{ "Event": { "published": true, "date": "2025-12-26", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2025-12-26", "timestamp": 1766793781, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "660954e0-a66d-48e5-b54b-2d16cd6b5c96", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5731c103-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772276, "uuid": "412414a3-804f-4335-8267-3a502d003e1f", "comment": "Malware payload (Mirai)", "value": "d596b5920a6ac0592962cfacbecac171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772276, "uuid": "75e2596a-7209-4c85-be94-3e8c61a04fd6", "comment": "Malware payload (Mirai)", "value": "00414926a82788cd6bbc5f3c2bc21c05361bdc52045a725b9cedb16370b0213b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772276, "uuid": "cf96aab5-0d00-417c-b150-b98e77d1d710", "comment": "Malware payload (Mirai)", "value": "d12aa6fa21ebfab7adf3c6d037f9d33ad07c7789", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772276, "uuid": "3f438189-591e-4560-becf-d66a979eb849", "comment": "Malware payload (Mirai)", "value": "9ce9ba107e4511dfb54cb0768db266ffba5e6798b8830ee23111b0dd4fbf9899d7653d9104e09d4d32e8d287ecd6b27f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772276, "uuid": "496e2a47-fdc0-48bb-b908-f6542c5374f9", "value": "T1F063B416BF650FBBD85BCC3B0AB9170539CCA50A21B87B397934D818B54B21F59E38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772276, "uuid": "b82ea07d-97db-40b5-b0cf-0c27919687a3", "value": "1536:sq0u1lLGcoPQUnqe67f8oBaUivAJ4XIrTb:swTLLoZXjvT4Tb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772276, "uuid": "45867abd-01b0-45e8-b497-0b862a6fb450", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772276, "uuid": "25ee70be-34f8-47b9-be0e-7175cdb5dc21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772276, "uuid": "d594ab43-1ec5-42d5-ba5c-f97b9e708162", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af8a0618-e2a1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766784451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784451, "uuid": "1908f8c5-b9d2-4b97-b922-8d2f5d6c2f3b", "comment": "Malware payload (Mirai)", "value": "dd219a94710b7760ba4ba1f53942ae0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784451, "uuid": "96b15ad7-eec5-4fb8-8ba2-933cc96856f7", "comment": "Malware payload (Mirai)", "value": "01d2ff440c6d7cf054b9174aa541f9d210a8292e534c862c37b57e2c77343eb3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784451, "uuid": "17e15c83-602b-46e0-b1a1-2c032488d3ac", "comment": "Malware payload (Mirai)", "value": "44892471cbb035f1b6e6f784097d4946ee3cb75a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784451, "uuid": "c3fc8f3a-99f7-48be-b575-8dcce328360f", "comment": "Malware payload (Mirai)", "value": "0d685f0dc830d02d6536fd18cf2127173833fa5cb0063c68dddf0e573d2a90bec7eec6d08d255270ae60d57f974f25f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784451, "uuid": "289c470b-81bb-4b98-bbe4-4e9a7bd1098b", "value": "T1E1337BB6DD6A9D59C51C29B0F4308F7A8B63500096832FFB9596DA358003D8CF68E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784451, "uuid": "011608da-8d3b-493b-ac20-5f724df6b67a", "value": "1536:GKAm3AGYJ+35DUdI5gNFPCRX3tzTAbVR:HA7wudegNFP0H5TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766784451, "uuid": "8b5c3c68-31b1-443d-bd75-02295bf1cb88", "value": 54628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766784451, "uuid": "9b4e5968-a345-439a-8a45-64ecd343a55d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784451, "uuid": "5467173b-8a45-4013-a222-53b0e7b12235", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c29a7c1-e22f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766735375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766735375, "uuid": "1ab61785-8c4e-4b26-bab3-089d4ffed643", "comment": "Malware payload (Mirai)", "value": "51111c6ab56087bd2da46d0c9dee493f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766735375, "uuid": "429242b5-0740-405d-b055-9bbb88729b64", "comment": "Malware payload (Mirai)", "value": "021ae0b2f7dce77ec2440a0c1c42d53d92a2d525846cb074ac1d2b752af9de7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766735375, "uuid": "fa9a9dcf-5dd0-4e34-a65d-db620fd5004c", "comment": "Malware payload (Mirai)", "value": "5b70c7cd2191e5980113419d3971c6eab4347225", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766735375, "uuid": "95148d02-a618-47f2-9abd-0958adc640f1", "comment": "Malware payload (Mirai)", "value": "46ea50b844b82650fe32d64169fce95f291a8d950101ffcabed93896352f89e8696151762dc344ed1ce5c5d56f5aa46f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766735375, "uuid": "8678540d-aac0-4205-aea6-550492c1a42c", "value": "T1B5D3CF20E0456DE1DC2316B534A959B80750AEB027DB4187FFEEEA59A03FCD5399E3B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766735375, "uuid": "759ebaef-9d32-4063-96f0-d087c3e8dafc", "value": "1536:b/GTNA5Tu456BO1gn9Wrt4ZcsbKsL9UyjHXCgDRxusmH8B7C2F0r:bjTu06B2I9LcsbKsL9UmHnRZQC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766735375, "uuid": "cbb9faa6-050e-4c59-902c-6ac5cb1901b2", "value": 131712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766735375, "uuid": "acb0e9de-3b66-4147-ab9d-f4cbff3d79bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766735375, "uuid": "9d2cc76e-ac60-42ea-b525-695db22100e2", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e315cf7d-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766776806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776806, "uuid": "7356132a-724c-434d-ab91-3300f84bea23", "comment": "Malware payload (AsyncRAT)", "value": "20f8519c1cb99c8854a7e60f07ef78f3", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776806, "uuid": "c31299c4-92da-4192-b671-606f272d2b90", "comment": "Malware payload (AsyncRAT)", "value": "024b910085ff5f6fcb777f5470a61e05ca176159186ec892aeeb3f47f9a23247", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776806, "uuid": "10f0d818-cbdc-47e8-a391-377b95370e54", "comment": "Malware payload (AsyncRAT)", "value": "90b4234880a73c68aed60e9111204b446d04490f", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776806, "uuid": "5799c11b-2b33-4255-8a50-c126e24a1744", "comment": "Malware payload (AsyncRAT)", "value": "8a7ba9ec23d2ae7d52404a30938211de88254c76d2705eb01ed42bee2e72debcd4bf2d19b5dfdb0aa57e1cd2dc733e4d", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776806, "uuid": "07392117-6832-47cc-8972-1bdaec071bb4", "value": "T1150537932841D81FC64DA27B83A6BDC852F07ED2E6F1C1BD9984F3541EB73539923286", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776806, "uuid": "0bae9c70-4dc2-4999-a327-9c4e771e650a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776806, "uuid": "896bb4dc-82b7-403a-a3a3-505dcee6ffaf", "value": "12288:1xjPnd8+hWbvjGGw+QfhWbvjGGw+QIhWbvjGGw+Q49MzQYjqqM14ciOrmYdH11c7:++EjzQfEjzQIEjzQ49M0p14cbrfH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776806, "uuid": "e6f3375d-fb75-457f-bcef-3348eca1276d", "value": 836608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776806, "uuid": "c4d02fea-cb69-4a8c-b648-ae1da12d3407", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776806, "uuid": "559ad995-d2ad-45f4-96e8-3a987732ae60", "value": "024b910085ff5f6fcb777f5470a61e05ca176159186ec.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2eff8dc-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747117, "uuid": "7b41a739-6bba-49be-b6a8-ac3edeeb1eb7", "comment": "Malware payload", "value": "16ce05a046fdab297e7e1363653bcd3b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747117, "uuid": "e66f9552-b773-4186-b96a-c6cf6ff05cd3", "comment": "Malware payload", "value": "02e2a2e89e5738b6fd21989f74775a80413e3e84d37711a23221ebbbaeb787bc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747117, "uuid": "e1bb62eb-b833-48b8-ae1a-0791a117ef0c", "comment": "Malware payload", "value": "0fec8923da3dc39129889629733e48f06377b62d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747117, "uuid": "2e6e198f-02e0-4a0e-a73d-269236c4e734", "comment": "Malware payload", "value": "e59d1462d7283a2471dd454891692ebce290086337b2dfd18e478eafecc0e15aa8327c188c04217e3a6d21d3148e020e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747117, "uuid": "80a10b3a-46f5-4e3b-80bc-d362e70d3f50", "value": "T14763F95A7EC790743BA6F994AF7FC4D4061A91E98EA8E015BC5C32FCD4133270989DAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747117, "uuid": "8b69f2e4-8113-4bc0-8bc2-c862186bf05e", "value": "768:I8w/h62/jWs6oS+xISN0vc161n1U1r12181s1x1P1C1P1+k1x1P1o1Wk1Ck1P1uG:I9l/AoSSMQlusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747117, "uuid": "ddde0d66-4b04-4a1a-9965-3b245180ed5e", "value": 72516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747117, "uuid": "580237a8-5135-4ac8-837c-a952c7ca3a4c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747117, "uuid": "6250d8a8-5eee-4842-bbd0-f81306d72782", "value": "invoice-1645080830.pdf (93).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0256ee9-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771540, "uuid": "12cf1f35-6521-4b41-b34e-c57fbfb9700a", "comment": "Malware payload (Mirai)", "value": "bd98fbc5220a2d9778af1cdd7805d45a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771540, "uuid": "cd2757d8-7685-4541-bd99-2657a72517af", "comment": "Malware payload (Mirai)", "value": "02f69fe1b5239131a16d25459e796b4b7ab8d057c3314b3a91eb9818316ea3de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771540, "uuid": "145ac08a-7a04-42c0-b769-0ece6e008852", "comment": "Malware payload (Mirai)", "value": "534cb31f17cbdc84bbff15f3073675c3710df5e2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771540, "uuid": "3e613243-2802-43fe-8ff5-1f348c41fee7", "comment": "Malware payload (Mirai)", "value": "a8596aa4ee9694d8944115fec8ea8320b949a989ec3e2a2be76c65c4d74953e60020c939d7ab6e76794a81d2d32bf185", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771540, "uuid": "39028b28-b894-4a06-9364-fbec4c18239d", "value": "T192F32A02731C0947D2A36EF4363B27E093AFD56124F4FB44291F9B8A9275E325586ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771540, "uuid": "4134b393-386d-4089-a752-2348c900dc14", "value": "3072:cUbFi6eiQbNqczhGiP6xcInBDMRbNryDc:PbQ6eiQbxGI6xcInBDMBNmDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771540, "uuid": "12b0a257-70b8-48ac-8b1d-582d6b3c9e93", "value": 166404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771540, "uuid": "771d302a-f105-4fa4-8696-73512cb954bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771540, "uuid": "08dea2f7-0533-45a7-9ece-a7507841b169", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fffd746-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771862, "uuid": "03902c01-22ea-4a56-97bc-3bbc31771f1a", "comment": "Malware payload (Mirai)", "value": "196343f9a9ef24c852109ecfdc1ad2e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771862, "uuid": "b8f856db-20f7-402e-a723-e4c1002a3af0", "comment": "Malware payload (Mirai)", "value": "032d57e7e7b2d008a938312dd6b9d686c08add7e7622f08a28175f775f320f15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771862, "uuid": "8cfc257e-cd8a-4446-8c57-9b75f10a1d4f", "comment": "Malware payload (Mirai)", "value": "52fe060fa11689f34e0f2bbf47c1b0f7bfee6350", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771862, "uuid": "6be2501f-6a00-4eb7-afda-76095321a8c1", "comment": "Malware payload (Mirai)", "value": "8b8156629f535fb5d5c1b505dfb660de2b1a69e15e27386d097dee0b3a23c9df0606509fef0553431bd7233113db6e41", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771862, "uuid": "1c9761ba-f4d0-4cb7-9603-4b736f4aee20", "value": "T11E237C36C46E6E94C8486274B430CF781B53B01496D72FFBA98689B58043DACF61D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771862, "uuid": "a48678b4-c39f-4018-8dea-dd012cf6f779", "value": "768:matcSJp1MxwxxTKA8+cDSGIjQW/jU0C2oFBSCrTT:matcSJXxpKb+sSGsjLU0OXSCrTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771862, "uuid": "969eb0b7-6071-46e0-9d2c-7f40544459ff", "value": 46260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771862, "uuid": "64b84ad1-76bb-4112-9edc-cbda99e0ef0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771862, "uuid": "be0395fb-ecb8-47cd-ad14-93e35db8ea7e", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2e92032-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747197, "uuid": "12a58599-527f-4ebf-81ba-c98ae97ea808", "comment": "Malware payload", "value": "7b7df5c27c4ff6b58f377f4cf0626da0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747197, "uuid": "b8da7946-862e-4f98-a1ac-2b7e66239fb7", "comment": "Malware payload", "value": "044e39bd53c5e5c1d970198b6db4dec307f66afc48b8a59e83ad0a6edab12efb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747197, "uuid": "95a4e65d-8e8f-4861-a63d-86081eadd081", "comment": "Malware payload", "value": "9820cd543aaaf3cb43fcb4707b924181413af2bd", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747197, "uuid": "8f5a13a5-f373-441b-a0e6-fe7ee7a9bcba", "comment": "Malware payload", "value": "c2ddfcd798872254da5725af1b75dad7272461e009f7d740af065b3ac9752e6e42194d02a824e0bce551381c72af5e5c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747197, "uuid": "fc075243-e459-49f1-ad20-74faf13872a7", "value": "T1F6633D8255FA7FC53EC5759A130F828659484C11F4A03EA9DDEE3CF01E2A79AE704E78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747197, "uuid": "402c3601-1347-44f9-bc6e-a78dfc12b3e6", "value": "1536:I9l/AoSSM0PkPzkPOPzPHPNPKP5PYPMPzPaPpPkPEPjPGPjPqPPPzPtPiPmPkPRj:I9l/5MlXusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747197, "uuid": "24a314c4-1916-4d73-a574-377be6eec20f", "value": 70582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747197, "uuid": "e52fbabc-3b17-4a64-a3e8-94f4b7b890bd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747197, "uuid": "c5634a03-a723-423b-9d91-6d46d3b6d653", "value": "invoice-1645080830.pdf (82).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab84c6fd-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775424, "uuid": "376a83a0-59ed-45c5-abc2-679ef97f0f69", "comment": "Malware payload (Mirai)", "value": "83d8a15d6854effb1c9a7efe38ec44be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775424, "uuid": "b02516a4-f11e-4002-b513-98411b318e88", "comment": "Malware payload (Mirai)", "value": "045cad4bc57e6ec3e7c18e13cd1e1977a9bd8062c5662727a843ef196df86d38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775424, "uuid": "e26ea14a-b8d0-4be1-9ff6-1224510ea57b", "comment": "Malware payload (Mirai)", "value": "75c34bec5abd8868369f87ed27911185078eae3d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775424, "uuid": "a4d31573-e4b9-40f2-80ef-cf4e110f582b", "comment": "Malware payload (Mirai)", "value": "a9f60d42665d7447348d1114ae3309cba7c7b7a77f4af5f3f1d2bc9d05f48d4f1bec0f6f941d8f3905676f188eb2884f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775424, "uuid": "6f79d68d-c16c-48f7-9e9f-9571f1201b0e", "value": "T1E8630260ED861DF002F2C27D1069C881B70E7FFD92E4237B686B558DA6A8BF4D1D40D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775424, "uuid": "fc527dff-1834-4dc8-9eb3-7435f3627daf", "value": "1536:0frdis0PC7McRKaqMAWfMwUIReRiiPuJv5pE/bqPza:crdC673EaqZkxqFuJBpE/b4m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775424, "uuid": "a91a527a-d62a-49b5-abd3-8df71743dd9f", "value": 72424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775424, "uuid": "fcba400e-f9f3-4f88-b006-d6fb03b6a472", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775424, "uuid": "946674fc-719d-46a2-a77e-87befb0bf70e", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "542bce92-e297-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766780002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780002, "uuid": "180d3cf1-aff9-4e14-a266-c3eba09bfb41", "comment": "Malware payload (Mirai)", "value": "1dc7b2c1070af9706a6c41f887e2568e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780002, "uuid": "d17f0aca-8346-44f1-96cb-44c85c7adfb7", "comment": "Malware payload (Mirai)", "value": "049926f415087fdc6b4d35ddd84146a53204a24b8e6aa440eeb8e39804e7ed35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780002, "uuid": "16a4d03a-e662-4681-9696-8bfed58da166", "comment": "Malware payload (Mirai)", "value": "b4003144748417c5afe0ffef15d1c0329f577049", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780002, "uuid": "7843d0b2-a5c9-49be-852e-cb86d618302b", "comment": "Malware payload (Mirai)", "value": "96edcabfba27b208312e40dd678a6d0f4856574d47e86f7a3cbce0b8400908f119a3c82c6ac56658b6594e8154908a24", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780002, "uuid": "e7451c3c-5874-44b9-9bdd-3a1e46a4479b", "value": "T17EA3F785F8819B61C5D922BEFE1E418D331357B8E3EF7202DD215B14778A92B0E7B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780002, "uuid": "c19790a3-fea4-4c76-adfb-49fccf2908e6", "value": "3072:Kw0TjWXSaaztLEnma5wT0Vbo0TS3EHTAi:Kw0OXwtonma5wT4bo0m3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780002, "uuid": "0eb96a8f-62c1-43a8-a924-2d5d62f12f51", "value": 99680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780002, "uuid": "95978606-9580-477a-b22e-51d240701c8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780002, "uuid": "6e754ee0-2ad5-4b0d-abd1-f0884436d7c0", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feaf4ec8-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766713287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713287, "uuid": "36a6779b-22f3-40cf-8b70-a716af3f0f74", "comment": "Malware payload (Mirai)", "value": "62f43ba94ffb9c996eed9ccb0a5b27a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713287, "uuid": "db56ec52-fceb-4be7-a54a-b9c754039924", "comment": "Malware payload (Mirai)", "value": "04e3da7e2c47a861120f8271f5bb364e6fd760333436f2935b1434374447f98f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713287, "uuid": "e51eba31-c5fe-4d4d-8f6a-e50ad2d47ade", "comment": "Malware payload (Mirai)", "value": "75e1d57d543701ceca62fed5df5784d5e4097c17", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713287, "uuid": "65ae1c07-2771-4ef1-b88c-7c5c2bdb724b", "comment": "Malware payload (Mirai)", "value": "318d9cfd62685c35e6cf545f66886d74cda37ef6e4a7adba47a41e950e3a0a7f96bf3908e10f402d1819045d90de82ec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713287, "uuid": "91476e6e-6244-4cfd-ade6-f9b00a24990f", "value": "T18063C796F991CB21C6D561BAFE0E519D331307BCE3EE73139E246B24678B46B0E3A405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713287, "uuid": "0df79655-f846-4efc-acab-d8b5563c6459", "value": "1536:HhnNR1qdGUFLePVRXQYzc4ihu/3CyN3CMEiW+t1uhQ5a7mBZYZT2bVR0:PREcPfXQYI4k+t1uhQ5aGZST2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713287, "uuid": "2b1ef07a-a623-45c3-8f22-bc1b26713f59", "value": 70824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713287, "uuid": "a4997624-9b60-423e-8177-6c176857b5cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713287, "uuid": "7ce585dd-82e8-48cc-a2f0-3b8a8159b926", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c6f9aaf-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779023, "uuid": "73063c18-53df-4e03-b76f-3f4c839ade0a", "comment": "Malware payload (Mirai)", "value": "cc4c96a91e1091182c88e511d60f6078", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779023, "uuid": "67ae7ae8-7f5d-4b4c-9334-ebba182f4518", "comment": "Malware payload (Mirai)", "value": "04ef79b227c36e3370d138227f900a46c8c6831ff552d1702913a58ca2a695eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779023, "uuid": "b3c00268-e2d0-418f-944b-99d6c21cb059", "comment": "Malware payload (Mirai)", "value": "d1d151db73ec91b86d1bbcb5decd40cd05fff8e6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779023, "uuid": "976c7059-0bb0-4116-b5a9-0e01f75e51f2", "comment": "Malware payload (Mirai)", "value": "0aace438fed7b4a3dbadd8686add5c49f62835f28876d5b518af44ce2b56bd74d0e88ddb42342f6a29ec6e843afe83d1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779023, "uuid": "106a77d6-200e-4c8b-ab78-8ed5c44c8907", "value": "T1F013E1AAF6A91BD5F02C353D049BA58F2051920E0EA5DEF7BFD54D281C90FD22A707C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779023, "uuid": "0af69ec7-0d5f-4b6c-ae54-cab97561903e", "value": "768:uzTR9eprUTCqhF24cOAe8XSh/O/D48y/IObyTG/eOkYSPKFYjtt4cyHtc0FnbcuF:uOprMCmIjjPfG2OkYNgL4eanouy8Hy0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779023, "uuid": "f7f610d9-09cf-48a7-85e4-cddcf0626c14", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779023, "uuid": "fab91ad8-e36a-4ed1-9030-5c79b443983e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779023, "uuid": "fee8a30f-0a0d-43f7-af0a-20af1e2bd434", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931bb350-e261-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766756915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756915, "uuid": "04c9c62e-2fba-4546-bd8b-768581091f2d", "comment": "Malware payload (Mirai)", "value": "282844ed29660a60a4bfc974e54a356e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756915, "uuid": "9b40611d-4f22-4cce-99df-a228b8161aa9", "comment": "Malware payload (Mirai)", "value": "052e9f884ae7cb94e09f1147b18732062b1414baec7271c17d7a4c1b5973a787", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756915, "uuid": "80919773-ff41-4b0d-b401-7b2a969285a3", "comment": "Malware payload (Mirai)", "value": "473b79f7e9c08bec85f5e01eb027bf3dba9970a9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756915, "uuid": "aafbc3d7-4ba3-489a-85a7-76af613ffe4c", "comment": "Malware payload (Mirai)", "value": "9e9b7beb035c36abd5dfe36744b59a5051be0ac5f65ceb921b0d50e6b55e1b0ae0733aca281c1ce0b519e0ddb1b31ae6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756915, "uuid": "aff6f7a7-73a0-4797-8d2b-88f54c01dffa", "value": "T122334C21B9762E17C4D6B8BE62F34724F2B61B0A25ACC75D7C720E4EFF1198021176B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756915, "uuid": "edb59af3-9248-46c5-9056-dc370a87adb2", "value": "1536:wg/StkNeLKjhdywbiNcJfNu6vwXKPl/zk:RatTyh5FU8/zk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756915, "uuid": "4cf32362-2b88-47e5-ae66-90e3b1e0bb2e", "value": 54620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756915, "uuid": "c66adcc6-c707-4feb-ad5f-ce474564bd90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756915, "uuid": "bf3128cc-014c-4332-bdbe-9ea6c8a80d26", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8029434f-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711786, "uuid": "4f7f4ed1-0ea8-4cfa-a7f5-a5a9d3cac208", "comment": "Malware payload (Mirai)", "value": "6743a3a062b3be4518a8d55b6365adc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711786, "uuid": "9257c4f4-7edd-4a5c-bcbc-c2b61d5ae767", "comment": "Malware payload (Mirai)", "value": "05ac8d0e7d5d0cfb71a8b5ef8fd879de60600bddfa2cf05f4fb36e865ea09b5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711786, "uuid": "78f854b0-ce8f-42ee-a58a-ed1dd00eec95", "comment": "Malware payload (Mirai)", "value": "37b3d679e7988487461fb190ab24ced7b332f78f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711786, "uuid": "ed57198a-0eaf-49c8-b48e-67aaf3f3e9ba", "comment": "Malware payload (Mirai)", "value": "bc6e232c9f82aae0a20bcf37690206d44b60be85b677c9bfbd09fa8989a53515ed859d46457ec8aafa4a5268c7ed1f3a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711786, "uuid": "48809786-a3bd-4960-83fd-5234f71b6e13", "value": "T180F38EC5F283D0F6ED1205B11177BB36DA73E53F202BDA42D7B95A32EC52601C61A6AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711786, "uuid": "57f9068f-2701-4cfb-9ae2-2eece80bde38", "value": "3072:9o3x7oXP57Qv6rm7eeX4datCqnI33weBi3FsQLRhGB1WhCe8:G3xkXBQvZXQh333Y1sQLrCe8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711786, "uuid": "66388fd9-080d-4236-b88c-64c3ab77820b", "value": 162888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711786, "uuid": "fb677f0d-6182-49df-b591-35baac822852", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711786, "uuid": "b63f8d96-aa78-4354-a9da-4ee2d509afe8", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43f3f55-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707981, "uuid": "10dde0b5-e073-44e2-824b-56807d3f338d", "comment": "Malware payload (Mirai)", "value": "fa294468cb73c49d8ddc89230817538f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707981, "uuid": "3fc29627-5cbb-49ab-8b4c-71b23dbc39fa", "comment": "Malware payload (Mirai)", "value": "06194a90b90c831c325660656cf29a074fd769db4c7398c8e1e131f240081579", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707981, "uuid": "2f7f0521-19c6-4988-a57e-41645d313938", "comment": "Malware payload (Mirai)", "value": "7df6528af7da562af3080f1c6bf1ab7b0dfda973", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707981, "uuid": "5cbc9c2f-bdfb-4751-b8e5-734adb0542bc", "comment": "Malware payload (Mirai)", "value": "e14f88069c57a842f0d354fcef2d4b5f9f5c2189fde821ce73faf5033f4e135b68a08e4b62788285b7db4e522019e327", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707981, "uuid": "30b32d7e-4549-4c25-9f92-22ecd2ba4a8f", "value": "T109731885B8819A23C6D4227BFA6F42DD332653B8D2EF73039D15AB14778682F0D3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707981, "uuid": "14ccfa2c-d763-4e90-b927-7442068b4c0a", "value": "1536:WhpNSVCC6p/119Qx5btW2r0cfBvAhTNouePWLlrfSrTAbVR:Whug9cfBvAhCSlrKrTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707981, "uuid": "0323f68c-61f9-4504-ba81-07706c341d6d", "value": 74948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707981, "uuid": "915904a8-c8ff-48d6-8d12-c04005d761f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707981, "uuid": "99baeecb-42a3-463f-b89a-091b95e94445", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc2c7b2e-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778888, "uuid": "67c323ef-4926-4b43-a904-c2b17d97865b", "comment": "Malware payload (Mirai)", "value": "03a27cf418c3b390933ff08b55526dc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778888, "uuid": "42ac3309-f9d2-44b2-bd04-119be65dbe8e", "comment": "Malware payload (Mirai)", "value": "066a42a23737a0da4bc7610985665e2c2dc5d0109944213d5a8204c9af9079a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778888, "uuid": "ce30d0ca-938a-4e28-8186-4f9f4174ce84", "comment": "Malware payload (Mirai)", "value": "8a1dc18b2108cfaba63cfb81c88d9d4a3a9a8927", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778888, "uuid": "857acd7c-2ce0-4a60-a617-92d87a7eb3e2", "comment": "Malware payload (Mirai)", "value": "8ce1ab7ff244d4323386fc1e55c3a5de034623c9ff8fbac7b8dc436f5baec443bb463c9b92b7f316bf2188e09b1e43b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778888, "uuid": "020dd798-e18e-40c8-bef8-f44baa94ef51", "value": "T1B0735B41B38C0D43D1971DB03A3F2BD6D7AFE9D122E4FA852A5F9B8691B1933054ADC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778888, "uuid": "6317a414-4373-40fb-9e2a-34b920865d56", "value": "1536:k3fm9vWGC9nCFwUzQz4ln7IHl+94tCy/fVA6t:IfmhxCMRkg7IF+7SAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778888, "uuid": "29c655f4-37ed-4b63-86e0-473a0f1c2f52", "value": 75184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778888, "uuid": "903e63fd-2b83-45a9-b0f8-8abfabe563d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778888, "uuid": "af659401-c77b-479e-8208-2ae406a370bd", "value": "Space.