "value": "invoice-1645080830.pdf (36).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0716b74c-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795335, "uuid": "e61279ad-6a60-4fcd-895d-08a516f34333", "comment": "Malware payload (Mirai)", "value": "3ca453fbb333aced9985913a497fd421", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795335, "uuid": "c74ecf3b-c879-49ba-a3bb-a3e3a19a96a5", "comment": "Malware payload (Mirai)", "value": "d40f7aee5dda830fbbeb66dd087f82f15e62b977908d8c6d64804f6b11439660", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795335, "uuid": "94d71e3d-8392-4263-b489-e7cc04c1f19d", "comment": "Malware payload (Mirai)", "value": "6cc62df0578214ea60bf2653b2ccaa8b5a9343ea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795335, "uuid": "72374b67-004a-435f-9c2f-0c11a5b065f0", "comment": "Malware payload (Mirai)", "value": "233c24cd56e8fb6d11fdd79d42d0698cd5cfcd5cef7a184a7c20d0c01c1cb3555b91a3140b32251e7d2f4ebec4730569", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795335, "uuid": "f4250996-6601-4171-af0f-1449c9d9d3ef", "value": "T176631B81B8819623C5D536BAFA6E41DE331613B8D2EF3303D921AF15778682F0E7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795335, "uuid": "0ed605b3-e5d5-4e72-b51b-1074de91a94d", "value": "1536:ZTWiN8DqvAdQ6WjTWHwnYYZR9KlYBR3bVR:ZTWiNZTWHwYYb94Y73", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795335, "uuid": "c7ad1c1a-4f25-4ec1-8434-ba22afa25be7", "value": 70892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795335, "uuid": "57060650-b6c6-406a-91e4-286af3fd6522", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795335, "uuid": "55fd596b-1409-45d3-973b-09e960232d6a", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d0f3c9-e2be-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796937, "uuid": "cd42d3cc-5818-4056-9d27-10794333846f", "comment": "Malware payload (Mirai)", "value": "cc574a290c3c51e11d71203c49efcbaa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796937, "uuid": "2ec33de7-6c5d-4fc9-b216-5c2435d829e8", "comment": "Malware payload (Mirai)", "value": "d5e8fade599832322284e5ccdf9b37265c6b4697cb216a8f754223e69fd42e29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796937, "uuid": "c85cff64-61c3-4f76-aa2e-cf9f908ea0f5", "comment": "Malware payload (Mirai)", "value": "4cdc6cc8d3dcf6acb020d1b9a1b05515559ebebb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796937, "uuid": "6978f491-268b-467e-977e-1e04131dfb77", "comment": "Malware payload (Mirai)", "value": "57ddd69b4fd3970ed842df94773f6719119d0064481c9c8818cf6d060aaacee0f5df37f7ace9bc495c73a15c8e6b6024", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796937, "uuid": "a295e5dc-322f-47ba-af80-bc049aa2c228", "value": "T1FB03E0C8D86661D8CEFD7DBE10DE15D58ED822CA3A8B1B0C3748868C577621BB841FB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796937, "uuid": "cb0e6082-e6e4-4297-899b-46ad430364a9", "value": "768:3hpGLq2YE029i+KzE7N51cZ6HhUfZBYWk:xpD2YyiLz0UQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796937, "uuid": "c1ad401f-c5b7-4582-bc07-ace416b70b51", "value": 38688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796937, "uuid": "73361b34-602e-4a0e-868d-e0f78637ee73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796937, "uuid": "7f0b918f-7fff-4be7-9ad4-ea2cff4b00e0", "value": "Space.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77cdc715-e343-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766853936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853936, "uuid": "026dd34b-03f3-41c1-a5b0-1392e96811ca", "comment": "Malware payload (Mirai)", "value": "6b4653a125d7b46cd7f7cb8c9d741d19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853936, "uuid": "fc21e380-df99-4655-b027-06ee03a1dc3b", "comment": "Malware payload (Mirai)", "value": "d61234f67fe322ca092c43c3ff86f38178db5d221d72afea6937550c25f6ed56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853936, "uuid": "37dafc12-3181-4cee-a063-910ae50ee2de", "comment": "Malware payload (Mirai)", "value": "e0d76bdd176812c22d77f1113e6c8da5aadff7ac", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766853936, "uuid": "47405241-9cb0-40f3-8eb3-c8f838317f65", "comment": "Malware payload (Mirai)", "value": "427f80e521d82eeace3c10cfe45a2d44cf54f80c6f22c361e097053785ea0374a163ac4cb0621064c7d9bb7be09802ee", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853936, "uuid": "f67b8262-8310-402b-a426-06913ebe1ad2", "value": "T120E20AA1590AB1ACF8E9013EB14B22B516E700683DFDF3DBF4275526EB5570C6CA6E0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853936, "uuid": "5b582f03-08ce-43d3-8516-ac52a533d63a", "value": "384:ZHrHDuM6czKlJMnLcdLDh+EbW+vZHodYrK+DCnVormyNrYBOStlzZ1yBlyLa6:hKMWlja+r9DCnymyZYBm2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766853936, "uuid": "1fa34948-f12b-4871-9a52-5d7df2898139", "value": 34216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766853936, "uuid": "610dd5f0-8961-49a3-8089-4d06195f8109", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766853936, "uuid": "150e3ece-62b5-44bd-a559-bb6b46ae17fe", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bd5aa5d-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825461, "uuid": "d58dbeb7-4e9b-4137-ac10-e45add4e4b80", "comment": "Malware payload", "value": "f01017060e1901b45dd4a15116303300", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825461, "uuid": "243cf785-4dbb-42b4-8eec-c246bf2c8bfa", "comment": "Malware payload", "value": "d6634b8a8da5a887dc613275d99dd20ef829a827df471f1f8f2e882979b8f4dd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825461, "uuid": "cba0e20d-6726-4f97-9b3f-9e1d2e6e57b9", "comment": "Malware payload", "value": "ee6d22bff18a68b38b6ed61d5d028ece2eac9199", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825461, "uuid": "9cf01e31-f360-4bcc-ad2a-e4125f3616ca", "comment": "Malware payload", "value": "0a9508bb36bd4022442ab70326b2b540ea4be7a7083bd1985c5e0571fc88bbd7860fcd7088bac7aaf96090cc70c40f96", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825461, "uuid": "d6e82c04-6b33-42a5-81cb-e724742df30d", "value": "T1146319CBE2D09ACBC4A8D0E146E2E04B62095E604A2445BB37D37C48EA47D76F95FF53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825461, "uuid": "777c1706-9bac-46e0-bd12-e5e316a4152d", "value": "1536:I9l/AoSSMztLtatntBtPtOtltYtItstitBtmtktVtOt3t+totUtvtNtttLt6t5tF:I9l/5MztLtatntBtPtOtltYtItstitBc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825461, "uuid": "9ed9df83-1574-4e4c-8d15-dc25bedc2da6", "value": 71536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825461, "uuid": "b0b9cb49-6a49-47e0-ba0a-c9bf924cf48d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825461, "uuid": "ee1229c8-64ee-447d-bfa9-f0d5fdd7c69c", "value": "invoice-1645080830.pdf (51).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c11ebbda-e356-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862219, "uuid": "d48f485c-4ce0-41a7-987f-999696052d10", "comment": "Malware payload (Mirai)", "value": "9680f50f66b80718c501756a5de072ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862219, "uuid": "29deb792-ee6a-4340-b368-5407af844dca", "comment": "Malware payload (Mirai)", "value": "d663c0d583e7b80fb6b15cc9e36aa713d8a0c095d13c8f9537996a390234258e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862219, "uuid": "aa8233d6-0075-4f23-a3db-3cb22635da7a", "comment": "Malware payload (Mirai)", "value": "43ef8b7118d7c5f60df01acac64a77e56dbf08f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862219, "uuid": "60568bfe-296b-4ea2-8086-3413e71c4f87", "comment": "Malware payload (Mirai)", "value": "72d52fc8c451b48345b933b3f644126e8238ec61ac15110d4d18b2518833fa059f979f02557040b6d25508d45e9c7c72", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862219, "uuid": "74287282-fab8-408c-ba88-2483bc9cfcbd", "value": "T1E3F32A45FC918A57C6D513BBFB5E428D372627A8D2EE32038C256F25378A95F0D3B242", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862219, "uuid": "c99dc19d-f846-4c13-9a08-7675d509f798", "value": "3072:vufS2vBvyOTxaUYPyV0sH/bq4QR/aF3HFzyL6VRDH55:vufSrO1ZXuc/bq4o/a1FzyL6VRDH55", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862219, "uuid": "72bcc9e5-98da-49f5-abf4-aa140290d07c", "value": 165152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862219, "uuid": "c6ef5dcf-8229-4df1-8ed4-3f5575e937ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862219, "uuid": "462fac66-7e4e-4985-97ad-dacc57c2e0f8", "value": "miraint.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54cd6639-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830684, "uuid": "3533c86c-38cd-43ac-987c-b15cad50f5b9", "comment": "Malware payload", "value": "35ad8e6c14308f774604b1de65c7c123", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830684, "uuid": "3c243738-c3b7-4e1d-9ced-77eceac1c4ae", "comment": "Malware payload", "value": "d709b81613f6537bd2214339a6d3346e7570004ae2cf0ac596cc2c73bcd7c282", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830684, "uuid": "34174fd1-cd79-4126-89ab-1bbd1bab76eb", "comment": "Malware payload", "value": "67bac5b9d2827de76f4cf1da56d7cd9d58f2add1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830684, "uuid": "20e36a36-e9b0-40bf-846c-4a665d62d405", "comment": "Malware payload", "value": "049238d9ccf964ad651dc9c527c4f443b80264fa3613b358ed862d20ff7f9ee65ec15a62192034eca99f7c303db3a46f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830684, "uuid": "cc8d310f-761c-428a-a72b-8cabc1e49c43", "value": "T1806308A2FD76894C2B8B898C067651E29DB5BFF8CA6584A2411EAD1C05CCFD114D3BCF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830684, "uuid": "92c1a984-1fc5-4d64-9f9c-b8e96b691a0a", "value": "768:I8w/h62/jWs6oS+xISN0v4EQxWAnodkfScBYrwz2y8kTAlGB:I9l/AoSSMf9usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830684, "uuid": "3aa4a428-c93d-40d2-ae31-ff9f262c74ab", "value": 68692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830684, "uuid": "1d4007a4-46bc-418e-af50-aa7a0db7d9a4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830684, "uuid": "c4a1e81b-4c44-422b-9569-ddc7542af796", "value": "invoice-1645080830.pdf (46).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cea3000-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766858078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858078, "uuid": "cf1d8501-1f8f-4a5e-9e9e-9ed961a4ac45", "comment": "Malware payload", "value": "494a3435fdb70262060a0ff9cabbf989", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858078, "uuid": "9515a208-2cda-464a-a24f-919ed88fa5f5", "comment": "Malware payload", "value": "d761060f1d33ea3ce868c3bb6f8bebbca89435c2f61f964f90f854c71ff4de2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858078, "uuid": "3c9c4947-f3b8-423e-b7fd-4f9945240e8e", "comment": "Malware payload", "value": "604e85f1bf0363eb6afa0e25d34e9d1a25628f91", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858078, "uuid": "1d9d1c8b-c6a1-42a8-92b7-4c9eb7741496", "comment": "Malware payload", "value": "119c459a24f8f632fa194bd04342282e673fc10f02da0842470609a300a416a74068122c77805f0723cc36d04adbcc51", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858078, "uuid": "4ec2b39f-2622-48bc-b25f-621e5eef0ec4", "value": "T149833B85BC51D622C6D526BBFA5E81CD331613ACD2EF3203DD21AF25378A82B0E7B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858078, "uuid": "597400c7-e73f-47cf-8dd3-e4c159fe601a", "value": "1536:WJgYbrIaGhqs6m+sCn+CuNCpO5pIWK4OEr789vPbVRf:WJgYa+JnVuNCpO5p9K6UFPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858078, "uuid": "5621686d-c495-4348-a05c-9efa5db724c5", "value": 83136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858078, "uuid": "84f77634-b418-4a4f-addb-7d8ea52f1b5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858078, "uuid": "f9d54cb1-1112-4838-b422-b44098e6998e", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7ef6e12-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797833, "uuid": "ea8ddefe-cfeb-41c5-9c05-140694f76700", "comment": "Malware payload (Mirai)", "value": "34d49eea7dc9ff0e42a44bc8a6995bea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797833, "uuid": "a9023fa3-10b5-4671-b7ea-ec452ea94577", "comment": "Malware payload (Mirai)", "value": "d76e80152da88e76d7da2ed775642b60c7f89fa6fdb7e2548b5559cbc1119d5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797833, "uuid": "4043b78e-bd0a-4be4-9235-2badffeb6f1f", "comment": "Malware payload (Mirai)", "value": "d5b07ca83fd124ef4ce1066d2d9df384a0d96742", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797833, "uuid": "4688006e-663f-4559-b703-1527e611da90", "comment": "Malware payload (Mirai)", "value": "7c49461fc75d9c6ad577dea7123f78f7ce8fbbcd20975823d16c0d0c8efd135c45864d4d245eded5ec39b7efe4f5b214", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797833, "uuid": "bf2db0a4-b040-4a6d-98f4-4d2bc5abbe7d", "value": "T14383E896B9818A26C6D552BAFE1E51CD33131778E3DF73139D106F247B8A82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797833, "uuid": "085c0f7e-feef-408a-961f-83fcdc8a7602", "value": "1536:7RnTVkEkONYnjlit+qffSH3s8JQodJOZMT7apvE3JMMCiTCYmF9woy74PYnbVR:paE3N4itTqXJFQZ6aaCYmF9woykPW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797833, "uuid": "d0b0064d-239c-4fc5-b834-302c45dff24c", "value": 87224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797833, "uuid": "715383bf-6742-4f53-b1d2-05a731658b57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797833, "uuid": "f12aad98-e8aa-43b8-8cd0-1c578b75ad57", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83359b93-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854814, "uuid": "6e828db5-c28a-4587-8c36-0876aa168934", "comment": "Malware payload", "value": "45092e6772987c5a06d7894d11e02637", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854814, "uuid": "518d2a21-862e-479d-a20a-da07b6572a64", "comment": "Malware payload", "value": "d776ac160b3632a13917089dbcc6ec0cd38ab86fbe202eb642da8ba52ccfc637", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854814, "uuid": "30858f96-5b08-458e-b420-d5cda6fb7128", "comment": "Malware payload", "value": "714308791831175a0e248c5007383b9bace64e4e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854814, "uuid": "3fd1f21d-aa73-472f-83d8-c87b1c8c1ff4", "comment": "Malware payload", "value": "3db69606275b1b834aa756deae6445830db5bfa1ed4d44343dbfab19e52296113f6631bdd393ba97c248caf94951d6f9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854814, "uuid": "95a7b877-47a5-40a2-a41e-94dc210089d3", "value": "T188732ACF9E5206342E316FC0C35806C29EA670081B0A66D3ACDA3D7D9CBA5F555ACDB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854814, "uuid": "23bd6164-24bf-4fb6-9c72-94d8753cf1e9", "value": "1536:I9l/AoSSMi2jy86x3owTiiWwMemiIfjoOUIbW1G1FTenn6SP8zMMzHLpxGBazVVm:I9l/5Mbt7vusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854814, "uuid": "6d5cca59-57b9-4892-9e70-2bc3537ad75d", "value": 74366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854814, "uuid": "3f41b022-9e73-49da-81fc-b9022b81dc2f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854814, "uuid": "7e917c5e-979e-4b4b-ad4c-238356205b6a", "value": "invoice-1645080830.pdf (34).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "288f4b94-e2c5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799686, "uuid": "329c995a-583a-4b80-bf61-d4367d62c8c4", "comment": "Malware payload (Mirai)", "value": "a8d6282b64f375d008d58b8e488b4492", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799686, "uuid": "8ab2ad32-5d77-46f8-8633-899a3f1e9fa8", "comment": "Malware payload (Mirai)", "value": "d7771dd679cb638c3a1f4eb6067a4b151dda1506159f245ac1aa825d335a3489", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799686, "uuid": "04d97650-aa48-463e-90d1-b9c707ebc8e4", "comment": "Malware payload (Mirai)", "value": "7195118d0ab49e79fa033381cc290bb8c41e3fc3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799686, "uuid": "738f4fa8-dc70-493e-a406-28a28d62aeb6", "comment": "Malware payload (Mirai)", "value": "08525d670d5f79032fd4b1f3e53ceca678af5f9c5e26f046147f565658eead605b4d2d45ce87396a2d08ae0151c15d89", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799686, "uuid": "12ac0474-3cb9-4e99-9a21-91220f904e1f", "value": "T124A3184ABC819B11D9D922BAFE1E11CD33531B68E3EE7212DD115F15678A82F0F7B902", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799686, "uuid": "41a09dd5-682a-466f-bc5c-552244019c31", "value": "3072:9m2vyRvtl07mg4s7NSco4i393xT728D//mB:9m2vCvtan4sBSco4i31xT7BDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799686, "uuid": "08a29808-11e2-478d-b253-528c69f29f86", "value": 100132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799686, "uuid": "37347a4c-9ed3-45ac-991c-042ed2607951", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799686, "uuid": "8be5f014-3057-4d57-9d7e-90b71b2e66d4", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d774e307-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854955, "uuid": "f96cf0a5-264b-4979-9687-299db289189e", "comment": "Malware payload", "value": "ce14249f33a2832f3ff9d8738424dccb", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854955, "uuid": "a7dbb3c9-1615-470d-a78e-4cd6d6967e90", "comment": "Malware payload", "value": "d777dc44e2a7bd22dc26efbe28a27dd1a18ed9f097289d7c48b685b96cb09d9e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854955, "uuid": "f4fcecd8-ab9b-4877-aefb-5d2ab8c2963b", "comment": "Malware payload", "value": "e7321bbb01cdcfa3264fe73d3fd24c0af4ba4a7b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854955, "uuid": "f6f0560d-0796-469d-bb53-33a44a7fa10a", "comment": "Malware payload", "value": "b2bdba2dc29dc1f8f639583d7d41499374cbf139a5ce2f94a97659d6e7ce589c28a234a10bd4679a9fc6c6afa7590d7d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854955, "uuid": "37e80cd8-e935-49da-81c6-316a0091a849", "value": "T113731C7402A845CD6CBF52D9EC3F2B9D0791A8A098727D2812433E61A0CD65DF8F7A77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854955, "uuid": "b7283e7c-1a0f-4421-ab8e-e4ad1c8d5b16", "value": "768:I8w/h62/jWs6oS+xISN0vryBXLD2dkfScBYrwz2y8kTAlGB:I9l/AoSSMmwusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854955, "uuid": "e5f49afb-3969-424e-8c94-3b105915c2d3", "value": 73433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854955, "uuid": "6a5d4391-2c03-4ee9-86fa-49f84c886332", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854955, "uuid": "a4337daf-15a0-4f2f-b3c4-02f1b00a431f", "value": "invoice-1645080830.pdf (8).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a3c71d-e31c-11f0-a129-42010a9c0007", "comment": "Malware payload (Babuk)", "timestamp": 1766837388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837388, "uuid": "3def362b-7f0d-42f1-b70c-19f1d550d020", "comment": "Malware payload (Babuk)", "value": "147ccbfb70686d58b59467697ea98460", "object_relation": "md5", "Tag": [ { "name": "Encoder", "colour": "#6573A6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837388, "uuid": "6564f5c7-f1b7-4c3d-ad58-ca282fcd2b06", "comment": "Malware payload (Babuk)", "value": "d792ec4dc1e5fca5dac1f612d86168f36b701e44ea4d13f4cc79b308644f3724", "object_relation": "sha256", "Tag": [ { "name": "Encoder", "colour": "#6573A6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837388, "uuid": "6c476861-01df-40cb-9c9d-7a1817f60b84", "comment": "Malware payload (Babuk)", "value": "42e9990892502e2ed951bb739211182b6718b515", "object_relation": "sha1", "Tag": [ { "name": "Encoder", "colour": "#6573A6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766837388, "uuid": "b8f7c4dc-8e36-40d1-8904-ccd0436a4324", "comment": "Malware payload (Babuk)", "value": "f729c8ef64f2bcca5e88029eca46bd42aa1720c79b20bf6a0516e9ff10d9bbc18e7ff52f42b099dbcbfe42c283d75e8c", "object_relation": "sha3-384", "Tag": [ { "name": "Encoder", "colour": "#6573A6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837388, "uuid": "acf23126-ffba-4e43-82f2-deca4b782d6c", "value": "T17ED423255B631EA1F6E7E43050DE1B43F94392F022CC2BCE65D685D1847F8B22B762D9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837388, "uuid": "0306f7c8-917f-4536-92d0-0d6d0d11da83", "value": "18be314e49ed77d05068732238e2ccdc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837388, "uuid": "dc30e4bc-d613-4b4d-a3c2-8eb6eb35a0d0", "value": "12288:B29xp3HiiP8Nl/q5faAH8JugYK9/x25NbyPvds8VGtK4kDj:BWxpH8NoH8kVKvI84K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766837388, "uuid": "1ce67271-b691-4c33-b55e-4af11d621956", "value": 598016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766837388, "uuid": "80914181-892b-423f-ba37-54c7cebaa814", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766837388, "uuid": "f131d9bb-6a2c-4714-8161-d40dfefe3618", "value": "d792ec4dc1e5fca5dac1f612d86168f36b701e44ea4d13f4cc79b308644f3724.