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e09c2f47-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772078, "uuid": "027337a2-b4c3-4f27-833e-0e64c8291ee5", "comment": "Malware payload (Mirai)", "value": "097c8fed86069b938eacf973e3323007", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772078, "uuid": "57e5f0c9-7e7d-4036-acbd-3bf3f8c3cadf", "comment": "Malware payload (Mirai)", "value": "06823a05080619151b750c01cbc34738ea10b7365e4829ef636ec8af052b9ddf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772078, "uuid": "37597ced-b863-4155-8f70-ea3d7e577dc1", "comment": "Malware payload (Mirai)", "value": "05ce0ed6631cbf04e1c1c4be3d47b73fd70a56b6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772078, "uuid": "5fff1b16-fb8a-4188-8363-c76311aa5cc3", "comment": "Malware payload (Mirai)", "value": "4fb5a43bef5cc15afd8f4666ac075c8b90a8d8ea93a6ffa08af30c75e1294fec51159461f6f10927a02b2b54bb7c4a6f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772078, "uuid": "3bb9b38a-60df-4ae7-9362-29f102724b58", "value": "T10E63E71E2E259FACF369C73547B78E359398339A37E0C685D15CD6002EA020E645FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772078, "uuid": "dcfde16c-082e-429e-9954-7760aea5b00f", "value": "1536:qR3lM438SRne1KhJZvOfOlapHWpFwWpp89kdz4VTX/:Ga4MUne1YJZvOfOIkd8VTX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772078, "uuid": "d1fc544d-8d38-47cb-a833-d6538cdae2a1", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772078, "uuid": "c4c01dc9-dccb-4eb0-be65-5147e155e16f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772078, "uuid": "1fab22bc-e18f-4cd7-9d5b-9b05a67f35ed", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b04a9fa2-e1f2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709290, "uuid": "1641ff8e-070c-41da-b369-d7e60494a044", "comment": "Malware payload (Mirai)", "value": "e83e8ea8e1371f3f6d791c89bd8ac496", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709290, "uuid": "9cf5325e-7de6-4815-b9da-abe0e9c8686a", "comment": "Malware payload (Mirai)", "value": "06c7b8cf72076471cfa400a1ab4adc637af251039c99873b4d53681b9441ab13", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709290, "uuid": "9b3bbbab-6396-45f4-b713-bed9db172b01", "comment": "Malware payload (Mirai)", "value": "690ebc6d61b0e5564bb77dc3b87563967de61a65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709290, "uuid": "5dcfd4a8-b85d-4ee9-a4b4-68c1be4189e4", "comment": "Malware payload (Mirai)", "value": "a5ec1eff171c2af104b62d6c8007997b0395ccf07fa02c14cc7aef854ac65ce266b79dc8da09e6f19c5678e7df10b4d5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709290, "uuid": "3ccc1b34-11d2-4ef3-90f0-9c984dd3390b", "value": "T19C832985B881C623CAD422BBFB5E42CD331653F8D2EF72079925AF15778682B0E3B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709290, "uuid": "f793fd57-3cf5-4751-8ef3-ba785ab7b7e2", "value": "1536:e9I0S+Ae6n+GiwCRp1uGG81Eupj1KMeNtSi3q1JrQnZ2kuvzT2bVRIH:gIDbfN8j1KMeHpa1JEnF0zT2wH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709290, "uuid": "5e93b262-d72d-499b-8a17-07365de3ccdf", "value": 84472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709290, "uuid": "3e94cb18-29c3-476d-b419-6287770b4602", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709290, "uuid": "86a51310-1010-4002-8a1d-0c7b367a6703", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc1bc923-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712746, "uuid": "33cc14ae-621c-4ab1-bf92-11d5d366153f", "comment": "Malware payload (Mirai)", "value": "3880444c03b69f6a9fc13698ecfbedb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712746, "uuid": "e3cf99e0-ed80-45e7-a833-6edde7a4c395", "comment": "Malware payload (Mirai)", "value": "06f6faf8085a8aec97729e3f745bc906723d8c211df3e5266cd5758959063718", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712746, "uuid": "56a7187b-6542-4b92-b4a2-5a657b357040", "comment": "Malware payload (Mirai)", "value": "25055defbbbc3c5867f8804a0cf4d5c0a09c653c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712746, "uuid": "e92dc79f-27e5-40c0-9afd-818f396e5abd", "comment": "Malware payload (Mirai)", "value": "6252bb5bfbad4e1583e9bb1262287bb20da7ec6db72f86f340a811ee53d1ba232e03d1a36a8b1797d8368daa40d96f4c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712746, "uuid": "21e63c86-210f-4d93-a887-6ede4f5152a6", "value": "T1F2933B82BC91895ECAD013BAB66E268C3353A3FAC2CEB553DD148B1177C551F0D77A90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712746, "uuid": "ce8711ba-ac5e-42f9-845e-5158f152a6b6", "value": "1536:AnsTeWEWcOUzMe5eVTevnm1JEO2P6POfPvjBQT97gONSH1W2IymQY2AUm6hh1HSG:AnA5ELeoCb2CWXjOT9Po66hh1HS1hi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712746, "uuid": "b6a3aff1-8571-4485-8dba-6d3a59853378", "value": 96616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712746, "uuid": "2875b09c-f013-42d9-b1a7-5eeb5dffa80d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712746, "uuid": "d50a16e3-59f3-468b-8e1a-a30ace2411ba", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cab7620-e26f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766762837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762837, "uuid": "b8436fe1-5c5f-459b-918a-299548acdd97", "comment": "Malware payload (Mirai)", "value": "2a91f66349bba4182296f78137bfbe96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762837, "uuid": "8be1b895-f300-4f8a-bcd3-a4217e722249", "comment": "Malware payload (Mirai)", "value": "07fe5502ae5d0f19fa2c07e5dabd13d6447e0a580b790cd373ab368237a30037", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762837, "uuid": "469e0a70-9ba3-4493-a5ef-08f4725b654b", "comment": "Malware payload (Mirai)", "value": "4f906d700372b57373743fa885c68acaae913a47", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762837, "uuid": "aef7a355-bb75-4ae4-9711-eeef120777df", "comment": "Malware payload (Mirai)", "value": "c0b0ae434a62394ead5af96ca907001da3b4591291f66c58a1d50ef59a55197c4effa92098715ff7f51d0030e6de4755", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762837, "uuid": "534dc5c7-9bde-4517-a788-22f32b5854ca", "value": "T178143B07B5C080FEC499C17847FFB53AD932B45E1238B29B6B94AF222E4DE701B2D655", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762837, "uuid": "b24b8571-6d9b-4975-86ef-fa8ddaada38d", "value": "3072:vB5oCv/o1MFo/CikZAaIzEh7X2xmvLzRnGTr105Y1orOdTkptQbQ2eHHByohmx1l:vBvv/o1z/CikZY+oAqEYhdQp2UZWn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766762837, "uuid": "c377e5d7-33a5-4fa7-8dc0-8e33528b7053", "value": 205576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766762837, "uuid": "570967f1-0a8e-4184-b02b-3464c525c7dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762837, "uuid": "98a005dd-b7e9-43b6-8c05-c4cc412d152a", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87622404-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710510, "uuid": "8922f428-281d-4c31-b0bd-c77ea31f8d7e", "comment": "Malware payload (Mirai)", "value": "e73123032b389b6718a6bf8aecac24d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710510, "uuid": "9cf98a84-3db8-4de4-8ad4-5ff987a2cc27", "comment": "Malware payload (Mirai)", "value": "07ff48538ade0e5feb8a433849c887ef94d64bdb51f6af4743cb25ac0fc3efeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710510, "uuid": "0ff77859-869e-4bda-9d76-e13693337351", "comment": "Malware payload (Mirai)", "value": "7d8220d8879d9392e117592c08755bcb31a617b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710510, "uuid": "4779604a-abf3-49f7-97a9-c05a306b0c92", "comment": "Malware payload (Mirai)", "value": "7e45a209eb4d2b5de9b6e898e4449a84f6beb09ad233d7c84202b93515dd67b5f8bb98b84511bfdd6732e8a7d2feccd9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710510, "uuid": "49ff47b7-05cd-44dd-ab27-7de8542d383c", "value": "T18BA3F78AFC819B21C5D522BEFE1E518D335357B8E3EF7202DD245B25278A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710510, "uuid": "6355a444-c957-465c-b5cc-65d032603027", "value": "3072:B/Sm3zcDVtcqxlRcFmTBleuUcvO7Ex+SqT28:B/SYzcxNl2FmTBleudvO7u+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710510, "uuid": "45e32957-6820-4359-88f0-1c604ee9e776", "value": 105088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710510, "uuid": "30d92ae0-02f2-4a14-9a50-f8e28602b7d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710510, "uuid": "81cd747f-6b6a-4822-8a2e-3fe760266f5e", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9aab825-e20a-11f0-a129-42010a9c0007", "comment": "Malware payload (GCleaner)", "timestamp": 1766719694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719694, "uuid": "59ea9de2-fd4c-4d55-bafc-54ac453a4dee", "comment": "Malware payload (GCleaner)", "value": "d4172227e1f71a7c0264e57e31d2d60c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719694, "uuid": "9e2a51ce-8cbd-44c5-a151-bc2d2cafc3f7", "comment": "Malware payload (GCleaner)", "value": "082837e45781d5775c987f17faf8ed90d7242bb13b4ba05906ef132d0ed9e261", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719694, "uuid": "0c2984b6-ffeb-4e67-877b-c5c4a3209f57", "comment": "Malware payload (GCleaner)", "value": "467c2efa67c586ff58e171b8261d8b0bd720b4f6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719694, "uuid": "3c6eff31-b2c0-45b6-b052-d2c15d77498a", "comment": "Malware payload (GCleaner)", "value": "7ea1f8e8b2ffa46efde03fc486ec676960931123fe117924abdafcdbb06a40182eca239854a4c13e942eb0c36a9d2435", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719694, "uuid": "70445a11-2943-4adb-bded-271b064f80a9", "value": "T16146D0B9F5C1653BC0E1267B855FDA30505A7810DFAF7982DF8C1EADA85E043FC6A212", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719694, "uuid": "f60f74e8-c25e-457e-a76a-bfbcac404f11", "value": "d9602d58db63e796034d7dc7a7754fb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719694, "uuid": "56803c12-07ee-4541-b3a9-72178ac33fb2", "value": "98304:LS2b2sqvIRbiEzSTD9rQ/5U2WllIF1n3Q964bO:LZ6s1xiEWu/el+Fpg93O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766719694, "uuid": "94c121c5-8ea0-400a-9c22-264e81581a4e", "value": 5369104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766719694, "uuid": "42fd3753-46de-460b-96ca-ff69eb880fc4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719694, "uuid": "8ab21c26-b2ed-405b-9a10-423050f72eb2", "value": "SecuriteInfo.com.Trojan.DownLoader49.20261.31635.11394", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b41e37b-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729844, "uuid": "44db33d4-7951-4ecf-a3ec-6df88ef60c02", "comment": "Malware payload (Mirai)", "value": "e5a81a6cf95324c02ba2ad2ec61b5c7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729844, "uuid": "a8b3a079-32d7-4096-a1e4-0184d0606efe", "comment": "Malware payload (Mirai)", "value": "083db85d9f4ec177f32b2fe7ccafac13faa91254d91ab11fe34f4b33c5536e2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729844, "uuid": "37f0cf28-8af7-4e36-8a76-43e1248ae56b", "comment": "Malware payload (Mirai)", "value": "514433e010ae75e14ed7733aaae0eb5959757b25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729844, "uuid": "8d8f8747-b007-4648-bc04-ede8db452307", "comment": "Malware payload (Mirai)", "value": "60b0e6b05208ca6b97a4638130f5e98527f2c71121ab4cf505d91f7093c72a6520a4025f567f034726a403a9732008a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729844, "uuid": "96daebc7-a6f1-4e57-b3a3-4a398cfaab21", "value": "T141045A41FA87C4F6CC0B497050A7B73FCB32982A9077D65DEF999F31CA27901521B2A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729844, "uuid": "34ace8ec-bce7-4a0b-8d50-651d31f10c17", "value": "3072:dzUllzQHaCBXg++IB8QpDEPikE6NtsZ9BRjxeD2vhGB1jqKQ:6Pzk1BXgZIBrpDE5sZxNeDVqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729844, "uuid": "f819e4b9-7bbc-4b67-a180-254fa37682a8", "value": 174696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729844, "uuid": "d87d82be-eea9-439c-ab38-abeadf40ec6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729844, "uuid": "21383fb7-8983-4810-b6e1-81a89c31e14b", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4ef7123-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707982, "uuid": "b7ab5034-1c27-44da-8062-e28cf193140f", "comment": "Malware payload (Mirai)", "value": "b239f25f3aedada1234143b0d5834b20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707982, "uuid": "74b02ec5-be0b-4c0a-ba48-d922cda52cf6", "comment": "Malware payload (Mirai)", "value": "08e45dc601ec3f096e57c998e5dd6521f6cc9f02e9276bf575c55b4c044fa7e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707982, "uuid": "c5ea3d09-0829-4e69-bc86-c221cb962d49", "comment": "Malware payload (Mirai)", "value": "ae0efe9b046c957a55123b45b73244211b8dac14", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707982, "uuid": "61beaa26-f1ec-49bb-aa89-09f8c0358d96", "comment": "Malware payload (Mirai)", "value": "2123140ab031960dbe51016beca5a0c31b53ef3c25c4d1c1fa094b4942d42b004ec8c52f2ff9a5887f1bc8d6b3c46404", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707982, "uuid": "9817428d-a3c6-4529-9f4a-421855c01d56", "value": "T1E6735B42731C4A57D9A719B0243F2BE183FF995011E4B38A754EAF9A8272E33144AFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707982, "uuid": "59cb1fbe-5850-414b-a10f-d059efb5ee7a", "value": "1536:3AyFCTll9RHla+pCiWmjSJNnBSSSkZLTAbVRt:D2ha+ptSJ9/DTAl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707982, "uuid": "1e571348-a6ed-4a60-bd63-ffff253b275d", "value": 75044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707982, "uuid": "1ba33fcd-1dbb-4f09-9ba2-52a91189b805", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707982, "uuid": "b9edf062-9933-4776-bf11-10065a72becd", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec484331-e26f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766763078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763078, "uuid": "2037abcf-65fe-4e09-be77-43e29dcaa0e9", "comment": "Malware payload (Mirai)", "value": "ffa16539478d3cfc1590e41baeec7fe4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763078, "uuid": "d6571cd9-75d1-4ab6-9bb2-aea765686a04", "comment": "Malware payload (Mirai)", "value": "09452c014ec87b614518fd38e1fc3125e28ea7595dac652fa8e9a2bee5b26b4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763078, "uuid": "bb3baae5-3a94-41a4-a491-dcae3065cf71", "comment": "Malware payload (Mirai)", "value": "7279769b692e81b10d678357047f0c630ddb8c00", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763078, "uuid": "5822b6d4-857f-484b-ae80-d14783e05f55", "comment": "Malware payload (Mirai)", "value": "5eb97ea034e1386ce109cff8f121b1e727016f184f931dd0830a21117385a785069c32c90bc2dc088369a1a1ab8e5ca8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763078, "uuid": "e0b6576b-ec1f-4b21-8ce0-be19709a8870", "value": "T19593F996B8918B12C6D452BEFE1E51CD331317B8E2EF72139D146B247B8B86B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763078, "uuid": "f55fde78-dd5b-4a10-b8fb-78812427f687", "value": "1536:mxnlORbZT+sC/m2Rao+hMs6ON5qWpg2WOW1vLR+CVKcyMEcSo3TFMxiky/xudBxI:qOzSklNY9OWhL8Wnqy/xudBxN1BrT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766763078, "uuid": "587de749-3ada-4766-aa84-81fd7653b585", "value": 92380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766763078, "uuid": "c509c9f1-159c-43d8-a0d4-e7e7842580f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763078, "uuid": "aaf5f0b7-e507-4297-87c0-3c07f2180a02", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51f12adf-e298-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766780428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780428, "uuid": "dd36e011-82a6-479e-9867-19263d97f50e", "comment": "Malware payload", "value": "23ff09b976162e06f76d9ff3cd74037f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780428, "uuid": "a977eab2-52e7-478d-9556-929f3d4b1d81", "comment": "Malware payload", "value": "095d2bd5ed1630e328422768ead379b6f111ef981797d029985dbfc21f699fd0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780428, "uuid": "ede6c11e-2a11-4e02-b8e6-a35c47bdced9", "comment": "Malware payload", "value": "18de2805c9c6aaacdf7c21c2d260b4e89e19f365", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780428, "uuid": "dd02a9ba-1763-469e-a6e6-212cda03b786", "comment": "Malware payload", "value": "1849498d160a88b8e0ca461778d65fa6cbd7825800fe92385f85552fd366a00c2fb4e6a0f5f470e7c1ce2b22fe268858", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780428, "uuid": "bc17a7f2-bb78-4646-b884-2c30f3f72c31", "value": "T14373823028046974360DCDBC49BA8C15720A701BFA547D1CB49EB1D81FFEA68EDF95BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780428, "uuid": "08a13416-fc66-4989-82f2-14573569ed2e", "value": "768:Q4Rph8zp8dNxxNlUrOs+9Ni6ofrcJxUgfN1kngg+jr1KAuHnUz:BRpyoUrOs+j0frHngg+jr1KAeng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780428, "uuid": "d8b85ccc-cc9c-42d0-8359-ec378c8ad162", "value": 74454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780428, "uuid": "4016b950-9765-4360-b01c-44a134939854", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780428, "uuid": "2ad89074-211a-4704-9503-847606282fda", "value": "auto.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66ff7021-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729783, "uuid": "eafb2bba-9ed3-49a8-9cd1-f16f509e1f25", "comment": "Malware payload (Mirai)", "value": "04274193cdc38e6749de63faacff96b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729783, "uuid": "530f9ea7-747a-49b4-87d7-6af61f95bc60", "comment": "Malware payload (Mirai)", "value": "098c4236cffedd1d4a29757f17dd04e4a5acfcbb59714a4202fb204ddfdb319e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729783, "uuid": "d17fb9fe-50fa-4617-833b-810ff6ec68f4", "comment": "Malware payload (Mirai)", "value": "f043203d61ee69e0fac2a78412b13e45dd38f54e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729783, "uuid": "d04c14ea-684e-4adf-84d0-30f8388bd5d2", "comment": "Malware payload (Mirai)", "value": "56d6fb86cfc9c0b0d5b0933295df13471f4fec29ce443c21dc662875402be1035ac267d22997e373b469b9d60d5c27ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729783, "uuid": "f515ba9c-e5f2-4182-97c9-57a1344417fd", "value": "T124630285A8B389DCF268A33E58C0ECEF4D255499310C4935BDAEE7924CF4612C79D3E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729783, "uuid": "37c1ca93-95c9-4a85-a7b8-ff57f8db5cfd", "value": "1536:e9JpA4Ja0ePPL4BSgSQyM2AifCUyuBVI6OeTrp8T7fMv0nouy8GyD:e9E4JaFj4CbfCbuI6O2pg5out3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729783, "uuid": "d3bba3c2-0986-4603-a2c0-305dd140efa5", "value": 67788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729783, "uuid": "57a06be9-5a79-49e4-b716-56193bd51bda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729783, "uuid": "a07e208a-1cdb-4404-b059-a7501cfc8cc4", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986d0130-e279-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767232, "uuid": "0c828cbf-847f-42bb-a77d-7635b34c0270", "comment": "Malware payload (Mirai)", "value": "6d17cd63cce424457bc2321756b9c5fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767232, "uuid": "07645c81-d543-40c1-9368-92a406fc68be", "comment": "Malware payload (Mirai)", "value": "09e6fa2db9a245773ae69ca2a96ab4f81e38fe3101f144d1e022e8a92105352b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767232, "uuid": "2e8b4a65-ac3f-4665-a525-ed92f338b744", "comment": "Malware payload (Mirai)", "value": "e45d9ef1ca96d4f2ff777056b4461999460104eb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767232, "uuid": "a1a5f24d-e1ae-4b4b-9727-7148e76c4fcb", "comment": "Malware payload (Mirai)", "value": "a938785c00c715d0900811cfab4b6da1898797b42e3e2506bebd69369f0b0357c596cdc4a08b8d2683f7b2faefc9457a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767232, "uuid": "4e1971ec-040b-41e3-a171-8793cd9309bd", "value": "T145F2F13125AAD47381F0B533749155E6FA47FABC627EB8F30980A9281BC59931AF9281", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767232, "uuid": "93c614ba-b7dd-462e-a0d0-537f12d79d10", "value": "768:nY7xc2Wi26uRclfnV6fGYcXrHkyM5i44u+u6rIPYDkVf9q3UELIN:Y7xa6LZgcXrHkyaiRsY4OLQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767232, "uuid": "3516c667-b0b9-45ba-be5f-0f3cec5109d3", "value": 37036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767232, "uuid": "0f6c987b-d792-48ab-8e46-7091613baa66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767232, "uuid": "afd63354-cae0-42ba-a5a0-f5393ce9fbf2", "value": "parm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a5f8f93-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778832, "uuid": "bae17f35-6cef-4f28-b915-f132c1dbf0de", "comment": "Malware payload (Mirai)", "value": "1bd9785184c5ce4119fd950e9499ff29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778832, "uuid": "b6e5f763-6445-4a53-945f-107525afb553", "comment": "Malware payload (Mirai)", "value": "0a65b71c102bd9fe2e76c6ccd7a14f19a809857518be7579f99d62bf5b25e412", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778832, "uuid": "4bb81ba8-a781-45f8-95da-785304b5f5a3", "comment": "Malware payload (Mirai)", "value": "d45b4efba5bd1bc9290e6685fd97fcdb086e69bc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778832, "uuid": "f29d576b-8b18-4321-8062-b3681e572722", "comment": "Malware payload (Mirai)", "value": "c7d15065fe76ed190eb5460aad3eabe86bb3782f0e5312fa97abafaa72b4eaed5449aec059532141664dfe967314a438", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778832, "uuid": "94ad9ab8-bade-48a5-aac1-bfe467372c44", "value": "T1DB03F1BC21299116C831AC37EEB207C55E584674C1E7A507D96B8AACC767388F78478B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778832, "uuid": "aa92e4d2-0ab7-4fac-928a-0ec96610a1de", "value": "768:DGPjXBOTsh1aqh3kosh+IkLpFw71qB7IuszFKwMKBJGuESuU9q3UELyW:WLYptVh0whqFIlQ/XLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778832, "uuid": "3f743bb6-93d8-47d4-b3ed-95307b5528e1", "value": 40340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778832, "uuid": "48b0543b-8418-4cdd-9183-03bcb8687e0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778832, "uuid": "e1368a4c-2eaf-479e-82fe-84e4882fa1f7", "value": "Space.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dab91fe-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778837, "uuid": "bed4ad1b-7262-4045-9daa-06781d6a1152", "comment": "Malware payload (Mirai)", "value": "db86761ee72fb4790e872d70258e661b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778837, "uuid": "450ce0ea-e9f4-4c51-90bd-bfff583ac83d", "comment": "Malware payload (Mirai)", "value": "0ae402dd53979452462cc3328f4420e2a300dfef8ccb4729c72b5fc9c36a3fc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778837, "uuid": "b1e41656-7531-418b-95e7-929e9daba1f2", "comment": "Malware payload (Mirai)", "value": "dbdb37f06d9161eafc9e3046e78d76b662614fff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778837, "uuid": "0d4df4cd-a7ec-4ebc-899f-afdf0225b9e3", "comment": "Malware payload (Mirai)", "value": "ebe57bf65b1b8d59e43fc276380a5f4d0d0952167b11105686a4fda5baa8e0c7f78ced2efa23639474086bae340aa14a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778837, "uuid": "17c6a77a-355e-4d82-b597-07a3fbfdcab2", "value": "T11083188BF801DD7EF80FD6B74463490EB930E3910A931A377767BD93AC721A54826E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778837, "uuid": "9b1e91c7-aeef-4fac-90d8-29da94b84f41", "value": "1536:XQOjxmw2V2xAYV8aSlslcjYAht8f489k0rTUhrIpu1HT7ot4O9I/nPazD:XQO4QEpdht8fsnrCupQ9I/PazD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778837, "uuid": "42c9fb53-f1b5-4832-bbda-6c972ca1ac70", "value": 84956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778837, "uuid": "4dcf5acd-a8aa-4f2b-878b-06678e532bdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778837, "uuid": "37883a6b-0c55-4e6d-bde1-f4700576362f", "value": "Space.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72d75b76-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747412, "uuid": "e074a9c8-a2bc-4dfc-8046-bfd5a34a2b66", "comment": "Malware payload", "value": "e9d5b68c5e4fb1ac33081f10ba436908", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747412, "uuid": "eecbdfdf-fcb0-4890-8776-a3798c7d8346", "comment": "Malware payload", "value": "0b168eaa9e69cb27582336081c16103e9a46c46d48602d75609475902a424fe1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747412, "uuid": "bd41ee93-b25b-4abd-bd40-a11479bc664b", "comment": "Malware payload", "value": "6b7732f3824af9a018949f051c36206427b94983", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747412, "uuid": "bbd5920c-92e2-4526-aedc-e9235ce26bdf", "comment": "Malware payload", "value": "6cf1b2ff7a4ff43ac2ab40ce013db91c7ed2642bb443452724c33fc9766fd0d015f196bbdb8023920ca756f2c3c3214f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747412, "uuid": "568e032d-f172-4737-b272-841d495bc569", "value": "T1E87309F2A8B4F6FC41665AC61FCB444274F87661A1562FCCB4C650227C6122FFCE91BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747412, "uuid": "23809055-d77f-4253-976a-4d55eea3314a", "value": "1536:I9l/AoSSMJ4S7piIzlbXbvgSS7nk2+Kj1m7tOqtyFRBn53C83Dlb6hAiF4I9erQA:I9l/5M0OusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747412, "uuid": "a129cdff-c565-4207-a909-7a234a270432", "value": 75379, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747412, "uuid": "5dc242fb-3087-4205-a657-964ca2870921", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747412, "uuid": "4ae296f5-fc46-405e-b6be-e3b81612e2c4", "value": "invoice-1645080830.pdf (37).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee7f305e-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771671, "uuid": "c61673cf-44f7-4ebc-b97e-1704e6374e4a", "comment": "Malware payload (Mirai)", "value": "a265f27cae1dda8dab2fad728321e2d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771671, "uuid": "0a0784fa-c7f3-4b03-a75e-2a25b0bbcd99", "comment": "Malware payload (Mirai)", "value": "0b362efd35cd5b1c89ebf3ed835bac86f2ecc26bab3543226eb9bb274ab63d24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771671, "uuid": "7687c7d1-7523-4aeb-ac03-993098e5b731", "comment": "Malware payload (Mirai)", "value": "4c36604cfe31939aa0ebf8af8c5e7bccb515a358", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771671, "uuid": "81eebfa1-5e1b-4eea-8241-61129bc7c2d0", "comment": "Malware payload (Mirai)", "value": "81ca69b32b197c9d53f402c008057ac48f37414b40362c8f93bc99cf8621a4e4fef9a483b1afba82e00bd27123f6356c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771671, "uuid": "a6f56949-3dcc-45fb-80ce-223c113a1adb", "value": "T164930996B8918B12C6D452BAFE1E51CD331317BCE2DF72539E146B24778B82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771671, "uuid": "991df7fe-1909-4763-b0f8-09e55038dcd9", "value": "1536:bwnJnaWf7K5wYx4Sf3ULTKXZaqU0WKUtX5ecQUHZ4S+s3cMeiKcRJuBTxh7v5Ygi:SJIpZPYK6X5eo6DcRJuBTxhj5rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771671, "uuid": "dab802ba-2d91-4cb6-be5a-9b1207cfd787", "value": 91564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771671, "uuid": "a8613998-5d01-4024-89d3-760895df0126", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771671, "uuid": "0c6f6313-1002-48a9-9570-ecc8921daba9", "value": "splarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2838d2eb-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767473, "uuid": "e6bc43a9-cf33-47ff-a57d-fa2f25b6ade0", "comment": "Malware payload (Mirai)", "value": "99b730225178c31078a78b5b1dac23c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767473, "uuid": "feb32815-4c24-41cc-9c2f-b00395a76b02", "comment": "Malware payload (Mirai)", "value": "0c09b0d47449b755fbee652ed78650cfa78b77f9259ac5f0d797789b4425a6e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767473, "uuid": "e1443709-8fe1-4488-a5a6-c7e07fe00918", "comment": "Malware payload (Mirai)", "value": "9e76443557be100f524fa9b09bda7ecc6dcd977f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767473, "uuid": "445062d6-1db4-4687-bb51-25cf1c03b1d3", "comment": "Malware payload (Mirai)", "value": "c543fd3a8968077fb5cbe4f1829da85e3971bd13da598191807d19eae23f483155b474ca28d0b7982f1b26f07e57cbcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767473, "uuid": "04877889-c6a8-475e-a6d3-4d23a10dee4b", "value": "T1C8931C52B9918E12C5D221BAFE6E418D33137F7CD3EE7212CD20AF9027865A70E77616", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767473, "uuid": "11f43987-32da-4c6c-8860-28c9002aa021", "value": "1536:/Tn6J3vUafS9qQiLgXlIe2ymc9Qavxza3aMfiikiad7o7R05cYEl61d6asz:u/U0iqXuX2c9Qavkkiad7oF0uv4fsz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767473, "uuid": "a69b76a2-fe3f-4eaf-9889-44f143b199a4", "value": 92012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767473, "uuid": "fddbe164-e797-4be3-a426-2ca181b04114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767473, "uuid": "61bf8afd-34f7-4a0c-8b59-bf50bb118e0f", "value": "debug.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa1d9224-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775986, "uuid": "6bc2aafa-56fa-4f60-b7c6-8ad553cc3867", "comment": "Malware payload (Mirai)", "value": "f01291f089c2e77297983875ba659c8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775986, "uuid": "d168fabe-1a35-4e81-b683-1830c07fef13", "comment": "Malware payload (Mirai)", "value": "0d00fef6ea0bd0e39804bd04d391c5bbc021286ee9b366d311986f965e83825a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775986, "uuid": "2b2686d6-08d8-4751-a870-05b8d08b22d9", "comment": "Malware payload (Mirai)", "value": "1c18db393d482ad8255edf9c168ef6759f3c12b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775986, "uuid": "7a5dc50d-0821-4d07-bd1d-6a0c0a752ea0", "comment": "Malware payload (Mirai)", "value": "d4e71195031c6aef84562d5eee8bdf1e20fff295e3b5607759a0223340ae098091fcb962418796cbaabdf80d80d55ea5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775986, "uuid": "e2f530fc-c567-46c2-8c53-564f68a65321", "value": "T1E373022D0705DDA4D80344366BED176E35342D8EE7238E9CB4ACEF87CC056A4BD872A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775986, "uuid": "1aa0db3b-e351-4017-a1b0-ce093a5edeea", "value": "1536:eu0A9NrjmPDNeX+hiNnf+Pq3fd3ajpC2/uvJCyx0RokX25pmEVJub:giUeX+hcnP3YpdGv87UpmEVQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775986, "uuid": "18b6303d-2395-46ac-a4cd-f1e39115b126", "value": 77832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775986, "uuid": "e2ce7ac4-e1f0-43c8-8633-bbb1e7164e13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775986, "uuid": "c0fba267-39cc-4c25-abef-0c7024b6262e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f20ef7b-e23b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766740561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766740561, "uuid": "7ba224fb-6868-494f-b630-bf401a7bbd91", "comment": "Malware payload (Mirai)", "value": "49aeb531e12a926ab775f594a0305686", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766740561, "uuid": "1e552469-339d-45fc-80e5-3dc6fa4fa19d", "comment": "Malware payload (Mirai)", "value": "0d607a9799ea0179a98a94f5bcb0f626f9c09a3d8728bee495e6c7d4c6c26a72", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766740561, "uuid": "f05d9c7e-d922-4523-b547-d5db1f5db317", "comment": "Malware payload (Mirai)", "value": "3173eba8e9b9c1078aead5ac8f9eb4aa625bf063", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766740561, "uuid": "c9f74ff1-3749-4cbc-9a9b-6ea92a7ad4b4", "comment": "Malware payload (Mirai)", "value": "eecf05f8a972b8835d9331cd87d0a96e1ea9e4071b7c1c6e1a51910e1efc74e32f5a85cd6dd3d34139158a2cc4677e12", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766740561, "uuid": "01d03a46-8d31-4d48-8701-3eff6c62b919", "value": "T1D1515AD433810078ADFA992F73E9081471E7A0567CC4AF14DDEC68E9446DECE7AC8A46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766740561, "uuid": "8aa54ce0-9253-43f6-8491-0a61b4eb6070", "value": "48:vaEO9b7EFahEVFLhqv23lCoOcuPgH2WN+fy+oYmw:vaEO9bmGWNqv23woOcuPgWWN+fy+oYmw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766740561, "uuid": "d93ea178-f4f9-4ec1-9da8-90bf5ad55348", "value": 2655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766740561, "uuid": "6f49bbd4-b29c-4f49-a883-3112218b703c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766740561, "uuid": "ccb57a96-0e21-410c-a96d-cc2289c618a2", "value": "ohshit.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22c2a753-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767464, "uuid": "fedfb651-dfc3-4ea8-9e72-8edc88c8492a", "comment": "Malware payload (Mirai)", "value": "bd453b7aea9dfc0dd4690337681cbb77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767464, "uuid": "9ae087ff-7914-4b53-8759-491b84c83755", "comment": "Malware payload (Mirai)", "value": "0d6174f47775013a478eeda9ba4b8bcc784314dc05cfb186a1eaa473dc9a55b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767464, "uuid": "298dc2ca-c633-4905-b180-3e888935c639", "comment": "Malware payload (Mirai)", "value": "086f8e413b9cbc12bb5e9d651f295f978bbc6e74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767464, "uuid": "7059f941-28d4-43c2-a54c-8fc01b5c822b", "comment": "Malware payload (Mirai)", "value": "d9ccc2fbd1a7b37f4c15cf42a8543f68dfa929ad3d0084d2efe6e36cdc304f0dea4ade454f1d6342215d8febeb7d78d7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767464, "uuid": "f1c263c6-8346-4732-b694-96e36688cf8d", "value": "T109E2F1A1C4D40FC6CFFF2CA2DA1BE2C0F3D40B8D3A6C9A92A1445712A5D95B07B695C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767464, "uuid": "e4e27a49-680d-4f97-82e3-50f2c08402ed", "value": "768:aFpDiy7RWrhqrJn0tXFBdzNaI96NzUnn+Ks4uVcqgw09LC:a/B1WRNFPzNaI96Nwnn5s4u+qgw09O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767464, "uuid": "b5e4d7d6-1ce1-4512-bded-7a786bc550b2", "value": 33184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767464, "uuid": "6f484933-9e94-4ec8-bfb6-2349cb64ab7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767464, "uuid": "e4ce770a-2574-45e3-abf6-dc37e0bbfb55", "value": "pppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a391e206-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707980, "uuid": "991c0bf2-5b3b-4d97-81af-95a317606ed1", "comment": "Malware payload (Mirai)", "value": "8a0e8100bf93f6c3efa47ccc4c71d40a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707980, "uuid": "0090926e-1d39-4272-b822-9cb5ec325111", "comment": "Malware payload (Mirai)", "value": "0e05e7ac0f115a11ff1a4f501ae3231531d47f6234596326c9d6f73c459febc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707980, "uuid": "5e854958-487b-4c23-b812-e8619dbaa904", "comment": "Malware payload (Mirai)", "value": "a180051242a39ef95fcec1ecc2ea8d902ab65eda", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707980, "uuid": "d94da52b-39ae-4aeb-81fd-b0b6922c57e5", "comment": "Malware payload (Mirai)", "value": "d5d111a5e87d2faff33dd15c896d8be61a8ddd0148b984aecb126406c4946cdadb72e4357b243eef84b2dc9202d63d20", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707980, "uuid": "2534a5fb-ae4f-4078-a9a1-a9ef5910bb60", "value": "T1B6633A63BE62482BC4D4A67A61F74334F2B2874930BC5B2B3D630D4EAF65B443267794", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707980, "uuid": "1f90d5ce-eef6-4f2f-9506-413dbe4f84dd", "value": "768:cmjfVLJkeFVEKGJ99/W4NZLuXCFU32brO+NM5VrEd+Ogw1tMkAyAFktGvuSAFgsQ:cmjBJrF+KGU4fKyD7NM5OtHAktGBogsQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707980, "uuid": "b8af2141-bc17-416e-957d-c579e45ceef1", "value": 71660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707980, "uuid": "86b931f6-9100-4002-a31f-ba3bf5d02f76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707980, "uuid": "96a72c6e-9e35-4706-8aee-bdac5554cff3", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18f7f297-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771313, "uuid": "cc2ae0f8-a44d-403c-9792-9ec7743389d2", "comment": "Malware payload (Mirai)", "value": "ef0538b6232cc6d3a865b1bb130d8a96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771313, "uuid": "da18dd39-5a36-4ba2-8883-11800318b4bd", "comment": "Malware payload (Mirai)", "value": "0e2aa7ed96fcade5c7e55350af3e9cdb2d97b000c8383a55685e416fccf58be0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771313, "uuid": "2b8274f2-1fcd-49b1-9c45-b39d2b5ea9e1", "comment": "Malware payload (Mirai)", "value": "3751d22d73a3267a6c75df50d232810d1f531998", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771313, "uuid": "6fc314b7-0939-4973-93c4-6b2872a0c556", "comment": "Malware payload (Mirai)", "value": "95e43004249e69abbd83e04deda81f946e436c358349e0575f7f317bd56a6e9dda62fe1f29be1e5ff7777271dfdbfb3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771313, "uuid": "83e0e85b-455f-4864-8a2d-7e0184634c76", "value": "T1B7332AD9E401AD7CF84EF77EC8130A08B531775522931F3666AAFDD32E722948C56E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771313, "uuid": "26bdc11b-9422-44d7-a445-2e4e5f31c39b", "value": "1536:Vq9uIo2ge6E0DTE8gYg8QnZD6urUIdzWPL:Vq9/96E03Egi9AINSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771313, "uuid": "5576eea1-343e-43d9-afb7-d57c2412a703", "value": 52376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771313, "uuid": "7c075582-29ac-4b98-8535-adc486581d0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771313, "uuid": "6a8d2c77-dc71-4ba7-af1f-348d12430379", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49e5fcf4-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779126, "uuid": "c8ffeba8-fcf7-4dbc-a54b-de98763403b3", "comment": "Malware payload (Mirai)", "value": "187be6bd7e54e7a09bde7bab77fda110", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779126, "uuid": "04f493e5-5cc8-4ad0-82b1-95f37c892ef5", "comment": "Malware payload (Mirai)", "value": "0edc937c64712621a299b299f640c10ee2e6efde394add3e61c23e0ac5d0fb8e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779126, "uuid": "a59cbdb8-593d-4411-9611-3e1991247a5b", "comment": "Malware payload (Mirai)", "value": "e66a17111f9991ec3e7d907980c8786daa372510", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779126, "uuid": "caa530f6-95e7-449a-aa70-a9af1c010298", "comment": "Malware payload (Mirai)", "value": "86f02c50f50eb4f9de0b2247a374b7a782ccb5c2d7d4af7b1b0a9f89d2eef8490150d2cbed412ac18b7ec7e877317851", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779126, "uuid": "ed141115-dd7d-41c4-9519-fa1e80b2f4c3", "value": "T153431780FCD2996EC6D4137AA73E358E33A1B3E4D1CA3613CD585B25338A68F5D66B40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779126, "uuid": "8c93540f-8c46-4b10-8125-3da587045e0a", "value": "768:ncyi0+MnuAHIf/StW3GvQoyjEFMoRBN5cDqS8kTIM4cL/KIoNUit5ZMfgTBN1TWA:n3nzHI36AGYDEFMWchcMLL/Kpt5Z79", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779126, "uuid": "4536b035-b6e4-4ce1-9589-2e345f72296f", "value": 55884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779126, "uuid": "dc60684b-8abc-4416-a225-4dfd02ce485c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779126, "uuid": "4a04d33e-8124-4ffc-a8ce-9062739376a1", "value": "windy.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbb8947e-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747561, "uuid": "07f74cb9-ed5d-4368-b382-1bc8a3eabd39", "comment": "Malware payload", "value": "8f8ecc6c5486afd9dbd90b578ed89695", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747561, "uuid": "4cbb2f7d-23e3-48dd-b039-c1710512b16c", "comment": "Malware payload", "value": "0ee3eee18bb40e9ff08ed5d780ed8541a6c49392cead6ed13cc20c63b12496e3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747561, "uuid": "56b67c70-2489-454f-804e-ffc5977fb8dc", "comment": "Malware payload", "value": "f2b8ca200efec9315b883825ef8d459f77f6fb7a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747561, "uuid": "8fb5d9b8-d695-4110-9eac-c17c13219912", "comment": "Malware payload", "value": "855ba32c3800d8d055dc048c6d9c3b388a1e6ff4e16009652904f5c769d064a3c91f1f7d9afadb868128ab96f37dab5b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747561, "uuid": "07a8d90b-c687-45da-a597-af96fd904657", "value": "T1AC731A8DED4360BDAF566C73E643A0EEBC051E2B99513159CBF62B90B39234B4894DC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747561, "uuid": "34937383-a77d-4df0-9895-289a8e42fd8c", "value": "768:I8w/h62/jWs6oS+xISN0vsvvLixdkfScBYrwz2y8kTAlGB:I9l/AoSSMM2usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747561, "uuid": "e1d69e4f-56fc-4bdb-a017-dca233f48dc1", "value": 73460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747561, "uuid": "ddbfc34d-22b2-45ba-9b0e-bc0de9ff6c60", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747561, "uuid": "889d321a-1b90-454b-b48f-8746cf98f074", "value": "invoice-1645080830.pdf (3).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "519be197-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733612, "uuid": "7fe081c8-4d6b-42b2-a6dd-0d0e71ef7f3d", "comment": "Malware payload (Mirai)", "value": "2bb8e6feb53b720ca60f2c0ddf519094", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733612, "uuid": "3ba25675-0e67-46bd-90d5-0e33d5429a38", "comment": "Malware payload (Mirai)", "value": "0f8f041acce3852c7ee78caffddcb4e941206b3c5b905bb5e6c061285ce08852", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733612, "uuid": "baa3333d-7b0d-4c08-8753-d2123d2440c7", "comment": "Malware payload (Mirai)", "value": "3b223d367d685f36e8ef034074350ae5ff2e1ae2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733612, "uuid": "306f6614-e265-47a1-8e17-dbacbc37fb8e", "comment": "Malware payload (Mirai)", "value": "7f3104075f2784132228efcc3490a3d8f3530da7d694129e2664dd2324d51f1c564d2047bab14a50db1a614624497583", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733612, "uuid": "923bbdd4-458d-497b-acc5-386af85ab1b8", "value": "T1CDF3D50E6E158F7DF39D873457BB9E21975833832AE1C546E1ACD7105EA028E241FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733612, "uuid": "094eb1f7-8892-44da-ac9b-ab7dd65abf05", "value": "3072:VBQrbb2K0azRfTmZpZCXP/doMbU+0FIZ4nX3olUEwoZ5isrBqROduVdoRjvv9Zyy:VBQrbb2K0azRfTmZpZCXP/doMbU+0FIF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733612, "uuid": "e3128dea-80b1-4847-aedf-553003399af9", "value": 172604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733612, "uuid": "a22b9556-4915-4661-9a39-52be3a2f561a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733612, "uuid": "f6638eb0-4f18-48db-af2a-26039bac12aa", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aee063a-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779074, "uuid": "d5a61f7b-65fc-49bd-b30b-9ae796beb5a1", "comment": "Malware payload (Mirai)", "value": "e69641dbbf4f63642b9c4de8f65a6be4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779074, "uuid": "6927251f-bf0d-4d12-a003-a7aebc940c47", "comment": "Malware payload (Mirai)", "value": "0fd612f396736e238097acb6c1ffb150d6ee16b639c6f47704df9be052ccee20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779074, "uuid": "a02b9915-d298-4e2b-b6f6-10e2dfd38f0b", "comment": "Malware payload (Mirai)", "value": "54d6ef901acc0fdbb41b48d8650e95123a412ff0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779074, "uuid": "02adf952-ce57-4343-90b0-ada514cb79b9", "comment": "Malware payload (Mirai)", "value": "d8a1dd5b668c23d9eb446e7f4f6ed5ac0fa27bd62f915a363aa9070127bcbdad3a3508c438810abae06ed4ded15ae98f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779074, "uuid": "c5db3a6c-2e26-493b-a575-cb321acd5bbd", "value": "T1CBB3E84E6F318F7DFBA8C23447B39A21975923D227E2C685D19CDA011E7028E645FBB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779074, "uuid": "8122fcb5-0897-40ee-a4db-e2d0241f1c6c", "value": "1536:SEkWiTLiZECcpHOWWJDmmn5Pd1Oe4GPrs9j4ZWn+E7+TeVedVPneQBZN01i6n:gni50poFzP49j4+7+Te0dVPZ01i6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779074, "uuid": "a0eba690-49a1-4e5b-9209-093c4f725648", "value": 117968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779074, "uuid": "21d45794-e1e5-4745-a5c4-f41f76977b9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779074, "uuid": "cb7ed296-93a5-4b28-8134-8daa9ad293f4", "value": "windy.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28e7c43c-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767474, "uuid": "5a5b6811-74a9-4488-b109-1508e8678572", "comment": "Malware payload (Mirai)", "value": "3d066b3f45b501688f61e8c552352647", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767474, "uuid": "9ee9a9d5-f3b7-479d-a1c3-634f958587d9", "comment": "Malware payload (Mirai)", "value": "0ff152699a23b903b483c511bae52202af79a1ce3c95359d2ebbeaf155c6b44a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767474, "uuid": "12d5b5d9-465f-472a-a8d6-4910d32c48cd", "comment": "Malware payload (Mirai)", "value": "f3c391691793fe042d9a83c69a429adaaef5c163", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767474, "uuid": "45bc708b-5f5f-4125-84bf-b41fc75bcb2f", "comment": "Malware payload (Mirai)", "value": "7be85db343ecefca6a6b8bd95a4c07ae7d559d95cf1cb85ea789724aec99c72b827628baf998974ef8dae48b00f729f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767474, "uuid": "7eabf544-0808-4eaa-811c-0a639e1a6094", "value": "T128A3EB0A7F11CFAEF769823547F74E21965837D62AF1D584E19CEA401F602CE281FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767474, "uuid": "3fe9ac68-7be7-4d30-a924-ee5149678c6e", "value": "1536:H6ZFvwGmyU0JIkjhhA3YLOwbpc2Bs/PGCq7erZikUnl61d6IwG:H6jv5pCkjp+2Bs/P5qwUn4RwG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767474, "uuid": "d1c90fbd-ac5f-4945-a71e-b873227731cb", "value": 102672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767474, "uuid": "0bb64cc7-02db-419f-bcb0-335eac11c7a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767474, "uuid": "8e4f808b-c510-470a-a50a-298549bbda30", "value": "debug.