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6665c483-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825560, "uuid": "58a31caa-2e15-4b9a-b875-da0e9f8f687c", "comment": "Malware payload", "value": "1aab8741d2a67b7a82254906a49b5fb3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825560, "uuid": "bcc5dd9e-4610-4d6e-908f-c74ba94ba8a5", "comment": "Malware payload", "value": "d81d8d35c422214d0b405add5689b9df7c89cae8197ca77f9f07e78b8ca9fd68", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825560, "uuid": "e31ee61d-169a-44ce-93c9-720e3d26682b", "comment": "Malware payload", "value": "7f4b4aaab28bc4173c5f189167437e754a602852", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825560, "uuid": "b32dbbea-5d62-4ac8-a59f-6b9ff5ab5e25", "comment": "Malware payload", "value": "a4b08a8d7e736fa034a4e9fa6a5c3fd4c1d68139ba460873e232a2fe65eb046a5b95003237099832e283ae20e6af1426", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825560, "uuid": "7f263379-3624-4a92-9702-7875422b9452", "value": "T138632B9FF55BFEB5091D5A229123407BEC7D1182EC8FB305D8166EE78B4A7839017272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825560, "uuid": "7435cd45-efd9-4cf5-a014-0ca4e173d45c", "value": "768:I8w/h62/jWs6oS+xISN0vyPTqfDOndkfScBYrwz2y8kTAlGB:I9l/AoSSMySQusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825560, "uuid": "f6fa250c-92e6-4337-8fb1-0004bd020f3d", "value": 72497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825560, "uuid": "89ea264c-7886-4eb3-88db-89799dbe8fdd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825560, "uuid": "b8dae6e0-73df-401c-a79c-805da3f5f1bd", "value": "invoice-1645080830.pdf (30).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d5a1682-e37e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879339, "uuid": "bd904d26-9c0d-45eb-931b-5ccd57235d4d", "comment": "Malware payload (Mirai)", "value": "49a8cebd94f0d6ed06495e980f69f6e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879339, "uuid": "849b7db8-e864-4d2b-a6ba-d9327bab0c9f", "comment": "Malware payload (Mirai)", "value": "d82a9c71ae6a26138ed2d87c51c083c01f1e3040236cdcb50c9f6241f79cd25f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879339, "uuid": "b4521a2f-7641-488e-9392-ebf3404f36a3", "comment": "Malware payload (Mirai)", "value": "d09e48d49b041b95fb22c566b1885b38f7193fab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879339, "uuid": "9de81177-fac3-4fad-a6f3-2020a8c551e8", "comment": "Malware payload (Mirai)", "value": "e7e97b9676adcc1b2fa059ac1b5115ee12dc0bf1c58cc49975ed0c59e25bab4eaa6a15b4c439f8885afe71b74679b334", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879339, "uuid": "bf8cff7d-2233-455c-8fba-f06278c3ca19", "value": "T188F31A45FC918E23C6D522BBFB5E418D372627A8D2EE72038D256F25378A95F0D7B102", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879339, "uuid": "aeec5211-1293-401b-a944-2ace26702392", "value": "3072:qOgmwET6E/AQJbT/DYnkR4Yc7WRESaSNfrv6VR:qOgm7o8n7WQ4V7WVaSNfrv6VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879339, "uuid": "a0421363-342f-433f-a290-3db18497711a", "value": 162368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879339, "uuid": "1f36ebec-e0f2-4321-905e-78a76242c6ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879339, "uuid": "90125973-86c0-4e22-8b72-409d5d685aba", "value": "miraint.arm5n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff8e9355-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766858888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858888, "uuid": "59bf47ff-6d87-4400-872b-41537afba92b", "comment": "Malware payload", "value": "5be06033a668ad37a343d1ed1b67a642", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858888, "uuid": "39723e28-42e5-41ee-9ddf-42c441aeb0f1", "comment": "Malware payload", "value": "d8a6b969502e09569deafae512cc0d281acb648f97a1c89375c79536ad02b3a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858888, "uuid": "96858384-366e-4514-95a6-c16ea703b16f", "comment": "Malware payload", "value": "b77e951e646485f2c4389270206c627ed02f1d93", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858888, "uuid": "e7173e6f-02d3-4238-bb6b-5dd78fc3f63c", "comment": "Malware payload", "value": "6888e3fd5fb65bf2aeabf42087833a89031bb80cda2bf7469533c0fa5bad447e393f3300848459b081e5bb210d949e42", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858888, "uuid": "bc9d7bbf-76ba-4095-b860-1122e130c919", "value": "T1A2238DB6C8BEADD8C0884574B9308EB81F63F504D2532EBB5E8688654087E7CF6093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858888, "uuid": "44f2c803-d283-45b6-b61f-4f87d9177db5", "value": "768:1aawt70KERXqOaeFUxpcdDLc0WD31OZVIaq7jUkCNolWRCO:1aawt7VJ0Ipig0m3OVEHUkJURCO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858888, "uuid": "fbd3221b-c5df-4272-9271-e5316473eded", "value": 45944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858888, "uuid": "81595f66-8ecd-4058-813f-776b6c6e151b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858888, "uuid": "f411de3e-4362-4474-b380-ac703bcc25ea", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "033e27a8-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795328, "uuid": "5cc8b004-eee5-4ace-881c-a524a60a00a2", "comment": "Malware payload (Mirai)", "value": "263e36fe91835d8e8100b56958ef8bd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795328, "uuid": "47b85dd8-685a-4822-ab36-2382e684fa98", "comment": "Malware payload (Mirai)", "value": "d8aa7808c2695854fac6328298d0433d238c7d8b2ebdce0d55e629f95de052d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795328, "uuid": "583f19a0-c45f-48b1-b460-8e329a7f61e4", "comment": "Malware payload (Mirai)", "value": "44d6ddf7021d4709e0018f1148bdd4c0c08a2cdb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795328, "uuid": "864bff30-9347-46cc-8376-8da579e146d7", "comment": "Malware payload (Mirai)", "value": "26fe6fdc98426432b70ccfe796c1d31f4a84fbd09051c3c1609df7e5989fc49e0567cbc1d50d40d4001da60f769e5fce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795328, "uuid": "c125a224-ff72-48cc-b19f-6ee0b8c0c4be", "value": "T1B8930846F9819B11D5D922FAFE1E41CD33531768E3EF7212DD209F25678A82B0E7BA01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795328, "uuid": "101ab1ad-41cc-45e4-b7b7-2d6ecbf9bc2e", "value": "1536:i9ndaaGngqS+0oDmyygsdp1R1IOOhMpiVMHK1zP1Y8llyMiZ3n7FZMcZ3Ym/+bVk:JaMX6SuDRXkMpiVMHK1zP233n73/FT+W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795328, "uuid": "700a8cc3-9794-4032-a3cf-8d27d3b98ec9", "value": 94168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795328, "uuid": "fb64c284-0984-43d1-a4a7-760d7d7085a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795328, "uuid": "82f19c60-5106-49b2-80cf-7f5d2de5826b", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cecae8c5-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854941, "uuid": "8ba4a0c7-ba1c-4595-9590-80da80c095ea", "comment": "Malware payload", "value": "62f6772b72fda2e4a123acada6e974a2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854941, "uuid": "0420d75f-394e-456b-bf6d-96e9143c48eb", "comment": "Malware payload", "value": "d92c21dc55e1ae14dbcd825afa43d498add6924a329a97ea38638b6b232ecf45", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854941, "uuid": "66b13179-785a-46a5-9d3f-268fb4ab2dd1", "comment": "Malware payload", "value": "9f44fcbbde49496e7a55451a347f37933971dedc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854941, "uuid": "b9156c3f-1644-4acd-9a8c-08a272ff08eb", "comment": "Malware payload", "value": "c54d616a57ac13307f6a9cb60013e4c826c82c49454f4ddfa6ae6a66689f6a148008610f3a92d69cddb430d992bb1e16", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854941, "uuid": "8f467ed1-1bf8-4492-beea-74d28b82049c", "value": "T11263F93E997269AF82B507B09C47163642524F769069E1317B8FBC4ADF0B302B32D5ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854941, "uuid": "513be04d-f75b-42fb-ac64-c0d5b14c2f32", "value": "768:I8w/h62/jWs6oS+xISN0vwvMliMemololQ4fzvMvJnEpgFlUsH74x740KXlNn16A:I9l/AoSSMGMM6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854941, "uuid": "86922cc6-c378-4190-9c62-074d045e2499", "value": 68696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854941, "uuid": "9e7c6873-08c6-4c10-8998-010d29092b7f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854941, "uuid": "2a9be7ef-d609-491a-97eb-e6e23308b029", "value": "invoice-1645080830.pdf (12).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d31ef4e5-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855807, "uuid": "1faa69ce-d417-470d-a4c5-1ed58745584a", "comment": "Malware payload (Mirai)", "value": "97bf84d4f4bc3ed5cdeee44c599f9dac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855807, "uuid": "8cfcc008-f41a-4aa7-a403-e6c34999da02", "comment": "Malware payload (Mirai)", "value": "d9b4d2a3bbe6f47122f85bfc8208803aacd05e7366ed66c53182786029cb0d5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855807, "uuid": "7011fa08-b1ad-4deb-ab82-aa7cbd41f7ec", "comment": "Malware payload (Mirai)", "value": "097534df7623c9e6b78244b5e8db41c2de2a815c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855807, "uuid": "f00e7f44-0ed0-4b5d-938d-c279f99938c2", "comment": "Malware payload (Mirai)", "value": "0d4258de07cb68985b08bef91c34bc0f33fa1ab809d8c46050309382615ddd34486a1dc3f9119907797f812bd7ba82b0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855807, "uuid": "e08eac61-db02-4a1d-9b69-fe5cf84c44c8", "value": "T1D0142B42F9418F12C5C211BAFB6E424D37136BB9E2DE7202DD246FA037868EF0E7A555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855807, "uuid": "c47d5698-bb7a-4bf8-a282-e7a2922cb515", "value": "6144:G67tlfvCUCuXbktajaFbYuDShL7zIun0f:G6HfvCxuXAta2GhLvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855807, "uuid": "c633d9c1-9a4e-4d3b-8486-081f628cba32", "value": 208940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855807, "uuid": "511311a0-5f84-47a4-91f8-8cf7e74db417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855807, "uuid": "8075d908-0ba1-4754-89d0-5e12b73f84c8", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31cccaa8-e351-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859831, "uuid": "e0063ef1-27d4-4c42-81bb-b963a3d2924d", "comment": "Malware payload (Mirai)", "value": "b3d8f89e53899d10be6474509b9b45b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859831, "uuid": "1d12de67-7161-4bac-a4b9-a756643f15ec", "comment": "Malware payload (Mirai)", "value": "d9ee1ef9c08bff7023fadccfa87ea9716c14c6b78ac196715c6b996585d6167b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859831, "uuid": "d4a87c8b-c101-4da9-9856-a0e133cc9341", "comment": "Malware payload (Mirai)", "value": "e920387292d2487390ea5f8327ccf4a9c78dab96", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859831, "uuid": "96d1dccd-0b8a-4c6c-95a4-477de36795cf", "comment": "Malware payload (Mirai)", "value": "dd08d01779a654b74f309cccbd13201a1502159c27971aa017b49eae7b2b72f0fe5663e0cdef427d19214a1e6a70844d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859831, "uuid": "5a8af3a8-f113-40d5-9546-64f1b179f170", "value": "T1C404AEA3F30B28D5CC2106F917CB5B9D6A2311039D67D2E3AC5E35396E364DE25263E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859831, "uuid": "6aa5fd9d-b444-418b-9a42-5b960f7e0151", "value": "3072:filkvk+k8+Nxpwnvil2YVgtax7tUaGFptSw7LvxgpCNk9qETbjub01av1q:Klca6ulgthaimyLeCNkIEOv1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859831, "uuid": "59b0a4f1-3c1e-4518-b577-67eca8d1ca3a", "value": 190132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859831, "uuid": "fd3157e6-5028-4ff4-9b04-070142e6089c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859831, "uuid": "629f2011-71b3-4a55-addc-92435acc9f01", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23e051e1-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870545, "uuid": "f870a406-c2ab-4d19-9960-786f77ac0b77", "comment": "Malware payload (Mirai)", "value": "3a48dab219f177809973921681698d10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870545, "uuid": "cb95470c-40e4-43a8-b117-8db4f28654ad", "comment": "Malware payload (Mirai)", "value": "da35437c3863024fef7067007b6d39d058b2f92dfda1ce5324aed5a0053afc5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870545, "uuid": "b32409c9-1684-4319-8138-94ea3743c232", "comment": "Malware payload (Mirai)", "value": "d8fcc543a985d01e9083934463d727c6dc9eecea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870545, "uuid": "774f5a62-a3b6-4036-8fba-98a917277831", "comment": "Malware payload (Mirai)", "value": "5af051a7e94ce28c58064b26b419ebd941ac978fa34cf5b6579a4fba6bd0d78dad7d448b6e46829723d8f581b4835274", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870545, "uuid": "361a9875-7ebd-445a-9456-af964be373c4", "value": "T18D431881F84F85F6C45B483010A2F63FCE31D9EA51B2DA6EEF995F32DA6B5439101A4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870545, "uuid": "330fedf2-e922-46b7-8590-be87461d4d51", "value": "1536:QPhQbr+edJ/YIqMeG9ahJuRkQMzJnAD70j:UhQbr+edJ/rqMeG9ahJsdMzJnAHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870545, "uuid": "95acd8b8-3047-47bb-9b04-d087b4febb64", "value": 58128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870545, "uuid": "14b926e9-5557-441e-9c9d-f02602aa1ff1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870545, "uuid": "1171c3ec-f453-48fd-b195-8102fdc29eb2", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59d09e0d-e356-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862046, "uuid": "fca80b68-fbd4-46ec-9c36-cdacf6101ebe", "comment": "Malware payload (Mirai)", "value": "195d274a4c496d5d0f48e999b6c2807e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862046, "uuid": "3a2333d9-acb2-40fa-93ab-9a06bf131511", "comment": "Malware payload (Mirai)", "value": "da42e93bb7c8a744b8c113938a840cbece40a028e2e7d37355a9946b26b7d635", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862046, "uuid": "207ef469-a595-49f5-9c35-91a2179c7919", "comment": "Malware payload (Mirai)", "value": "cdaf5b33927ad28d22cff165246664bfa47dccc5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862046, "uuid": "8bbbf772-b06e-47c7-9aa1-4ea597b13c8c", "comment": "Malware payload (Mirai)", "value": "2a2a160302ef413ee7e913b83e2b45bd5761a5340536d7284eb21de2cbc5f8498aea0ec6d92033b40bd89e8bd26a4ef8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862046, "uuid": "96e0e8e6-b3b8-4c74-8d58-f17cc2eff363", "value": "T167834C02B31C0E83D1671DF02A3F27D1D3EE96E121F4FA88691E9B4591B6E365586EC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862046, "uuid": "1796828b-675b-492a-877f-8347e79f0441", "value": "1536:X+BBa3Vn4zlnT0krFSAYmoGy1ynqRov3tqO/AUH6SHhqUJ+JiebQZ:OPalMnTEArfO0NAUxHF8QZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862046, "uuid": "5e896f2a-11c4-4369-a099-e3b6da2c8e9d", "value": 84200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862046, "uuid": "e716cfff-7cc7-4201-b74a-7fb40bf702e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862046, "uuid": "cb3b4407-9918-4459-8fff-60c9aa5da582", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d184bc9-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854777, "uuid": "00f9d969-f752-4844-a346-74cfa33a8145", "comment": "Malware payload", "value": "7d6e205e68f0be3bda04bf0f5103d27e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854777, "uuid": "868c2d79-429b-4650-bc2f-f2ea15c820b9", "comment": "Malware payload", "value": "da5ef3f2ad316a50eb88053e1bce881c94df8c19e97d1e62fcded3a72f45547b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854777, "uuid": "8567ab64-7341-49bb-b3c0-d05247d643e5", "comment": "Malware payload", "value": "58084bf05b0098a1ffb8b4ec5b47c757796ba946", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854777, "uuid": "29498db9-8004-46f2-886b-2dde4f090d6a", "comment": "Malware payload", "value": "d0261fbda763f966b06600543963c54d655605899cb866431c45fbf3bef18c014a4a355843eb5c51eea3008f1e941675", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854777, "uuid": "5b407de1-9e3c-4f61-a55b-56020ad4482e", "value": "T1E76309297062FAD3B9F94A71EB4B45B584007E8D92F2C2CF13B43921E90DC796E3495B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854777, "uuid": "f9669246-c9d5-4609-b3f3-181b7d70b554", "value": "768:I8w/h62/jWs6oS+xISN0vGNdXNT+9eyngFdkfScBYrwz2y8kTAlGB:I9l/AoSSM+XNT+9eymusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854777, "uuid": "c4edbb03-eff4-4ce6-beec-7e31c017efed", "value": 72486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854777, "uuid": "5bf2b8ff-5e4a-47a5-b42f-3f2fb5d1c27a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854777, "uuid": "696db748-ce51-4539-ae12-cd2087d3f91a", "value": "invoice-1645080830.pdf (43).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "581c83ee-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824677, "uuid": "25f789c2-c0c7-46f1-ad14-210ed390e400", "comment": "Malware payload (Mirai)", "value": "a07ed6b70215e89ab41f40bfd1d5bf7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824677, "uuid": "1d3f45a7-fb69-4e48-812d-181de386030a", "comment": "Malware payload (Mirai)", "value": "dac44e0c9f7cd263e81ce670f9b370d8c5092c7b485d5a3854040deafdb8a9f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824677, "uuid": "f4bbfec6-bd18-49d3-8162-8bde0eefe14d", "comment": "Malware payload (Mirai)", "value": "19a984ae3587034da3c8739c0ee265391a929e87", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824677, "uuid": "3300c95a-b4da-443b-a8a9-3060e4d22b50", "comment": "Malware payload (Mirai)", "value": "0b79e9a90a40dea31db265fd98c4562ad6b2096ea633bbb2c010a1f001fbed4197b28cad6cb3af263de556e019751816", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824677, "uuid": "fedb6cd4-7d11-4ba6-a255-b5a642e8103b", "value": "T150734CC26A03DEBBD80311F511B75F369B32FC3A0536DA86E368FEA259015C1A50736E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824677, "uuid": "4d300b83-1b38-4b44-8833-a43a4b71e039", "value": "1536:szdiRRuOecLkioz50Bft0drwwaIoXfMicakSGSNBhJ:bDuOecLkioz5cfGpwzIsXcwh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824677, "uuid": "621d6736-ad1d-4dee-985b-db5ff7b71eb3", "value": 73820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824677, "uuid": "c446c12d-1db7-48f9-959c-fda58feea608", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824677, "uuid": "66ca782c-a4c6-400f-9db2-04aafaac1aaf", "value": "nova.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ae4f099-e2ff-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766824681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824681, "uuid": "f6a3c053-61c7-4443-a667-fc0c2f8f1f83", "comment": "Malware payload (Mirai)", "value": "763912d6248892ed661b53ac4db670ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824681, "uuid": "e61fb1a9-f31d-434d-b3c1-d194c2b3608a", "comment": "Malware payload (Mirai)", "value": "db92a2de1a5ee9eb0e740cc092c3bb4f7b6342f521525341c71090015d3cb4a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824681, "uuid": "90981557-fe80-4cf1-be32-0e7f09357141", "comment": "Malware payload (Mirai)", "value": "74c838d2b5289e0faa9e67069b3e240e8aec90ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766824681, "uuid": "1ec193fd-39be-4a63-a2dc-5da3ce6d6e2e", "comment": "Malware payload (Mirai)", "value": "4f29fdc2973c1b6d65e7f402b51b70cdd15aa30bdc3f54168cc097d1abb0206607232b29e50b823653c9645477a48f6e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824681, "uuid": "dcd1b1d5-5c91-4195-b7a5-383d6f5ba10c", "value": "T1F5932B56B9918E12C5C221BAFE6E418D33136BBCD3EE7212CD246F5037874AB0E77616", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824681, "uuid": "a8cee00d-df02-4327-95cb-629c4856bca4", "value": "1536:O/nVFLNlGgEzHXgisYxYl+lReyjUWNBYtidnjaSq6L3jMliRzw6DEu7ay5RYnl6c:W0gO3gLYxA+e7CldnjaShzw6DEumyPQX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766824681, "uuid": "83a0584d-88f0-46fd-9d1c-ce94ed16392e", "value": 94032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766824681, "uuid": "7401e29c-c68b-408d-9ca8-4ffa1679ac59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766824681, "uuid": "bfb0c277-f9a5-4cd3-b31d-f16e9b4a27ed", "value": "nova.