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66344873-e255-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766751686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751686, "uuid": "9ed5f031-c773-4c2e-b162-140ecb9247ea", "comment": "Malware payload (Mirai)", "value": "c987a89c360bd2ae30e4fba86e7d2ec9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751686, "uuid": "54c57370-b6ca-42c8-bfee-131b2053fb3b", "comment": "Malware payload (Mirai)", "value": "0ff51a0a2ebc60443795ecc056371c639ad01171c93fe1daed7df45daafbbf7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751686, "uuid": "8a9f6624-5bbf-48ca-a4c3-3239b9477ee3", "comment": "Malware payload (Mirai)", "value": "71ec9adac65a4f8079cde4afedc2e834c31ba551", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751686, "uuid": "f6b75169-9dfd-4b86-a7dc-49dece85e16a", "comment": "Malware payload (Mirai)", "value": "36c826775a1dc347a2809520073c40b7516a2314cc45fef969a6646b9d022eae08b754f4b7e5352b02269adf4c177e80", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751686, "uuid": "099b214c-4128-4a4d-8fa7-46fd7191adb6", "value": "T19B34C606BB611EFBDCABCD3746E9170129CC540A22A93F367674DA28F50B60F4AD3D64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751686, "uuid": "a64adcf4-6151-4d41-8daf-0f02891aa10f", "value": "3072:4wFZIZZEIam5IEnF9A6oJTA7n6q8FfM7CwU:4k2WmXnv06iJM7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751686, "uuid": "d0d4d81a-2968-4f61-b597-caf2978d1512", "value": 230592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751686, "uuid": "ce8aa95b-062f-4499-87da-bb35f778cb02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751686, "uuid": "12314885-7d56-4d76-b713-2849f0ff6339", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93f1c05c-e1f4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710101, "uuid": "b1bf0622-2a11-4432-9001-a19dd8c909a5", "comment": "Malware payload (Mirai)", "value": "a59ab7b797458822b6d14946b6d31dc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710101, "uuid": "0dfaca4a-9478-46a0-8369-a07f73841d58", "comment": "Malware payload (Mirai)", "value": "10af7bcb2ef8327d776c417204740f94047f86cae0e2483628bd1936c2945c2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710101, "uuid": "07c372cc-ea6b-4dd3-88d1-a9884eefb729", "comment": "Malware payload (Mirai)", "value": "ef9a3752877170920bc16e685277d78c916ff578", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710101, "uuid": "bf48865d-0c64-4fa1-80f6-0a1b0372e1f7", "comment": "Malware payload (Mirai)", "value": "96a957188738322e81e12f753a7981f29fbb413e5abe89c2d1f20316a2d3ca83fd1ab781abbbbcca038899b45dadf1b4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710101, "uuid": "2ae18856-75e2-4f78-82e1-dda9adf5ea33", "value": "T11AA3088AF8819B25C5D522BEFE1E51CD335357B8E3EF72029D245B14778A82B0E7B601", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710101, "uuid": "38becd49-c397-4b84-b8f7-027ae33f0514", "value": "1536:adnJp0PmQ31Na7B3WImF2EmUj3+ek27dXiGGz10k9OQyF+jFEFQ6bq3ONlOJip5i:rfkepdXHGxpyF+pEFQ6bIm5x7+x4q2TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710101, "uuid": "39ff0c42-fad0-40cd-9ca6-ae30d8ef7be4", "value": 98240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710101, "uuid": "610fd592-1a80-4093-bc13-fb92f4e7d3d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710101, "uuid": "94173b5b-b6c5-42fc-bfae-a2b8e2e4ad37", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0abda3d-e1f9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712324, "uuid": "fb3500d7-ace2-4bbc-9297-93af1d1771d0", "comment": "Malware payload (Mirai)", "value": "07ce98571b0b5568fbe3c5021f01c96e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712324, "uuid": "688a4f88-4ef5-446d-b527-868194c18058", "comment": "Malware payload (Mirai)", "value": "10b9275591099d86fb0ddd88061fca61c666f144a43476098e7f264560369ff4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712324, "uuid": "62523ba1-cbc8-40af-8759-cabae0fbf722", "comment": "Malware payload (Mirai)", "value": "bb071816033cea93bf6c8bb86cb4d1399e7314da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712324, "uuid": "66e1aa69-182c-4f02-bd24-8ffd0be031d4", "comment": "Malware payload (Mirai)", "value": "57714788d028292d3322e0090d18a6d7275082db6505f3614046fd7bee15a9bdac59ba3d384fe12be7559c71a416c7fe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712324, "uuid": "241a4e31-70c8-412f-8b2b-f14e3bc4653d", "value": "T175335B43321C0A17C4A65A74293F17E0C3FFAEA121E4B285650F9B5A85B5F371486FEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712324, "uuid": "80f27b67-02c8-4983-9dc7-25d26c7f57ac", "value": "768:n40wutdgcSlR/iJPKXyqyX7vkt++1P1WauDO9SvR8arkTi:td5KpyqQp+LWQ9SvqTTi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712324, "uuid": "525b31b8-74e9-40b2-90a0-054fb7b4a81e", "value": 50460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712324, "uuid": "0fa5648a-ee4c-46d4-bdbc-4039898bd95d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712324, "uuid": "f10f7da4-5dae-4420-b4f2-91dc5ca2b854", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ce3b469-e298-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766780393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780393, "uuid": "ed39ebe3-99e0-4bf8-a91e-c5cfdf8a622b", "comment": "Malware payload", "value": "1d93b10b1fed6ffa6bf5e8f0dc0b6b13", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780393, "uuid": "bacb1e95-4d62-4963-a2f2-f44bbde4de2c", "comment": "Malware payload", "value": "11f658b189b94420480e9a07370332116e6598d8011ca3a9384d923f37ee1fa2", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780393, "uuid": "c2a07677-6ccc-405d-8671-7ae209b49125", "comment": "Malware payload", "value": "962659bbcd181b655b096363a473f7b02e0e5501", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780393, "uuid": "5e367677-50cf-4d42-91a8-b8e0eeaabbde", "comment": "Malware payload", "value": "0a983b7cb40d0c7cb3c994c6b2d933e7ddf4d1dbebc3e684031bdf8463ba6fee5f3bcafe024c436b539deafa720a3e33", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780393, "uuid": "921ccd81-3361-45f4-9a49-24f2eaec2f1e", "value": "T195A55A02F5E2A5DDC937C134CA53A2737572BC245930ED7BAF94FA746E31EA0162AE04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780393, "uuid": "767fa73e-7d61-45e0-a116-693452b978c4", "value": "3c7f2888dac5575f427a7550580ac389", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780393, "uuid": "6c111b44-64b6-44d5-ae41-a5dc8cdc95b5", "value": "49152:k9OuCqeqpVORnnzG3sQ6yKfXVBuXYipz7mDj6Tmsqz5VJNIrOGtlqqYp4wlEA/X1:kw1HY8nC3milCDj6nS5biY47O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780393, "uuid": "82907eb1-6d86-4fa6-a9b5-e80a60a9384c", "value": 2200648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780393, "uuid": "b6ef3523-ea54-4d58-b5a7-f18f38b326dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780393, "uuid": "19aacf5a-0ea9-4245-8c6b-6b3c5d20a519", "value": "libgnutls-30.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f93cba3-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774116, "uuid": "c830df04-ef5b-4568-b18f-b0e37f34cff7", "comment": "Malware payload (Mirai)", "value": "e4c453a3bb8d9782ee3ec8a5e9de9b44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774116, "uuid": "0edbe641-4e20-47ba-8932-a259e971daa9", "comment": "Malware payload (Mirai)", "value": "126ea25ada6c618ca9e76cde0b3def37edd3c55f6f1e7e3750ce76ec865565df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774116, "uuid": "82e8e88b-4aba-46af-8b19-dd580149dc91", "comment": "Malware payload (Mirai)", "value": "9442d1bf582a413933213cca121d7a7ad042266a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774116, "uuid": "b5202272-b82d-46d8-9dfc-8abf7c2f386f", "comment": "Malware payload (Mirai)", "value": "761a71172882da20379e72378108e37bfa84fab500446cd1c321b4b6ba30054093f26a559d1197da170baaf39db09850", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774116, "uuid": "3569fa09-268c-4469-8218-ecabea2b6f19", "value": "T1EC730649FC815B15C4E522BEFA1E118D336357B8E3EFB212DD205B15778A92B0E77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774116, "uuid": "c3275991-a041-48fa-b4a5-f2d8393184d3", "value": "1536:hBnzICiV8cU+7EOlZtVls7MyszqxWFZadoj2yg89pg9lUbiWnwWlk9cTG:zhp+MEFZaOj2yg8tDnFlgcTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774116, "uuid": "19fc6184-b3cd-4a89-8b11-ce2d49f3a263", "value": 73888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774116, "uuid": "287c1214-2017-4047-81a9-dc06b803411c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774116, "uuid": "22d73ee7-e827-41dc-91c9-6058d56e64bd", "value": "zerarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52a9b5d0-e298-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766780429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780429, "uuid": "073c91b0-03b9-4e1d-9786-ce055669f31e", "comment": "Malware payload", "value": "4be89f8337d8d7b4356a3ab5cab6d4d8", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780429, "uuid": "86156bc9-bd9f-497b-8987-1e19a4cd6f7f", "comment": "Malware payload", "value": "1271399d9328316bdf5511dca1b286fb6ce919ac2d43d56445b080320bbe3b3a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780429, "uuid": "92bbb3e7-60a4-4e40-90ab-52ec303ae111", "comment": "Malware payload", "value": "564471bb13d7dcd95ca4703320b9411c0ab5ab8d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780429, "uuid": "a6e2db62-62f7-413f-9ed3-dc78f27e1366", "comment": "Malware payload", "value": "86227d385221d5f4aa26d467c3eb10e9e7cfdd3f7f9284e0f96aa96c6578c61a52bd45868246c8cafab61d56ed0bcbbe", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780429, "uuid": "139a66fd-18a8-4b2a-a78d-d5025d11df14", "value": "T17463833028046970360DCDBC49BA8C15720A701BFA547C18B49EB1D85FFEA68EDF95BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780429, "uuid": "855d14c2-927c-4bd2-a091-4f7bdd9b0f8b", "value": "768:QNnMT8dNxxNlUrOs+9Ni9oSrcJxUgfN1kngg+jr1K+uHnUz:YM+UrOs+jBSrHngg+jr1K+eng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780429, "uuid": "43d6c7f0-c14d-494d-a946-7d31fbf08ce6", "value": 72380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780429, "uuid": "78988c60-39cf-4b3f-9fc3-00c73f3ed25e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780429, "uuid": "6e8d0bbe-5051-4a37-9b74-31583e469728", "value": "auto.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79511ad5-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777917, "uuid": "219207a8-8b20-4a22-b209-5565b6e71504", "comment": "Malware payload (Mirai)", "value": "99d411e00f0da92652dcc4bbacbcf281", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777917, "uuid": "d2286ba4-f756-4643-a48d-7b901e9a0cb8", "comment": "Malware payload (Mirai)", "value": "12aed9c556a3e1b1cb188680f23c32b8b1b1e9fca84a534c0c472c1d17f947db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777917, "uuid": "6f8adc11-40f0-476c-afa8-ac138a37ae3d", "comment": "Malware payload (Mirai)", "value": "f60ade4a356d2cfb208d6cd2250d89230acb3b85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777917, "uuid": "b56b0a5a-da95-44fc-8538-66b63b42cd22", "comment": "Malware payload (Mirai)", "value": "b6fcde4e9feb94e123afa12952e33c02892812dc5732d68a25740f57a319313329e72b2a1ae946d85b9df05ab50d208a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777917, "uuid": "4958ce5e-cd99-4f5a-9a8a-248411adb62e", "value": "T12F048C73C8695E58C660D4B4B0E1AF795B638125A5876FFB69A3C2B08083ECCF5487F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777917, "uuid": "bc894784-d28f-4bac-9682-4d8151462b9d", "value": "3072:MAq4L/qYiUY/hxMKA0409zsxbC3xxWiX+zeG6hh1GSjqr:MYq0ATMK3409i4ciWe0eqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777917, "uuid": "3c463cc9-acc9-46cd-9e8f-9495bbce61cf", "value": 179168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777917, "uuid": "507bbea7-104f-4b10-a6c5-0d46aae67b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777917, "uuid": "4598d6ae-8e38-4b7a-90de-ae91324e8016", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "368423da-e256-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766752035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752035, "uuid": "bda715c9-e52c-4a35-a639-c25dcfc47fad", "comment": "Malware payload", "value": "69635ecb8f49de95f7f174a1aa04cc40", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752035, "uuid": "b6a0cd9d-bf06-4c80-b61d-68e15d1c88d3", "comment": "Malware payload", "value": "12f4fa99abe2864ae54e4ca36fff875b70b048d834dda99d4db3e57101b3f16f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752035, "uuid": "dd8228a9-46f3-4217-b043-67e9b0ad52cc", "comment": "Malware payload", "value": "000eb832b603f4608d3879e4d97705809b747c48", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752035, "uuid": "ca193cbd-136c-487c-a73c-c4f58c10c75e", "comment": "Malware payload", "value": "336392010e6157a20e9d3329348e7295808d68949d957e2685d53add878f1b07a69c44c55a0ae2ec74d5d75da0f7d3ba", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752035, "uuid": "1b719512-8ff1-41cc-b593-3294dd56cb92", "value": "T1676142CD21B1A3357DB5D72732E586C4F0C1929FD4C92E63ACDEB8A9C48CE187990693", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752035, "uuid": "a787f4cb-4a49-44cc-8b68-269ac7c00ec6", "value": "48:vp7/76p7K7Wp7GO7GVp7n7ap7I7ifNp7x76p7S7Op7c7Yp7e07eDbp7A7Qp7d7GP:vI18wVNqpRMNDblGOT/O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766752035, "uuid": "508cd443-ea0f-4478-8902-1b79a5c14fad", "value": 3180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766752035, "uuid": "c4c0624d-6b78-43f8-b9b1-31956ab074fe", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752035, "uuid": "d57869bd-7945-4078-bd2b-40f19bbe589d", "value": "cache", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83134417-e2ae-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766789959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766789959, "uuid": "4b794cb8-d202-4ac5-b530-fd7372c83551", "comment": "Malware payload (Mirai)", "value": "70a99a438277dc5452a0522a91650efc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766789959, "uuid": "268da3fb-c370-437f-8da0-7aaf98f17c27", "comment": "Malware payload (Mirai)", "value": "13646b4ba5d1d848820a064c2a8136c5d9d92df8d76a6fe6fb82b8d0059c77c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766789959, "uuid": "4a4d2699-3a9c-49c7-836d-93c5b4324e21", "comment": "Malware payload (Mirai)", "value": "93a239adc043f9e577a82f88df08ddc511eb3a29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766789959, "uuid": "facc2f6b-57f7-4c44-96f4-3a2582eb201d", "comment": "Malware payload (Mirai)", "value": "9e89fe397e6ac8ae1238061e7011d1c6bdeb0c00b4bd0b6dc139b569eda6547329a409e7ec2fb441f71a3e335ea88a97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766789959, "uuid": "94655b18-5569-4f7e-be76-b2d36cb74245", "value": "T1F0B38EE784A8EDFDD1E81D7B6864CA38CB12245019433EF96BBC84A90443EABF1CD355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766789959, "uuid": "dc9e543d-e5b3-4d69-9538-97c0e9dd503f", "value": "3072:rHyk9V1J7Zud7COPChO9i7aHEhBpuNhXCppVplllnxy:rHyUMrP34mk3UOlllnx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766789959, "uuid": "6973871c-7e5e-4a28-b2e4-968a1c04c661", "value": 111804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766789959, "uuid": "d470d965-7383-4a05-b8e4-92925ed0ca46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766789959, "uuid": "7772ace4-c534-4e34-ac76-c40cf5cf6a6e", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cb3a094-e259-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766753442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753442, "uuid": "06c97132-1953-4af4-bd02-ebb78c043f89", "comment": "Malware payload", "value": "3acb776fdb1759259e51101712023f56", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753442, "uuid": "eef39ad6-c2d1-4527-acd8-dc7d4e9b1a94", "comment": "Malware payload", "value": "137cc63999db545a8714318685a607725308e0d15c3bb71c1eb92a30f07f0ed1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753442, "uuid": "edc9e739-f2bc-44c9-8c4e-454015d980e5", "comment": "Malware payload", "value": "50346d0def41d34c84685be2f479dfff38305abd", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753442, "uuid": "5ea8236e-c13c-47d5-b9ed-ea017151aea4", "comment": "Malware payload", "value": "203a809ec52d9d5cb13db56b77dc1f016970f712c449617c822032a0c6780984c9bb0a38250b52f2c48dc2f756bcc6ac", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753442, "uuid": "75c5ca3c-9797-4c0b-af32-16805c18ad6c", "value": "T15BF44B06BE57A5D8C01FD8758A4689120EF87CC70FE2C95F844A15BA1E6F8F6EB38714", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753442, "uuid": "b31e396c-b31a-4329-9ee6-c2ecb3244d0e", "value": "3e618256603383b070c2507982d82c36", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753442, "uuid": "9e3a1bca-95a5-47da-b815-d41e5fb6f9b9", "value": "12288:XFR78eSIDcLhBFzIwetTF8zHx4vXOE6XUlwwXg5Pt:L78eSIDcLhBFzneJezHx4P/6klRgj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766753442, "uuid": "73309a00-9966-4c56-8382-f57c4dfb561c", "value": 758464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766753442, "uuid": "2fb0818e-7f0a-44e5-afff-486fffbe352e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753442, "uuid": "c573a2e1-6847-44c7-8b01-7b1079037c80", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1f4626e-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771677, "uuid": "adf1d52d-0a7f-4f90-bc34-86c05cf8f1ba", "comment": "Malware payload (Mirai)", "value": "43c746c5f6f364ad7cdd4d3f152622b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771677, "uuid": "f031f6d7-be54-42de-b15a-06e1e60e268a", "comment": "Malware payload (Mirai)", "value": "13b0d457d2f934ec8a6ba8cfff47bfd635fca8cfaafe79510abd08730e35b21f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771677, "uuid": "ed55f5ef-82ae-44f9-9bc1-68936efd0e75", "comment": "Malware payload (Mirai)", "value": "4eef4adc86a81fcc9842ed099d73d50cbae5aef4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771677, "uuid": "dd7b1296-7824-4016-8570-f2587deb9a7b", "comment": "Malware payload (Mirai)", "value": "8dc28ebafcf86dc5c8c7fdaa78b8e5b2f474d0c63a97a282cf0b1c6bbfbfe01c887223000ba326e6ada0f7b665b17b32", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771677, "uuid": "b87aff81-f03f-449a-8e76-5910927547cd", "value": "T166834B87A400CD7CF94EE6FB84374F05A92077015F530F67A66AFD93AA72099891AD83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771677, "uuid": "85db8417-d43c-4a3e-8e8a-d88cbe50396c", "value": "1536:RoU2iHTYpE47gtzWZfLNIkC6TbSaYK8QKO8JhkXnYshdzEJweVXETPI:RoUfAE4M1+DXTbYtOxXnThdzE6Ot", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771677, "uuid": "71dbc958-b982-4ded-aea9-cacec19c4209", "value": 83952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771677, "uuid": "d0c91961-0514-4861-aa2e-dbacd2d48dc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771677, "uuid": "964860b5-7fe7-4935-9905-ffd720c95635", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "116f4884-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771730, "uuid": "61a728c5-aa75-465b-b964-9c3d491a8252", "comment": "Malware payload (Mirai)", "value": "32854009bfe0e0805b8d82b36dedf0a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771730, "uuid": "f1884856-06c6-4f85-a7b9-cff83a4c8297", "comment": "Malware payload (Mirai)", "value": "13cfc19d7fccda65f821cd02ec1e3a48c497442678095275ad545f33b807b683", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771730, "uuid": "b476ba41-24b6-4e63-9922-b17131c20d11", "comment": "Malware payload (Mirai)", "value": "130924c3e0fe8f327d7bd3c0b57548025c38968f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771730, "uuid": "6740375f-c50b-43dc-b90e-227d87dc9f48", "comment": "Malware payload (Mirai)", "value": "c670a51647a2f431903a40cf92a689febb7b1468cc96244183c705e022fdc8db1aa68b16965c1c0a86b666185041044f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771730, "uuid": "54a215f5-50a1-40f0-a72b-4341bda55985", "value": "T1FD145B02770C0947D2522EF43A3F27D183EFD9A224E4FA45754F9A8A8271E37158AEDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771730, "uuid": "b2bff753-83fd-4229-9cd4-829d2e819b94", "value": "3072:15NBk8nQXNSMyuO7x+Toj4isIaxZDWwd6hh1mLP:15NBPn+fy5xIoj4vIA9WsLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771730, "uuid": "04212127-2403-4805-bd75-bb61383bf25d", "value": 199712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771730, "uuid": "3fb471de-e500-4510-b594-283ede14ffcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771730, "uuid": "abf7b72b-74af-4b46-942d-1451870d3fd8", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "420e6b60-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778683, "uuid": "5634b6e4-4f8f-49ab-8383-bbfd0ad9ecaf", "comment": "Malware payload (Mirai)", "value": "74a0efaee42b756d9e97fe6c0a7772da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778683, "uuid": "fb517b1f-519c-4f3d-8d95-72eb3ec6d2b0", "comment": "Malware payload (Mirai)", "value": "149be986398f85e8be07585e98baef842ebe112adaf2f89a0c4730244401aeb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778683, "uuid": "abb7c562-881b-4fd3-b846-8f957d110fb1", "comment": "Malware payload (Mirai)", "value": "155f1512abb097d24c09ae0cd881c92b44aab6d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778683, "uuid": "691701e1-8339-4ed1-aa20-e391c92c4df2", "comment": "Malware payload (Mirai)", "value": "b3d4ad8f339844675e6bb4eeaf0cab05c73251a2bfb259b484d4070ae4d1833405b9961dd3bf3bec13062f653bebbfea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778683, "uuid": "ef21acb9-eb94-4a8c-b487-f31684c44654", "value": "T18C242A42E9518E12C5C112FAFB5E514D33136BB9E2EE7202DD246FA0378A8EF0E7B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778683, "uuid": "2b95e3f2-e753-4140-a9a5-16f808e634fa", "value": "6144:j+ZbS2NmgREHKVAbW58fyeafKNwODuxEHK1g7dSf6+XZdGauaP+QYDguJxr:j+RrREHKVAbW58fyBfKNwODuxEHK1g7L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778683, "uuid": "9a0845b9-3678-4247-9196-b0ee5cbc9b33", "value": 217368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778683, "uuid": "3c799025-f666-4b33-8fb0-b954ef7e2e7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778683, "uuid": "46d4f368-f60e-4634-a5f6-650e10804c12", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "547cc556-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733617, "uuid": "31a73911-c13b-45c9-bace-4bdbe5e3862f", "comment": "Malware payload (Mirai)", "value": "ccc6011bdde70599c2e728d3657f4daa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733617, "uuid": "239a6251-736f-4f23-a6cb-ba63533f01e7", "comment": "Malware payload (Mirai)", "value": "14d5f0267f0ca1c67bdd8e3075ee3598e2ae7444c7f87bab0b862b3b5ee6ced7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733617, "uuid": "3dd345e2-02b6-471f-82b5-e7ba2744eac8", "comment": "Malware payload (Mirai)", "value": "d6b8866936d92f8b874ca35b814fca1193fd0607", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733617, "uuid": "15e62d0b-b516-49c0-b50c-e32eb9f3c54a", "comment": "Malware payload (Mirai)", "value": "967a32949ba46e56dd83da16c9e4723ec7d14aa79d7be5d653dba61ab521e742e84da77e0a97934060fbb4ae4310722a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733617, "uuid": "4c381da0-c000-4dff-825e-de9d49c7473c", "value": "T1D7D35C0672180F57D5A34AB0263E1BE083FEE5D021F4BB89691F9B6A4672E371485FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733617, "uuid": "d95b0a92-2809-4791-93c9-031189ac6fcd", "value": "3072:nHm84wLM+HGJYe9XCSmAU5nvoyxZocN9V:VAmi1RmAU5nvoyxCcN9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733617, "uuid": "8ab54679-c2c7-44d6-8e84-ed6f54a506d3", "value": 136760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733617, "uuid": "c4c2d85c-777e-4065-8e45-5c4c9f2d421a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733617, "uuid": "20d68fa5-f81d-4f67-b8f9-b6ffe392f6b3", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c05761ef-e282-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771164, "uuid": "82e30f67-5e4a-4676-8494-56566050d639", "comment": "Malware payload (Mirai)", "value": "f62485e977d22aa4218609099dc2a837", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771164, "uuid": "f896e019-4fd9-4986-b16f-a85fa8c6730d", "comment": "Malware payload (Mirai)", "value": "155331e78fcbc8fa7e91727c99a8f68fdb95ed88e778fa94d1599b112e7ce000", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771164, "uuid": "93ad1765-96e3-4223-8b58-40f10f87f671", "comment": "Malware payload (Mirai)", "value": "17a5a4348cb5323ce590ba3115b5f1eef41d79e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771164, "uuid": "e3897cc1-ac89-459e-a98a-a2c35f20ff98", "comment": "Malware payload (Mirai)", "value": "af8d0dc9405d265ee3ac04b68d7cb182c8938ec459cf5972c6fe2d391591e49da44c457c50001baec560f7de7afe9e1a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771164, "uuid": "31e9ee77-3a5c-4523-bed1-8aa2aba24959", "value": "T17793F806BB741FFBD85FCD3745B95B01258D920622E93B7A3A34D818F64B14F0AE3868", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771164, "uuid": "07f986cd-fa04-4e4d-9e85-f744cbfffdcf", "value": "1536:4q/AnVlPNZa4h7NxQpn5je8nAJFxhc8FHBz/s9y1W874ATAbVRR:4XDNk4hgS8nAma7/TA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771164, "uuid": "9df15c15-13f7-4b8f-8e12-5d94704c1f3e", "value": 97256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771164, "uuid": "d9996f69-9017-4f6e-bcf8-955f1117055e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771164, "uuid": "3ddf3a45-9e21-42d5-bae6-204eda52abe4", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4762ea8-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747093, "uuid": "16f3f440-58df-4db2-8e3d-84bb33cf9829", "comment": "Malware payload", "value": "32efec80689a3227bd7fa27b57f88850", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747093, "uuid": "61bc9392-bf59-4433-8845-1def5b7f9f59", "comment": "Malware payload", "value": "15549f76d0c9d79de204adb96561865774859cc3a24986e77bae5a2277ce603a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747093, "uuid": "09e9c9ad-2013-4027-8a0f-ae9d454a40c3", "comment": "Malware payload", "value": "007b3d47091ac655bd97b53eb9e27e4a52a7dbba", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747093, "uuid": "ab957cc2-0f02-46a2-a46f-7a18f51bf4e8", "comment": "Malware payload", "value": "2e99b940fbd4eb00a73cb043c1db17d59ba4789db1914c8846b90d5e961327bf273ffad2026dc8cbc5a9f00f50985f5a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747093, "uuid": "4cde401b-0d4c-405b-812f-8baaeacb660a", "value": "T14E630A0B3F767D39E48E958CE4E96EF6C71D6E14EEA35C4EEC09A80B404B5415AD80F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747093, "uuid": "f6fbe139-d55a-47b3-be12-73a65a43fffc", "value": "768:I8w/h62/jWs6oS+xISN0vgwjrN3/dkfScBYrwz2y8kTAlGB:I9l/AoSSMNFusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747093, "uuid": "219c5a4a-1c71-4209-a173-70be8862c007", "value": 70598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747093, "uuid": "b8580f06-1034-4e16-8108-b8b10d77c473", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747093, "uuid": "f85f8552-1e0b-4cf1-8415-1311a7002e3e", "value": "invoice-1645080830.pdf (98).