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "400183ce-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858137, "uuid": "c1212bd5-2e9f-4b3c-8858-2e0b06844b53", "comment": "Malware payload (Mirai)", "value": "728517c9637ae701752c9466551b01f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858137, "uuid": "28394c09-2445-440c-9948-fcc3215fe685", "comment": "Malware payload (Mirai)", "value": "dbaa4089e4822ec94921ed4424057e4e2d33f6246453285109109f0b5d4672b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858137, "uuid": "341ec676-7cc0-49b6-99c5-84bc63fe5f8c", "comment": "Malware payload (Mirai)", "value": "6a018f25f25086b4e1450a0ae7bb28b090e8ff74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858137, "uuid": "f92fb963-02d8-4ce4-976b-877aa44415d2", "comment": "Malware payload (Mirai)", "value": "0eb837e2029e564f287fe5d5597b96559bceec81d976623af29fca40b0044ab41384e4bbd22009c0744dac1d70e03c51", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858137, "uuid": "ee5a5883-c191-4edc-a52a-7879764f10b7", "value": "T1F5737DC2AB43C4F4E85609372177B7B24AB7E13D1168DA82D369D933FC52A41E22739D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858137, "uuid": "5c6eb784-058c-4356-b2a1-5d35382a11ce", "value": "1536:D/6WWdTj2PwdbAtBbkTx2ZcD3BysMQliw4T5z9c7/LBYUZ:OHpMwdbA/mycD3ssrI94/LBYUZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858137, "uuid": "331e931d-faf5-43be-8a52-c9e4c62c9cc9", "value": 75312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858137, "uuid": "c693b9e7-6b8c-45d3-ad35-1b34fa6735ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858137, "uuid": "ce02a341-72f3-459c-85ea-f783568bf1dd", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4e239a0-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830818, "uuid": "aad75660-6316-4421-8e94-e29b1a9559a3", "comment": "Malware payload", "value": "7bf2d35ed16b2871c900e73dda939c3b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830818, "uuid": "667bec3e-89f0-4e80-bc61-4ce5f9b0197d", "comment": "Malware payload", "value": "dbae65d1b238e5ef40589ff5c143838d86a2f3ab8e6f42349de8805fe8bae0d9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830818, "uuid": "21b022ee-e82e-41ee-891a-13cf7b9e5bcb", "comment": "Malware payload", "value": "15814f5f8e6815c394c174c1ebfb59852eddbb2f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830818, "uuid": "0ae2cebc-ba39-4eda-930d-92a8f954fb28", "comment": "Malware payload", "value": "15191b298e750a2546a7a1c7f76d0c1c14931a7b2fa6b074a7cff6796cd2c57285971186355a80e5d7ccf2b778eeb920", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830818, "uuid": "aef13284-9e65-4b96-a0cc-bf1483ace3d9", "value": "T187631D4744EA26FE0C11E411DDF223E760B6AB8456CA01E8A66774B6C494F4FF3269F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830818, "uuid": "8fc893f3-2925-41ad-baae-550123790887", "value": "1536:I9l/AoSSMsqp+dX+5CrC8LJiAQiUzOGH2GCsadb4RFbM7XatDQNs/mW/mSobEpUg:I9l/5MT6usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830818, "uuid": "803dea09-420e-4508-abe5-3e39883e4c57", "value": 72443, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830818, "uuid": "b0829ce8-6480-4ff0-adb9-9e4af57462ea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830818, "uuid": "59ae19cc-0dc0-4916-b7b9-e0baeab58252", "value": "invoice-1645080830.pdf (22).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6915b042-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825564, "uuid": "40ca334c-b06a-4a6b-8124-7beb3b2a27b1", "comment": "Malware payload", "value": "ec4829d11fce6998a0c2e0d0be024167", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825564, "uuid": "65cfd582-4aa1-4b0f-a80f-e687f48c4bbd", "comment": "Malware payload", "value": "dc1ec9fc6264dfbc36f1fb5a614dc1eabc3c8abb305fbd281ff5228696337433", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825564, "uuid": "b36b5127-e8e5-4aa1-b663-df04ab783d5c", "comment": "Malware payload", "value": "9f9d95687d0c74a87ccd498c3fad5d1d8371c0bf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825564, "uuid": "a1c38cf4-8bcf-45ec-b518-5482ab6599e5", "comment": "Malware payload", "value": "8446281fdc640d21808e0e499d74ac4c4c7803ce4d90b0d9dbe550ecf473aa82a883683a724aac72ed1fa80cabba08c2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825564, "uuid": "101999bd-5f3d-4d10-b439-fff6e4e1e06b", "value": "T1E0735C63EE196ECB70699EDF3139AF4320481F25853AF6FEA7503546D9361420BC8AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825564, "uuid": "eedf56ac-7b1e-4468-b6c7-944a0e9a0405", "value": "1536:I9l/AoSSM2KuKEKJKAKkKJKuK9K3KNKXKzKNKOKEKyKEKEKUKvK5K3KCKuK3K7KF:I9l/5M2KuKEKJKAKkKJKuK9K3KNKXKz4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825564, "uuid": "ef5088f6-9583-4cf7-a89a-88634cd73c3e", "value": 73420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825564, "uuid": "edc60e8e-aee1-478b-9e14-3d6793418f63", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825564, "uuid": "9b6b19ff-39a1-4c1e-b4d8-860142ddd7f3", "value": "invoice-1645080830.pdf (31).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27d39581-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870552, "uuid": "fb9d8a38-9b91-499d-839c-fc30c06cdda1", "comment": "Malware payload (Mirai)", "value": "b1949296a0c837fa8331af5e6a55a9d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870552, "uuid": "e5b6348e-59bb-479e-9b73-f3c9370ec0fa", "comment": "Malware payload (Mirai)", "value": "dc31063e2a027314c8e951c0d46262388d460d8d1b8bd0c12f081e1313221e78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870552, "uuid": "f05d0517-d50a-44b1-baf7-b06839148794", "comment": "Malware payload (Mirai)", "value": "00f28c5b561640e42d54e7614358158289384f96", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870552, "uuid": "756f721d-33f4-4620-bfbe-2af40d56ceb2", "comment": "Malware payload (Mirai)", "value": "37c1eed5b99cd9016fa72475a3b5b643caabe519124714c57b421860c73662a601f6ce2cedff359b9b4b63aad3f98b96", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870552, "uuid": "c3c125f4-58a2-40b2-abd4-c7a113fac196", "value": "T1FC73A505BF610FB3DC6BCC370AAA2B0129DC655B61B97B36B930D858B50B25F25D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870552, "uuid": "c083c5da-8961-485d-8b3a-6d755221c595", "value": "768:Uf9TxBJpFpQBvGV0UTmsYNKo8Ul9NgFeVq4j5gIQF4eOCe0eZ0e/AUEAZpdUXifi:UFTxBJvGB+V0RF+d00cAU/ZpdNshx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870552, "uuid": "a51d69b5-25a1-48f4-8b28-7136bab999da", "value": 77216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870552, "uuid": "19b2a4c3-6a66-4153-9cd5-c06df931ebbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870552, "uuid": "732509f8-5638-4bd6-95dc-0c712756f9a1", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "153f6178-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859354, "uuid": "809bda89-49d9-4bce-aa3e-d02664c8e375", "comment": "Malware payload (Mirai)", "value": "d35eec9230c7f789d68e0ad4dcde9f09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859354, "uuid": "0c0f1bea-c680-433b-ad19-bfd24fc08ef2", "comment": "Malware payload (Mirai)", "value": "dc9b0f403cb710a837224551b124ef4e61759f51a62ae46bf343dbdf401301eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859354, "uuid": "d290c605-ebb1-4fa2-b11d-b25be279c6ac", "comment": "Malware payload (Mirai)", "value": "ac78ac8717395444ab5afaa83d112eceb91cab2b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859354, "uuid": "af5c1001-7fa8-4309-9eb9-d1770697a36d", "comment": "Malware payload (Mirai)", "value": "2dfff516be6df4d59629eb9d050e48821a1672c17d2bc99bb5d049f4b5c4bd005f81cc1e2cd6a66f312b06f9a087ba5f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859354, "uuid": "973eb1ed-9fc1-48f6-8295-a17fbbdffe97", "value": "T193630896B981DB51C6C696BAFF0E518D33130768E3DF73039E14AB246B8B46B0E3B505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859354, "uuid": "3a5a42f7-57b9-48b6-afbe-f9476ffbcb55", "value": "1536:LZnV+xqpl5rw+CKjebYpib5bdnaa8OO/M7io5E6bWvzL7uKYsbVR:j+wpl5qKt6bdnD5E6bWvzLCKp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859354, "uuid": "aa576019-46d1-46b2-aa82-92023916a656", "value": 70832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859354, "uuid": "dae26f9e-0281-42e2-b95e-52b854d485b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859354, "uuid": "fdb30b1f-db99-4292-aa44-128f36e4a84c", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a3121ed-e336-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766848356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848356, "uuid": "83073b5f-d899-4793-ba92-8c31cddcb360", "comment": "Malware payload (Mirai)", "value": "e9909d35557b9c7c7488b6878a8ada05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848356, "uuid": "badf2780-6734-45b2-a911-5fe615697a1c", "comment": "Malware payload (Mirai)", "value": "dd16dfe34adcb5fc03edabefbb238701fbc1fd1c6f711806c9a95da009286bcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848356, "uuid": "4c05ea2d-4978-4bd5-a4a5-1a9939eff342", "comment": "Malware payload (Mirai)", "value": "8a4ccedd1858a05c5327cbff6b0fa6a942cb1129", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766848356, "uuid": "bc7edb24-eeee-4e09-b136-d9ae7cd31a03", "comment": "Malware payload (Mirai)", "value": "d91c16b7e57ecdffbe0ea8928eed4c881be5c002102823e2d717a7bf5739077ad0957b7f3d04f735a4b2c442445143c3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848356, "uuid": "d3195e57-e386-4dff-a8f1-ee22301bb1fd", "value": "T1977302761E007CD1E55DF7F86EE40B9185221E826503BE5D04CDFB13D9EEE217208BA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848356, "uuid": "c8a3a57f-2f1e-421b-bc6a-4c627d39877c", "value": "1536:Jn1U2HPpG6X0l6ovvYj0l62HV0bWYa/yXHZ4XJzgtEym7kTZtFl/KQ8VJu3:vUAGW0lfvgj1YqW8XHZq5gtEym0zl/f3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766848356, "uuid": "d855a20a-8b48-433f-80ab-9e0f3809b3c7", "value": 74884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766848356, "uuid": "ac26cf99-9b1a-4652-98cb-77e74a065673", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766848356, "uuid": "6d8c9f85-d8d4-455e-bf89-5ebabf88888e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1209bd0-e2be-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796936, "uuid": "9b351365-6ccc-46c5-bcc0-ec368dff9883", "comment": "Malware payload (Mirai)", "value": "82f6bbcf3f426290680a91280e2adb24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796936, "uuid": "10bba88a-02d3-4892-81c8-76efd69202d5", "comment": "Malware payload (Mirai)", "value": "dd768451a129326f1a0b186734a2ee996e10c3c44b64de273b8aa4248b7ff46f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796936, "uuid": "52b0c4da-ec57-4fa7-bb98-35744b831537", "comment": "Malware payload (Mirai)", "value": "cac4e2d8135a9da90fb1e1a5c537bdcf197ffc9e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796936, "uuid": "479ff23d-df99-42b5-ad4f-ea7e0ace2d9d", "comment": "Malware payload (Mirai)", "value": "d6fec1ff0ae5331896d872ce0b8b14db4f3405ae60bb074a1f0708577b9deb628fa1bf5fcc14eae55672b2f65c089ef2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796936, "uuid": "978323c0-0681-402d-8f1c-311d0f424eba", "value": "T13583188BF801DD7EF80FD6B74463490EB930E3910A931A377767BD93AC721A54826E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796936, "uuid": "6a760546-bdb7-47f4-bb6e-73e277a99f9c", "value": "1536:XQOjxmw2V2xAYV8aYlslcjYAht8f489k0rTUhrIpu1HT7ot4O9I/nPazD:XQO4Q6pdht8fsnrCupQ9I/PazD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796936, "uuid": "b8e9e76f-d4f5-46ef-9913-acb2a0c7fb8c", "value": 84956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796936, "uuid": "af0713b5-119c-4003-a1a1-714d83af05d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796936, "uuid": "be661827-d457-429b-bf42-be969ea405c0", "value": "Space.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37619857-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825481, "uuid": "302d754a-12c0-4e19-ad0e-6db84569386d", "comment": "Malware payload", "value": "9bbbecebe114b1f8658d965038636f39", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825481, "uuid": "5cd010b1-1852-4df0-bc11-7f32b71b62b8", "comment": "Malware payload", "value": "de325a1490918fa8399fe19d3ff21dd88e3da429964340c1b3182ff39f190cb7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825481, "uuid": "c9fcc5cd-842f-49a6-805c-79c49187d2fc", "comment": "Malware payload", "value": "833b5995cb1c57a52a71d15e586661ae7b459c37", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825481, "uuid": "f5cdcc69-ac5b-424e-a0d7-e51c8b7df717", "comment": "Malware payload", "value": "56575ae826c9f99d502c4ca4c3b6dd5cebbe2a4ced6ed12f8c7aaff92a7a153289de4f9f608f30b9ae4fcce8a840579a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825481, "uuid": "64527c8b-4e52-48b0-9acd-e4880fd70032", "value": "T14E633A8D9A5018781F32F3106D5167F9AC86930672CC06AFFCAEB164F85E7894B23D6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825481, "uuid": "8522343f-bdbe-46d1-8b41-1608a77b0656", "value": "768:I8w/h62/jWs6oS+xISN0vtbN+kidkfScBYrwz2y8kTAlGB:I9l/AoSSMNcusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825481, "uuid": "4dcf4919-b0e8-4d5a-b3cd-465c4a765356", "value": 71518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825481, "uuid": "e68737c1-fd58-4610-a15b-533fc40a5f0c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825481, "uuid": "23ead991-f39d-4917-884c-d5bd048573b3", "value": "invoice-1645080830.pdf (48).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0fad276-e362-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766867400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867400, "uuid": "28b3d68a-86b8-4add-b1e1-ae976af2ad46", "comment": "Malware payload (Mirai)", "value": "564f9a3dc894dd304d8dbea85c3aed00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867400, "uuid": "a98b3af7-5133-47cf-aa04-102ccb005e3d", "comment": "Malware payload (Mirai)", "value": "de98569e893e36372adec808bfc576e92b2867065fdc947bcfd1b369f2d2f334", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867400, "uuid": "588e9051-a0ff-4047-b8af-756aec983ab5", "comment": "Malware payload (Mirai)", "value": "63fb5fd6e06c35f09604820e88b34df85d6d9462", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766867400, "uuid": "1de45d7f-976d-4347-a9ad-f068e2417f60", "comment": "Malware payload (Mirai)", "value": "fd810c4efc53c7b6aaa50e0da659babdd64162ff853f2b0f9f114766f102156258c37e49b1f0fd80f0d21e0912652ae3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867400, "uuid": "2393d334-2395-4b69-a885-bf19c4927c89", "value": "T13E73F789FC815B11D5E922BEFA1E018D332767B8E3EF7212DD111B15778A91B0E77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867400, "uuid": "b6097b22-62be-4dfc-8558-801812fe2690", "value": "1536:+RnO6DnwiMZBcoRVL6C4JU1Z83Lf4NxLCjdlaziZLT1HwT:+wi+7RVTr1Z83Lf4NxnALTVwT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766867400, "uuid": "569ef65e-9505-46c4-8d69-00b393bad11b", "value": 75104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766867400, "uuid": "50b6d443-32b3-464a-8748-eedda92dac5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766867400, "uuid": "23cfab9b-e723-4409-ab03-a68d4a83c3a7", "value": "z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870883b5-e354-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766861263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861263, "uuid": "be598559-84ec-4f3e-ad15-73d9fa686ca8", "comment": "Malware payload (Mirai)", "value": "b6d2b88a4a5c3455da8b8ddc6d9847b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861263, "uuid": "0776efe6-f7e9-468f-ba88-638d8deb40f4", "comment": "Malware payload (Mirai)", "value": "df42982b240f7a7ebdc2d4be5033122cb79201adfa26e859a96e9f4b836cb780", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861263, "uuid": "b195cebc-b2ba-4468-8d86-c824fd78a80f", "comment": "Malware payload (Mirai)", "value": "098d154d7a24d1a2a4cd46521bd1c0429b210a9b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766861263, "uuid": "613cb38c-ad38-4fc3-bc43-1f3743e8adfd", "comment": "Malware payload (Mirai)", "value": "15e3028d7dbe35502524e34c26091920755395314f967da274d16b1e41b0794023bf5558332f3ad43f9d5a6e85b70a88", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861263, "uuid": "bcabc88b-38a0-4b11-a8cb-a9aeb8b6e6d9", "value": "T15624D90ABB610EBBDCABCD3706E9170128CC641722A53B357674D528F54BA4F59E3CB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861263, "uuid": "2c7034ea-141f-4197-9f6f-f70c0cafb31d", "value": "3072:oxM0jmxB+dRCHjAZiTDcVeTRvDZ2w/Xcej5UiPvx1S:oxM0jHRCHWiToCvDYw/MGNPvx1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766861263, "uuid": "8814738c-dc1d-44cd-b05d-002df7dd95ab", "value": 214940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766861263, "uuid": "ff2fc68e-1e80-4f63-9247-98ad8da93936", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766861263, "uuid": "9790c096-e166-4f92-9373-8f645bbe9815", "value": "yamaha.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60c4e4cb-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855615, "uuid": "7b1bfa6f-b4a0-44e9-a877-4b2f42541fc3", "comment": "Malware payload (Mirai)", "value": "400cade13ee68a7c90abcac3c467f07f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855615, "uuid": "35a4362f-a7da-437e-af8c-dbd0e4bf1774", "comment": "Malware payload (Mirai)", "value": "df5d045d1cbb3b741e58cb815f66ff97590f9a00b95a7f7335c2b7b9d8f06d61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855615, "uuid": "b75dbc97-be47-4911-95a2-6cdca797d550", "comment": "Malware payload (Mirai)", "value": "b85213a7ea95d4a14674e280176ba5a3a9f77732", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855615, "uuid": "c4d9e5de-6f47-4279-9109-c5aa942c3481", "comment": "Malware payload (Mirai)", "value": "2d011504f22874f8cc36a3ccb80da2d2359fcf507d39de79a1384e93fe1dc3003831fef077331a64aa9347960280bb29", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855615, "uuid": "b0662a8f-6d97-4e7e-bf31-1e3352715d0b", "value": "T109F33B47B7208FB1C368967109B3CB67A6E6269216E19985E66DCD107F3035C6C3FFA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855615, "uuid": "63132432-5173-4ec1-b1f2-d8fef8b5abd0", "value": "3072:93VJgTdgahP/2o/ZrTheIsnjCWRXFm4UpM1wLxpPNNOziHTfam:9FJMgWPZr8IaCWReS1WpPeM7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855615, "uuid": "6c9d4bf0-f8c5-4f5a-8a32-0e52b907e8fd", "value": 166976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855615, "uuid": "7689370b-e24d-44d8-b8d3-4917fc9db5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855615, "uuid": "0ecb2bd5-7cbb-4f23-8b38-f8d4bc5b79df", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b49c701b-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825261, "uuid": "aecc898e-3d39-48c8-8eb8-4ba7788560a2", "comment": "Malware payload", "value": "80ecfe72d8a70758732c5eb47c858894", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825261, "uuid": "82bd33c1-08bd-40fe-834e-cc83dac2ff8b", "comment": "Malware payload", "value": "df8bd498a7be17e3fcab3713a9a5e04bdf192eafc5b0c6f293cfbd55caf6a66b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825261, "uuid": "5f1081af-e988-4726-86fe-b0c16f56e1fa", "comment": "Malware payload", "value": "bd74d796dab8b50318cd1e144669aabff86b3d61", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825261, "uuid": "a63013b3-70db-479e-af3b-4803c6567576", "comment": "Malware payload", "value": "9ae7576245dcb9950aa0c99882d32afbc769bdc4cc7f4de26a3908fee425e10bb9ccedce4e0ee38092db6b9a3bea7de7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825261, "uuid": "cf7a092f-9534-475b-9de7-8053aedce7e7", "value": "T1DF632B322B23A454E1A3D899576003F3940AD9461C6EAFE9B57D6179E93FDC0CE8037A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825261, "uuid": "8a1c05d9-b345-4349-85ed-1271f67ca873", "value": "768:I8w/h62/jWs6oS+xISN0vKpjmG8gqCTpZn5LNcb74UtG61BGgBdBpBNqTxIxwajf:I9l/AoSSMBMusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825261, "uuid": "faea79d3-2112-494a-ad4e-d46f91889ee6", "value": 71658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825261, "uuid": "89586895-308e-40b2-8c7e-0687c70a4578", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825261, "uuid": "ae1073ca-2e1e-4cb7-90a6-f4765585b3ba", "value": "invoice-1645080830.pdf (97).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddeeb454-e344-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854536, "uuid": "ec371d71-4d11-4628-a627-67dc8d7eb383", "comment": "Malware payload", "value": "22913cd317afd37bb24c8fd704924b17", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854536, "uuid": "2f05003a-4c7e-4b3f-afbf-dfc71ada4458", "comment": "Malware payload", "value": "df977319b57eb742073cf03c41ef7820d86a4448730e4bc1e265f99fd53e9805", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854536, "uuid": "79a20629-1090-48ef-a21f-6ef68a5071f2", "comment": "Malware payload", "value": "a21d7d59f9d7ab8bf75e43e44c8a181250dcc04d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854536, "uuid": "41b5d367-4bd3-4d0f-864a-5dfe7676e734", "comment": "Malware payload", "value": "8528b332b03acaf2c54d289d60a01eb09139f203ae8b0c423607b416e8cc7e7e3eb40f93a5a88a9c6d05eb2017d775fd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854536, "uuid": "ed958421-15d2-4d99-b1dd-518ce344f03d", "value": "T19C7329A77ADAB0BD02500083AD72BCEDBEC633BDE4D62B311A1EBD952DCE51415D852C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854536, "uuid": "d8e3a4cd-b49e-4d10-8c00-4b1720c6167f", "value": "1536:I9l/AoSSMp3gWAaRgy6wjngOUZD+dTS1hKfhFK6f16Rn1h2lZ6ogoAVNseDF6TzC:I9l/5MnNusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854536, "uuid": "dc13cdc9-dcf3-43ef-9307-5a058e0d31b7", "value": 73436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854536, "uuid": "3bafe96c-1cec-47d4-940b-447594a62ce9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854536, "uuid": "b7aa4c99-005e-4feb-8fc9-5900bed87121", "value": "invoice-1645080830.pdf (98).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3768c32-e2bf-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766797396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "02fea82d-ee39-4573-9fd0-bcd255d60342", "comment": "Malware payload", "value": "a79573f874a87e94c1086084ff5e1d27", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "bdd5ba4b-7aa4-4189-a768-4360967a2a88", "comment": "Malware payload", "value": "e06d884fe36697b80ca12374142c9d0755f16a1bd7e5ec4e141c432827b64b24", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "ab347316-8df8-4745-8e6b-bfb905de4bdf", "comment": "Malware payload", "value": "c5106853571e1d256bb0af4e6518309c780af8ec", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797396, "uuid": "010a24e4-085e-409d-bc94-87e247bbc56e", "comment": "Malware payload", "value": "3e6c49c22c964e671b6aba01049c26291a1f181e1f1ee117b715f07bad3386a1cd9fce41c9b42add67bd5638005ee149", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "1d837b21-0f20-48ea-b2a6-0c93b9b7a82f", "value": "T11BC32522BE8A9B03E83D1631DCE569272874FCD8EF5A1F1B21D0750A31A73791C9617D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "01225e4f-b92e-4cd2-a855-688df5281874", "value": "9fd576c5a0487af523df2a0fedbbd185", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "3da8a057-1463-4ec8-9eb1-ae4488d45dab", "value": "1536:avtlsRlriMv+vLYq/SWkXftdFXGq0h8v6ZiBPUmeFIOdvP+xAzt:mlm1ihk6kvtfGq0ev3U5W0Plzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797396, "uuid": "1919d853-9c24-4655-9868-e49c340ee168", "value": 124008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797396, "uuid": "3439d545-d3b9-4ae3-94b1-8681aea65522", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797396, "uuid": "2b36b535-5243-40a9-8f8c-c0b08272c628", "value": "VPN\u5ba2\u6237\u7aef\u5b89\u5168\u8865\u4e01.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "282c3991-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830609, "uuid": "b0621243-135b-41cb-8ef4-f6d84990bea3", "comment": "Malware payload", "value": "033555189bcaf4278cb0aefe56ce9806", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830609, "uuid": "c17d76be-fe20-47b3-9a6a-c7bfcef85f58", "comment": "Malware payload", "value": "e08d61f6c9af1572724e14654b8837e0d5652a0f876610547029ec747e07ebe2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830609, "uuid": "b7e9148f-68df-49e1-9066-cb59622370e4", "comment": "Malware payload", "value": "1c0459cf41485c615864691c930f31ae30ce804d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830609, "uuid": "cb7c0465-3107-4f3b-94dc-b26aebace69c", "comment": "Malware payload", "value": "20886c30a1beda6911d6bb72a496f0ff910c115492351315040a266b8f1299ea67316c5b3c90711cc7e7b9b603de772a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830609, "uuid": "ef099607-2ab3-4919-bafb-20efa08749fc", "value": "T192732C97B031149492D9D668C86EE012356CBAD20DB4A254C3B6A07F7BC216FBF778D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830609, "uuid": "ae01097f-e973-42dc-b28d-c60579f0e206", "value": "1536:I9l/AoSSMXw3wFwCwmwcw/wBwnw3w7wVwwwAw3wGwHw+wCw7w6wnwTwKwOw0wmwN:I9l/5M/eusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830609, "uuid": "2692ac61-0453-44bc-8069-ae3f3337bf04", "value": 75419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830609, "uuid": "275f9912-cce0-4c61-91e5-02f880ce1a7d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830609, "uuid": "1003ad9f-0219-4eaf-8223-621d4fa8e732", "value": "invoice-1645080830.pdf (65).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8c47e3e-e356-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766862178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862178, "uuid": "7618479f-df70-4774-9c09-3aa07fcb54ba", "comment": "Malware payload", "value": "4e063332d7dfb2b3aec7df98fc34758d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862178, "uuid": "8f30b93e-4de3-4d93-9298-553570503d47", "comment": "Malware payload", "value": "e1c92eea9689d21173bc72d22b935fe9cb20fb556f5ccc9ff6990494ca268984", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862178, "uuid": "490181df-9107-4b34-ad9f-f958eeffe1a6", "comment": "Malware payload", "value": "8c6fcab574066aa19d537053704d0d5720e909fe", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862178, "uuid": "1eaf8ebc-85bd-4434-ac85-d94333f17534", "comment": "Malware payload", "value": "84600eeda0edac850694a3e2fda58a4d9b72ed799227c2241a234bcc4c06b8f2b8e3119c7f8d5c3579a99cfcf1e5f139", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "G", "colour": "#9D82E5", "exportable": true, "hide_tag": false }, { "name": "US.file", "colour": "#F8C06B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862178, "uuid": "240bb72c-672f-40b7-911f-563105fe955d", "value": "T1F8863332E594402EEBF20973ED5495316EB9A6186F20D0ABF3C8ED5E297C45267B3313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862178, "uuid": "0b30ea3f-c335-4ed2-852d-c6546de24291", "value": "67715e556e3a78ea78c756db800102a3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862178, "uuid": "f73c100b-5129-439c-8963-f0cf63b74ab3", "value": "196608:aXYi97AjQLUKzu4eIixtAcHgQSBH91ViebEt50hWHLAGpSl:a/D47IlKSf+rTi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862178, "uuid": "29e1e607-dbfa-4cdd-8ef3-1434b97bbdad", "value": 8480683, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862178, "uuid": "1e530eb3-209b-4253-9f8f-1b712e5243b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862178, "uuid": "3bc6c4cb-4b39-4f41-8d27-07b13b48493d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3a1edb-e2b9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766794834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794834, "uuid": "14bac892-8492-4eed-8380-0552f5533813", "comment": "Malware payload (Mirai)", "value": "648e054ac5d0e64dd10e4c18a4cbbaac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794834, "uuid": "37f168fb-5a9b-4a4a-86b1-438fc3e5de20", "comment": "Malware payload (Mirai)", "value": "e2b2e000115c75f76bc02394a388e483140617793415c362ec5c9c7b51bfa4c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794834, "uuid": "57af20fe-a391-46eb-9b83-cefd3a4fb4a6", "comment": "Malware payload (Mirai)", "value": "1af07b9d01293638459cab116ce0c7b81d8e06a2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766794834, "uuid": "5592c59d-dd50-4104-be79-e9cbea9aaea9", "comment": "Malware payload (Mirai)", "value": "45271866decd8ff7e076456cd05011b5d9b746d7b41b3ba71a88ac6f5f1de0ebd9c7b16ec2c378856050fb7ef0f5870a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794834, "uuid": "e22bdeb4-970b-4269-a853-59ea692c8bac", "value": "T1E4732B81BC919612C6D526BBFA5E81CD331613B8D2EF3203DD21AF25378682F0E7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794834, "uuid": "5feafde5-0a44-4f0d-b88e-3565b39a171d", "value": "1536:xgSwHiDHSZm1CZyjF3C9NCIjaC4rwpRZDt6Ekv5bVR:SSwHgjZC9NC0aC40pjBC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766794834, "uuid": "edfcc02c-bed8-4fec-b073-a4f1c1a164e7", "value": 79644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766794834, "uuid": "c9b5d223-ae1e-4499-9a37-829a45ed3c32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766794834, "uuid": "3b6efa37-74ed-4dfc-8942-b77465bb0f7d", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97fc61da-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830797, "uuid": "f2278d48-3598-4391-8f59-af37e6b0cc49", "comment": "Malware payload", "value": "c2d675bc73b026e103ce4fa77e6749a0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830797, "uuid": "414a64bc-a6cf-4632-81ed-d6402e0685f1", "comment": "Malware payload", "value": "e2d7c7fe100fc653071afccef4b503d4a751b8f31462b94e34019f1a1c29b226", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830797, "uuid": "79fe1b67-af8b-46e5-8c40-5a076bd80b74", "comment": "Malware payload", "value": "590e0efbb427c141c1e92c0990311b10174c6aba", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830797, "uuid": "f0d33fd2-6dd6-4a49-bef7-9ab1d13ff171", "comment": "Malware payload", "value": "f2cf303cc651b96493f41e779f9f4074de12ef31a6106ea74b91af26361d9ec07957d49a120b592609e13f2337536acb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830797, "uuid": "fe5e7098-971d-461f-b863-0184f9d92ae5", "value": "T1BC63FA87D25918C8236785E309E8E9FA9B7A3712AA35E1423CC6F50E9988C70DD37DD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830797, "uuid": "ba0c6281-b1bb-4258-9f33-85dc81889cca", "value": "1536:I9l/AoSSMa5Trg0u5TkV9wMqSQt7+ZJz3OnQct5u3+n6+iskP75P0iP9L15azFGm:I9l/5Ma5Trg0u5TkV9wMqSQt7+ZJz3OT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830797, "uuid": "e49b9509-b1f6-4129-b5d1-8a1f95295e7d", "value": 71511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830797, "uuid": "1dcd2853-1b23-4ad2-b01c-2170cee8999e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830797, "uuid": "6ba6cdab-8a1d-4392-a1b7-c15c6a195649", "value": "invoice-1645080830.pdf (24).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b3b819c-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879523, "uuid": "b7645144-165c-4a4d-ac18-7f9e504dc9eb", "comment": "Malware payload (Mirai)", "value": "00b419467d5dd2bad473b2a57415d46d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879523, "uuid": "3a24a08e-309b-4c5d-bc64-6d24f0594dc3", "comment": "Malware payload (Mirai)", "value": "e2e24d6378d70442cecff07ff8d518548d08efc45b09b8af0e0253819bf63a57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879523, "uuid": "9d45dc38-a9cb-4b71-a5a8-56d7d6922652", "comment": "Malware payload (Mirai)", "value": "4bfe3dd088d92eeb0f4086f88991324e3520103b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879523, "uuid": "7da87df1-797e-4607-8271-a45d996c7f03", "comment": "Malware payload (Mirai)", "value": "e716f1cba2859300af09686372623e3206f5e974971f8a95292621fcaddfe8574a41bc369138d6a2a2254ce4ab33f446", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879523, "uuid": "1edf1977-ba1e-48fa-9be7-47240127900e", "value": "T1F8634B22BD762D2BC5C8A53B21E34331F6BA170621BC9A2FBE710F9CBF545502217A75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879523, "uuid": "1e20a1e8-7c7a-46b4-b5c8-dfaf292503b0", "value": "1536:bXZebcs4NushvdAxHPDgId9jkl+GU5XNXexchD:VoaZJIEltEXexC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879523, "uuid": "197337c3-b39c-4b56-a3ba-8b09504436da", "value": 66748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879523, "uuid": "b050c50b-28ca-42f8-8238-72787f8b5bc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879523, "uuid": "f8a3b519-05af-438a-95e7-09eed19196ec", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26e60b6-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855806, "uuid": "dfb7168f-36a0-46f5-ba1a-4dca60a33898", "comment": "Malware payload (Mirai)", "value": "5e601eeb5e359182d7b34a033054a9a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855806, "uuid": "463ce832-0ad9-4c53-941d-4a94b01d771e", "comment": "Malware payload (Mirai)", "value": "e2faa72a9069f827216d63f1044bbc3d4dac8c255fcc92600b1e9a5d57e3dec5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855806, "uuid": "18d34aa8-023d-4446-9d65-13987ac5d415", "comment": "Malware payload (Mirai)", "value": "09af85e880fce1b92002eabc7b3e7db164863fa9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855806, "uuid": "01df1cb6-aae2-4630-9403-495d44861242", "comment": "Malware payload (Mirai)", "value": "3be90e05f7c8c5b1397e2a673af8f89fa2db1426383e570eb88629ed62e55efa1842b6f18b10ab7362de26062bf3ee69", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855806, "uuid": "7fcdbccc-d2c5-488e-8053-116a60676909", "value": "T1FAC3F1C5BB6369D1C1A242BDA4C00AC387912E318BE313080699F674387DDFB1F69DE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855806, "uuid": "650ef626-c2e9-4443-8b00-3448071254cb", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnA:0OCDjXG9qTWywxlxTnA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855806, "uuid": "4e6411ea-20ca-4872-a126-503d7148e10c", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855806, "uuid": "00dae1ec-5a30-4619-81aa-1c971b30df55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855806, "uuid": "648c7ab6-122d-43dd-8368-f5ea07803f69", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b41c3628-e2bd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766796484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796484, "uuid": "6fffce91-4f79-4916-8825-c4a70e063843", "comment": "Malware payload (Mirai)", "value": "ed14f9dab8e13928a0b503d5d483bf31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796484, "uuid": "92d04c7c-3c2d-4066-a0fb-cce4bf9e35b2", "comment": "Malware payload (Mirai)", "value": "e38de0547eb5b2077ea012dddd4ddcb49f41c2acee1ab99721932ce4b35fd858", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796484, "uuid": "954a6bcc-c23f-487a-bef3-63e81fffea9c", "comment": "Malware payload (Mirai)", "value": "8a33ba8fb59522684d5eb7048c2baca8ce9b424e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796484, "uuid": "913be86d-029c-4508-aeb1-800d11c03463", "comment": "Malware payload (Mirai)", "value": "619cd7c8cfefc5ef239a021153c9dc2ec6389b24e27421a33864e411a8ea2cb213a139c5c7b974fefe63ed30100672c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796484, "uuid": "b8a90845-32a3-48ab-90f7-36a21ab0d37c", "value": "T1F3635CC5A603DCF9EC19463550B7F3325B76F039212AEA87E794A933FC56601BA0638D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796484, "uuid": "0d90cfd9-2b53-41b6-865d-ff00c1664f6d", "value": "1536:gFXbfbI8T2Tk+OHAChzJMFozDOdM/tMeMku37vs2AP8Sxv+J/RRfo:gFLzI8T2w+4Rhz8jdMlMGuLE3UOV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796484, "uuid": "81e3eacd-d740-4778-80aa-2ee4ce8d305f", "value": 70608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796484, "uuid": "f404f3c9-b76e-49c1-aa8d-e23b980d9ce8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796484, "uuid": "bb4bfbaa-8099-4aaa-b11b-91a6353dcb7a", "value": "jklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4662a9-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858371, "uuid": "0145434f-c7a1-4e58-93d7-5a32d7212c94", "comment": "Malware payload (Mirai)", "value": "263f1a977b753ea00ddef83d88a9ae40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858371, "uuid": "a66b0f28-974b-4dfa-8e8a-d01dda56f87d", "comment": "Malware payload (Mirai)", "value": "e3e73a995d8a71d02c3ec90fcd7b9a0e019efddcb0c5282aede65028c76dfed8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858371, "uuid": "0196a318-2df5-4d70-a9da-241c4be358fd", "comment": "Malware payload (Mirai)", "value": "4e3a74c424f28af933feb998527f8464749d07ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858371, "uuid": "0d5852de-af5e-4c62-9725-a7a8d7f7582c", "comment": "Malware payload (Mirai)", "value": "32b0e98147684e53ae0ddd0a7478cbaa4cae6cc7e36b8a9ceed4a58b8c15069521d7a8611e307d8822c3698968a7943c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858371, "uuid": "8a74348a-2e0c-425f-8d9c-0bc4b88cce2e", "value": "T199F37DC5E783C4FAEC164570217BBB369DB3D03F656BDA82D3B89A31D841940C61A76C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858371, "uuid": "d15c64fb-3eb0-46a4-b268-bb68fd28fb4b", "value": "3072:S6MZZr5bD5C9Ssg7h/Pg0W2O9LwNE37jPnTZXauGhGB1Mi:K1X2S3lgz3nPT9auYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858371, "uuid": "912dd689-e1c1-4569-a4c3-d128e9c6efda", "value": 162248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858371, "uuid": "2c1b2a98-bf66-4f30-86fe-22275bfe8b4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858371, "uuid": "85d7cb1a-baf2-4e6d-affa-6c29fd00e5fc", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e1d47b0-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795561, "uuid": "f24d503b-0163-49b5-9f95-2414f42cb528", "comment": "Malware payload (Mirai)", "value": "07956a87a49a7f13daf561083255603f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795561, "uuid": "86e65758-e05e-477b-b140-e395413de815", "comment": "Malware payload (Mirai)", "value": "e4a0b3c385fd22b55e4f6fbda0b4fa14cec2129d070dc100387e3bd7e92b2d3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795561, "uuid": "f2e317c4-320e-415f-af2a-4fbc74599536", "comment": "Malware payload (Mirai)", "value": "e408353b0c7bc380551c3c9fa7d4e8b4d1c87cbe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795561, "uuid": "2800f09a-5230-4e9c-bed9-262b975eb1e4", "comment": "Malware payload (Mirai)", "value": "9d92065ad656c5811b1d82655d99f18d206fa4b28ef4496e8ae08893d3ebbab0a47781bbcc2799bfece4d816d28493ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795561, "uuid": "ef70e6fc-40b2-4d74-846f-898cdac21ac9", "value": "T16143F2922E48B152D3B9B837E09DC7E85A5392F076D9E231017019AF35C7809B5F9EC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795561, "uuid": "352b0d97-2577-4d8b-80b7-6a4128bcdb58", "value": "1536:dTfTeG3Fv/O64WPM4IkW3OUTR0lW+c+2wCrID:tiG1vt4WPckcpCCID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766795561, "uuid": "580799ce-aed7-48d4-b3be-422a8885a531", "value": 59548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766795561, "uuid": "474a6b34-55d7-4d6b-a42b-0f2de665d3ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795561, "uuid": "597c539a-83e3-4086-9c9c-fb662650bd36", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eba3443-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870510, "uuid": "862a7110-3a10-4423-bb48-4c50d35ae9ac", "comment": "Malware payload (Mirai)", "value": "4241448f3c5f9ec1c2b6e6e5e8b76eb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870510, "uuid": "2a206d0d-e4a4-4e35-8e61-6f55a09a1ab2", "comment": "Malware payload (Mirai)", "value": "e4d557e32cbb6c543c5835986474f59e3496e73d4779bc37a1469b285085560b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870510, "uuid": "60360de0-56cd-426f-b4fc-4e74ec195fba", "comment": "Malware payload (Mirai)", "value": "f001c350650ec66b28939efe75c1ad28fcc62b65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870510, "uuid": "9863567e-0910-4960-9f6a-2ae69d03a2eb", "comment": "Malware payload (Mirai)", "value": "9b6185a76220f12e1ae356693046b7bdb34ab308297091e234d87c45adfb0b3a00289fe88aea70e9b6b48e406ce794b2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870510, "uuid": "34f9462d-8b96-4fd4-8aec-27d24443e893", "value": "T12FB2D16C061099B9D76FE1749AB64B901FA10AB1B547EC0BD2E5CEC7CE5623CB8439C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870510, "uuid": "117400e2-fff8-47b6-b621-9559b9270755", "value": "384:xgCx8qrcZhToi8DA9SQIzHQuKAxha+DPGJGnyz89ml+G7lTZKnCgJgGlzDpH7uNv:xgCx8JUp+SQIzHB3D7DPG8yz4oKnCgJO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870510, "uuid": "074c40e5-6e47-4964-8376-90d918198292", "value": 23600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870510, "uuid": "d3f98783-19d9-43c8-8f02-7279f2d57b10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870510, "uuid": "dd235e71-d294-4346-96fa-55def66743d1", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b6eae53-e372-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766874128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874128, "uuid": "7123a87e-69b9-4a88-b93a-c97e777fda6b", "comment": "Malware payload", "value": "73c4fad2a4d437fa1d21dd75a17aad7f", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874128, "uuid": "d58a7eb0-24d6-48d2-a0a2-df7511c557b6", "comment": "Malware payload", "value": "e5389af56fae1ed9c3eb85a96bd0f0a2493cec8129c7767bb6b792d1f583144e", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874128, "uuid": "0d7d8297-f6b8-4c42-aba6-e4055b4d18d7", "comment": "Malware payload", "value": "f849e5d58c9bd8d5e9af2616771f88cbb7a3bfe2", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874128, "uuid": "621bcc16-2a6c-445d-9d5c-36ca8eb2a9e6", "comment": "Malware payload", "value": "a517ee203909c89a86f8c5235eecb70972b3690784a588f12311153f8456bb2884fe73258a17c82940800c7edaa64e9d", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874128, "uuid": "0db276e6-881a-4a4c-bd5e-009db0e19175", "value": "T1BF71A01816F90648E2B7CB3499BB7210997BBA19D931CE5D018CC6082B67A10E837F3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874128, "uuid": "fa8b9989-778b-4af2-9dbb-597305f5984c", "value": "48:8WIVGaZR5PgZISUHCPKRKK/Cf75El70Mqx5ll0gMU3dLXuHWWaXvb:8nVGAPgZcHKKE75ElYB/JMeuTK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874128, "uuid": "1e5644ab-8809-46d0-a159-e82f8f9d74d3", "value": 3821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874128, "uuid": "5e4d124d-7f7a-414e-b539-556240ca6289", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874128, "uuid": "ea55ee4b-d9b5-413a-9b98-75463abea7bd", "value": "EU_Health_Compliance_Portal.