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b08a175-e1f2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709066, "uuid": "41f1f132-430a-444a-969d-70a3bef85ff9", "comment": "Malware payload (Mirai)", "value": "e810ebeae61131bd02a18e81c9c92d4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709066, "uuid": "6e27a15c-8195-4e57-a5ee-7c302b452370", "comment": "Malware payload (Mirai)", "value": "165dc4161b135835f8ebab645df8fe2bd3d9d56b9cfe8d0602eb825ac0d44725", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709066, "uuid": "7d5bc620-7e91-4960-bfc3-a8daadbb237c", "comment": "Malware payload (Mirai)", "value": "d6730b4ab8affd18b2587785a8ab6d04190a65f7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709066, "uuid": "dd17d5a6-daaf-45c6-be79-687f0d17353e", "comment": "Malware payload (Mirai)", "value": "1da90d218aade89cdec334ffc0a0a8fc8c972aab0e69b6439f4bc26ba6e19bd736908e0773a76b36190fb884e972fb2b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709066, "uuid": "eccf064a-08fd-4ff9-b064-9773edd9e814", "value": "T16D63B652B8819107C9D8A2F7B71E419E330513B8D2EB3307AC356F613689D5F0EA7E5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709066, "uuid": "bf5a2d80-0992-49e5-b68d-3fef36d973fe", "value": "1536:nMKuyc5hKZ6c+5D70lPF/xRhkb9cadxvlwdSZH8:nMFycfKZ6c+5iZkNdxSdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709066, "uuid": "5aef09a8-427d-4373-ae19-5b71d6160858", "value": 73336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709066, "uuid": "9f37f33a-9474-47ef-8f12-34afaba152d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709066, "uuid": "c60543e1-b0ee-413e-bf32-86fe406c0b72", "value": "shadow.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e766f96e-e29d-11f0-a129-42010a9c0007", "comment": "Malware payload (CoinMiner)", "timestamp": 1766782826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782826, "uuid": "4da58d7a-95e3-409b-8544-d7f2235c713b", "comment": "Malware payload (CoinMiner)", "value": "d45bc2f2b04a79881698d47d94a81984", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#908D12", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "test1", "colour": "#2A4CB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782826, "uuid": "ce3f4730-4768-4d7c-ab81-a6a90520efe4", "comment": "Malware payload (CoinMiner)", "value": "1670daea2aae4a96521128c6448ddea99e5d51e45efa4919cdcb95eecd963eac", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#908D12", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "test1", "colour": "#2A4CB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782826, "uuid": "da88fc3c-9869-44c1-a8ab-4313358f2719", "comment": "Malware payload (CoinMiner)", "value": "374943f95701a3b9362c00b8cf13a37b4b1e5370", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#908D12", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "test1", "colour": "#2A4CB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782826, "uuid": "66e443dd-14c2-459f-a3b7-2dcf7ea806fa", "comment": "Malware payload (CoinMiner)", "value": "21492bd3e721c845bd41dcf46b21abf2c15f9d88d6e5ecc8e2985298d1881789f2bb42e5feb24fc14578b0cc6d09e182", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#908D12", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "test1", "colour": "#2A4CB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782826, "uuid": "438d8b6a-1b29-403f-8fcc-83742a859fe9", "value": "T1DF36336B3DE6C8B5CAC8597F2549B7824FB7F428170D8DF789201E3A05086F4E97C25A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782826, "uuid": "3f61cdd1-db98-44e2-9d03-197fdf02a149", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782826, "uuid": "bab316f8-b0bc-4901-bf1b-737129a6367d", "value": "98304:7M5kpH7LhLrCHDDpInjSA32Y60eQCbNkzuICWRhR9NHvV8v41f91j08L+my:7M8H7LteXpInj52YRedhWRhRvNthHnLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782826, "uuid": "23b5fc0a-4aaf-4d66-a5d2-36a7f4d8f714", "value": 4907784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782826, "uuid": "5aeb5ae8-7e15-4fac-8eea-edf9e25cdda7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782826, "uuid": "a49794a7-dc53-4a19-b8d4-1d1961147a97", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f0d4019-e22d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766734494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734494, "uuid": "205f4e55-3333-471e-9c37-a944cd34bd99", "comment": "Malware payload (Mirai)", "value": "61de628ed62334988dfd415af22a3c76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734494, "uuid": "3ab8edad-18a9-431e-a255-fc394c29cf74", "comment": "Malware payload (Mirai)", "value": "170d09cbbe248453807c571efc93fde9f65f755b4f2a93729bf750e1ee009fb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734494, "uuid": "550792e1-74be-4763-ac40-ba26ce5b0dad", "comment": "Malware payload (Mirai)", "value": "21f5131e1a03dfdfaeaa5af98afdf98176928ea1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734494, "uuid": "27138c6a-19ed-46ea-90bb-1ba660232499", "comment": "Malware payload (Mirai)", "value": "e5177784400ed171b666dc6d777b1709d2335053f14eca17be171c3a90b83341245d9e33709e73c50f90734ad4e0544a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734494, "uuid": "22381eac-eaf2-4c1e-aa2e-8a93ca03f8a3", "value": "T116D3F79ABC919E21C5D216BEFE1F52DD33231BF8E3DE7103DD086B2076C691A0A7A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734494, "uuid": "0b797ec7-d1a6-4b30-9f29-6c366937efb5", "value": "3072:k3bS7wMtYXO/fiUldio3Exs8KFERukWqjzKFelXiJbFHJA1xn53s:4bS7wMtYXO/fiUz53EiFSlX1lyJb01X8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766734494, "uuid": "3331a151-7779-4ad3-a493-6ceb0145b2c6", "value": 135924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766734494, "uuid": "c9b1550c-01aa-450c-ba08-c9457e24e2d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734494, "uuid": "b44c4b82-3f8f-4ce0-b9cd-2a569c07c0ea", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e9327d1-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766713099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713099, "uuid": "7fc9246a-ef98-4d00-a3fe-d6f83c67b008", "comment": "Malware payload", "value": "754b74eb073fe16ca836a65bfcf00a44", "object_relation": "md5", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713099, "uuid": "3c4d2319-0a73-447a-97da-dfbf018b8986", "comment": "Malware payload", "value": "173ff5ede7c28163ceaa9440de8a02cef26295f8be06b6b0f90b0a4284471bc2", "object_relation": "sha256", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713099, "uuid": "3b8405a9-ac19-45ba-b4d6-89eb0e9e9111", "comment": "Malware payload", "value": "577095c4093bcd71cc3cea69e248fd5fc17108c1", "object_relation": "sha1", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713099, "uuid": "b8a4cc92-2d8e-47ca-8cb3-0f4abc90c1ae", "comment": "Malware payload", "value": "de7ddd3315e26041a4cc763029b6de29ce547aaf9633c32020faa8747c935a86f9f559bddaa0b13906c1a4107bdbe4bd", "object_relation": "sha3-384", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713099, "uuid": "c7bb64d7-8dd2-4d13-89bd-a5527819218f", "value": "T176649D83B72C2A68C12DA0BC4D5EF3515232F90CAB1653B9F791D1646F7F260621B9CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713099, "uuid": "d1d57ca0-ef39-40e5-a588-f20221d989d1", "value": "6144:/fxIxZMv0IXLf+5sHIYNUymTFwhcFRq8ZGAWFVL2f:/fxuZMv0IXD+of7AWFVC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713099, "uuid": "486616d8-81b3-45c9-9193-a71ac5facf95", "value": 308576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713099, "uuid": "d42ccd3f-8ace-4c77-9980-a38f83c8cf82", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713099, "uuid": "32149485-5847-472b-a0cf-96f7d4cd25a3", "value": "173ff5ede7c28163ceaa9440de8a02cef26295f8be06b6b0f90b0a4284471bc2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a1049a9-e1f6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766710917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710917, "uuid": "a51407b4-b26a-4724-a156-e4c6f1a016d3", "comment": "Malware payload", "value": "75d0b247eeb5b1b3bd3db5ddc903019f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710917, "uuid": "89f8c67a-a15c-4247-bb43-6317d47e540e", "comment": "Malware payload", "value": "1764d210fdc967c7b23efcb42bad3d019412232d106733c2da8349d352f030ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710917, "uuid": "01d87921-44cb-4f60-a077-6af5c5450ee2", "comment": "Malware payload", "value": "5d24b4c0b5d48dd5fea7f6df7c9cd66f2f5f666d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710917, "uuid": "0bf180ca-cd3a-4cc8-9be6-4fc54d50e1f5", "comment": "Malware payload", "value": "cd926623fe24fa9c610c812887f457c66067e185804ea7bd4d25d790cdbe99b0f86cd3feb24109e2888bba92ba931ec1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710917, "uuid": "21959d3e-d43d-4317-a469-971c1ba646fd", "value": "T17794AE31F680907AC55E09306F35A35A9A3C58612FA1DAC3A3E03D9D99339C19B37B1F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710917, "uuid": "605cb013-a0d1-4764-9721-20447b307472", "value": "c58a6fdd5514cc5114ad09dc07384b11", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710917, "uuid": "af460598-601d-4526-b49b-502d3d89ff30", "value": "6144:BxWD14iTIKu+OqfiBSq8NqmIqGOfmXwifg2Gs5Iv/K0lKe69X4Ytn+/:SDrT2VPB4qmIEfrs5aH0uYt+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710917, "uuid": "41f7b5de-77d8-4289-b8aa-72d3902431f9", "value": 438325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710917, "uuid": "6f86fcad-5d13-462a-b055-d7ecf9f8b6be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710917, "uuid": "42250d21-43b7-476d-b48b-464a6fb5b892", "value": "jdk1.8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01742d45-e220-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728753, "uuid": "5d6114ed-8725-4256-b435-3fda2b0a80ea", "comment": "Malware payload (Mirai)", "value": "f62ecc5c97637ab8882b0a3d6502c516", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728753, "uuid": "e317f2a4-1d22-4a10-aef8-514e0786f0ec", "comment": "Malware payload (Mirai)", "value": "1777a5a6887ea691ec8168eb4767222e1d65cff43b616e8fdc1753e38f5586e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728753, "uuid": "71310852-7aee-4522-96cc-a1acf59ae481", "comment": "Malware payload (Mirai)", "value": "c3905388e033417e329f98aa0d9c0d9274270f7f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728753, "uuid": "390cc0ab-af70-433e-adb9-a8af3e56aa0a", "comment": "Malware payload (Mirai)", "value": "53fc0e8f91a21cdffeda91cbf6b8302f88d5d4262f41289975d949e4bdb2ed0300a0046e6f58921e1d1069dda7ed0c0d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728753, "uuid": "8a489ddd-0413-419a-8712-580f4bfe9f70", "value": "T1574301F719FABFC1D716563A1FA3E616311CC7A8515A2473841F68E81AFE00A9438FB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728753, "uuid": "212336cf-add6-4bdd-a009-6c7eff1c19e6", "value": "1536:HYbuwUEJadwtqXB4pmb+jvQ86hjI/7Hlo41gpJyNorX:/wzJfEBKmb+jvQDjq7Hlo4IJyNSX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728753, "uuid": "f02b5da0-18ea-4c70-9504-8fea3ba52fa4", "value": 58024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728753, "uuid": "22e9179f-936f-47e9-957d-52d61b2ba7bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728753, "uuid": "86092288-acd1-42c0-ae63-baabd2149293", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4b5d682-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772487, "uuid": "c1cd8b8b-4e0d-44ed-a057-d0f9eeb99e03", "comment": "Malware payload (Mirai)", "value": "b35b3f68702bbde6d068552939566190", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772487, "uuid": "515970ce-a8bc-4523-a9d1-333818fa38ee", "comment": "Malware payload (Mirai)", "value": "178393793088b4880abbfc5baf474edf66075d225e74098059c189a2f954d973", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772487, "uuid": "48ef5cde-ffe1-493d-a0a3-54cf3f3084e4", "comment": "Malware payload (Mirai)", "value": "0a8f09e8a3ab32dcde354d1b3b17a4e28cc0a7d3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772487, "uuid": "5c99af26-5b38-4e96-b40c-87d9d76252aa", "comment": "Malware payload (Mirai)", "value": "0458743e2d3432b7cf918109d6018c0e34bab1c017f8b85d41f3a1ad4b141c7844d88dd4cf71a2623d4c691927f2f6be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772487, "uuid": "5d4ed30b-09ef-4730-ae1f-c59cc37b14fc", "value": "T1AA4302AB1984C212D62384FAF822FA84268D1F70CE6935229D058177EF00D6DDFB8D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772487, "uuid": "1285a4d9-a9f0-4eba-bb1e-41bed7d0ed2b", "value": "1536:Iro/oHFVNRMZmUJEYoBPaEL+PSipo0G5QF51+:IrnHDgnrAPLlipO5QFX+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772487, "uuid": "f96941c5-f42e-4f9c-af8f-25e4853eefd3", "value": 57828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772487, "uuid": "58d1b12a-eb76-454f-bd84-331a1759acfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772487, "uuid": "64240f0d-ae7b-4798-975d-2d1708974d60", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d1119c2-e1f3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709526, "uuid": "2c4789ec-f2f8-451e-9766-0e1d0233a0c9", "comment": "Malware payload (Mirai)", "value": "bdb71ca21fe94f9475dd3c107482eb76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709526, "uuid": "e5b263ff-2026-4d53-a679-794c4e836eac", "comment": "Malware payload (Mirai)", "value": "178d7d0f4f056d5c3f6aa2051523ead7d7ed3d0c14c88a371af96fa3a9f70030", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709526, "uuid": "47eb6113-5a19-41a3-97e6-094d4b4f94ff", "comment": "Malware payload (Mirai)", "value": "b6cd20bb27541417b3a28d07c79916239534ce45", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709526, "uuid": "5a5c9e34-4129-45b7-b71d-ea1570b5007a", "comment": "Malware payload (Mirai)", "value": "c5b298ad8031d832f67c102b19ddc78f97e9cfc751b8ffefcebc42f09d2fcf6f354bca49b92f0ed9a3d7dcd7bf87e76b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709526, "uuid": "03272e47-ecb1-40a2-99f6-7813660d4211", "value": "T193234BC4A543D8F8EC1A1AB42173F7739FB5F4790029FA93D7A59A32F852200960B1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709526, "uuid": "e616dea6-e706-4fbf-ab69-5eb8c0ff6838", "value": "768:ii8+WG7OHR8MltInoqOFU8TUhDzf8CQn9otC3optmbgnr:TzWG7TMltjU8YhDzf8xOt26Ebgnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709526, "uuid": "d65dbc24-8537-4265-91c0-511f26c083f6", "value": 46476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709526, "uuid": "e1ee33a9-6fb9-4117-809b-3663329d19c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709526, "uuid": "dd3434f4-0a57-4aef-9911-5a651a53f958", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a50d1bb-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747398, "uuid": "bd020b3f-a821-4e39-bc59-756f8564aba4", "comment": "Malware payload", "value": "cccd1495af04b0f765a8614dda846ca6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747398, "uuid": "fc70d224-e6fc-488c-a101-b696b1baa56f", "comment": "Malware payload", "value": "1818a32f7f9cc9cde47e937aab88f3f97680658fd064be9e2079b45788a789ef", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747398, "uuid": "9a26d5f3-fb89-4e68-88cb-0e3c2080e305", "comment": "Malware payload", "value": "85f859660c56bd9f9e41beb44ed63da528a1ce6f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747398, "uuid": "5674353d-8a23-4fbe-b3ae-aa64da6abbba", "comment": "Malware payload", "value": "501448c61a29e327be54db640c8b371cecedfc74cc2ccb25a43aab94c7cde866d4566eafb8aea629f91ca56581da0cfe", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747398, "uuid": "61904e3e-64c8-43fc-b7ff-5a1136a04cfa", "value": "T17873198311DE2D4FE5BD1833C56E138F175EA7C3CE661E93991C68F68549E88B22382D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747398, "uuid": "25570761-16ce-45c8-9c4d-ffd1695c6b10", "value": "1536:I9l/AoSSMm1zbkmC6J3o+EHS/0OpNefhin+xoT2o8m2zj0x/SPdJCY9Ji6vD7dS4:I9l/5MeuKusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747398, "uuid": "869d19c4-7350-43e4-aacf-2dfb4f013ca0", "value": 73527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747398, "uuid": "4e99194d-2fd7-4ae3-a2f2-6a0efe3cec4d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747398, "uuid": "16f7a8e7-14bb-442f-8343-8c2303cd6573", "value": "invoice-1645080830.pdf (44).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f584ca94-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747202, "uuid": "97c5fe38-4b5d-4c0c-bf68-12aa05eebe86", "comment": "Malware payload", "value": "1d40a63fab5c0552be6db58addfc8b4c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747202, "uuid": "92417436-a49d-4b2c-bb38-d403ef5ec2db", "comment": "Malware payload", "value": "1836122a3f975232f69e542b5c814458ecaac976fc360f6c689033c8ff090ea4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747202, "uuid": "38362d3c-331c-498b-a10b-7f2bb186cd09", "comment": "Malware payload", "value": "f3b12f82da17bce0e0bc8cf878ab548426f88b5a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747202, "uuid": "58ac7aeb-3172-440b-93d7-4bcfdf6f1a86", "comment": "Malware payload", "value": "f6a127b40edd6e28fc56a1645a477258a7712cfbb4aa3cb6ccc76a0ce9c8e5afc21bd577256532f85fa5348d28cb63d2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747202, "uuid": "2f9095f6-c86a-4fbc-85df-d88e7c71f7ba", "value": "T14B633B76FB10F5E5008FB45C2EEE04ABFDA190AA7EB74A039ED675566C04DC1E3102B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747202, "uuid": "309691b9-728e-4803-9fa4-e7c8de8ed109", "value": "768:I8w/h62/jWs6oS+xISN0vzcDvGx567rU8gQFWsG/WxDFGXdGi45eN6Kt5FZtlQHa:I9l/AoSSMbGusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747202, "uuid": "b95047e7-4f19-422f-bb35-ecc8806f3b9c", "value": 72502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747202, "uuid": "902f2eca-8f77-4459-910a-3ed50b550209", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747202, "uuid": "aa76b54e-e8e2-45e1-a431-9d95e6ed3d18", "value": "invoice-1645080830.pdf (83).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29caeea2-e237-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766738700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738700, "uuid": "fbf8d2f2-1699-40ee-815c-687945077aec", "comment": "Malware payload", "value": "2c1a317472e8e67ef1c0300f8d883b3d", "object_relation": "md5", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738700, "uuid": "5fd8d53d-c94c-4978-9376-da8cf16126e9", "comment": "Malware payload", "value": "185578afe704fa7cd3c6cbbf034b9977ccfb1bd6ea65be0eb207b0664b616d3d", "object_relation": "sha256", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738700, "uuid": "9ca04350-ab51-41bd-a62d-6fdf427a6ce3", "comment": "Malware payload", "value": "e472bfbdbea88931bb2033d4aa4b56d344c1dd5e", "object_relation": "sha1", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738700, "uuid": "3ce68a4c-e800-445d-86fc-14f6bc8bbfee", "comment": "Malware payload", "value": "6de2f85fef980e9799174459f20554dc868c047dfbd1b8177e846ed165659adc355b0119ed7488f8f37b11b5184e262c", "object_relation": "sha3-384", "Tag": [ { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738700, "uuid": "64e8b6fb-f001-4eba-bb99-62474d91c3ed", "value": "T116463C47F85151A8C2EDD2308A759262B771BC890B3027D33B50F7B82EB6BD46EB9354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738700, "uuid": "55be554c-674a-4f89-94b4-56524e76c746", "value": "49152:2UUPoCKsf+nrb/TFvO90d7HjmAFd4A64nsfJOq9tizcTEW2Ow1DCBLwdagaTjbBb:2S8AW/gWjvEmAagD+fGm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766738700, "uuid": "dc0f33f4-4bc4-4f7b-b7a9-1c74ff05022b", "value": 5531536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766738700, "uuid": "f9622598-721f-41d9-b03e-5ad3f473899e", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738700, "uuid": "5a192e67-f8dc-4465-90f5-81977988fa73", "value": "darwin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c178e229-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728217, "uuid": "badaa1f4-0a8b-4777-a85f-1cbbac7177de", "comment": "Malware payload (Mirai)", "value": "532dd9d2401072ca5e9f952b7a5d5344", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728217, "uuid": "49b56820-9fa2-42cc-b38b-ba11b51be19d", "comment": "Malware payload (Mirai)", "value": "19e6b75649a5d81b8d3b25d6729107ec71cb068b9247ba86705b852d80cda30f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728217, "uuid": "84db5d6d-0eb9-4bbc-827a-d64db0de3d80", "comment": "Malware payload (Mirai)", "value": "7e869a2113586b4900b916b932e1364ac84d1eb7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728217, "uuid": "f2e4f236-4274-4187-9002-90638e2c98c1", "comment": "Malware payload (Mirai)", "value": "96f1284103243d67132fff9a30fd556bd6327b27de548e032d6c9746c4dd38ffdac2c222bd62a785ad58b9fd0e641f73", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728217, "uuid": "6b3beec3-3761-4f8c-ab25-461458c9d233", "value": "T150630292618B7596AEF89DB665F6E22742CB33F001D248A8F98430BD1787573273C986", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728217, "uuid": "e0a61cfc-cfd8-42b6-81da-9e48d27c355f", "value": "1536:+/Cs0XOpCNu/YZKQk+OJb4AhSzaFVYj8DNYFW/9LzT:+as0epC+43OJbaaFVpGW/BH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728217, "uuid": "18daadeb-47a9-44b6-a65c-8d1dfc11273c", "value": 72432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728217, "uuid": "95bc7903-677b-4c35-9ec9-8b7e09ae0ea2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728217, "uuid": "25a770c4-cc80-43d9-9f71-293a0af4c715", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dbf4e50-e294-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766778649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778649, "uuid": "ee4200be-f2e9-483c-b384-3b15b8fa3f7b", "comment": "Malware payload", "value": "a7b78582bec71896bf8e68b14685adce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778649, "uuid": "785aa6e0-ea97-4b80-a9eb-5101b0808304", "comment": "Malware payload", "value": "1a1a4053592dfc2fd3983a184e10b923c6bfd1856d65846e2dc35bd31512f0f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778649, "uuid": "27ab3785-53ae-4ce8-a45e-60de3c0ff451", "comment": "Malware payload", "value": "450e6b9690b0eff863fea5a9b82bbe9b7fbbc683", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778649, "uuid": "ad2344c3-1a75-4cef-8317-577a18e72353", "comment": "Malware payload", "value": "73d218bbe229630a9d77373f3d770ef83a73d7be7359ea0da572d1bb90289cc8aad60fd68a290ae29a062e7dd51e5e7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778649, "uuid": "3dd054f3-abbb-44dc-a6f7-8334ae571f88", "value": "T161144BD8ED1E3C8292C7F26DEF9A4BE1712BB1B4D72A81B17D82115DD5C9EDC82E1210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778649, "uuid": "20735198-4ec5-4394-8601-c4ab01b0c0db", "value": "6144:GHueGunNkLcM0e+M9I839UHGbLxa8ovzMA9NHuLsjIgbyp:GHuuIcM0e+CUHmlLovzlV2svbyp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778649, "uuid": "9fb234c5-b938-45c1-a518-ea8bfc5f7cec", "value": 201007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778649, "uuid": "a7734c71-8917-4eaa-8524-9986eb0bc254", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778649, "uuid": "9e3d1452-e399-4d59-8053-94c31badd653", "value": "shadow.arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7b9f541-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710698, "uuid": "48c3b74e-1c72-4289-b301-5ce22986184e", "comment": "Malware payload (Mirai)", "value": "a2cd2b8c05cd8a22e257f01fb6b4e002", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710698, "uuid": "6d65ec85-e8ba-4ee1-bf5d-7bb9aff0fe1e", "comment": "Malware payload (Mirai)", "value": "1a5984d4654a3c2629325bb4c4c52e2a27716642333f756e6f1f4e53389f4f15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710698, "uuid": "d0518d28-4a81-41da-b483-ec62477e781e", "comment": "Malware payload (Mirai)", "value": "f9150f1cfb58fd1825213bf19036e3f98f5d6f14", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710698, "uuid": "18b531a7-e672-4e6e-b932-17dc5803956f", "comment": "Malware payload (Mirai)", "value": "6168d851f954add3c45cde5aaee558530e6cd6a66724459c059be0272f5e431502b76deed07954e2f4e06e959319e4ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710698, "uuid": "90a5b387-eade-43c7-9abb-ac1ce06b7275", "value": "T1E2D2E012E15787C7E2AA08F21CDF345A0420970F7C80B5E7AAA473364987F74576EBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710698, "uuid": "81846577-364b-40f2-af87-37fab0204f8a", "value": "768:ld78ykw0/RCgm5dY+6GtVbZHFGH1OlhKMbTwe82CvnbcuyD7Uryq7:n7RLHY+5tVbKH16KMbXSnouy8mq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710698, "uuid": "d6444dad-9d23-4e59-87ea-63a95f80927c", "value": 29616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710698, "uuid": "1f99e51b-86da-4e20-a225-d26389540307", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710698, "uuid": "9c887e3e-dc25-4a46-9958-9236290106ef", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcbac912-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792741, "uuid": "646e2fe7-635b-4341-860b-1093a3b9bc68", "comment": "Malware payload (Mirai)", "value": "b5a549f8efde7cd5e588952fb9176902", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792741, "uuid": "d15f3705-7af1-4459-98a7-2e93bc843f17", "comment": "Malware payload (Mirai)", "value": "1a9e24f9666ee53e1fa43e9cb4f8ea32d2e3b423d9725593e9d69f1bfb525f15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792741, "uuid": "5e029b77-8005-468c-8c09-8ee44550daa6", "comment": "Malware payload (Mirai)", "value": "d0d893ab2bdaa1aaa76805998525a8bf477f5815", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792741, "uuid": "03102352-da9c-4834-8396-03ffdbbf8cab", "comment": "Malware payload (Mirai)", "value": "1f48768ea21bb631fbb0a55c95286373c7a74204ddd9cf56c55d73206c289680f39b8f8c80ce83ef9b90285181fa7bef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792741, "uuid": "ba2b42fb-0be3-4ba6-939c-6e1e4352122b", "value": "T1467302A93F20978AD9E48534CAFA036415DB7C83F005985D535CE8CF4FE9758784B6E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792741, "uuid": "56d484bb-d41d-4f86-b318-e821974bedd3", "value": "1536:R+6VuYhp+lc7TGM3qWrxShXUNuAVFSE1OY4xUWSESd16gYpsxnpVJu6x:R+6Vp4lc7aM3qtALziU/Ld16g4IVQe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792741, "uuid": "c7a52466-da3c-4e49-b5d8-57ca4ac7f4a7", "value": 77580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792741, "uuid": "ebb956e4-fb3e-4892-9328-bf489772892e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792741, "uuid": "c694e5c3-c4ec-4052-9d6c-74ecc16a7982", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ac1cc02-e220-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728850, "uuid": "5f369198-256b-4c13-bc8d-17cb4c0e7158", "comment": "Malware payload (Mirai)", "value": "2ad51817fc3cbed962e40b05698b725f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728850, "uuid": "8cb0c04c-4138-4898-95dc-5834cc9f004d", "comment": "Malware payload (Mirai)", "value": "1abee764920712ac8da1af1055399ba9985ad449fb6c89470f8dd9e4d0be6719", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728850, "uuid": "8d271693-0efb-4814-b343-b6147dfd916c", "comment": "Malware payload (Mirai)", "value": "38d02d2291d78f93587076a7389f50c9adc90948", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728850, "uuid": "94d57512-cb14-4077-bd63-dc9b2059671a", "comment": "Malware payload (Mirai)", "value": "d31d16614048b7089237a4e4541706c09588b9ae8766995ae8a55b207ccd758678ea8e7ed993db02ac645c44221a5b16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728850, "uuid": "c93aa41f-6a7c-4a21-8b98-b302d42c5300", "value": "T1C3D32A477720CFB1C31996710AB3CB6796E626A217E1A485E76DDD107A7039C2C3FEA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728850, "uuid": "16de76cd-0028-46bf-8dfb-4ffd175c05d2", "value": "1536:AgEUDy8G/Il8KuTYbIPFUDJd8nBnBArfWb7lITk3zf2FYrrvo:AgEUDy//Il6TBgkBirfOlIqzf26fvo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728850, "uuid": "5b1c66e3-7347-4bfd-adde-2bd66aeabc4c", "value": 133148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728850, "uuid": "0659386c-b767-425e-96e1-80092dd43efe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728850, "uuid": "1b6c83dc-e502-457d-aed9-980182b33b5f", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ba993ae-e255-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766751641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751641, "uuid": "45fd62bb-c53d-4517-af8d-037948677bee", "comment": "Malware payload (Mirai)", "value": "88d54773185cafbfb560a00997244e05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751641, "uuid": "53c85c7d-f14a-449a-a513-818a4d4eddeb", "comment": "Malware payload (Mirai)", "value": "1afc00aa3aac8ea47582fc4cbb706995aba650794acb18190be5196678085b4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751641, "uuid": "f3b3a7aa-ac88-4432-a414-84d6550108dd", "comment": "Malware payload (Mirai)", "value": "ffda19618d889db8e0c0cfd21f133102dfe49385", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751641, "uuid": "8ae2ecb4-818a-458a-ac9f-fc80f9c3d30e", "comment": "Malware payload (Mirai)", "value": "6ccbdfc65c934b45b188dc44c2bbd2cbd743ab54b141295ca34cc7afc8f6d41c83ab6d7bee28d11b1d8f266aa92f81aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751641, "uuid": "c2069f97-a66a-4789-ab8d-430b83c938a7", "value": "T18C145DE3FC01DDBEF80FE77688134C09B230B76115525B3662A77A6B9C3A0595933E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751641, "uuid": "288a2d8e-4aa6-4f41-b78b-149bb17e8807", "value": "3072:5uh1YxBqSJYYc3i+ZeIGIyiEuvi7qenp90B+QFjVwjbigL0UBEH7us:IwqMYUmyitvWqeUYQFML0VH7us", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751641, "uuid": "e6da4c9d-783a-4e09-91ea-05cdf15376f8", "value": 191660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751641, "uuid": "c282cb87-d247-49a2-a8ad-89630d632518", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751641, "uuid": "fd76cb3a-fda2-4897-b1ed-3904dafc580f", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddca466b-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772073, "uuid": "74256794-1df4-40e9-bd1e-735921e6c4cf", "comment": "Malware payload (Mirai)", "value": "51d2641befcbfc77674f4d105b246fae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772073, "uuid": "85d41c16-5d4d-4b43-8e6e-66f9982d67aa", "comment": "Malware payload (Mirai)", "value": "1b2a850b66dec68b742a2aaec889298ab5378d6ba39ecdadfb434fca42a07c50", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772073, "uuid": "f64f40a0-7767-4171-88a4-dc78da180e28", "comment": "Malware payload (Mirai)", "value": "ee6406860884ec6374a44f1799504ff3c2e9d283", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772073, "uuid": "0424273a-cc7c-452b-8e7f-bc8f7db8ee7b", "comment": "Malware payload (Mirai)", "value": "35b10f4dc673b3163b74b4e96765f508146c0393636369ceb3291712462953287063626f8193709eec742340710b82c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772073, "uuid": "88872e42-c267-41ce-aede-30c39674b369", "value": "T1BE934A21B97A2E1BC0C4657F21F34735F1B6274A25ACCA1F7DB20D8EBF156502113ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772073, "uuid": "c50f6cd0-d13d-4cfd-b7ae-28cff1179a2c", "value": "1536:ICbIjmSHl7uCgsttmf8KZe/FeNu0juHdjJOoQupyXp/Xe7ciPr8zm7uhC:dkj3gpsM8Ko61b3Z/Xgh8zmN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772073, "uuid": "7735694a-ffaf-44dd-818c-a5cb4974dbd1", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772073, "uuid": "91672052-2388-42a3-993d-80212e54947c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772073, "uuid": "5c4e3aa6-d958-4b46-8ae9-3ed7c107744a", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ce24d0b-e20c-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766720424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720424, "uuid": "ee02c4a7-5bb1-4880-8373-291428d01fe1", "comment": "Malware payload (ValleyRAT)", "value": "b7045e1fd63184488ba0233fa375f928", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720424, "uuid": "664cd9cc-ff84-4efd-b2ca-3955c08fea03", "comment": "Malware payload (ValleyRAT)", "value": "1c3501b4689c6072553f84fd7ea04c655a204f9d960825c09745fcbe38a33cdf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720424, "uuid": "59ab4bb4-4425-4cd8-abfc-f3d4d81599d2", "comment": "Malware payload (ValleyRAT)", "value": "2b9d73aa669ff91775293841710a9a4881ffc05c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720424, "uuid": "49b3e6d9-2e65-44d0-816c-a2f24b56ed9b", "comment": "Malware payload (ValleyRAT)", "value": "9e7f49c88c0f487273123d4fa335eee3ddc63b4f24e6341e839f0f4601a7a96821d0208bc0fd6ef9671d320e0cef9f27", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720424, "uuid": "d16d0981-03cc-4c4a-a630-888618f3fb9a", "value": "T1A7A36A5763E834F8E176823989614A02EBB6F8710671DB6F0364026A1F376D1DE3EF61", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720424, "uuid": "ff932725-1af1-46cb-9324-97d5de30d155", "value": "c439f530c3c3af79d4afcfcfe4cc4e5a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720424, "uuid": "8989c4b6-43db-4f89-b9c6-04398a9a4ddf", "value": "1536:YjAvFB4o1GwBMR2JS6cypv4XAZBTm95JNsW7dc9dltqSw/6Fl:YjAvFrJaR4vfpAQZdu5vU/qLQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766720424, "uuid": "548973c2-f37d-45d6-8fe5-cdf1c199de8e", "value": 107008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766720424, "uuid": "f5c4fc85-98bc-43c2-a04e-413c2ce68695", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720424, "uuid": "65335bad-cb10-482c-a02d-b047ea6ab981", "value": "7f526f51e12c0e66bfb00b2b5132669010db2fc366439.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4884cad1-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779124, "uuid": "459d8e91-579e-45d0-86e4-f8299d4bbf88", "comment": "Malware payload (Mirai)", "value": "cb521536c83d4007fe1ae19c39f8cc5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779124, "uuid": "d314ec2b-9d67-4c0e-8ecf-1aba09976a84", "comment": "Malware payload (Mirai)", "value": "1d62b5adbf8d02c69705ad4e81a544bf08ce9e92d34e6b81d6cb7df27ceb00cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779124, "uuid": "191a13df-7578-41cc-af3f-380108865a82", "comment": "Malware payload (Mirai)", "value": "41495b3d77f7b8ac03b834107e398a75f8eeb8b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779124, "uuid": "b2ce0ce8-858b-4b35-8176-d94d60ffcbfc", "comment": "Malware payload (Mirai)", "value": "ad2059b6f9d2451dbee02dcd4bc61e24a8ba8786f107d01a492f1ff9575cfa266c868372272a26c7ee7eb8fcd008f8ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779124, "uuid": "95ade5f5-95c3-4f5e-8ee9-c324ca39329f", "value": "T1FB933B45FC919A12C6D5137BFB2E228E372663A4E2DE3203DE156F22338659B0D7B741", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779124, "uuid": "f061e1b9-4257-46d0-9721-72de0fe32bfd", "value": "1536:lOV4HFG59DYFVayhw0b8pPRLQ0YeKXffd6bqmv1u:lOV4HO9E/VcpPVQ0+Pk1u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779124, "uuid": "0a66b77e-5116-403f-96d6-2afc3904a94c", "value": 92248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779124, "uuid": "0415eb5b-ebbb-42b7-892f-a34835beba1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779124, "uuid": "42340553-5b0b-4819-a593-72fa9a7b6ed8", "value": "windy.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "649e8b97-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730208, "uuid": "d9fdae79-9de3-4ee5-8ff9-241d33a67608", "comment": "Malware payload (Mirai)", "value": "856be7e6a6b609d3f21b1965bf61caa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730208, "uuid": "b4618fca-927c-4e76-8d56-aa9f51894327", "comment": "Malware payload (Mirai)", "value": "1e39587a24420de89fd4b39ab8d997098a4b1ca76b5685a75725a199f50f7e95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730208, "uuid": "d60467e1-2aff-45c2-ba9f-3ebd568a1eb1", "comment": "Malware payload (Mirai)", "value": "c06f0031f5f932f46815ccf9438e93c86a88a4fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730208, "uuid": "12501e3b-d131-4455-a397-cb6c0dbf0b0b", "comment": "Malware payload (Mirai)", "value": "6ae40fa0bf3efed7397b79fa62bf0b044dfee05df7e1eabe3625c5d78bed9aa8bdb5160eb8f2dfccd51e68179bab2c81", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730208, "uuid": "ea9585c9-514f-4af4-9e4f-17ff63569e1e", "value": "T170833B85E6B2E0F0E18701B00257F3EA4934EA345415CED9EB6A3D70EDB17829D9B72C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730208, "uuid": "8e0cc8c6-5e9a-4ea9-aee6-a41844ed3b7c", "value": "1536:PhIpv93p+se0Iapp3ErQkrf5VP1gh5IY6hzzUMUUr:PhIpV3I0IRQkrBVKIY6ZH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730208, "uuid": "8f97ddf8-5954-4b7f-8875-fd70f03de217", "value": 86716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730208, "uuid": "34174e80-dab6-4fe6-9deb-bbdf385261e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730208, "uuid": "b877c913-f53b-4b0e-8160-55d286d6e6a7", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9aa0d6b-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781891, "uuid": "ea484442-cd01-462d-ac16-4fca229fc22e", "comment": "Malware payload (Mirai)", "value": "a92c0d383e1f354b25ce12a1164824a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781891, "uuid": "3642f39b-d5bd-4f6e-8fa4-d9f4f3b0b13e", "comment": "Malware payload (Mirai)", "value": "1ebbe6d07bc3cf98dc1913d43cf95d6aaf4b9ea3486b66cd9b581b310ff8048a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781891, "uuid": "45f73622-c500-4668-bb8f-425dd2bd524a", "comment": "Malware payload (Mirai)", "value": "9afc1774a8b9136838ebbe51e62c588a7f86843c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781891, "uuid": "1685f920-6854-4a4e-ade5-9f830ee28b53", "comment": "Malware payload (Mirai)", "value": "0da12e3ded3901e8c7fade6ec26e74df774ed6d891f57d9a044fc76a45f66bd8704402a5ddf53bc6037fa36b751ea142", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781891, "uuid": "1c52e023-7d52-4912-82c4-b7ca522851d1", "value": "T1BE83B81E6F324FFDF678863447B74A21A39823D633F18685E2ACD1141F6124D685FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781891, "uuid": "3f893712-f3a3-4ad3-a774-f6bcad403419", "value": "1536:B6Ezi5qsaeCZxYxu6HxyzBUDzyeXatDkXBJR/oo:mqsX3xyt8z9atoJ/oo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781891, "uuid": "e95a91ab-afe2-4025-9eab-ca0e54af908c", "value": 85068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781891, "uuid": "c6c75e15-9e19-420a-9967-1a487d8e895b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781891, "uuid": "899564bc-0ab7-42d8-b06b-8768a55e2a40", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e192b98d-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773368, "uuid": "11cdffaf-1d9d-45e5-a134-307960617343", "comment": "Malware payload (Mirai)", "value": "59344d4e063d483f222779bf48dfcfb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773368, "uuid": "4f295d86-c59e-4c8c-8b4e-3bfea5cb632b", "comment": "Malware payload (Mirai)", "value": "1fa568c8d822c1e0fe092714fcee54dd67991c169c18f113dea284ffcf44e8b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773368, "uuid": "76487a11-b108-478a-bc27-3619fe6bbfc3", "comment": "Malware payload (Mirai)", "value": "d5d183d0d8de90fcbfcf272e6c26315fa2fcbcc5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773368, "uuid": "0edb071b-a841-4178-891b-1133f9957caa", "comment": "Malware payload (Mirai)", "value": "f66bb70b14e36d868483a0f8b97d364a479005ac7c2d49134017250bb21bb84e44e3745d8fd2101fb1905cba448d1be1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773368, "uuid": "74fef6ff-9c44-4733-90eb-c4a4025387ea", "value": "T1BB334B21B9762E17C4D1B9BE21F34729B2F6171E26E8CA5D7C720E9EFF1094021136B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773368, "uuid": "743948c9-e2ff-4c98-9dbf-3b4f19fc8db7", "value": "768:Gxvooq9TzOchYQLEzIeZvKYJvymlRPNu6LY2ApfO+NEz0x0zK2:avRST1hYQAEcvKYJNPNu6LSZNFOzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773368, "uuid": "654f4dc5-6a85-404e-bc9a-7166957bb8eb", "value": 53980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773368, "uuid": "47f6d944-aa65-4481-96c6-73131ea1911f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773368, "uuid": "0c602f4e-af5e-4cb0-ab72-47397cdec756", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f0f4607-e293-11f0-a129-42010a9c0007", "comment": "Malware payload (Amatera)", "timestamp": 1766778410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778410, "uuid": "681656f2-1e09-4715-a4ec-f6ee5e29c5bd", "comment": "Malware payload (Amatera)", "value": "2a32e0b2188674e7b7085a1c18c4ea9c", "object_relation": "md5", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778410, "uuid": "a1810b28-48df-4aa0-8b72-2d4849a2f1a6", "comment": "Malware payload (Amatera)", "value": "20a28e86502819386445ea8a13359429c78e97eb064288f17c1914c2266eb964", "object_relation": "sha256", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778410, "uuid": "a31da357-a4d4-47b1-a4a9-649b49e9998f", "comment": "Malware payload (Amatera)", "value": "c96232612f554172239133e51b51db8589bed5d2", "object_relation": "sha1", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778410, "uuid": "3b12660a-22fc-4b38-99c6-ae964437c9d8", "comment": "Malware payload (Amatera)", "value": "ac28d739e162be7967b864cfcd581d7c942f7523c7dcb8db26776bc2d722ff16fb8d4c858cdd62894fe2c9f764c52934", "object_relation": "sha3-384", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778410, "uuid": "e912c14e-74ae-4782-a5a1-442ff5e5905f", "value": "T1AAB69D03F5A06139F0BB3331A43E97794932BE52AB3589CB67942C8C5FB42D1653A367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778410, "uuid": "845f9cd3-4184-4038-b941-e6af9f486c16", "value": "86c94b49415ec41af9bc34155c313d23", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778410, "uuid": "8c244e5e-ace7-46de-96f3-840ae88cba80", "value": "196608:/HgH8bon5fyNK1GEZ54wSn23h//GrjfKNOFgVN4W07bBfm2iDv27S:/sZ5fyE1Swg23hXwjfKNOFgH4W03Bfmp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778410, "uuid": "66b61641-b913-4191-a1fa-01472fefdc19", "value": 10771312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778410, "uuid": "7c940c5a-03fc-48de-84c6-d169a87c1212", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778410, "uuid": "d9ebdee0-5686-400e-8cd8-92d270f4578c", "value": "Setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26e24a03-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767471, "uuid": "888dd35c-10d9-4e1e-9527-2a3bb50bfea2", "comment": "Malware payload (Mirai)", "value": "2569210a1b3e7421646b6e8a0a3c1d84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767471, "uuid": "69eb4cc2-1d3f-46ad-81d6-c794a3602503", "comment": "Malware payload (Mirai)", "value": "20eb39e7d721a2d2465478850545a82e40a80fac9e4214418c4eaaeb6a24f5b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767471, "uuid": "77ad639a-f635-4bb3-96c9-12340e8fb9d5", "comment": "Malware payload (Mirai)", "value": "214d0ef022ae38c10c791d53a590dd1adf1ed699", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767471, "uuid": "93d16cb1-f56c-454e-b04c-1d91c43b4798", "comment": "Malware payload (Mirai)", "value": "7e879b9440e62be7c05c69dbef32ccb1e11273120d4812851b9517843753782fb63d9359861c4292e47038b75f04a48a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767471, "uuid": "687e35a7-3309-4f55-a478-017face75795", "value": "T1C8F2F16F95B8F88BEFEE98FDA55E16B6090578C0B05E6F5BC200BC48FE15D5B7842084", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767471, "uuid": "765f2909-0855-477f-9b88-d3959cdbc2a6", "value": "768:/J7oi8x83JrFWwODmdVH2KyU2Dzhnouj6DT2ZUWG:/DZrAlK1azhoujs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767471, "uuid": "4f6515b3-05fd-4e63-90bc-a78b8e5b9efb", "value": 36804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767471, "uuid": "1d4951c1-1ddd-42bf-86e5-70979e5d6c13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767471, "uuid": "09b08db1-3c10-45b7-9c6a-7fb89ded9542", "value": "pmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aec468bc-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712723, "uuid": "baeac166-effd-498a-9195-0b6652e0444e", "comment": "Malware payload (Mirai)", "value": "9bb5300982e426c8d2eb9f467775dad1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712723, "uuid": "e4eb4178-b0ea-475d-b70c-261fd92e9ee7", "comment": "Malware payload (Mirai)", "value": "213649bb5dd2881914e5d5bc5373f499d3547c50030839356e10c6ec57e1dcb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712723, "uuid": "f972cf23-e63e-4cbb-a505-c46a0ca3f524", "comment": "Malware payload (Mirai)", "value": "c164d7e9ce53c3b48a1043b3539378d0ba58ecf4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712723, "uuid": "93262afd-6354-498e-a5b7-5b3b5064f6b9", "comment": "Malware payload (Mirai)", "value": "d6580b1bf76ae74725ae5ae1ae765f3d0fa3da47b875f32735612b1aa1e7d5f48ce3cdf07813a779f3fcaa096732e1d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712723, "uuid": "ff81eade-2212-42b3-b8ad-90db6d3e8a07", "value": "T13C53F132D18D0BD6D7B6127A2DEB9A092C40CD5E3DB4817678E1077612096B17FAB3CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712723, "uuid": "8f7b36d5-a3f9-4867-811b-21d68e95717a", "value": "1536:KGaa+7kv7aXZ75Z/8Ae17KDV/DQteY6mm1EoQrkkVt1B62hCjda/nouy8tyU:KeukW7PUhWDq3H6462hCYout9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712723, "uuid": "8feae00d-57bd-4f70-b41c-407416b7b135", "value": 65292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712723, "uuid": "008460cf-2252-4eef-b6f5-744d4dc8d4d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712723, "uuid": "a9d52356-052c-4e2f-9524-437e87aff5b5", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d374497-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779185, "uuid": "e1e572cb-ad8c-4885-bd90-f8e7196e50e9", "comment": "Malware payload (Mirai)", "value": "2b80f2de570db245e69e207baa59ff86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779185, "uuid": "ff362d03-40ed-4b7c-bf0e-3d56b6654e2a", "comment": "Malware payload (Mirai)", "value": "2186d30e75c4768eb064d5c115dfe7e1fcf39d86252add1e1ed6d735511091a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779185, "uuid": "583d97bb-1669-47ce-894b-c1f260bc6426", "comment": "Malware payload (Mirai)", "value": "314c4c577d5bdc10016675489c02213cea693938", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779185, "uuid": "df004ad5-e429-47fe-80b8-fdc46419a7fb", "comment": "Malware payload (Mirai)", "value": "e7d13f1617d0662551b9c4808369b2cab1744ef7ab2ec3f820e401cf72581f8f880a6eb6f9e6edd6b559e3f509fa44bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779185, "uuid": "a6a7781a-bd91-478c-9269-8cec6994872f", "value": "T18F736CC9E983D4F6EC130A350136BB379AB3E53E2169DB83C3A9A525DC125C2DA1735C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779185, "uuid": "d6b13577-82ab-4154-8629-9089f144c0e2", "value": "1536:Dbsv6Xewv1Ssos1LNxVZW9Z3J8h3qaccSXx:DbsiJ4sokLNx+9zs3mx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779185, "uuid": "d4a1aa89-7d81-4f5e-a2c7-735e1cab6def", "value": 79444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779185, "uuid": "f6dbed2e-e153-4c38-ab05-f57affec47bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779185, "uuid": "ac5cf290-5e85-43b7-812b-6ed090aaca06", "value": "windy.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc9b1bec-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747133, "uuid": "3d02b9aa-b8b9-4da9-acde-bff1cfbc1a51", "comment": "Malware payload", "value": "4605f412295a2e69ba3195e5c66ca125", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747133, "uuid": "3dc17369-bbff-4ec0-b7c1-29343d7c010e", "comment": "Malware payload", "value": "21a24cba3b7efc3340bbbc838084559b92f9fe19681f213dfc33da4efd6c0978", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747133, "uuid": "ffb2d434-0f98-4546-84e4-5b8f9a552010", "comment": "Malware payload", "value": "aedc2cbdf6151dfbd2a91b1325bdc3f2ba8d659f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747133, "uuid": "d5f341ca-ff5d-4398-9211-710f0a9953f0", "comment": "Malware payload", "value": "d6b497ca81fedd499a897f014491b3cb2b41401ff92d163e2b69bbdd4fce7e1e3d01776a632351829ae6a403a494e1c6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747133, "uuid": "1cf80651-e68b-4c3a-9818-f44292bf0272", "value": "T12E734CC95705FB939DE7EF54805B812B8B96F405888002ED7AC525EC0F9EB937F70A26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747133, "uuid": "250ec885-77ad-4625-8dd6-641f3c78ef25", "value": "1536:I9l/AoSSMXpPftJUerk3bWT4zKi1fVlexUJxNmSbrix9b1Yw7YG+vA9/E/Id/5Nk:I9l/5MsqusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747133, "uuid": "1afd0a2a-a06d-492e-b512-087f4cadaf7d", "value": 73440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747133, "uuid": "23902598-ac45-4497-92a4-1aaf2f695b86", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747133, "uuid": "13b59a43-81f0-4945-8d23-965e47da3e01", "value": "invoice-1645080830.pdf (96).