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0e51875-e2b7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793902, "uuid": "deffa28f-fb07-4376-9f49-04f4a343c354", "comment": "Malware payload (Mirai)", "value": "ded014f09086f4ca1488765cd4cafb0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793902, "uuid": "d660d704-e8a8-40cf-a04b-f0a6127aa4b8", "comment": "Malware payload (Mirai)", "value": "e56a2127c70c0c6ced4b266aac5c5726d2c2d4bcb8bd269918df472204859aa1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793902, "uuid": "4a9e7a84-7a90-4017-83aa-9ceeafa5ba2e", "comment": "Malware payload (Mirai)", "value": "16dd1fc153bafbbc2e87382f296d5b17fe26401a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793902, "uuid": "3a56bc51-9515-4157-b044-c4400df4a605", "comment": "Malware payload (Mirai)", "value": "762574386d83acaef40dd96eede93c2b5c146c2ff79886751744b9355e861da0adb454fbfe975adeb71c827d804a4233", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793902, "uuid": "80f7ca87-5e5a-4faa-b0f5-45f897f488d9", "value": "T113A3C64ABB650FF7D86FDD3706A91B44258C560721E93B3A3A74D818F64B24F0AE3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793902, "uuid": "dc142a74-5240-4209-b746-236acdf5fb79", "value": "1536:s146ASD/5lI/Tbf9ltn2793jjfRwwkPA8S8Aalki+nPpNX5HdibVRZ:sO6N/5K/TZ+3mtElHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793902, "uuid": "90e953a7-93dd-4e0d-a686-f7226603228d", "value": 101208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793902, "uuid": "9f4e945d-4913-4556-a0d4-c5494e6a3c66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793902, "uuid": "ca0b03fb-d0b9-4070-bd61-af9422b04e83", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8bab500-e2c0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766797834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797834, "uuid": "a475c408-0e24-4ebb-b30a-1d8b0c8f135d", "comment": "Malware payload (Mirai)", "value": "4126c9a2c749d566ae747892c2f21979", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797834, "uuid": "09d3afa3-88af-4254-a58d-03e0b2b32cae", "comment": "Malware payload (Mirai)", "value": "e590bd95dad14b62275f9e7f9d9fd1a8cb61cdba65b0905a79edde8513723699", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797834, "uuid": "6a8954ca-7f35-45e6-ac30-12e0a2fcc60e", "comment": "Malware payload (Mirai)", "value": "f7cd478306133ec3d4f51a3c458a475c63027cf3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766797834, "uuid": "aab46309-1843-40e1-bb22-65e69e823789", "comment": "Malware payload (Mirai)", "value": "28769fd3f619ced8b4bc663c6cb763061b1b7cacd832d4f6e0461f43eecfe06ea04a5e1ab213d2045b07783d19e09638", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797834, "uuid": "ff8bdb90-bde6-45f6-ae50-793cd3555b09", "value": "T1471329C4D553E8F8EC2A05B02536FB32BE75F4391038F997D3969D33B852611E60A29E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797834, "uuid": "93709653-8ee9-4ac7-b455-7a8f752d9ade", "value": "768:2rvNNpIXgTm4vimxFE4rbzhWRncgztS30PTimANENcGZtL8Gl:SvNNpIwTTviVM3IRcgztSEbmNTktLNl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766797834, "uuid": "fb430f3f-4bcc-40a2-8a41-4455a7bef001", "value": 42708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766797834, "uuid": "1ed0a1c9-3546-43a0-b2ed-594426290f7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766797834, "uuid": "081d4cc5-2a77-41c2-84dc-f11edde1ea3d", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a167e2e6-e2c4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766799459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799459, "uuid": "969336d1-7326-4ecc-956b-57a652e40c1c", "comment": "Malware payload (Mirai)", "value": "411b7f627eccbced2d00fca3f7268bd8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799459, "uuid": "5e5e7522-9a4b-417a-a132-1e2f314d07e6", "comment": "Malware payload (Mirai)", "value": "e5c608bc1ff6d40876fe42f4cb9767735cb7e8393f18a972c431f9adc93a6e05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799459, "uuid": "34d84702-545c-4766-87b3-fa501784c2fd", "comment": "Malware payload (Mirai)", "value": "2f8e5bae43d2b36db2fdfa88470bd02ad462e6fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766799459, "uuid": "a8bfc6ef-0000-4bf6-944d-8e1714907d46", "comment": "Malware payload (Mirai)", "value": "bd1ced5f9252489dc75883145dcaf504ba39c7db062e910669306b55b01eef80972997102f31dd380bb489f20482769b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799459, "uuid": "520cdb87-a60d-4f6a-add1-e098da3c5e86", "value": "T17A337B7B8DA69E28D20856F474208FBA17536210A3832FFB556ACA758103DCCF64E3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799459, "uuid": "faa68196-482b-4854-82fc-fe9f79873f6e", "value": "768:sttxIyISK1dMcILsCslUH0VSjUACLT5OAnoqcPzXrCO0HdbIprpERtPxbVR:st7IypP6VuUAm5O9rPzbCOa0rpwLbVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766799459, "uuid": "7264c50d-e6de-4a5d-b39d-20fb2303e26a", "value": 51000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766799459, "uuid": "9c98ad34-334d-4dfd-a633-4612ac4b20a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766799459, "uuid": "3901d6ab-975d-446e-8430-ec1528d8b252", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1abe0af0-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825433, "uuid": "979d6027-df7f-4394-a14f-a793bd3ebd47", "comment": "Malware payload", "value": "6bca5349402224b9fe43e3beaff6e1f3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825433, "uuid": "0f173dfc-e491-45d8-984e-645fbca15f81", "comment": "Malware payload", "value": "e5d26b4530fb8d7bef1ac835f2511622102b9113302bc4916321caa90c10cb17", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825433, "uuid": "fde521d0-ff82-48f0-b775-a004d26514a6", "comment": "Malware payload", "value": "320ac4fa053419d082944d6f463c37b18bda5657", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825433, "uuid": "e039a4c3-720f-4752-b7f8-6cbc29666987", "comment": "Malware payload", "value": "d9545b48b7b3c20fb87c852b2ebcf92bb1fd0dfea30daa538759d8a13690088060bd4d35caa1a913bae0a2d7ebc1c44e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825433, "uuid": "80a16e9d-2446-4d7f-bbcd-08d1f11a652a", "value": "T14F730AFB3568BFCB384B5A4276465CFE24BA0655DBC11B9F31532D2341A8AB870B34B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825433, "uuid": "72a63b87-8473-4ce3-b5e4-ad62edcd4528", "value": "1536:I9l/AoSSMpGlGFGGGJGwGZGGGiGNG9GoGVGGGCGJG4GLGIGFGPG8GmGtG8GKGqGq:I9l/5MniusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825433, "uuid": "b944b1d2-aa04-46d1-8d54-cf332e80d31c", "value": 74441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825433, "uuid": "4d5e4358-c98b-4ebc-b826-1f107ba9c309", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825433, "uuid": "887cd820-ec7d-4a73-9f2c-4730318fdc34", "value": "invoice-1645080830.pdf (60).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c5fd717-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854641, "uuid": "522cf8e3-19b7-4e7d-b177-a484b346ab1f", "comment": "Malware payload", "value": "914de9900ee06c0687cfed45faf5f956", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854641, "uuid": "20c21bd7-5d1e-4504-8c9f-50414ca3bf2c", "comment": "Malware payload", "value": "e5fad720294445e7ae75ea7b588ac7580769be3f18cdaed9ed5e211d0d06c3fc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854641, "uuid": "ec7c7d3d-1f40-4fa6-8d77-9c1c37051361", "comment": "Malware payload", "value": "61fa005c18f54bfbdcee8782e3766ad609b336f3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854641, "uuid": "f0f371b1-a6d5-4398-996e-ba7540a2b840", "comment": "Malware payload", "value": "ab33129607476c75443331676ec19a057648d843e0ae58694c81b82085c39465f4406b8b5982276b5d8942ff9a743a99", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854641, "uuid": "7f166607-b270-476b-8c16-8c5028275703", "value": "T142632C22BD3742AAAB7FD028D46696377CB1C3FC5F8B2048B65961761F277E2408153B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854641, "uuid": "0fbbcaa4-d25e-4ccd-b74b-b4102030759d", "value": "1536:I9l/AoSSM/M6pueHXt4fPvlJSbVuQ3eDZe65EjrkEDfTVzLv7wVhTivJRT4lnWux:I9l/5M/M6pueHXt4fPvlJSbVuQ3eDZe+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854641, "uuid": "77c521d2-fbfc-4eee-9e80-2539b36aa12a", "value": 70581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854641, "uuid": "57388daf-1c48-40ec-b9e3-3bf971a16f32", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854641, "uuid": "195a7bba-e36d-431d-add9-52304b69616e", "value": "invoice-1645080830.pdf (72).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ebd4e78-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825600, "uuid": "92c46858-a641-4cb1-8dbf-71acf7d0e161", "comment": "Malware payload", "value": "62addc47cab9781520dde94384e14d77", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825600, "uuid": "eee7c3a5-e02f-4436-8db3-9ddbd08854fe", "comment": "Malware payload", "value": "e660f63ebe4f22816d98ce238d727aff56264aea78e844064a6ccd9811a8c99b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825600, "uuid": "f9601d7d-9d7e-4d8b-98e0-c2d3c38d9c7f", "comment": "Malware payload", "value": "ecd61c6c6dae9f69658fc7cc1934b6fbb6e9c358", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825600, "uuid": "a4c313e5-228d-45cf-989d-75c65932f394", "comment": "Malware payload", "value": "ba750b0a0db35b2d864c7ebf68885639b44a6bfbe0e3d65cd837a298b20891207ccdd9ea03b5b0960ded9d8f26aee898", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825600, "uuid": "66d1fde3-0eb7-4b29-985a-ae93c274b710", "value": "T17C733A72BB9B6F5B5C324A7849C2866D4433BAE891F87C88D83A831D795C5C34BD24F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825600, "uuid": "0a468ed4-4195-41c5-be2d-01d268c41eef", "value": "1536:I9l/AoSSM1jNKxgwkL6bM1nAXWr0zjlH1G5a8WtFhMdhV4r/fYCsjFi5/qC4ObiE:I9l/5M1jUxgwq6bM1nAXWr0zjlH1G5av", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825600, "uuid": "8b849ca4-8aa1-4fa2-897d-01a0f83d4d98", "value": 74429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825600, "uuid": "582e985d-17dd-4069-bd0e-7b609127a715", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825600, "uuid": "3897405c-60ec-4f8d-be47-97f647ac9f19", "value": "invoice-1645080830.pdf (21).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2e0eeb-e36b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766871260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871260, "uuid": "bc2ae7e3-8c44-4520-baf1-02004c01253c", "comment": "Malware payload (Mirai)", "value": "e745ff6f0a2bdd9707ae4a03cdf128bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871260, "uuid": "b7edccab-dac2-4960-b93b-51195c4f58a5", "comment": "Malware payload (Mirai)", "value": "e666d78b84fc2c65dc3c956482f6a23ee53a5ea32c5b763d97299620f935295f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871260, "uuid": "6e3869ec-d120-455d-ae37-719efd7c3d18", "comment": "Malware payload (Mirai)", "value": "dc45bcd86e048a8e4e29e579b742079a423a5a18", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871260, "uuid": "5b21096d-394b-41d5-9691-8950b94c7526", "comment": "Malware payload (Mirai)", "value": "0379e1ff2e037e1846b81653c817c8415d0f74a499dbc275b188568676a43396f133a660f9d4d768227deaf0dbcd0231", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871260, "uuid": "ab8ccd10-30b9-4e82-86b0-226e87192491", "value": "T108734BC9FAC3D5F6E85309315076EF339E73D6BEA164DA43C3A99632DC12102E906A5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871260, "uuid": "d2d59caa-a2c9-4e67-be37-b040aaf0a219", "value": "1536:y762UGxKAZp2dQ/isKyApfo7/JyokqtIYtSKmA5l:y76RGTX2G/ishAS7/w1qeIPjl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766871260, "uuid": "dfc6c36c-fca9-4f71-b826-36fc4adacd65", "value": 74864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766871260, "uuid": "d403205d-598a-4a67-87bf-4e2a304b69c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871260, "uuid": "2a94e89a-4326-4d73-8412-eebf8e10d0e4", "value": "ub8ehJSePAfc9FYqZIT6.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d7ac996-e2be-11f0-a129-42010a9c0007", "comment": "Malware payload (RONINGLOADER)", "timestamp": 1766796768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796768, "uuid": "39de521f-595b-4345-a2ca-3b4a7feda136", "comment": "Malware payload (RONINGLOADER)", "value": "f149fc4b836a4a228822418c915daef4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RONINGLOADER", "colour": "#DA46D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796768, "uuid": "e20d0769-d978-4a61-aba7-5cf372fc58ba", "comment": "Malware payload (RONINGLOADER)", "value": "e699c6a0667569f42ee9faa3cb9a3bfb0cd59256b2957b3e3343b9c0454be247", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RONINGLOADER", "colour": "#DA46D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796768, "uuid": "3ed8a65f-ae01-4a3e-ab44-2579d6f3b941", "comment": "Malware payload (RONINGLOADER)", "value": "84191587a9f971a0a0b9c0f88291bd952086be9d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RONINGLOADER", "colour": "#DA46D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766796768, "uuid": "1f238c39-363e-4bc5-b5d6-953b7dacd121", "comment": "Malware payload (RONINGLOADER)", "value": "1c4be68bef7f2ccf258063b1c2d247c9eb20a0eccab4f8f9e700b1ab3be8604c4fa81490e52bcd9a6437866aa03dffc7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RONINGLOADER", "colour": "#DA46D8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796768, "uuid": "864d5dc6-0206-48f1-bade-0ce7e4704e33", "value": "T16F18336140767CE7CD9BC9731A62DEDA2B288A3E9A704CBBD61424F6E5541C0CE3D1D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796768, "uuid": "173072d2-0853-42bd-a115-dcb5d4bc2d71", "value": "46ce5c12b293febbeb513b196aa7f843", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796768, "uuid": "178bcb55-9fb5-44b3-ac2a-19c39b73be1c", "value": "1572864:uLzINTxIwx3crCbFWJ0bUkgVmPVWaEN0WVT/AOD7XeMIOf65wFsXg/0s4N:uvINdIwJceWrVmQak1AW7Xh62+Xg/8N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766796768, "uuid": "aacddf10-2433-4541-b347-2314618eecaf", "value": 90197684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766796768, "uuid": "8ff485b8-b14d-4024-837b-1c7409735a46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766796768, "uuid": "e7f1d23d-0237-400b-b61b-4c27710a122b", "value": "LetsVPN.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6285bcf4-e345-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766854759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854759, "uuid": "1ea355c1-d7c6-4266-b226-96f2a7cc8e91", "comment": "Malware payload", "value": "493e5a4e9e30a3b2e5fe2fce0a3957cf", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854759, "uuid": "86e1d22b-9177-420e-b0dd-e3c19d960283", "comment": "Malware payload", "value": "e6dc20f3d72b5fbdca898e6efca8e027e841cffa203bd346a2fe03b5c644f58a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854759, "uuid": "5fa45c27-3077-4fb3-8659-a3e196f5b975", "comment": "Malware payload", "value": "14eaa22a78cb2d1e3ef784e14d44e947ee47e114", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766854759, "uuid": "53751caf-fb41-4211-bae2-32fc4eeb7ca7", "comment": "Malware payload", "value": "b12996e3b7bb5690537927ac67028bc237b32bd9003d3834609e2898b4dae7c7c7ddf2e81ed2d3cb48296e88c9e0fa93", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854759, "uuid": "16116de9-17ba-44d4-b88d-9d83c96dc504", "value": "T18C733CFD720388C8144B602AC77587F66F6AF8907276B905BE6EC4C543689DF20C766E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854759, "uuid": "f980ef3a-db8d-4257-b36e-7adadcdaa7a5", "value": "1536:I9l/AoSSMXrdUrKEcKewU0upTGOkLpqnP/s3Mu3h6FhlXXjPG1YM1ZKY9dKY3UQ3:I9l/5MXrdUrKEcKewU0upTGOkLpqnP/y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766854759, "uuid": "f3d6405b-c5a8-404f-8216-042c9ee0512c", "value": 74467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766854759, "uuid": "acb493a0-a4ed-4b33-baef-f384388ce8ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766854759, "uuid": "486f59fe-baec-4ba2-9105-47d084ee944e", "value": "invoice-1645080830.pdf (49).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e28a92-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825550, "uuid": "3b541b11-b21b-4404-9918-6e0e9e07d8ec", "comment": "Malware payload", "value": "f05c1b974f592910112085f91489ef1c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825550, "uuid": "d480febc-7c20-4d72-a58d-78dfadcb766b", "comment": "Malware payload", "value": "e8493b0fb95b244fdd97c92148f409ea1f86aba0d18e637fa87951f0552f1778", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825550, "uuid": "07189cff-6592-4fd6-a660-08e4b6b2b84d", "comment": "Malware payload", "value": "3463af44bf497cefa3c7ebe1949e522b21448359", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825550, "uuid": "9ae6b210-e851-4f76-89d7-5c27bfbd9a54", "comment": "Malware payload", "value": "ca253fd5d3f976381b701af725f7cd277d3d34bb78bdcc0828e53355640ee5f144e74bd1bbbedd2ac02953d7cd1ee335", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825550, "uuid": "da0a177c-7512-450a-b0d5-7c4677f1102c", "value": "T13A7309A36F873EFAD8FD705E9709035A9C16D1FF08A6FAB34BB315240418A43D8945A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825550, "uuid": "09084cf1-df66-4869-8561-46bd69967c42", "value": "768:I8w/h62/jWs6oS+xISN0vSB5y0UudkfScBYrwz2y8kTAlGB:I9l/AoSSMcPhusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825550, "uuid": "5226f21d-dc18-4b94-bbc2-39e9b8fa84fb", "value": 74421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825550, "uuid": "77e1864c-41e8-475a-bfe6-0a5c717f2e4c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825550, "uuid": "d9fc9c4d-02d8-4cc3-aee9-0d24f19302f5", "value": "invoice-1645080830.pdf (34).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1228b07e-e36a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766870515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870515, "uuid": "7ac4bc78-4f65-4fc3-88aa-223c10107286", "comment": "Malware payload (Mirai)", "value": "60acf3e987b559aa215b096db5aa909a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870515, "uuid": "ba553267-28b7-4207-b077-b18beaa0fc8a", "comment": "Malware payload (Mirai)", "value": "e8886101ee7e6feccb1d382cfde091bc598d50747b691491a5d627cf1db04bcc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870515, "uuid": "d45f0163-e3ff-407a-adb6-84a80137a610", "comment": "Malware payload (Mirai)", "value": "143c8591227946b383cc04333f7d94788428a9c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766870515, "uuid": "7bebc75d-8877-485e-b22d-484d59dced6d", "comment": "Malware payload (Mirai)", "value": "776fe064e3785c7c34fe93d860b3be224582b0ef46a64ca933d5d0058aa61061e752b90443e339b9188fb75716e396f8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870515, "uuid": "2075d038-b710-4f44-b539-0091a6e0f2d2", "value": "T1BBA2D0B0E3F15071D5B1FC36B6AA0A832B531F7CD6EB7C2258570118F64BB2691B4E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870515, "uuid": "e574c954-01e1-49ee-9d3b-3b57e28a65b9", "value": "384:BXZvYKfKTTBZCZjhharXtP0rTz/ohBdnRGMBao7g8hymdGUop5h5M:BX1YlTTPC0r14/oDdRGMhHs3UozbM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766870515, "uuid": "55ead0f8-9b80-4ec9-a547-b9573082e22f", "value": 21832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766870515, "uuid": "c57ed076-3d73-49f2-8297-d3ac0d0dee7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766870515, "uuid": "0a5b9168-d8eb-4228-8f6b-b873fbd30e51", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fafc9df-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825495, "uuid": "91d57387-7777-46de-ba4a-556861688e80", "comment": "Malware payload", "value": "b0015fb3ede0c6d53f93d61b71e32c97", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825495, "uuid": "c95a8326-ec60-4fd7-bea7-eff6aa71b9a3", "comment": "Malware payload", "value": "e8b1023390493f8f65a8508a18dae8c825b5d9b619c05e5f324bf5ec482aa443", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825495, "uuid": "8104a4cc-1458-416d-97f2-cc183b186853", "comment": "Malware payload", "value": "af5a3876fc4ba5692966a6b9507b3bfdb47c3ca8", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825495, "uuid": "b66324b3-5ee7-4a96-8251-d1e2f1eb1e30", "comment": "Malware payload", "value": "3880c7be0878117fa14854d1ea33d501950d34e2cef273c73f8e63b5be92c67751ad322162da55275b612b00dc8909ba", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825495, "uuid": "15b96ece-da4a-434b-b6b8-d14b98747e58", "value": "T118630906CCB7B46E11551451EA961FDECF4DEAF1F84EBC32137ED993A940B908872C8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825495, "uuid": "9416e18a-e212-436e-8e55-7363aaeb2d57", "value": "768:I8w/h62/jWs6oS+xISN0vcCZGPZP/BeTR3t7PJcaFeR4R9M8AkAmg/Wg86INNwEN:I9l/AoSSM9UusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825495, "uuid": "0eea079c-b46b-4368-aa37-d187d6b8f8f0", "value": 72559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825495, "uuid": "a7640d73-0c3f-4b30-bfe4-9baa2e92ddc6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825495, "uuid": "576a1074-f256-4d13-908a-fd7903e364b3", "value": "invoice-1645080830.pdf (43).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bab04ca-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855553, "uuid": "504409b0-1b2c-456a-af47-5d0d72b62a5a", "comment": "Malware payload (Mirai)", "value": "d3818e714fcc29a93f7279515d6f217b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855553, "uuid": "caa7737b-05f3-4775-8cb8-67bd48fe6ebc", "comment": "Malware payload (Mirai)", "value": "e8c2f0fc56a56b48a1f4cfbd9b0c2fec7757158f6e21513782b8e3597d90cb53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855553, "uuid": "b3686306-1a1b-4098-ab57-7ae14df3eeff", "comment": "Malware payload (Mirai)", "value": "aaa53a08849cee2a4d836283ae5978f2a8530cff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855553, "uuid": "b6e6486c-4c98-47d3-bfa9-fc90b4bf1c2a", "comment": "Malware payload (Mirai)", "value": "724cc7a0b2d2474d34a129524ab3f491747131729b5c553824225b42a8bad80fa7df7c66187a0d7b24cddd8226be8af2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855553, "uuid": "08f14a2b-1ed2-4d16-80f6-3311ae5ff826", "value": "T119B3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855553, "uuid": "8daf2adf-41ed-4b88-8e64-a0861c1e9b1f", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzz8rSR:t3SrlGWnKTU83AQB5A5Liy36fHUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855553, "uuid": "3c365f9b-c102-4aba-9e85-eeebb15e0e07", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855553, "uuid": "595607e6-d561-4187-a859-a1de72abfa55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855553, "uuid": "cd5eb75c-65cd-4565-89f3-8bafb59ffdc2", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7385242d-e37f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766879698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879698, "uuid": "2135fd53-5c11-4657-a96c-1cd0d50c13e7", "comment": "Malware payload (Mirai)", "value": "2c559c2ad55f8cc23e609f07bde1892b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879698, "uuid": "3f468ff8-1839-41f8-8007-76604fbce12b", "comment": "Malware payload (Mirai)", "value": "eb46345bdd6ed962c96f291eb556d2bbfe62cae7a7610193546c8a69be5ebd08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879698, "uuid": "08310881-b010-4aa0-97c6-536be0849ce1", "comment": "Malware payload (Mirai)", "value": "de777ac7b853ef289c322f29cd51eb7bdb1713f4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766879698, "uuid": "7feb09b9-4799-4043-b0d2-6e77aeb176f3", "comment": "Malware payload (Mirai)", "value": "fed9520c67cddfbc17e66a9a6d515643f35a4e162dabd4d92fe69ecefc1c491bd117396a287d7853764bfa36c5fd3fb6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879698, "uuid": "f8edb170-06e9-4d40-8175-5206ca18a376", "value": "T1A6734C87A410CD7CF80AE67BC4670E05B574B3415F830F27A7AAFDD7AD71194892AE82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879698, "uuid": "63a9ecff-7954-43cf-ba4d-7e338060372f", "value": "1536:G5x3N4r9wpmyEp6uq/tWYEr90KW8ujagFUCevDAWsdedfU57f6PAR:G5x3N5pLEpjq/tWYEr93qavUgdfUBfJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766879698, "uuid": "4f4d752b-ed3b-4050-afa3-15ac8fea3e77", "value": 77848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766879698, "uuid": "2d0b21bc-2d96-4900-8971-b41f32a0b10d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766879698, "uuid": "1a19b628-adb5-4f01-b2b4-09ec68c55adf", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9197510-e371-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766873802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873802, "uuid": "010ca32f-c218-451e-8f17-3e238fa58751", "comment": "Malware payload (Mirai)", "value": "f96da0daa24260d90dfa3500fa17d024", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873802, "uuid": "a5322dd8-1991-4ead-bf6a-b16d5c816bee", "comment": "Malware payload (Mirai)", "value": "eb5e56032dac74fce6ee2efc55aba286e293f2626e5fbd79fe6eb075e2f282e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873802, "uuid": "698fd053-982a-4d97-ac3e-9e5f7a4b4d54", "comment": "Malware payload (Mirai)", "value": "77e4e742765ea513140257f5ad70c5da9a82721d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873802, "uuid": "4ba38986-b9c2-4722-9b94-8b7240b24f5c", "comment": "Malware payload (Mirai)", "value": "9e22e9c1dd29561e79833c629de671fc1244c52d9676f3193ea5d3f23bf46f70fcf1dcf1b5b70f28897582449a3989e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873802, "uuid": "5e89d3ba-c33b-4768-b5a2-8121f131c0d2", "value": "T1A0043B46E6818B13C0D6177AB6DF420533239BA4E3DB33069928AFF43F8679D0E67915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873802, "uuid": "2070c693-980d-4239-aece-2453e62955b8", "value": "3072:RbLVMkH9mV/akALCqUjQlW12uPfy6iuCZVzE6h5M/9FgAm9wQBigqK:Rbikd4/akALCq6QA2mfy6hCZVzEcM/9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873802, "uuid": "7c664baf-95e1-44bf-90b9-e153d40bf8fe", "value": 173148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873802, "uuid": "2e44300a-a227-4a34-bb57-13636f4e2a34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873802, "uuid": "c07d97a3-db9c-4854-8050-36633ab7459c", "value": "ub8ehJSePAfc9FYqZIT6.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b87fb8a-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859579, "uuid": "168a58b8-5fc9-46b7-8e86-aa5970ceb86a", "comment": "Malware payload (Mirai)", "value": "aae9a3d6c6e94542c92a2dc9024fff42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859579, "uuid": "cf123d17-f65b-44a3-b17e-19d96fb65236", "comment": "Malware payload (Mirai)", "value": "eb814c318cb64d274a621ad8e46f92c15ee3410c26458471b5280010a141653c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859579, "uuid": "165a9c73-0a6c-4ae1-b047-5cc2b0f8e220", "comment": "Malware payload (Mirai)", "value": "27ad30336545df949533625376c27205ed25307f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859579, "uuid": "452accad-a62e-47c6-b2ce-870e9f1ebd6b", "comment": "Malware payload (Mirai)", "value": "85d113dcfb476d739221e1f56315ba956d59675006a7855210a9ea4b97ee115495d736b7e47ff7e7f09d27fea2121333", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859579, "uuid": "eecb45f7-6a93-4b7a-bb85-d2d35aa49ec3", "value": "T17F634A12287C6A17D0E0A63F11B78391F1F52B4861A4C69EBD350F4FEF2A39015AB7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859579, "uuid": "424b9f30-4251-42c3-bc75-722a34927f19", "value": "1536:B/wXD0PsJDNJGSI8Bf3QvTSNwj6vgdQT5Jak7kFjU:BZQ/+2NwKwQNJrkFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859579, "uuid": "b56ec2ae-cb22-40a1-99f6-e55e7f6c537c", "value": 71832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859579, "uuid": "ccf28b38-4dcd-4e80-a96e-0d64b39fc5dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859579, "uuid": "ea7b4086-face-43ed-b82c-fa04f615b05c", "value": "mirai.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d29989c-e357-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766862454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862454, "uuid": "f8d354fd-eeb8-4101-b1b6-3587a75ba6dc", "comment": "Malware payload (Mirai)", "value": "36dec3366c7f03ffd9725fe72877af7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862454, "uuid": "43671752-22ec-4cc5-9459-747821bff7f3", "comment": "Malware payload (Mirai)", "value": "eb9b1bb177e1d70bea5fe05ebcf5598c66457d050bac4692e19d3fa94ff8a1ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862454, "uuid": "f7caed96-223d-4adf-90fc-65d5cb8833a1", "comment": "Malware payload (Mirai)", "value": "1588e4fa8cc17207c210339b8768bce63d15cb2b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766862454, "uuid": "3c3d88f6-559a-440e-9567-f1d43190a42c", "comment": "Malware payload (Mirai)", "value": "7d11ea297aa2ade016c40fa474b6ea836d826bf42133311cd403564256c1bd65cd74c4f449613caefe7e7b06cd57863d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862454, "uuid": "efdced09-6f9f-4d75-b623-37a566d7d39a", "value": "T12B635CC69A03D8F5ED19067461B3F7365B32F539506CEA87E794E933BC52A01BA0638C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862454, "uuid": "ebf1bf61-2a6d-4390-b577-349b022986b3", "value": "1536:Dzy0mANY4rb/gw1jAFKzv2PIb+rwsM+cabCaHGwa54HbEYRTHRR:3yPYY4rbg2AF9PIbywmcaOam/W7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766862454, "uuid": "aa3fdc25-8c08-41d2-b9b6-0a9dba4cd674", "value": 70608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766862454, "uuid": "2f927cb2-b7b9-4802-b491-8b914e42dac3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766862454, "uuid": "5f3791c3-1d1f-4d3c-aa35-ec46aa293c99", "value": "jklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26b69b65-e371-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766873556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873556, "uuid": "bece06d3-a623-4523-abc9-85cd322a03f4", "comment": "Malware payload", "value": "542b068ff363845ed7f39bbb18a670bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873556, "uuid": "509de01e-df08-4ca5-8296-e9697d70a345", "comment": "Malware payload", "value": "ebd4331fb913b6dea5616aa04e6565691b39240725e238ab334936d8bb0b1a8c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873556, "uuid": "79793752-9351-4be7-9f54-6bde7480adfc", "comment": "Malware payload", "value": "bcdee246abcab798c2114407de189ff7307196fc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873556, "uuid": "6ae38695-6235-4230-9066-47c99df8a07a", "comment": "Malware payload", "value": "90c8d56c6e8f654935107683bfcb36d688f10d8d32881f67d659fdd59e2b43cc0404dfc379d84835d0109d0838f4d4f8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873556, "uuid": "3050b3e1-4601-4d1f-ac30-915de331b029", "value": "T1E3848E07F657909AD450D072AE196631F727BC4B4B2039E77B8C8621BFB0ED0767878A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873556, "uuid": "fcd59954-1e84-4021-a5ab-fe3ab6c145f4", "value": "10ff992d2b3828c10b69ee3a5cf1fb92", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873556, "uuid": "4c425c89-8a6b-49cd-b80a-cc55cff50cb3", "value": "6144:MkTnLr3yDUTCB4pPgTQJuU2YTQrq6pvwHuo0cMlYbc5tes:xuDpB4KZ3r/xwHGl2bcSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873556, "uuid": "95148298-aab2-4f7a-83e9-7f1a9785a516", "value": 396728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873556, "uuid": "58b4b5d6-d173-4f09-9d99-c38b45c9ec52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873556, "uuid": "f8d54a53-14c5-4288-89c5-c43fbfe42a3f", "value": "xAvuyj.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "647c05b2-e372-11f0-a129-42010a9c0007", "comment": "Malware payload (PythonStealer)", "timestamp": 1766874090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874090, "uuid": "db82e313-e25d-44a4-9687-5ac454308d35", "comment": "Malware payload (PythonStealer)", "value": "a428280966ea3378e390490f87c6d0be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874090, "uuid": "3071ba79-7412-42d7-9a21-a1a5b017a085", "comment": "Malware payload (PythonStealer)", "value": "ec343d45aae8f546e5e362fbf460dbe0b057e591eb85da11c91620eb0be06282", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874090, "uuid": "573b69e1-93f7-4162-a019-42bbca456216", "comment": "Malware payload (PythonStealer)", "value": "300b9ba053f06c89385d54143253d84ef1d18c55", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766874090, "uuid": "465bceaa-8d94-4ef2-bcaa-bf904646b520", "comment": "Malware payload (PythonStealer)", "value": "9653bcbeb43162f00b82bbf93b770f3ad723713958690bb474ee1ba7b4ebacf39c696e87962dd5d7ddad1e73b3a46e8d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874090, "uuid": "7930a4e5-9e2d-4eb0-80ee-d3b83436ae30", "value": "T19417332D1FED888CC2827EBD6F662395B1FAD150691EC647CB364D9DAE28BD43C440C6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874090, "uuid": "739f2590-aecb-4dec-8690-ddf0759d10f7", "value": "31725385009a1b77aed0a625d620125b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874090, "uuid": "0cde773a-2b7b-4c55-8109-451efaa26f07", "value": "393216:b3yTZ/71Ph3yov9lkCpdhtQLXQwtr715c2yjTaQJk6hUchWP0t9DZh1oio7x4p4:b3W7tht9lB736Qwtr715c24TM6hDWP0K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766874090, "uuid": "4cf41329-208d-4b9f-b211-90a73dfb2caa", "value": 19935232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766874090, "uuid": "3d72a46e-8882-4a99-9f7a-eb0e57b08819", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766874090, "uuid": "399b1d91-7e5d-46d0-a987-e3ed777e1856", "value": "SnoserAX.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc180698-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858882, "uuid": "5c199bd5-ad5b-4c57-a40b-476d87155e88", "comment": "Malware payload (Mirai)", "value": "aa923b30915e138df25c02a9d4daa004", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858882, "uuid": "197863e2-422f-4b23-a6ce-50117d66d4f1", "comment": "Malware payload (Mirai)", "value": "ec9a93a09110ce2f1cf7269830e9ce162ab7ef11c32ba4e924e85c0aa0891382", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858882, "uuid": "675848ed-c893-46d9-8cb7-ae725af74628", "comment": "Malware payload (Mirai)", "value": "cfe9b582d5cf6acc669b463b433a07430747df26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858882, "uuid": "10f1e69b-8e4f-46b0-875d-6dd927584a0e", "comment": "Malware payload (Mirai)", "value": "d85a9d6e47d3fdc3f0fbb5a6e3a2771a4f47a26fe0f3713384a30e96ac2931423b658c4bcf5941f2cfb4712db7cbf21b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858882, "uuid": "ea63bef6-fae6-4548-8732-cf8fa57c515a", "value": "T1F1A3D60A7B610EF7D85FDD3B4AA95B0425CC560722E93B397A70D818F64B24F1AE3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858882, "uuid": "3e190451-d6d0-4a14-a6e0-651d9dccac0b", "value": "1536:Dy0Kn58/HMIjp6QDNUZyhn79MjOvjsFfgCrbxDGxN1kLL/ayYTPbVRX:DLK2/Hvjp3hZM8kLnYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858882, "uuid": "4278bfde-bb35-4ba1-b653-5ffc35cfcdfb", "value": 101544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858882, "uuid": "8dbbb294-a6cb-484b-ae66-8267eb5a4798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858882, "uuid": "f36649fe-019d-4213-b52e-00ef8a1e1d6a", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb43ad0-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830431, "uuid": "86b5fb7f-2a76-4279-8ac3-e2e21ec3c710", "comment": "Malware payload", "value": "5491247f29bb45c56523585dbb2b4c13", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830431, "uuid": "f6a70871-5a85-4b72-8d4c-d745fda8159c", "comment": "Malware payload", "value": "ecdf768559e2787273ab4d38750d1de5b641ffbe6c63bdff88bf6da1a28e6159", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830431, "uuid": "f860edc3-ba84-49ae-a16e-e3d125b4bf5c", "comment": "Malware payload", "value": "2696fba0ba5f549b482f7f2437e92b044dbbe142", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830431, "uuid": "81a244ad-d795-4613-8437-7022efbcda9a", "comment": "Malware payload", "value": "ca9716a2cd208f72ba997425fe7a9febac87631c133af579b7f41a3303526531d0cc09a545bbbbd55cc959446c4fa1e1", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830431, "uuid": "d7e9600a-bc15-4c25-b6e5-61ea253f79a0", "value": "T175630B647E16FF5A02859D85385E5A02CFE1E9A5C3D1AEF8C603FD08418AFB5834787B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830431, "uuid": "6cf1260d-e13f-42c7-9eaa-2d44477cfb0d", "value": "1536:I9l/AoSSMqV/xV/6V/4V/RV/CV/RV/uV/3V/PV/tV/fV/SV/TV/tV/tV/RV/cV/J:I9l/5Mqdxd6d4dRdCdRdud3dPdtdfdSG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830431, "uuid": "10abd13c-e8ea-4a2e-a261-e5abe3c6f80e", "value": 72523, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830431, "uuid": "8d453d99-413f-4993-b9f6-78b5e616816c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830431, "uuid": "69460ac5-e29a-4f4f-805b-6922efd615df", "value": "invoice-1645080830.pdf (100).