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75ded04e-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773187, "uuid": "f54082a3-395b-46eb-aa6d-78d76b219431", "comment": "Malware payload (Mirai)", "value": "3162942c1d3c0f31b43cc2ba60571162", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773187, "uuid": "b60f44f6-a447-435e-ad98-aceca5e664de", "comment": "Malware payload (Mirai)", "value": "21db81f0af0587fc072e6d36fcf2bae3d26788c024a6abf77fdabba3434948da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773187, "uuid": "96bbf025-dd4c-4bb4-be0e-aa1dd29ca74a", "comment": "Malware payload (Mirai)", "value": "9a09d478a8d1eb7262027ddabce1ae6b9f547028", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773187, "uuid": "20ccdce4-2c51-4758-a299-44323106fac3", "comment": "Malware payload (Mirai)", "value": "0297305ba7589ae728df5ba58693daa65102bb852e6a98358783b851145e5af4c9141ccd373bd40f64fa203fe811742c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773187, "uuid": "60d80c02-80fc-4322-8511-37e9679cfc5c", "value": "T109435CC9CA83D8B6EC58197118ABB7729BF3E53510F4DF82E7949532B81E112B14B39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773187, "uuid": "620af76b-ad69-4d59-9c70-321507abdfcf", "value": "768:X+l+1Fw4z9b7RJdJysHfkwJFPVbK66AWHYxk3XzxFF3UqucxJ49sR9+fFHXRR:XUew4z9b7Os/Z7b63Xt4qucxiSKHXRR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773187, "uuid": "1af1f5a4-d5f0-4d3b-8612-ff5653ba781c", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773187, "uuid": "af24556f-eee6-430a-97dc-1357aae7db0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773187, "uuid": "b9619d0f-317b-49ef-afe3-30129d4aff60", "value": "nabx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87cfb10a-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777083, "uuid": "9c3e2ab3-1a56-4e2f-b9c3-14aeb2b184a2", "comment": "Malware payload (Mirai)", "value": "7ed72d3e61d29e595d6b9852cb6585e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777083, "uuid": "d8bd4ea5-8264-432c-91b0-92cd3acc05ba", "comment": "Malware payload (Mirai)", "value": "22967cbcd0bb6899f2593cd9400ca0181033b5469653ac7f1d3ec540a3f30571", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777083, "uuid": "a4113352-d8b6-4705-b807-6785f76cda73", "comment": "Malware payload (Mirai)", "value": "1af50be8f137ee294999d6155cbfc2820b51088f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777083, "uuid": "24994de7-5bfe-4fa3-8bdb-31b7bf9014db", "comment": "Malware payload (Mirai)", "value": "2c4d3e8707955a174147cffe73e7ec71e3f225bd0d54be8923b6a7552df13887a6cc2321f4d8ccf9c2fe8debbe0a0c9c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777083, "uuid": "d54622fb-f6c1-4a20-81fa-25e8c75bcc51", "value": "T1E563023080C48FC5F6A5B27DA5F97C6327B06A539001D7F2DAD41018AA71F5C8BAE7D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777083, "uuid": "3e57b17a-d2f3-4cdd-bd43-78c3ddc1697c", "value": "1536:/DtuAB8LpzsZFCrm4G+njfKnZ+eVfXaMt8lKyeaaH5nouy8Gy9:7t5B6pzIFCrm8SZ+C4Kyb8poutZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777083, "uuid": "2063a308-b89c-486a-a5b6-07bc219651a6", "value": 68012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777083, "uuid": "79a10398-163f-4322-b4c0-9964fa45002a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777083, "uuid": "fb28f558-f012-478d-9d2b-b8aa253de587", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e7fa32-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747464, "uuid": "c658fb7e-836f-4724-bea5-ad148e5c46fa", "comment": "Malware payload", "value": "77d112934ff37904e3f39c890f097e89", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747464, "uuid": "e6e71678-1185-47c6-9c69-50699bb846a5", "comment": "Malware payload", "value": "22f6e5e8e1d5ff7ef057505ab1ca2f86d2e50031bf26ccb2bb7075c284b43f57", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747464, "uuid": "2db623b9-b26e-4f0a-b745-0b5755715462", "comment": "Malware payload", "value": "1d3b417ff60f14eafda91590e0611dabe963fc8d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747464, "uuid": "1283d4b6-9744-4f64-8b88-d55ab759a1c0", "comment": "Malware payload", "value": "14791019efbd06b52e5fa487bb622ec2ddde7225115518d6df02841dafabca84cf8e005202a4cc0bc9e5c262404fe635", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747464, "uuid": "bc1777b8-747c-4b31-8e1d-c7a92433cca0", "value": "T199635CCA602D073E08914DE4DF69D8987B341392FFD22386D35275B6662CF091B19E9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747464, "uuid": "e02f18f8-b477-436a-a453-074a0ebfb203", "value": "768:I8w/h62/jWs6oS+xISN0vADUHDU3DUN/DU5/DU0DUCDU1DUuDUtDUDDUKDUADU6I:I9l/AoSSMeausrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747464, "uuid": "d3e631f2-6589-4ec3-acf7-ac211d1f1678", "value": 70655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747464, "uuid": "68ee686b-c492-4c78-8466-6b1ef298a50c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747464, "uuid": "5acc2906-4dbd-40af-a6d2-ae497353c6d8", "value": "invoice-1645080830.pdf (29).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b1f08da-e292-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766777974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777974, "uuid": "5a09595d-e19b-4917-a74a-121135be1341", "comment": "Malware payload", "value": "c31650a627635ee0fee3745cc9b1f7aa", "object_relation": "md5", "Tag": [ { "name": "Efimer", "colour": "#7835F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777974, "uuid": "4066c791-257e-47ba-b74b-675915127874", "comment": "Malware payload", "value": "23543659d2b59773b690050008b34c655d028ad78e37ec0e78a9ff2f21b98da8", "object_relation": "sha256", "Tag": [ { "name": "Efimer", "colour": "#7835F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777974, "uuid": "6d355de0-bd51-4732-b335-f87621fdfe00", "comment": "Malware payload", "value": "f5ad35f528448454fba8e19f402dd1549f07c452", "object_relation": "sha1", "Tag": [ { "name": "Efimer", "colour": "#7835F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777974, "uuid": "9a15290f-5531-435a-9a08-7db27b309544", "comment": "Malware payload", "value": "a334beac9cf6ae12f114b4a871190c9f15d6c1495c72935f6be6d6ab83c739d1d05fb5f1b1405958f5ec23cb6d23cf7b", "object_relation": "sha3-384", "Tag": [ { "name": "Efimer", "colour": "#7835F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777974, "uuid": "981ec6fc-1d66-4a9a-8118-87f67e2acb64", "value": "T1BED6335856E052FAF9F3907CAEF162A4F9A4B4760335D9DB8FF482619E072D00D3921B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777974, "uuid": "434b8969-9360-46db-aa21-dd93431d36fb", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777974, "uuid": "84dd3581-47fe-4ec3-81d4-527386466d18", "value": "393216:6eVLl7c5ZGeTaoa5XMCHWUjOcuI3/PjuUw:6eVKPGY+XMb8jH/rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777974, "uuid": "f7d97319-4615-4a34-9d16-0d25053b8732", "value": 12613134, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777974, "uuid": "4ab308b5-907c-417a-bf6f-b345a24d3f98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777974, "uuid": "e0eb1e4f-3ff8-4175-9f13-47876d1cb72d", "value": "zinfoz.dat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7741b220-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777914, "uuid": "1bd6e08e-0117-443c-aaae-03a66c095820", "comment": "Malware payload (Mirai)", "value": "f93ff6ba3ceb32beb4da8b84987768a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777914, "uuid": "e5e37548-74d6-4deb-bb9d-d6f56a335d5b", "comment": "Malware payload (Mirai)", "value": "236a60911cd762ed794931981eff1a41c182c5464e703ae23104648f46a3bba5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777914, "uuid": "fe63bb77-ba8b-47d7-852b-a6727619fbc4", "comment": "Malware payload (Mirai)", "value": "a95fac35efedeeeaf331bbd2ca751a5ea5c670df", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777914, "uuid": "b680d56a-fd30-47bc-a437-8b0f24a45c69", "comment": "Malware payload (Mirai)", "value": "ae5b37af8c4b435ff2cc31b22939b6f1dd66ddb81ca3f585734e5a470f5ff83733d3209af5b2f1e5afd5073ae50be66c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777914, "uuid": "dfc00971-c94b-495d-b3a9-844fdc819e20", "value": "T1F4335B43321C0A57C4A61BB4293F17E083FFAEA121E0B685650F9B6A45B5E371486FED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777914, "uuid": "c755893e-f961-4edd-9ab9-1f75e81cc6f0", "value": "768:IYUAmdFpUZORHSQ3fS3yacglSdRhItWQ1HVWCujO9Sv+sSrDPTC:yFOMFUyacZRzQzW49SvvkTC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777914, "uuid": "7e2fcb13-84ed-40d5-a9b3-800fd67659e7", "value": 50460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777914, "uuid": "70c94d87-ec78-4c99-ac1d-2fe6d0104d4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777914, "uuid": "2a4db0e7-e49b-4d79-97ee-ee021decd00f", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "188bc52d-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792787, "uuid": "063feb0b-052c-4918-a68d-4ecec7f6bc1e", "comment": "Malware payload (Mirai)", "value": "6eff965edae143deaea0c103221d4023", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792787, "uuid": "d928d743-2a6f-4785-ab2c-7c4945f8dba1", "comment": "Malware payload (Mirai)", "value": "23c9d0f1aa34ddddf85cd862579549f858918775cd67c7d2e017e947cd7ff0e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792787, "uuid": "549cd7e1-7738-4cb0-b0d0-1e6cbe9b60b5", "comment": "Malware payload (Mirai)", "value": "1cf2da654a3d9e9df1de13d153d3b53d0a3d0be5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792787, "uuid": "29ba3f54-163b-47ec-a656-1ec03b8d9eb7", "comment": "Malware payload (Mirai)", "value": "6d69a86d2cd33cc95d9f61659fb42314f90eadeb7f541780553cf00ccc7e1e3273ee900a323e37cb5815b84369b2b88d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792787, "uuid": "0f7b065a-4ee4-449f-bdf8-1e5db4c68ca8", "value": "T1D1142946ED428E01D4D622FAFAAF414833536BB9E3FA7102DE245F6023C699F0F76552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792787, "uuid": "f8c4dc8c-efcc-4204-acfa-88cc5a9d4aa8", "value": "3072:pXb1FdkanwWREHKVAbW58fyitdfKNwODuxEHK1gUAuA0ciSMx5bcd4QPaRQXyJ/R:pXbbiawWREHKVAbW58fyedfKNwODuxEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792787, "uuid": "e40c6967-f3d3-4c3b-8bb3-4295fe53da66", "value": 191144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792787, "uuid": "0aca7e4f-5315-48ca-a87e-29d99b79963f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792787, "uuid": "c4922904-b4e6-4a80-b764-60e5bb8b3fd8", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9cd15bb-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778884, "uuid": "9d0ebe2b-dc8d-4b77-8582-a0c70a93f74d", "comment": "Malware payload (Mirai)", "value": "0b184a46733be91cf2edf63418ef7d1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778884, "uuid": "b35000fd-aaf5-4ae4-a915-0bde5a15d1ea", "comment": "Malware payload (Mirai)", "value": "240b16ebd1db8e2a39cae6cdc8c8fbff1231375e03f876653880b803dbecd240", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778884, "uuid": "ac6cec52-377e-4dfd-8408-17d33bf8cd32", "comment": "Malware payload (Mirai)", "value": "88721c45732cb08f09d65e3b1a42643289b719fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778884, "uuid": "8fcb7ef9-c014-4ed4-8b53-0c9aceee1259", "comment": "Malware payload (Mirai)", "value": "149fe581b4f793dd21396c42cb7d5bbec8efd3cc81744b3bad3fd535330f89e1241f8d5d3bda613ccb85ee90843ecdf2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778884, "uuid": "5ca415ed-ccf9-4405-a185-196fc02373f0", "value": "T184132986FCC24A3FC2C013B9A66E5A4E3761E3E4D2CB76079E54577136C620F1D6AD84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778884, "uuid": "d81c6083-d3c6-47d4-b846-b131d2446421", "value": "768:XG2/l2Q2SsD3pDi9ZbyE2hk4G+6ZQ+QVgOJUCmJdtBNCwIoOM:X3+SsDUJn2hPq8VgOdGP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778884, "uuid": "6eec4c44-b755-41d5-a3a0-4a03bd048015", "value": 42788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778884, "uuid": "0e9d38f5-5cf2-4dbd-a41d-9b18d510cf8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778884, "uuid": "e2e528b4-686d-4d34-bd1f-49cb603ed2d3", "value": "Space.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b2f6f1e-e236-11f0-a129-42010a9c0007", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1766738246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738246, "uuid": "dee9989a-5b14-4b1c-b973-90aa6a269dc0", "comment": "Malware payload (Socks5Systemz)", "value": "0409c9a110aa5d2456fdf1325c52ab11", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "BBX.file", "colour": "#3DAEE9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738246, "uuid": "7c59c63a-c86f-4ffd-9671-2557a1208150", "comment": "Malware payload (Socks5Systemz)", "value": "2458ef8c7220703efe2604fdc123b79c8690898e76f5b8f804b9e92c2e2e9451", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "BBX.file", "colour": "#3DAEE9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738246, "uuid": "fc0f1fc3-3d89-496f-b5ea-2e3d1ecf3cfb", "comment": "Malware payload (Socks5Systemz)", "value": "06c46de8b1bfda1e2b44406366ec5fa6c936ee21", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "BBX.file", "colour": "#3DAEE9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738246, "uuid": "02cf250b-6576-4695-a07f-3193c48286c4", "comment": "Malware payload (Socks5Systemz)", "value": "d10d2eb12320c65ca6dce2fc0b478206c0c5c7bd99fcdcb034208efffff343da49154779de7ced16e8c9697e23555754", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "BBX.file", "colour": "#3DAEE9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738246, "uuid": "e022d74b-207c-41fc-bc53-ba2983cc09eb", "value": "T18FF533191A3518F6F3A2A5BB9D76013A8673FD1448306D79B5DE4FCFA637241808AF23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738246, "uuid": "9258b2f7-fbbd-4360-bc42-f52e7e3bc09c", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738246, "uuid": "c52cb9d6-80b5-418b-b9f3-9cf0284e57ec", "value": "98304:MlOkIKDLdtCe/KpVgvX6e842V3CHXlBoEeZH6mY8mKcdVjS:/kICLdtCxuvX6E2V3WB6JHY3Kcu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766738246, "uuid": "c0b7cd21-5675-4a7a-81b9-2d7cb00bd429", "value": 3564142, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766738246, "uuid": "85bef39b-e877-4c92-ad21-8a81f5fc56c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738246, "uuid": "c710e022-c13e-417f-bf56-2bb4c127484c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d538e21-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747403, "uuid": "e3b8466a-a67d-4919-abd4-6b83a7d55224", "comment": "Malware payload", "value": "0e5fc318929dfee9c1bc1433380c2251", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747403, "uuid": "e412d8a6-664d-4999-8b31-6b27a2056985", "comment": "Malware payload", "value": "25456cfd4748cb115f8f82e7761df9e25f94a707461eb6bf189ea3a5036a065c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747403, "uuid": "7ab41d48-27d8-464d-9cac-fff02e528a0f", "comment": "Malware payload", "value": "6cb742933a7c7e61c48a67e6c502ce357f3bcd3a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747403, "uuid": "da27523e-20a4-4b13-928f-d4b14b2f51a9", "comment": "Malware payload", "value": "a4f6638e35ba76e1e34b0c69489e01de2562ae8d169410a24005814d3cda744c6b2b8eeeb0e466cf76892370729a2ebe", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747403, "uuid": "51f52ce1-fb4c-47ed-8cd2-546d54c934de", "value": "T121730BCA5F05AC4DF1B63A16FE6E4D443D4A9BFC480D206CACA7AD55E10224B3BA31D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747403, "uuid": "cf0050a5-d5e0-4444-9a7f-6504c0072d85", "value": "768:I8w/h62/jWs6oS+xISN0v/6ESZrzsfB90fgtqPsWH+zL6WUssJic+oi+0A9nA8Dn:I9l/AoSSMakusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747403, "uuid": "d1017091-3b41-414a-867b-3a6e48440b86", "value": 73489, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747403, "uuid": "a0246f56-3796-4eaf-8bf8-8fcb9d8b4e88", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747403, "uuid": "c4025db3-055d-415b-965c-42052e1bf54d", "value": "invoice-1645080830.pdf (35).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ed698b8-e298-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766780557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780557, "uuid": "6e7f144e-6843-4cc9-b342-602006021cd8", "comment": "Malware payload (Stealc)", "value": "92992ba222c052e96af7eb1c365917cb", "object_relation": "md5", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780557, "uuid": "91e0222d-5022-4d5b-9327-7657e1e37571", "comment": "Malware payload (Stealc)", "value": "25898b0dc0f534749343909080cfad7f06c342474901652a3598deaf913c4435", "object_relation": "sha256", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780557, "uuid": "c3967438-cf5a-4592-8a59-49b2c058aa33", "comment": "Malware payload (Stealc)", "value": "c9cd38ee6bda9b1b90349e71899b867b135d803e", "object_relation": "sha1", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780557, "uuid": "fe250b01-dc59-410a-a695-fcbe8ed3f5d8", "comment": "Malware payload (Stealc)", "value": "aabd157440dd81cdb1982e634ccf8f4963c2dd950346c63de0cb8e9dac4bd876f938e317129dad33fcf895b263bd88e6", "object_relation": "sha3-384", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780557, "uuid": "3da51c35-a14b-4e29-b895-ff2dd075529a", "value": "T160C61992FE441319DB9BE27AD5B1A2953230B048033519D7FAE846A54D1FAC8173FB2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780557, "uuid": "efb06ac5-da66-4300-a74d-e63e5c27cb38", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780557, "uuid": "6f3a71bd-0726-4b8e-bf47-22e648701b43", "value": "49152:Cf10+/wrb/TWvO90dL3BmAFd4A64nsfJqCQDvpBhrlOlAjBEcfpFEs8EJFJe7Onz:Cf+A7bLgA8xnpsLofT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780557, "uuid": "2da13843-70c9-467a-8061-f14e2f8ebfa5", "value": 12523008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780557, "uuid": "e4b02767-4c24-41cf-a015-6622c5f1e22d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780557, "uuid": "3a7351bf-9627-4419-b927-f2500c9cbed6", "value": "cx-programmer 9.1 free download full.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5478a2f7-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747361, "uuid": "d3b826f3-3c78-4a83-a223-c5c74411819b", "comment": "Malware payload", "value": "4c6e011d0769ec442b356b2c32d50676", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747361, "uuid": "74488a1b-8a51-4034-ae4b-163fd7f06b3e", "comment": "Malware payload", "value": "258f120aae92a747eb8c36dbed82bfa100e8f9941778c9ce69bd5f532685fa92", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747361, "uuid": "866c6584-9588-4e14-ba2c-ddef7f56b8d1", "comment": "Malware payload", "value": "918a428b9250155738c1308a9f5f37fbef14942c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747361, "uuid": "00190492-57d5-4ec6-a0de-c895df523c01", "comment": "Malware payload", "value": "c4b5fc5a2dcc06c06166a053adf54c904a224b0ca93b74dfb7631bed5a1c1dbe722315e8ab1f3620f3108d37de7a50b3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747361, "uuid": "c4cb14f5-2b7f-401c-b9e2-074f3d1a0dbb", "value": "T11A632B178D40A94AF9E4AC6C26C9864934EACB43136C636DAAC05F701909776CF3FED7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747361, "uuid": "6cc6f176-6a7b-426e-ae3e-e8707865eb80", "value": "768:I8w/h62/jWs6oS+xISN0v5lZKmpadkfScBYrwz2y8kTAlGB:I9l/AoSSM0JusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747361, "uuid": "5dcc9bb0-bcbf-4f65-84ba-a73d575d52f7", "value": 72511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747361, "uuid": "b19b3e89-9df2-4e32-9673-3e411e47e77d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747361, "uuid": "62fa0e23-93ce-4a3c-a6e2-f60fba7557bd", "value": "invoice-1645080830.pdf (46).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce1cd191-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747565, "uuid": "9fc8224d-dbd7-43cb-aec4-3657ed352f99", "comment": "Malware payload", "value": "cb6e0eaaf48761d09abe2ba530bcb740", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747565, "uuid": "4e7eba0d-4232-4643-9c91-53ff0f0964df", "comment": "Malware payload", "value": "267e954f406180d4d58ebaaf9a716bbe9f8143a88c8debe0cdecab976051c91e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747565, "uuid": "b7149a31-01d1-4321-bb01-438368ff9c5d", "comment": "Malware payload", "value": "079c71ee33eb3f1724451aec611db5ee9906cdfc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747565, "uuid": "c827eb6f-fa66-4c8a-89db-aa0672591e9c", "comment": "Malware payload", "value": "bfdee514d3ce9ed2ed3c0a7e6fd8a2cc588293de13934af986737d6288cd8f7c6fbc3345ad2fc03be789191a211dac25", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747565, "uuid": "aea35cd9-78e6-4e40-9241-0371b5ddc3cf", "value": "T14C632B843E6B87F597D88F1B8C8740D32B90BA35D0D8F2A7BB258562F345BD121E605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747565, "uuid": "2299052f-3f45-4b2d-addf-09b9eac59495", "value": "1536:I9l/AoSSMGIGWH0ngF26jhxNPEGtiwUSgvOS/kfukQ3Hgan15WVHuEsq6h4XF2ux:I9l/5M89usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747565, "uuid": "bd01cbca-6579-4c5b-8ba1-d15045bf8230", "value": 70655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747565, "uuid": "8512901a-cc58-4d14-b3c0-7c845d26cb69", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747565, "uuid": "ec425173-0c2d-432e-a6ed-a2a00e3e42b8", "value": "invoice-1645080830.pdf (4).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a865cf4-e29e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766782966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782966, "uuid": "8b99e247-51fd-4fd8-a76e-fdf1184881a7", "comment": "Malware payload (Mirai)", "value": "1d7a9a71b9cfc2aaa430e1d88abfe047", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782966, "uuid": "c136dc8e-06c1-4f3f-9d63-07c15eb91526", "comment": "Malware payload (Mirai)", "value": "2709e60c4129b273f4028e739cc57f3b3264a5a996d7fd394805b3acad2b567e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782966, "uuid": "a6452cf4-8c94-4051-ac40-9e08ccd28e30", "comment": "Malware payload (Mirai)", "value": "8eb74e72468859bb3b60a4a770b4a2e346338236", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782966, "uuid": "62051865-e013-44b6-9aaf-5918165a1042", "comment": "Malware payload (Mirai)", "value": "05d08da46fda6a625b453c0b5d3fbde105637ac1e9beb38156955fb16e5851c6e44c2ec8c70a3916722003649837dbfd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782966, "uuid": "2a839d15-0936-490d-a2d4-17b26132819a", "value": "T124835D4273184A53D96749B0293F27E193FF995020F0B7CA750EAB9A8276E37144AFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782966, "uuid": "1b44b2d2-cf03-42c1-b923-b38772c55e30", "value": "1536:h7sjQ60BiRbJVOQFcWeBG8W/ysn5rwRhlJITAbVRU:22BiBLFcWeUUs5IaTA8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782966, "uuid": "c074c42e-f9ab-40fc-bfb2-76d655ce5b62", "value": 83236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782966, "uuid": "759c28f6-75bc-4a92-9a60-0e6e9d672549", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782966, "uuid": "724674dc-7c23-479c-9fe4-624a3dd34e93", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2c5084-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781870, "uuid": "efc85fc1-245f-45c8-80b1-ad5e941aaf8b", "comment": "Malware payload (Mirai)", "value": "378779994f1c79370aa87dadde86a517", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781870, "uuid": "7332f3f0-0626-4733-9a0a-d64f657e976b", "comment": "Malware payload (Mirai)", "value": "27611b6268e6fd5e023d789f7f9ed42b3869d009a8229e0c4bf62bd7d48bea28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781870, "uuid": "a40da6b7-0639-46c8-85d6-9911fd2f0f65", "comment": "Malware payload (Mirai)", "value": "6a2d22f9c5b5cbb1eaa1ba350c3059adf6981e06", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781870, "uuid": "76aae53d-2a57-4109-a0d1-246352d79ade", "comment": "Malware payload (Mirai)", "value": "745da39b12a539534dbb799f982d2ce5caa30afcbe15d373ecc24a526922e4625fd84cff0830c0d7a26951b73187ca99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781870, "uuid": "d2f28ea1-53e4-4a84-b5e4-9eb9c03dfcce", "value": "T16F334C82F647C5F5C85349716077A77E8B31D92A8021D3A7EB58AD33ED2BD0252273AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781870, "uuid": "03c06a92-596b-494d-8f36-c18cdec97509", "value": "768:EOsaaJQnTjHvea9WJTBhq4ZpqN0+TAnFCLGF/qpMDOwaHowEaOCt9YuVLnG5dJI7:EOfaiHH9WVqrN0+ZLULhrmf5nmdJ9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781870, "uuid": "412ad5c6-bd4e-491d-b249-edcc2b29443f", "value": 54628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781870, "uuid": "56a7b5d3-bbe3-44a8-b656-14ac5c402dcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781870, "uuid": "da6dec4b-8790-4c9c-ab64-77b58b5a19cd", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a59248b2-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707983, "uuid": "906d1b4c-fd49-441a-99cb-b1eea3b2fe25", "comment": "Malware payload (Mirai)", "value": "ff3122f7ef04da29bb00ddcee659910c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707983, "uuid": "e1f6400c-cbae-4e27-8367-4f0bcdb3a20e", "comment": "Malware payload (Mirai)", "value": "276dbffc150989683d8fb4ef4572025eeb8396cd4b4fa222c19932ea666d1ed9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707983, "uuid": "69220418-f909-4bb0-ac51-b0431637156e", "comment": "Malware payload (Mirai)", "value": "180277315601ce311e5db65bd838c0273dd5feb4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707983, "uuid": "675ef572-efe4-4a34-aa0f-c45c4cbbe2be", "comment": "Malware payload (Mirai)", "value": "75c0c53c79fba4d04a48df165ee41237028d72d7b86f468eb53ecb0d5e7a4323ff1c2b3738f4f7049709bf663f316d47", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707983, "uuid": "70f07bfd-dad9-49eb-b48f-f4d1f119a8e5", "value": "T17373F649FC815B25C4E522BEFA1E118D336757B8E3EF7112DD101B15B78A92B0E77A02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707983, "uuid": "83051e52-b41e-49d2-9c4d-cb34ae880ed4", "value": "1536:yBnm0dQ7gqOqynPoyJi66dl8m89t/ZH37JIlj2yg89p69lUbiWnwY1W9cTG:nbO9hH37JIlj2yg8TTnL1KcTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707983, "uuid": "7e424567-3402-4250-99c8-5977297785c6", "value": 73984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707983, "uuid": "0d7d9ccb-9dde-4cfd-b192-83db33f86467", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707983, "uuid": "4d57dbe0-9496-4dbe-aace-b7081c54b3fd", "value": "zerarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "286ff2c2-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729248, "uuid": "e315d385-da8e-4574-b1cf-b00ab200392e", "comment": "Malware payload (Mirai)", "value": "b40d5fe392cbdedffaf2820c7fc636b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729248, "uuid": "4c67035f-9b10-44e2-8526-fe8ab7443c44", "comment": "Malware payload (Mirai)", "value": "28431f20f4d2f4b0bfb1b53074dc294bfaf51a06837ce2d6413128965de6cec6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729248, "uuid": "13220ef8-e40b-4dd5-a08e-2be0f2c75f96", "comment": "Malware payload (Mirai)", "value": "6ffc92db77c515edac60cba632ea629745eceb3e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729248, "uuid": "9aed7bad-f869-4a52-a256-fc2fe9a51957", "comment": "Malware payload (Mirai)", "value": "f3e5e0f11ea253227861300d184d8c271a052401942de2765ccbe99fafd71e73bb7c2dc1d4735a7306761a1a14915514", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729248, "uuid": "a36184f3-cfd3-42bd-9e01-c535e203d41e", "value": "T167145B07B5C080FEC499C1B84BFFB53AD972B45E1238B29B6794AF222E4DE701B2D545", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729248, "uuid": "34fb3fc1-a6ad-4ade-8c33-192e21d0120b", "value": "6144:45Ii/z1d/kqkPZwYYWjYQcUSk/Al5ZhBBBBBBBBBBBBBBBBBcBBBBBBBJBBBOBBS:Ua7ZjYc/Aln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729248, "uuid": "3a6b5159-5d4b-4be7-9195-21905aa9c414", "value": 209352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729248, "uuid": "d1906346-4fd9-496d-a349-1aa6050cd987", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729248, "uuid": "a711bc70-0ca4-4a48-be0f-87b2c0c63f8b", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "421f2cd2-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747330, "uuid": "eaa9f0b1-7ca7-4409-88a6-7a32e8b0d042", "comment": "Malware payload", "value": "ee737036ab6dc1de86d824dba519b64a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747330, "uuid": "8908d2f7-d678-4544-94e3-d6a0916e3112", "comment": "Malware payload", "value": "2858d0317145582b9076ad24bf49c1d0a7cdc4b80175c01f78bc2105d8b63035", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747330, "uuid": "5afc4d95-6e86-456d-9165-5da8ec478bee", "comment": "Malware payload", "value": "8cba946d8b1cbe02a938cb4125d2d576fd8104b7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747330, "uuid": "a54343f4-a8d2-4298-8dbe-16987715cf88", "comment": "Malware payload", "value": "cf8305faa4e92d5cd296fa17c515918ca945af1bb0e80787d40fcbda4c69a4d6996bc391b21e02bfaebc1ad28c7ec15d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747330, "uuid": "2015deb8-2b38-4dd2-b47b-0fdcb4802ade", "value": "T127631BA13A6AE43B694E9620B47D5453CCBBE429206ADB3F359FFE7E06405CCC48B354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747330, "uuid": "bdf43dfe-88f9-49a8-acd6-bcb88dc18a67", "value": "1536:I9l/AoSSML939t9z909Y9q9z9O9U9H9U9d989z9J1v9B9T9z9c9H9p9L909A9k9c:I9l/5MhN3ZYcKZO4d4nwZJ/L5ZQdDhY0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747330, "uuid": "439e3eac-209e-472b-8f60-892c88702697", "value": 69670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747330, "uuid": "02f2bbcb-4d74-4ba3-98d3-337f29221e67", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747330, "uuid": "5e6305f3-3733-4abb-a6f8-1f87fa0f1646", "value": "invoice-1645080830.pdf (50).