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd791542-e34e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858884, "uuid": "b48db33f-4196-46f7-97d6-05a2157a3c28", "comment": "Malware payload (Mirai)", "value": "d6ba342bea617e99450b6b556813b44b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858884, "uuid": "386b8224-86c6-4fc0-9ea6-d6e92fafe50d", "comment": "Malware payload (Mirai)", "value": "ecf59df08dbd7fc5517a062d68ebfe974108265fa567e0cf18cc0629dbb6fe21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858884, "uuid": "3a705d07-da8b-44c3-baa1-16c8058f7df5", "comment": "Malware payload (Mirai)", "value": "39050ee465b59fda6cc7f30d9cde128d81329968", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858884, "uuid": "2a71cdcf-28a3-4a84-853a-71dae7078d9e", "comment": "Malware payload (Mirai)", "value": "38bb29d17c048ae3b04b741709364788608d9a72a7b721aa82ed2e45943ebddbd568811a8c0c455c2523a9a4485bce4b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858884, "uuid": "d3a962ae-fb67-4cec-bd03-1112266988f4", "value": "T1E383F786B9818A52C5D556BEFE2E51CD33131778E3DF73129D205F24778A82B0E7BA01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858884, "uuid": "a8265fb1-d091-4f60-bc58-3398bd4ba2af", "value": "1536:7xndbL/4YyOzaFhvHdUjJQUfo+XYASzBRwbRMViAlZOkq7tPb78aYPbVRS:7LgYyppGj6UfnSz/lZOkctPbYauK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858884, "uuid": "be11c2b8-c055-4ed5-a13e-2fe37fbcd30f", "value": 83128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858884, "uuid": "bee63359-56ae-4bd6-b578-c5c614f2e791", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858884, "uuid": "67a6a14e-56c7-4325-923b-5d321c11a58d", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838ee598-e34f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859109, "uuid": "2930711f-4de6-438f-b980-0391b8363b8c", "comment": "Malware payload (Mirai)", "value": "e0442876f1c0cd6c5b52dd297889c8c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859109, "uuid": "892027d1-4440-4b59-92f4-97d90ac090c9", "comment": "Malware payload (Mirai)", "value": "ed41134f10a0508a138a7be57697c5edad980add8bab8b860276345da584b870", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859109, "uuid": "ccf381a5-3efb-4b87-a8c7-381e44a3fec1", "comment": "Malware payload (Mirai)", "value": "85b7174e74fcb1c4fecc51dcc9d188adb5a16817", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859109, "uuid": "34b27f94-a5c4-41ca-a2b7-ce04f48c2b5b", "comment": "Malware payload (Mirai)", "value": "9ef09a753480eb28013d7a561cfa76765aaefd7cd7a4eeb7c5c0b05d6e764224e63629c65740ed8f6025e1a152583b67", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859109, "uuid": "ef5ddf43-7e70-403e-ba02-dd77d4b3e29c", "value": "T1BC53C61A2E159FACF76D873647B78E31A788339326E1C681E15CDA011E6034E645FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859109, "uuid": "0969f4f6-852a-4420-8374-bee790a98ac3", "value": "1536:H+Ffp4Nz6BuaaU8rGceDNvjMfjSRfjjxXBhlpU:HeB4Nz6BDaU8rGcu7BhLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859109, "uuid": "867c3943-3c88-4678-a3eb-413155de0bad", "value": 63552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859109, "uuid": "37e31014-b7a5-48ef-8027-05f0ff3516d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859109, "uuid": "05d4e672-1697-4ebb-b755-6b72747fb8b8", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1070bad8-e36c-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766871372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871372, "uuid": "bbaf43cb-9387-4432-82a0-4aeb97883951", "comment": "Malware payload (QuasarRAT)", "value": "4d049fe26c4367adfbe5b6c4d2d031cf", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871372, "uuid": "489d72aa-9c11-49c5-bdf7-e7f94a1602a1", "comment": "Malware payload (QuasarRAT)", "value": "ed6963178802d34baee6184ac0bc08cd8bec179d35e7a1da21ef09a7623029f7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871372, "uuid": "38018d81-409b-4849-8b94-05cb18934079", "comment": "Malware payload (QuasarRAT)", "value": "79af2c9bb81d9699a6948cc265d553bd5e1482bd", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766871372, "uuid": "84cdb0a6-5e67-44ec-bdf6-95c3db7ef8d8", "comment": "Malware payload (QuasarRAT)", "value": "14c086f4df2aafff0f6a2105dd1871dde1ef15e7d1e17e6c7cb0fc7e0076901bd9e9387c5fd7e9f28b464c0f119173a3", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871372, "uuid": "7f5ef77f-1f84-44d5-89ed-094f9125008a", "value": "T133C523853BFC4948F6BF9F702DB626248579B8A25D21EB5E06C1309C1931FD5ADA0F23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871372, "uuid": "adb11d64-0f24-4634-84bd-0c4b3ee65d1b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871372, "uuid": "cd623c96-2693-4e4f-ab2f-32c9873406e9", "value": "49152:eLvL+2upjBVhbAbXMtQl/wLz8r5S5l7KdVSZ4eY83TAcm:AL+2upjBVGVl/lQrCSZ4183Dm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766871372, "uuid": "e62a45e6-556a-41d5-97da-5560705431ac", "value": 2613248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766871372, "uuid": "a6fe6266-dea4-4c2b-ac2c-377f79d48aa1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766871372, "uuid": "cbff732c-8a3c-4c49-822f-5ebc8e11e6eb", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f33f614-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830675, "uuid": "0f8c6ad9-1571-4636-8bd2-a600729eb6d9", "comment": "Malware payload", "value": "e940a66b3c0df8e545bd57d0f7cefa93", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830675, "uuid": "b1aac5bb-2056-46fc-b145-04268002b391", "comment": "Malware payload", "value": "ee1254de7b6212d4b93523ba93560b7f06b1b357360e1607ee0366d3704c1297", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830675, "uuid": "22418da5-06d8-4230-807e-6b2a412da8f8", "comment": "Malware payload", "value": "c5ffc2223e753d142d659b52a94bd50a221e53cd", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830675, "uuid": "e388a3d6-93c0-456a-90d9-ad862bd7266c", "comment": "Malware payload", "value": "2843ced70a9314f07dc029874b73531bf8a0caf3628b572f6fb238ab28f75be42a9fd5903f8d1c7eb26e489e55ca31ba", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830675, "uuid": "c45d0cfb-abe6-4dc7-aba1-1a1eb6e65ce3", "value": "T14563FA49C73746DC357F31A44176E76A0D88A4CC0D0F2494B668AB30E3B27D7B6686FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830675, "uuid": "0482631c-2cd6-4cf2-bb17-edfe564f768b", "value": "1536:I9l/AoSSMD4NPCX/oNhXlgdNa9EfBboUiQ8J/9YvuxpuqCoYGpbY+C8dfkc8fRdm:I9l/5MeyusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830675, "uuid": "e08a302c-bc07-4116-b51f-a850db7c0db5", "value": 71487, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830675, "uuid": "e62fed7e-8dd8-4b3d-8335-d57187866ab0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830675, "uuid": "5001d22e-ed3d-434b-a565-fcff925f192e", "value": "invoice-1645080830.pdf (50).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67fbc4a2-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830716, "uuid": "1b983b37-2d87-467d-859d-7499db852068", "comment": "Malware payload", "value": "973b4da457d9ec8bd15fd05bb82bc122", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830716, "uuid": "41d34837-b3b6-4bf0-bffd-fca2e93bd082", "comment": "Malware payload", "value": "ee550eaf495722b4882acc52e3ee10a9ef63a35bc0c6f08cf15bac3c967cc788", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830716, "uuid": "f79c9c77-f333-4f24-9e03-13e37a63e4d5", "comment": "Malware payload", "value": "9f2cc6216efef49f9a864b7fb1ece7dd240ceffe", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830716, "uuid": "82d9b502-3bf1-43e3-865b-879a6eb16791", "comment": "Malware payload", "value": "2a48766b72956e57a527843af900c8d9696c9602064a8cd4e0933cb97fdf1529ba75971697fdfa31ebef3ffbb627adc3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830716, "uuid": "240fe186-eb98-4d8f-b61a-ebf85265cab8", "value": "T154634B3E752047DD03E5F57EA06F9330A0CFA451A5AA853362F52781B66D2C28FF0E4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830716, "uuid": "8383bc9a-ac0c-47fd-96ad-1feed9aac82e", "value": "768:I8w/h62/jWs6oS+xISN0vn1vYNQdkfScBYrwz2y8kTAlGB:I9l/AoSSM2OusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830716, "uuid": "6812fe31-4095-4567-a58b-855a55faf0f8", "value": 72543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830716, "uuid": "520b35cf-b376-41f9-a6bf-1d03aa1b97cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830716, "uuid": "df06d793-30d2-4438-be9d-bf31c3fadc74", "value": "invoice-1645080830.pdf (42).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e441b05f-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830495, "uuid": "77ed4bf2-d72f-423a-99ce-994016525709", "comment": "Malware payload", "value": "b0962646894b58f4b08ada471d3a2643", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830495, "uuid": "c2ab2c76-7a79-4020-80bf-ebd0fb168187", "comment": "Malware payload", "value": "eebfcfe4861f015560977810f97c5c706033ac4bbca9f0561047dc3758ff4ced", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830495, "uuid": "5170145c-11b1-46aa-b189-74f3df1728db", "comment": "Malware payload", "value": "fed6e790416ba151d487ef9a5744c6a14063d246", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830495, "uuid": "c02c3401-64ed-4dcb-93d7-abe15efd87e4", "comment": "Malware payload", "value": "beef0fe62f15b78f93bd4c2043c5d3c2f68fd64cbe4c73ada0ddf1a5b5ee347489146213fd09764eb6b2de55bf31d542", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830495, "uuid": "4af32eda-cbea-4099-ab5d-555cbd05f580", "value": "T1D0732B4FDB01EC5A6EE30E9C8B5B754508267C44CC5DABB79BCE68139294F5200E2BF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830495, "uuid": "43612f8b-55c9-4877-bde7-df9dab0d9409", "value": "1536:I9l/AoSSMnjU454TN0eOsOnDDmnuWU2uylQyWK3GrfVOsCocUNGrxGUwUcs2seeU:I9l/5MQXusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830495, "uuid": "4f52a0f0-60ec-4071-a17b-654fa3892aa2", "value": 73455, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830495, "uuid": "6c7ca9e7-d6ab-4662-9b49-08beb44acb6d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830495, "uuid": "cb55070a-80c5-4752-a187-f8a23accc12f", "value": "invoice-1645080830.pdf (88).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d651c8a4-e358-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766863114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863114, "uuid": "4ea1bab1-5c12-4804-bbab-4fefe7b17749", "comment": "Malware payload (Mirai)", "value": "ee61a19d22db59df560135951ed63e5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863114, "uuid": "1b3fd130-de7f-4ab5-afb2-90f1e43ee65a", "comment": "Malware payload (Mirai)", "value": "eedf0c83485d59253253678c40f5d655f93a0ab1be07824a08689e2f5762ea78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863114, "uuid": "18039ddf-5497-449b-b30a-eed9f8b2d4ec", "comment": "Malware payload (Mirai)", "value": "54ec249a9734e3f9d680e172007324d2cee0960b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766863114, "uuid": "ed3a4439-adb7-491a-a47e-d5b128fc40de", "comment": "Malware payload (Mirai)", "value": "f1ac1a16d7de1f5052d6b4eff65ffb427e18c3784a13ff8fb4f794079204735a9ccfed94624e84d0ca97f28aba906828", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863114, "uuid": "f0b76862-4dcd-4c11-9f3d-5f6e00f6513b", "value": "T1485329D3E404CDFDF54EE33785674E01B234F6958A520B32B722FC93AA75098462AE87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863114, "uuid": "c7db272a-724f-4041-a950-0d651f683289", "value": "1536:8OtAoEpqLhkhzMAT1sFNYIKRQ8u+p3LJ3ByYw5D98Vta0TP/Z:jEpkhiM4sFaIyZT3MYw5DktN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766863114, "uuid": "9b527fc7-0d33-4e62-9566-9080d161e972", "value": 61700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766863114, "uuid": "b38265b9-2879-4b5e-b8e3-ac631c6a2e3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766863114, "uuid": "2c1a0324-03d8-40db-b788-9da452d6f375", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac1c5bb9-e300-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825247, "uuid": "1e91e168-5112-42e1-aea8-669a3f25789d", "comment": "Malware payload", "value": "0023077015d280e79143c8544e06da27", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825247, "uuid": "a959a250-1e0b-467f-a3b7-7eb2ffd39b9c", "comment": "Malware payload", "value": "ef1061600c931ae9744850e1ad75b7c0d5129eb33a6c61b0a75882d6dd234be6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825247, "uuid": "4f499f90-6258-4a3f-acd7-360e2faefa2b", "comment": "Malware payload", "value": "26a88d0ba198f1d823a64e4da69b75d10220dd96", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825247, "uuid": "1ad8ddb6-b404-4d8f-af04-e605ed4433eb", "comment": "Malware payload", "value": "cb8120ec469847e6309ce5b43c7283fb855321904eb535326bb3eb8be5eb2bc0775518ea74ce68ed869bedb40bc9f5d1", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825247, "uuid": "904fb4b0-fd0e-40ee-b39b-7d7936ffb521", "value": "T153732989EE14F5CBDD1104A9595134B8538F678FBBE807DEC82C6204EC47B309B9A9E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825247, "uuid": "e3a28246-863c-4ef5-8804-ef923f0f9e7d", "value": "1536:I9l/AoSSM0njAce7O4oLHPcAeKePZ2t8jVB0virY71aYJuJH+BV+6wkUjsUUMqUf:I9l/5M0njAce7O4oLHPcAeKePZ2t8jVd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825247, "uuid": "a095530c-97eb-469b-bf5b-a47f55434c43", "value": 73451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825247, "uuid": "7bcae1d5-9aac-4c16-b493-13a52c17a5db", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825247, "uuid": "7542826a-139f-41b0-9f96-959548b7d580", "value": "invoice-1645080830.pdf (99).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73869069-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823434, "uuid": "e7e7fd6f-e776-4f03-be33-a014fbeb31e4", "comment": "Malware payload (Mirai)", "value": "ff092b8bad6ef96b6c3509909f56164c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823434, "uuid": "7f44344b-f97c-4923-855a-175026b518a6", "comment": "Malware payload (Mirai)", "value": "efdbcde535160aa0e272adba8f1f0f16d8512526efd104bbfde98b4e2c508bb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823434, "uuid": "f98b52b1-db80-4bda-9c64-d482a2bb7d75", "comment": "Malware payload (Mirai)", "value": "3b351cabdc11ff8f1215a14128693de56c7db675", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823434, "uuid": "9bea79f2-3fcc-4652-a129-0ad5c4c6f6fb", "comment": "Malware payload (Mirai)", "value": "20b1f92d0072f4696518f91786b2d7cccaf7d0dd1b8360ccd8188716223f2c25f6049cfe77c31c4a2706f83ea37d3da7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823434, "uuid": "686c955d-d0d6-4b6a-80d6-1764a06ad125", "value": "T13D24F947B991CF12C1C111BEFE5F418D37136FB8D2EA72029D246FA477868EA0E7A116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823434, "uuid": "656aea11-20c4-4185-95c1-7deaaf48f5e8", "value": "6144:Ip4nw6IdA1Twfl4ds0aVGGp8CwZ9YNJmh0jmP2:IKwi1Talz0aVEHZ9gmujm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823434, "uuid": "5854a905-176c-4b8c-9c94-ea58d8ebe26a", "value": 221968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823434, "uuid": "0d13e2d6-035a-4661-abe6-a84913e1bec4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823434, "uuid": "4806cc61-bf6a-4a07-8bae-905048d326b5", "value": "bin.armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2341c7ae-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825447, "uuid": "a5e08ed4-f6e5-485f-8a9e-2febede14611", "comment": "Malware payload", "value": "16be30709e228272c3d332b5eb68d0e0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825447, "uuid": "c5e10211-66d6-4b74-9038-551947cefbcd", "comment": "Malware payload", "value": "f0020199e602c19e115dffacf02cd712fce778bedbadd5e567df643d2ab7efff", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825447, "uuid": "4da485d5-4a16-4b26-83b6-850336ebf9f3", "comment": "Malware payload", "value": "80820cf226d768f7ee41e7961e983e8ec1d66417", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825447, "uuid": "fbf2523b-f6d4-4e0a-b0de-d9a7c36d7398", "comment": "Malware payload", "value": "e067ef4f81c6cf2a0ae628c9117dba57eeaa06d3e809a54a93560b649c4bef49eb88aa4add507d50e191d69e8a455594", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825447, "uuid": "f902fe78-f32c-4d27-800b-6a7c4d929689", "value": "T151733CD77FAB441D256B2801D392FE1B36ADF60B1EEC12895F6B94020239AFE5D847C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825447, "uuid": "9e8bfb45-f666-47a7-abac-d87a2adac14a", "value": "768:I8w/h62/jWs6oS+xISN0vJlzpANVurPSszj4ucHs5sI62ypNmii4M3uRmbWIdDMr:I9l/AoSSMpeLausrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825447, "uuid": "b38e37a0-ab66-46ee-9aa0-3cc874963460", "value": 73435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825447, "uuid": "d2646f66-6729-447a-8405-e4d6fd73ad2a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825447, "uuid": "69322422-f613-4861-934d-47e9b6596966", "value": "invoice-1645080830.pdf (54).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f80fd2aa-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830528, "uuid": "62c0be4b-b706-4ee4-924d-d92ec0723e79", "comment": "Malware payload", "value": "8f45329a841625e9f05038a41e681d5c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830528, "uuid": "c44d11ae-5b1f-49e0-8e62-bd586412ec4c", "comment": "Malware payload", "value": "f00e0ab9afd915c96313880a7140a544f2a2be3ed8688264805d964c3968ffdd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830528, "uuid": "84f9cde0-ff27-45fb-8e04-9ca7b386eda5", "comment": "Malware payload", "value": "0f9ca76f5b49a4d9efdb3c1200f8fdc7532c7f5d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830528, "uuid": "d314fb52-0d59-4958-aaae-ef52c5566030", "comment": "Malware payload", "value": "8a94490d34228202fddd0bfe56678c209db80d557d8595cda8a183cd3cec8666e3719f191c2aa35eed1c3547d9d15e71", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830528, "uuid": "6c6d5998-6da8-4b11-8ebf-372824ed84e9", "value": "T1937309ED3F2FD6636C6744791CA903DCDA045E5AEAEF4E88B027247189BD671D831C22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830528, "uuid": "e895a967-9849-49f5-9f90-d5bcfc4b937d", "value": "1536:I9l/AoSSMJjYV5iz4/0qJNfj6p+Rvm7LU7t6OM7DRHccpUtFhvs8vLbpBiB23zUs:I9l/5MG0usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830528, "uuid": "be6aa628-d2da-4366-8b96-c4eb6b20e542", "value": 74417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830528, "uuid": "17644257-41d5-4c6d-9ea9-808a5aee18e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830528, "uuid": "139f31af-bdc2-4650-b5ff-48c29f1d8bf1", "value": "invoice-1645080830.pdf (78).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dac06494-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830909, "uuid": "7f2500ed-d5f1-454d-b928-8f8877db94a5", "comment": "Malware payload", "value": "d5970c4112ea3a9a60387aacdea5e10f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830909, "uuid": "8166bc9d-28cf-42f7-8b91-e95d8d697554", "comment": "Malware payload", "value": "f0362a65446f86f444f8acfe539b4aa276b42ca4a5755248a7b5ab0160fe68a6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830909, "uuid": "8c6fd66b-8f9d-4a8f-80bb-984cd640b577", "comment": "Malware payload", "value": "ddfbfe150f543c0d83fc70dd6b6f31e34fa3c34b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830909, "uuid": "819442d3-eb5b-40be-ac74-062c9558e1ee", "comment": "Malware payload", "value": "7d306aae25f0550f5b4a374feb8d14335e34810630dcf9a3e005099b706b976d34e2bfd5e8058e191735a0d17bf2e64b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830909, "uuid": "17c4e93f-b5f4-46b8-90cf-5dd0db8d6112", "value": "T182632BAC54B227D3103F18F88B7708F5204EE51AFA5FB42BF45967AA1231CCE4556BCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830909, "uuid": "abe0fe4d-be6d-46ac-a7d3-060c323309cc", "value": "768:I8w/h62/jWs6oS+xISN0vLiPae2ZNwz8EaKzNxiE6E1lh42c5XRfD3+TT5BPiT4N:I9l/AoSSM/1usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830909, "uuid": "53b322b5-12a0-4561-a583-87abd0de0611", "value": 68686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830909, "uuid": "1cae0a3a-7248-4726-af39-efde247f9a83", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830909, "uuid": "7cd881a3-0e9d-429b-bc9e-496c097fe463", "value": "invoice-1645080830.pdf (9).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27bb2cbb-e2d6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766806986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766806986, "uuid": "7a2afa5d-170d-4b94-ae53-1335d908ae39", "comment": "Malware payload (Mirai)", "value": "5b8bd36df43e89ad7694a51f94333c98", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766806986, "uuid": "ced570fb-8d9c-434d-b6a2-b3eb76fd4470", "comment": "Malware payload (Mirai)", "value": "f058dd9f0cbc9adede3608c219a3c1a9788400df23b055184525497afc746f19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766806986, "uuid": "77007819-0f9e-422b-b7a8-9585e93d4360", "comment": "Malware payload (Mirai)", "value": "07ef7067fc7838a035916a9567200bdaf9869128", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766806986, "uuid": "895c2622-2491-42d0-8a22-ffbd7694d281", "comment": "Malware payload (Mirai)", "value": "91a5cbbe346348cf701fb95225b1eababbc0ab30114a3c0f3cfbbb78e57d29e68fe22205a3780e9abedbc2c122d5dc3b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766806986, "uuid": "2196413a-9520-47d9-8bac-f59d1a4b47ae", "value": "T187630782B8C14627DBD1127EF67E438C332557A8D2DBB2138D226F113786A2B1D67793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766806986, "uuid": "e7d42935-c9e7-4f53-82f9-174151f08d3f", "value": "1536:oXtt+EEg+vPPyBcktHOCBbtfc5pBVwE7WNddAOZB4OSuFtZHvVuCC0D:GWBOhdAOZwuLVuCC0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766806986, "uuid": "db25e043-9108-4261-b080-b6f8429ce488", "value": 71548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766806986, "uuid": "d70f8446-7726-4563-95ef-66ee202e251e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766806986, "uuid": "af44cbd3-b261-448c-b6ae-5823525c01a9", "value": "sdxkzX_UXA229x.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e78284-e350-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766859355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859355, "uuid": "a50e291e-bb68-4bcf-888a-57f05de53bc1", "comment": "Malware payload (Mirai)", "value": "89790d8b584ca01ccab1a1d5b9c1a939", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859355, "uuid": "499a8cd0-4cc1-42a2-9f84-275efa41d829", "comment": "Malware payload (Mirai)", "value": "f095e6cedd6ad8a68ef46adb9327d0c43fdf162638f2aff547118d7508b4b0ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859355, "uuid": "0e95bb56-7387-4ae9-bf7c-48ef20b71936", "comment": "Malware payload (Mirai)", "value": "0e994aa21d94d29f1dff061b8bbb3d72a4ad4315", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859355, "uuid": "85ea187b-ec78-4b2f-bf69-c0b0dd70271a", "comment": "Malware payload (Mirai)", "value": "57a3fc37a193882acaea226ad7d8f924820270f3b77a8fa100250d64059193e592d96e001bb57691fc8a123f7f9fe5b7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859355, "uuid": "7f916615-a48c-4269-94c9-bfa52e041f36", "value": "T10D232945BC819613C5D423BAFA6E418D332627B8E2EF7217DD226F11778A82F0D77641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859355, "uuid": "547d3a5f-91ae-461e-bdd1-2799790d53be", "value": "768:ubhipoRX5ckAHSouGUw3ExZKTjOVOk4NXIB2Zf33MSdNFvTZBabnHgrD:GiORJYhUwUbKfOVO7N4BkNTyTg/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859355, "uuid": "aaca1fb6-75ab-4158-ba6e-b7691cfda63f", "value": 50044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859355, "uuid": "8e500a17-d791-45a3-8d6a-ff1bf3fd34d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859355, "uuid": "a0537508-5b22-48e4-8b4b-61b1dd249d4e", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5bcba5-e311-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766832468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832468, "uuid": "d5c61a18-c4de-4eab-93a5-6dff6ced0bb2", "comment": "Malware payload (Mirai)", "value": "3f5e6d7ec1aa370ebc2082402b4dfb20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832468, "uuid": "545d3a30-0f44-4178-87ad-573d242138ac", "comment": "Malware payload (Mirai)", "value": "f0a75b228c3a4aaf5177900920cd15740a34cc191b85d46706bb6da4b3a9163b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832468, "uuid": "78f48a6a-861b-4b86-9a76-d826d99b567b", "comment": "Malware payload (Mirai)", "value": "66866b94a7c4421969943569f8238672e766f589", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766832468, "uuid": "d78f6e01-d762-405e-b2ce-5e793bd7c029", "comment": "Malware payload (Mirai)", "value": "876abd44a9aed576afb2152ca8d382ff0c18030d074d3e0e8b3e7b049b3341f0a9223286ede22d1eedcd9024f3f5f49b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832468, "uuid": "a89efa65-e7e7-4699-ba4f-6e514dd44384", "value": "T122C30794B9819A26C6C2527BFF5E438D732A33ACE3ED7203CE255F35378B41A096B151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832468, "uuid": "bd54843b-1e73-4f35-b936-6ec0b8dbfa8e", "value": "3072:ZMtvRXlGgyleRvgj0NjDnM+7ML+8f1FOtk:sZXogyleRI+jDnMCM5f1FOtk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766832468, "uuid": "77dd373e-3ba5-4d5b-b66f-29fa1132bd53", "value": 121620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766832468, "uuid": "e208a127-d592-45aa-acba-e96b99cefd82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766832468, "uuid": "1e2c6f47-03b2-444e-ade9-d0fb32f186b3", "value": "nexuscorp.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7654c162-e2fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766823439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823439, "uuid": "af0924f0-9bfe-4621-b183-07bf0e5ef09f", "comment": "Malware payload (Mirai)", "value": "c0781b2ac3eabbbb4c952e07bc02629d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823439, "uuid": "cca9c361-8e8c-455d-a84d-7f20b96c5a53", "comment": "Malware payload (Mirai)", "value": "f0c9d66fa9003c46039217450e485277f4f8413b55aa611853c2a21cc20cca58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823439, "uuid": "567e0fd5-daf6-4e5c-8260-5621c143593c", "comment": "Malware payload (Mirai)", "value": "132e8cf83d43b19915bc7cbd115b4fb28281c223", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766823439, "uuid": "3cb33104-6e00-4755-9ff8-c2aa96555483", "comment": "Malware payload (Mirai)", "value": "1b3afd2cbbf8589e0dd1864759c24dff97681ad13da7555d4fed3339332a85d8841ff06cea3530dfc9b3b96337f8abcc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823439, "uuid": "b5c1f5b9-af4c-4f3e-be64-7cd52bfcd8d2", "value": "T1A614F946BD518F23C6C311FBFB9E429C372667A8D2EB3102DD257FA437864DA093A251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823439, "uuid": "ca454419-4539-4256-9c59-3a1a95c9f154", "value": "3072:Y3TlJxGMSsd8EsAiEmjRqTiJKzTp6c4JVQZsIhatd9jD7nGbWL:GDxwZETLmjkOJ8Toc4JVisNX9jUWL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766823439, "uuid": "a3eb7d60-1c78-4ead-a3ea-a731be0b5b4b", "value": 206172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766823439, "uuid": "1fbee9be-efa9-400a-94c5-9a7edd3365f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766823439, "uuid": "1218fad5-061a-4ef3-ac66-be9b68d6d7a7", "value": "bin.armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41540a80-e347-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766855562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855562, "uuid": "26c37586-98aa-43a3-ac2a-d6b59dc3c327", "comment": "Malware payload (Mirai)", "value": "86638778009a9a83cdaebb53a4dfb161", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855562, "uuid": "980a09d9-1ac8-45cf-87d3-51419f763e26", "comment": "Malware payload (Mirai)", "value": "f0fbd3d3b48cab7232d5712d94f2f8e5dad80383fd4be777a9e53902d706d0c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855562, "uuid": "2e6c5692-1e24-4f73-9ae5-da7be66ade8e", "comment": "Malware payload (Mirai)", "value": "3cf96d714e1abd3a0945f3ccf0189634c43a15e8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766855562, "uuid": "29deb018-ae04-4fcf-99d7-2c2c9097fc5a", "comment": "Malware payload (Mirai)", "value": "17e10f6b93cfddfbccee427ca75903fa7007acce5aa92948c06b38a2b261dfcdf7cfd502884def9988f90ca249e47410", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855562, "uuid": "2c9a1dd0-abc8-46c1-9dce-b8890a3998cf", "value": "T18D04392F258191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855562, "uuid": "6630f755-051a-42b3-9dae-4c92f0cec77f", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55whUXS:7eJpJUVD1A8n0YNgEJi5ayi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766855562, "uuid": "4002f41a-4105-427c-a04b-853bbb987205", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766855562, "uuid": "2add5542-b2aa-42cf-8597-5b8c63298716", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766855562, "uuid": "30be4a8e-6fa3-4010-9033-6f0e7f819a4f", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a20900b-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825485, "uuid": "c5144322-b058-4ee9-9257-0f942d0eb722", "comment": "Malware payload", "value": "69df902711bb48687b683020233071be", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825485, "uuid": "7d5ef085-a701-40ea-878e-be12f30dbdb3", "comment": "Malware payload", "value": "f1152bb706159b9f7ed87a50017d38bb65f2362bc20c9e3da792dc4f94f33ff8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825485, "uuid": "5b34c513-2f94-49df-ba15-83297ff07cfe", "comment": "Malware payload", "value": "a6e3c982ab02d6baaaeb3775bed1819ddf263ab6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825485, "uuid": "d81501d9-7e9a-49c5-974e-2dd0e4214534", "comment": "Malware payload", "value": "4eaf0bb73db2f4a611a2217b8d0f9365a64f0d3cefa9a51ee87fa9562feee5249c9d7106b66430ef7f338d1c6036a51e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825485, "uuid": "39700e0f-2c73-4885-90c4-ffca4dfa0684", "value": "T1B4731BCBB18ADC53253043649E8C178A905F97EC704CFFF66F12EE2895B9DE084A651E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825485, "uuid": "11a0d1d8-e0f2-420c-a0c4-41067273b787", "value": "1536:I9l/AoSSMXptuUgdLacWsC//hXqTL6eAhRPuW0pCiWAPOAEEA1L4kzPPIzP8FcKd:I9l/5MXptuUgdLacWsC//hXqTL6eAhRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825485, "uuid": "2195b189-25d9-4396-8f81-105999c621ee", "value": 74362, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825485, "uuid": "8e736905-7441-46f2-a980-a039206125ee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825485, "uuid": "7a4afcd5-6b0c-4797-bdf3-2ca2ec583df3", "value": "invoice-1645080830.pdf (49).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8199c6a-e30c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830448, "uuid": "b76df716-9019-4f23-afd4-c36a3330596f", "comment": "Malware payload", "value": "dac301896402c873416249b336daad7b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830448, "uuid": "63f33f1b-5d40-49c6-8f7e-5ae32e4043d0", "comment": "Malware payload", "value": "f18e7d8b77535685c9337c225ac8ba1c657e6e2bbf0078c5f92fb274f9e50d1d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830448, "uuid": "05a18990-a80b-4da4-b2bb-db0ad3e78e7f", "comment": "Malware payload", "value": "de91ba07d37896eb9666659b20f4368874016549", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830448, "uuid": "8c627921-7e1f-4394-9c39-f201c35c8e4c", "comment": "Malware payload", "value": "71a682f5417fe8dee8d7bb051949380cc989b40b6cbb09749a0c38359df6b96326d097b1353911af86e9c524e2c98db8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830448, "uuid": "912b060e-2ba2-415a-8039-cf314d451fcc", "value": "T1EE63D8326C57CCACCE9791B80D246D5E70FFF88BD46A69A81C58FEEA0D034B6524944F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830448, "uuid": "d00a4e22-8dc5-4dca-9098-327ebe584854", "value": "768:I8w/h62/jWs6oS+xISN0vWvH52C0/FAuE30eFnp+MZVkJTkgCb7K5pS99eWapRYm:I9l/AoSSMidusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830448, "uuid": "95224c5c-bad8-4c19-b533-227346d51dcf", "value": 71545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830448, "uuid": "51d62dd7-4d3e-458d-a2bf-5fc8e083d32d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830448, "uuid": "b8e70633-e439-4923-a549-c5c032ddde85", "value": "invoice-1645080830.pdf (99).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0babdefd-e371-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766873511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873511, "uuid": "0dd046df-37b5-4b90-8268-a38ea56c1032", "comment": "Malware payload", "value": "3a817d3ae87794423d712b9e88dcc65d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873511, "uuid": "c2be02f4-0f5a-4565-8fe6-cfa662960c48", "comment": "Malware payload", "value": "f1a69a7e4493c308beb6b041368f1ad58ae49884789249e684c37672417f8cc5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873511, "uuid": "153e0d5b-caca-4bf7-a05a-7fbded3b9354", "comment": "Malware payload", "value": "5f2fe6288be9ca84a32642b053ed909c4c18949d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766873511, "uuid": "a4c4a33d-e0ed-4ad8-8d67-6bfefe3a153c", "comment": "Malware payload", "value": "5c926a59a45e2a4bc3dabc172c80969cdc4780ee108e3f84aa747b1c283c43cf26c163f2d3b3fd0d5c96ce36a8d62fec", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873511, "uuid": "e0384af4-be0d-4b72-a9bb-802c2c26b581", "value": "T1D48633553A4E7FCAE3831137BDE145455F8CEC4B16E672DB88CC730DE0E089AB9A5262", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873511, "uuid": "b9292bbc-6032-4a3f-9cd5-d68fa4da6e03", "value": "b484b52df60e8d823b647a09bb1e39f9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873511, "uuid": "5e6091b6-5c7c-41eb-a6f6-2abc77017e14", "value": "196608:4WLXPYfc+hc6qWZA3HepcpEHNBL/d/zKbhdyhZcf:vb8cec6tZA3HVpEHnR62cf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766873511, "uuid": "d43d7d00-d5e3-4b71-9fce-68395876d2b7", "value": 8454677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766873511, "uuid": "d6fa0298-8acb-4434-952b-af99c684749e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766873511, "uuid": "aabe1751-bf88-4c51-ab44-4d92feeb701c", "value": "ldplayer9_ld.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5034d81e-e301-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766825522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825522, "uuid": "7573317d-e5f0-439e-bc3c-330f09be6ecb", "comment": "Malware payload", "value": "1798afc08fd18b9081738c43d70d20e7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825522, "uuid": "208b643b-4994-40d6-afb5-5d9e68c25c9f", "comment": "Malware payload", "value": "f1ad90bcf131c4da78e741e9e7145210448f3943a049f36598c3e104627381d7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825522, "uuid": "de657178-cae0-4f1d-94d6-69bfd597b4df", "comment": "Malware payload", "value": "3486a62c5399d91f59e2f8d6250d04e5f1c9ad81", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766825522, "uuid": "d78e948b-68ac-4ad9-ad5b-e5f7dc533810", "comment": "Malware payload", "value": "6cb2e65873bb657a99a99c8979cf8394a4f3926e7671d8e7b8aec9b7f0478fe814be9ffa0a0197cae76fcd9a7323c07c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825522, "uuid": "214abac2-4df4-4612-ab27-a437eded8ea3", "value": "T173630B46AE41FE5AB79DB6E597CF2298C433B79025DE4758B20006403E51B272FA4BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825522, "uuid": "47b47d14-5ba5-4611-a557-3d707342c4bc", "value": "1536:I9l/AoSSMDbbtdnSVJfzPU7vRY9vlZFoYlNY8yGYeDpL9Ktel9aPT6Gn0k/aykyH:I9l/5MteusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766825522, "uuid": "60c03072-9823-4285-96c4-6041beb336b0", "value": 72502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766825522, "uuid": "69753297-52a9-4c76-a1c5-f508511bcbcc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766825522, "uuid": "47b3f105-3d03-4ee4-b6b8-9861c24788cd", "value": "invoice-1645080830.pdf (42).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6deb45d-e30d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766830875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830875, "uuid": "49e15d75-7c1d-4f72-8341-6fa5f05f7834", "comment": "Malware payload", "value": "67fa0c6772b9d4c30f4ebdadd51610dd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830875, "uuid": "d043e024-87b4-41c0-857c-44cf81b94e4b", "comment": "Malware payload", "value": "f21e6e1f3f11c67e4bcdad7edfbd001d156c85ada53acd8134953feb5b921008", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830875, "uuid": "fea754e7-9adb-443e-afd9-db2e006150ed", "comment": "Malware payload", "value": "253f6496ea8dfe27306f5823abe4ce122bf489a0", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766830875, "uuid": "e90a7fcd-0743-4ac9-93a9-61be29fe208b", "comment": "Malware payload", "value": "d26ae0c4293a72f4b348eddaf4da92a82ba5b15a78ac49d24bc0913990f64a7fd7fcbdb39cc79dd34748aa5cf5c0a394", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830875, "uuid": "0444a97c-e7cd-442a-99bd-fa0e08d36105", "value": "T1C6632A9745F8FC1B2E9617654DDF93CAAC87AB87C01E2A201B0FB2C399C9B0C65DC159", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830875, "uuid": "abb5c3d9-3245-41a0-8c26-2c8fa6847114", "value": "768:I8w/h62/jWs6oS+xISN0vdDNtnWdkfScBYrwz2y8kTAlGB:I9l/AoSSMt+usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766830875, "uuid": "eba81b47-39fd-4ce0-b648-94cdeadeea95", "value": 71550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766830875, "uuid": "68e4a52a-da9b-4de5-9086-8dcd39ff058c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766830875, "uuid": "8e4cb516-42b6-480c-883c-aea9bf944a9a", "value": "invoice-1645080830.pdf (11).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "307162e1-e351-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766859829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859829, "uuid": "2ec8b684-8ec7-413f-bb78-8c50e9a0e71a", "comment": "Malware payload", "value": "f73ee2d1c2bc36f29702ac568b5a4524", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859829, "uuid": "0b9b3b27-d520-4383-b78f-3c83b32fdb08", "comment": "Malware payload", "value": "f303c8122185c4f42b0e5a04d934390a82a67db6b37b6f899a7bd128bb4ed5df", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859829, "uuid": "cc8b9774-42fe-4253-8819-f7d8eba24592", "comment": "Malware payload", "value": "24d30f9e3a9bf7fe8c46ebb65652c08c18cc56cb", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766859829, "uuid": "85e421ba-c735-43d8-950d-88e72d5c89d0", "comment": "Malware payload", "value": "366289f59ddabdee46a5db83833fbc6104b4aad251714da87165d074b7063c5967442a8917352e718f9441b29557a596", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859829, "uuid": "537016d1-9a3b-464c-bbc4-8074a1fd5fc8", "value": "T15EE1C996ACF32418740B905DCFBEA2587059A057474ACC9CFECC65A8DF4C6A49622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859829, "uuid": "f464edd2-44a0-4e37-8270-d8db2e5eeb08", "value": "192:OZpkIE/CTK/e9hM0llHYoHsfOBro2Tc/O/Smy:OO/khRYoHsfO2/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766859829, "uuid": "f8e40af6-cf39-42d2-93d6-121073ab96e8", "value": 7368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766859829, "uuid": "e10cd6c3-5a9b-4175-98a7-184e7ff125ee", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766859829, "uuid": "26737d76-cf49-4f53-9a78-7f1255ee3140", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "236a3bbb-e34d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766858089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858089, "uuid": "c8e769ff-b1ab-42e7-98b5-a307651f739b", "comment": "Malware payload (Mirai)", "value": "8ddcd9acf41a44308b8dbcbbc113e38a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858089, "uuid": "69c2bb93-6316-4745-be55-71dcc0409689", "comment": "Malware payload (Mirai)", "value": "f32e5f00914a1745f22776c160379081c938bd5e691e0397e404b8780107a7b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858089, "uuid": "14fec39a-4f22-4de5-981b-72bf1ca3b771", "comment": "Malware payload (Mirai)", "value": "58eabfc859b1ba3b0aca55a5d6d34c9003827850", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766858089, "uuid": "2e288406-c33a-4d23-98dc-39891108161c", "comment": "Malware payload (Mirai)", "value": "5e42462a489ea8b10ea64cee80bafd9f8be5cd695633e6aca1f7e76e1b94e836cdcc2f154750b2df53c3059bdd5c6bd0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858089, "uuid": "0ceda1c7-24cc-4653-9164-5a3b829ac482", "value": "T127630224EA0A9C57FF56CE735C19E3DABBF24BDC088937942099DD006642193D72BBE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858089, "uuid": "f368dc6d-6e38-4af4-9c60-6c9a1715a267", "value": "1536:dTcQT6+GNm3tgZgAzcczLhqy9TnzOs25zXNMnXIgaN9Jxqx4u+qgw09o:dTcQTGNoggscs9TbUNMnXDaTJxg4u+qB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766858089, "uuid": "69ff122d-8731-4d49-95e0-b86c0aabd256", "value": 68760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766858089, "uuid": "cbd4d75b-1154-424b-ade8-f7e5656e3202", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766858089, "uuid": "541727ce-7f77-4301-8dca-a687a37617dd", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07b4ba80-e2bb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766795336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795336, "uuid": "8b7bd42c-981f-46c8-ba42-7238ce2605e2", "comment": "Malware payload (Mirai)", "value": "1e0a0f08d60fee5f5b20bed8a948a7f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795336, "uuid": "566a605f-be74-486d-ba06-1c01cd463ec7", "comment": "Malware payload (Mirai)", "value": "f35d483a864b93d3db41f432b81d964023e44c125b77d9a12ad4cd22ddeec00a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795336, "uuid": "1739fe45-67bc-4e4b-bd57-da2c8b9c83e9", "comment": "Malware payload (Mirai)", "value": "400fb850551955d094b51420b1196d8c1f7458ef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766795336, "uuid": "833d88dc-09d3-4ffa-a332-441c74be54fa", "comment": "Malware payload (Mirai)", "value": "839d42cc831401311e5d9ceb65a7d0384ddd4db3751eac501eba12d1ea2961e95f163520f6346be38d38aa9c48084dcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795336, "uuid": "5b49ce07-f5fb-44b2-a0bc-776592638633", "value": "T1AF233B21797A1E17C4D0B9BA62F74724B2F6474E36A8CE5E7D720E4EFF10A4061036B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766795336, "uuid": "ab2eccaf-99e2-4fac-a460-903600ae4282", "value": "768:QI9ofq9jVzSjx06Ibgf3Zu4VWUDJs/+6O+fF+L4d:QI9CSjZSjx06Ibgk4VWUDJoJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timest