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8b08104-e26d-11f0-a129-42010a9c0007", "comment": "Malware payload (DonutLoader)", "timestamp": 1766762105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762105, "uuid": "1437d9af-a63d-4ef1-8b71-79f4fc6302d2", "comment": "Malware payload (DonutLoader)", "value": "a0f9ffbea06b816d4d78376c8473ec5f", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#6BBEA4", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762105, "uuid": "29b51f44-4b2a-42c8-b802-078242afe018", "comment": "Malware payload (DonutLoader)", "value": "28e2f585285a6090985d0f2e997aa47536235180c35dbcaceb21c30873ca6618", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#6BBEA4", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762105, "uuid": "c3bb4c29-b651-4d3c-acec-c3d856bbb0d6", "comment": "Malware payload (DonutLoader)", "value": "6100cdb186cb4c6a9e7139b07b4012b0dbc0babf", "object_relation": "sha1", "Tag": [ { "name": "donutloader", "colour": "#6BBEA4", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762105, "uuid": "e04134d0-90ea-489e-9c7a-ff5b39e7972e", "comment": "Malware payload (DonutLoader)", "value": "a665928ee81de95c615f2dfcc766731d3ee4b462dd4e1940ec78a2f62fe809535db340dd2eb2f588391745760dcc53aa", "object_relation": "sha3-384", "Tag": [ { "name": "donutloader", "colour": "#6BBEA4", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762105, "uuid": "ad6171d7-6b3f-4260-bba0-a339d551f4b9", "value": "T1C4163381A3F0D8A6F4F7973441B54A87D83ABC252B24D6FF5184D0AECA323909D35B76", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762105, "uuid": "740bc445-9f87-4aa9-92ff-ebade900f67c", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762105, "uuid": "d4ce89f6-37e8-4290-9918-c44191d447d7", "value": "98304:QXp9dtTXaKNDe7ey+Fblj2qN1KNfQgEKVCCgKSN:iyV7R+FbljxTA0Cg3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766762105, "uuid": "ff73703e-5737-49b8-8d97-dca36c341b4c", "value": 4195328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766762105, "uuid": "d868e753-58e8-4ec0-b3cc-43a437853033", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762105, "uuid": "684ae073-8192-42b9-9406-28cf11d92039", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5316d627-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733615, "uuid": "7abb8d93-65bf-459f-9cd9-59ca80948927", "comment": "Malware payload (Mirai)", "value": "978382bbc0b5797b25f4c9b190fe0a83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733615, "uuid": "47f8da4e-5085-4814-bb9b-abaca9eff926", "comment": "Malware payload (Mirai)", "value": "2951437574f0b44b68855462c650bc1d7b10fbaf36ed86e7a45faec38b87ee6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733615, "uuid": "4b61b5c8-c883-4757-838b-ab5cced8e0df", "comment": "Malware payload (Mirai)", "value": "a348fb30c4cd7c8ac9a9e5c187dc21b9a9969196", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733615, "uuid": "1c20f91f-d273-44a2-8ab6-0163b8e1988b", "comment": "Malware payload (Mirai)", "value": "94027a6413e44d4b64c18204fbbf828dd99149e40cf8e059579b6c4a56176788c798f0c3fa106093c8a9f8878a31182e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733615, "uuid": "fdde8120-6a5f-4ff6-9f26-ce537f35d8be", "value": "T19CD34A2275392E2BC4D0A87E22F74361F1F157DA25A8C90E7EB20D4FFF252206517AB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733615, "uuid": "c47dac9d-212e-48a9-87ab-1a324e70f212", "value": "3072:5JAs2nM0MgYduGpGgggOAp30sqO4Fl8+9dsd:3As2M/gYPpBOSaFm+Xsd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733615, "uuid": "3489beca-7118-4f16-8a71-81540e2fb51a", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733615, "uuid": "604833c5-458c-4093-bced-022dd1d6b558", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733615, "uuid": "1677e244-5ecd-4744-964e-e88300b744cf", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3be74c9b-e29c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766782109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782109, "uuid": "a135c5b8-1a92-43d4-9ae3-bcd4a8069645", "comment": "Malware payload (Mirai)", "value": "7422a3ecaf9ad997bdb5499a1b892486", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782109, "uuid": "617c007c-e706-4fe0-8ad1-502d81496ddb", "comment": "Malware payload (Mirai)", "value": "298aca705d9a476e794e1080f2d75bc9ee42ac09eb5d3ecfbe53df7e523affc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782109, "uuid": "991e0c1b-97ee-4a88-b144-d55455326cca", "comment": "Malware payload (Mirai)", "value": "76d56e52c28fb43d9762bac9cb60fe5c94392025", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782109, "uuid": "1973bf41-56d3-404a-bfd0-5c77df5e165e", "comment": "Malware payload (Mirai)", "value": "4d10833f0a89eab8e9e4057f9c0bb9734bd4066a4b1fb4e7e09b406fcf5ed08766c1d05db1ab91a0a1c10a7dd56db9bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782109, "uuid": "9eaac689-4d00-4203-9deb-af0fc0e3c7b1", "value": "T174532B46B71C0543D1672EF03A3F27E1A3DEEF9121E4E684391FBA4591B2D325286EC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782109, "uuid": "0af1c4da-df34-43b3-9e58-cd6bd8a5e6ab", "value": "1536:ePfqgzYMLVDiVs5gI2ui4QKpi4T7lsvCViVMkNr:YjcM9NHT5sKIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782109, "uuid": "87f9219f-233b-4657-883a-63d0b99a9209", "value": 63400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782109, "uuid": "5cb4cfbf-196d-4b63-92bf-9d96a69d5dce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782109, "uuid": "8e2edcd7-2598-4cb4-a1d7-0f4c9f68bf80", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bb1925c-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778834, "uuid": "a2cd7edc-1a39-4fd1-ac93-3653e851491d", "comment": "Malware payload (Mirai)", "value": "685537ef155735618e9123219e085a5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778834, "uuid": "b9e022fb-e053-408a-88a1-5e377c482085", "comment": "Malware payload (Mirai)", "value": "2a00a074a3e1143ec9a46b575cb4715b925a7d0031fa0a1f24739eb4ec36f67c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778834, "uuid": "e025f634-06df-4255-8c23-dafaf1af88e6", "comment": "Malware payload (Mirai)", "value": "7be81118ba912951d38568c0b15031ffbf184919", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778834, "uuid": "23624ec5-aac1-4cf0-8a36-3ac2190eebe0", "comment": "Malware payload (Mirai)", "value": "a14b5a585ec5a62b98d614487bd03381d876f23609d551137e1d9eefdb09b99afb3e611640e840e5ecda901a959032c8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778834, "uuid": "1b6aacb9-4a6e-4510-8285-ee783551e414", "value": "T12EF2D102C988130BE57F1A369CAFF64E1695E62CF9C0B49A59F1606F4C41F0D6D4DB8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778834, "uuid": "5fc8b31b-98fb-4c62-b758-0ee3101d729d", "value": "768:gzbGjwng3vdO5994SKAT1M1bVnykwtYcCrV5KX2k1nbcuyD7UHQRju:gdnA4994SuTykwKcUKXTnouy8Hyq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778834, "uuid": "e7623545-749a-49d0-870b-4ae25abce084", "value": 34888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778834, "uuid": "ba508d26-c20d-466b-aa4b-094e7455e177", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778834, "uuid": "0b7f90b3-7e2c-4324-aae2-223f25b9bd82", "value": "Space.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3d4b06c-e25f-11f0-a129-42010a9c0007", "comment": "Malware payload (HijackLoader)", "timestamp": 1766756138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756138, "uuid": "a42e80a4-dfbb-448c-84a0-28d034d32ff8", "comment": "Malware payload (HijackLoader)", "value": "d83adb0110f0da71495afbcd09837557", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756138, "uuid": "812fb5d8-4260-4065-b9a4-0a22f8e988e2", "comment": "Malware payload (HijackLoader)", "value": "2abf4ca98976439943823a76f42f414b3f0ae27a0f0b2f31324d0ad6b6d76711", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756138, "uuid": "e8f5baef-d205-4b34-a206-8d4a3b07a257", "comment": "Malware payload (HijackLoader)", "value": "be802c6e1a79814d881990644b9e8161f3772c68", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756138, "uuid": "62da7791-0bdd-4bd6-8fdc-fa938121f441", "comment": "Malware payload (HijackLoader)", "value": "b957281654fb77c4816a30a275be219bac2babb4dc4c63efa8a7dfbe5bd4c50ed33c85452465faa35dbaf45d4fc7a800", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756138, "uuid": "d31bf992-31ff-43b9-a84f-b13a4aadaca9", "value": "T1ECD6337295610137E7F20173F978A5313DBDB2392B0641A9D3E8F909BEA84C677B3246", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756138, "uuid": "ffcdf692-fb4b-43c9-84ab-197e926925df", "value": "e277f1464e7729ad9df5ec047611738a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756138, "uuid": "4c6df2f2-0da5-4e77-b0ad-f0831d1728a0", "value": "196608:5LZ0uYqRiOC6ALIN5tcEmoEel2eeFVVUhrxmAEePq2LcAgsNoRFk:nrYsiOC6Ao5tcreOQrxPq2LcATgFk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756138, "uuid": "35b8cebd-8186-4830-a4fe-0898a99baaee", "value": 12713232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756138, "uuid": "7351186d-9f27-4f6c-8adf-97c64443e4b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756138, "uuid": "c6718940-7885-455b-903b-16c1d35116f9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae28d9b0-e1f0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708427, "uuid": "b042bfd2-9ccb-4c9b-85b7-abd5e6cebbb7", "comment": "Malware payload (Mirai)", "value": "df45b2b679e45b01f8140548faea8369", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708427, "uuid": "2681a7e0-3f6e-4d84-a53e-b44b6ab455fc", "comment": "Malware payload (Mirai)", "value": "2b84ad99166db9dfe2f2abbaa1f4c83d1cfaa41daa08c51cb63441312cb8de0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708427, "uuid": "8deda405-4610-45fa-9df9-3c98a7455732", "comment": "Malware payload (Mirai)", "value": "b113c1a331c70dcb4474d846428e147d2d383590", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708427, "uuid": "47304b05-c862-43bf-b436-aa2b8a7dcace", "comment": "Malware payload (Mirai)", "value": "f2ae72c1d4998ab1a431f80c5503f11766efcb63a500d4de8a73918167598db2723467cb9568ca10abeee4419c59c03f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708427, "uuid": "dfd0db58-55c6-402d-93d7-9999f7d815ac", "value": "T1F983E896B9818A12C6D552BEFE1E11CD331317B8D3EF73139D146B24778A82B0E7B905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708427, "uuid": "3392971b-172d-4684-8635-a065ae85cdc1", "value": "1536:aNn1sa6DNV3oXgKHJTjDtQmoPi4R8CmVD+m2c5UBJmtD97ibmMniZw+07mfvz715:dY9J9Rf2Cxtnw+07mfvzpwzTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708427, "uuid": "21c5d005-dbeb-4899-9a72-8a1a0cadabee", "value": 84860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708427, "uuid": "6ede146c-16f2-4668-a489-5ea97bb33639", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708427, "uuid": "03ecd24a-0fb6-4754-90d2-f3b58e5676ef", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f33c31a8-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777263, "uuid": "279851b8-ffc9-4f36-b81e-71686e55a26b", "comment": "Malware payload (Mirai)", "value": "af6715bca9fb933c0e9f4c8ea6bac7a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777263, "uuid": "648856c7-cc1b-4346-9981-a48c4b7b0ee2", "comment": "Malware payload (Mirai)", "value": "2bc3c9420966868364df7b7d3443891da3a375e16a5d6a16349db6c7df36baa3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777263, "uuid": "eb7a62d8-4844-4113-aa5d-804b12cf0a55", "comment": "Malware payload (Mirai)", "value": "9ad0bfa2e6718db1d802c1fea6966339108a9101", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777263, "uuid": "9f172a76-aa6a-4a46-8258-9bf2cf3b8136", "comment": "Malware payload (Mirai)", "value": "8be13ecdf3c0277f061e5b8143c07f088c509304967f6410d6d54cdd0d95af520740f2aa92db041fcc889a4c91697eda", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777263, "uuid": "7ecdb18a-64cb-4486-9725-97152d65cc28", "value": "T184D36C89F002CD7DF81BE5BE44670E09F931E3A126931B2E529BFD636D321994D16EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777263, "uuid": "fe307733-f27c-4b3d-9e35-480ecccd7886", "value": "3072:sZc58utJH2lUafUwq38qWnMGK9Wk93MUvKfiCI:ISJH2Xx/nU9J9nKiCI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777263, "uuid": "a4ce86c4-08d9-46d4-a62b-e1d7b517b629", "value": 132604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777263, "uuid": "eb96e9a8-3f42-479d-b6fb-48639b721e73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777263, "uuid": "23df84c7-dedd-4850-bf83-87d199b67dae", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "450f5925-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775253, "uuid": "188453de-e981-4836-b6d9-2c537fbaca9f", "comment": "Malware payload (Mirai)", "value": "b35412eec179fc5957b02811d4d46bcb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775253, "uuid": "24f2fcb1-03b5-4850-aec8-6a45d8d5a453", "comment": "Malware payload (Mirai)", "value": "2bc80f02decb4933c13e710ccd1813f34e53c02902034385dfa02f8488d83a77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775253, "uuid": "73f6a663-37b6-43e9-9d32-713aaa0e5b56", "comment": "Malware payload (Mirai)", "value": "174f987653a9f4ed062158f49f05d85c711ceec3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775253, "uuid": "887caa42-2fdf-4c7a-8232-2a9ec64df2ed", "comment": "Malware payload (Mirai)", "value": "d9b8e5a46f3d577427bf8207f23d352ba27bbe1ac9449a1678b36e957350cc5f78001c8d4099c4ea254ccf781b578ea4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775253, "uuid": "e5f5c7b8-5f2d-49f4-b56f-c65ec280f616", "value": "T15873026E958A4581A3640E36DF23DB8D4EA5A7FCF1D17F0141E20B2DE482D16FF35815", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775253, "uuid": "4785b4c2-0b63-4b96-95b1-b4830cc2d0e9", "value": "1536:QFfOD6VKWhiisuRGo2NgnFGXVrV/8VzTfYqwr0D57dIkIcjfpXEtotLl:4f7WYR/2NgFAVrtsnfOYD57dnJyOLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775253, "uuid": "fc0c59a0-aa05-45d3-b7bd-478e9fb60d89", "value": 74712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775253, "uuid": "13ccf502-a11e-470a-b6ac-be660395b21b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775253, "uuid": "2268ae5f-8422-4c28-ae42-e093c3e69022", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9de03326-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766777549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777549, "uuid": "24c19985-d6a3-4a72-b4e6-f37e174e4feb", "comment": "Malware payload (Vidar)", "value": "0fb2cf2c381e406f8fdf5897310e2276", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777549, "uuid": "828724f0-5b95-4a2d-898e-0e06a905d36b", "comment": "Malware payload (Vidar)", "value": "2be5f607874a8bfad57817e4bc4c0d59153a88820d10af492dc377cb20b82030", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777549, "uuid": "2d15bdca-98ed-49f2-8cb1-0d0c4bce810d", "comment": "Malware payload (Vidar)", "value": "a24aa869ddccc065879d20e545ad4c67fde0d3f2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777549, "uuid": "2a1510c4-d76e-4f09-a918-ce824bf9f374", "comment": "Malware payload (Vidar)", "value": "20ee0fff1f606a8fca741a5ace36296d0d751149dea998899d5e8c9d8353bde208ba1e0918b928068e78d444fa8b9be2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777549, "uuid": "d6784bf4-2a00-414d-ade7-0bc909c9e5ca", "value": "T154B64AA2FE090254D69FD239E67162853330B144073526D7FBA507A64D6BBC81B3BF2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777549, "uuid": "8a65b2f2-0cdf-43e1-8362-6b4cb3f8e5a1", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777549, "uuid": "18b8f912-0f0b-44a4-be28-4890b52e8b3f", "value": "49152:Z/3nGrb/TgvO90dL3BmAFd4A64nsfJ9tY2ZFxzXZhqMqQCFjINxMKe3QX2/F77Sc:Z/imJ3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777549, "uuid": "1f60fa42-4c3e-41f3-b909-c4d0153db654", "value": 10704512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777549, "uuid": "8c6a2786-db4d-464e-a12c-a2eae57f5f7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777549, "uuid": "80d8b130-304a-4412-bfc3-8b9fc72b969f", "value": "Setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a443d912-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747495, "uuid": "6165d33e-db90-408e-aab3-956642d60341", "comment": "Malware payload", "value": "24e90aa2785fa4cbea8dc907f2ba07ac", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747495, "uuid": "2d66b296-8add-4e7d-aebf-5ab285978d64", "comment": "Malware payload", "value": "2cee8b9e64d392605182fc0b80582f652abe39cca1ddbe562fa810e383b99485", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747495, "uuid": "103a1545-d8fd-4f5a-9c41-99c6e89e645a", "comment": "Malware payload", "value": "8806701e7ab5e60829fba4e95dbbef0a4aa9b7ab", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747495, "uuid": "2f9f5da3-6fb6-4fbb-ac54-77532a851cb1", "comment": "Malware payload", "value": "85c30c419805306393afe888b64cb84c7119ccd8e42cff7f76fea007858e8d7ee87200f1455d3575710254b5b25c3979", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747495, "uuid": "fedb7be8-a6c4-4120-98a5-c56334d4a4ea", "value": "T16963199623E029FEC9D965D89C3E6AC062E4EE67D1647FC40FCF8F19A53874653204B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747495, "uuid": "9410c29b-840e-4839-bbda-c8b8fcfac4b7", "value": "768:I8w/h62/jWs6oS+xISN0v6mYq9NCGCcnl9vXjH8rxWBTxCBGx+OsFoso5Qulai/T:I9l/AoSSM6VusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747495, "uuid": "5c34e232-c2a7-47c4-8f68-a75cf742db48", "value": 72503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747495, "uuid": "08a31868-18a5-4b12-8ec2-bf42fae5b28f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747495, "uuid": "46216558-782b-41b5-a830-9a7a7f0f7fc7", "value": "invoice-1645080830.pdf (20).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff4085d-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771727, "uuid": "c5b6764d-1de7-4ff2-bad5-e80e38b76a22", "comment": "Malware payload (Mirai)", "value": "79fca58ea2a0e46d5e14d3c6408914b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771727, "uuid": "1dbc06da-dec5-4a16-b646-51f5adf86230", "comment": "Malware payload (Mirai)", "value": "2d3f6bd4a12580629c5b9e95c1e11567b22d800baf3586860479a05baf41de57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771727, "uuid": "9b6789a3-0980-4efb-ac84-2f6e90c0221b", "comment": "Malware payload (Mirai)", "value": "a16e81fa92c7ec19cb83c0a5b0051c85dfc203ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771727, "uuid": "24bdf669-4fab-4359-8f64-f8f84f6f89c4", "comment": "Malware payload (Mirai)", "value": "cb9e0f86d3ed39bc4f13cf0737d9de01d7b93a69aeedc78b3d3923e65fb2f6c2d0a30e67f21f6a20a55cd664fd6caec3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771727, "uuid": "2706bb8b-b752-4de0-bce9-464ea1395706", "value": "T1BC045A41FA87C0F6C81B497050A7B73FCB32A93A5077D65DEF999F31CA2390192172A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771727, "uuid": "f1afcaad-e22b-446c-9c23-9ea07be8f811", "value": "3072:h/iJ3gE9SnpiQAIQ68cmNym5dn6PHjsU1b6yzA0nL1hGB1t9:AZ9SpiQAV68cmNyvs0ZM0e9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771727, "uuid": "e6f57ffc-341b-4993-9f37-d1f502bdf818", "value": 174696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771727, "uuid": "40dc21c6-63d8-4183-a306-2361dcd992c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771727, "uuid": "51c029b3-e6fc-46cb-a98c-9a70051f1b6d", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0485198f-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779010, "uuid": "8b329995-cefb-4702-8d4d-061c2a982759", "comment": "Malware payload (Mirai)", "value": "210c1b21f75d4cf9305523bad066960c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779010, "uuid": "2e6dfa29-31f7-40b0-93ed-f552dd3ebe2c", "comment": "Malware payload (Mirai)", "value": "2d65468c854ebd82729c52fe08a3fa5f64720ceb52ab4bf89398c89e64c021da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779010, "uuid": "2f42dc98-31ee-4e6b-b876-18d2614b9c10", "comment": "Malware payload (Mirai)", "value": "9d5a0d82979f323062357e35ff0d891a667e412c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779010, "uuid": "562c5e45-901c-4d84-850e-e5f4b7b77b4d", "comment": "Malware payload (Mirai)", "value": "3a423311083cd12338c838c14cc74c8ea4fc6d1a316d4c290b401069c7da2137190d2f91f0fb4c737dd970af09357412", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779010, "uuid": "1653ee6c-5d90-4d83-8fc0-6a12a9c6c272", "value": "T1EF13F1107600063BEEB580F2667403946A901F53ED47ED0E316ED293A796AF87927FF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779010, "uuid": "300165bd-f5ea-41da-80bb-7cfaa8452687", "value": "768:+VSrYS3JuIk8or7wskf/qHdprN7wVljiJFAfxqhbEWmAIqwljkMJgGlzDpbuR1Jr:+8DY8oXwsGurNoqcYhlwaEVJuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779010, "uuid": "0819f3fa-d652-45ee-b89f-62c9c6791bb6", "value": 43288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779010, "uuid": "e66f66dc-f028-4926-b937-db3ed1e36d1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779010, "uuid": "0076e247-3161-47eb-9d39-a4d4eda028b3", "value": "windy.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a78fad03-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772841, "uuid": "7a4eb4c8-8f64-4e3b-b97a-79432fd33310", "comment": "Malware payload (Mirai)", "value": "15c77d9fc4adb23e6ef2307383b1d582", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772841, "uuid": "df09706a-7455-4787-a157-07a62aa2c17a", "comment": "Malware payload (Mirai)", "value": "2d7b1b3c195a5d3cb452efccfb66f13199a976f3b83ee1b5556f0db0eef7bef5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772841, "uuid": "e1992c8f-1762-4404-b194-b089c730b0c9", "comment": "Malware payload (Mirai)", "value": "faf89e27989dbaa0034ecfe54f94e1c14b3525d3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772841, "uuid": "6bafc8e4-ad67-4049-8ec5-53a17661bbc5", "comment": "Malware payload (Mirai)", "value": "6d72b4ef00a21cb652e49c0ba79f84e0d383211118307072185cb766de3dbf33c95bebfa191972219957caf1487631ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772841, "uuid": "8eafa45e-b473-433a-b262-4a7fd2d8c306", "value": "T15B735BC59B53ECF1EC66057141B6FB779A72F13A1169EA83F394B933BC12201A50A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772841, "uuid": "93bac2c6-32c8-4f81-99a5-44434eca6171", "value": "1536:lDcl+P6kUq2FXYwFzVFMbfXK/w/AkLWkG5qxf+1VXRR:lIl+CkX2FXYw5MKw/lLtaWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772841, "uuid": "53d75144-fbb3-488c-ad68-951c80eb0605", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772841, "uuid": "c9dc8f1c-feab-458c-b9d3-9bb10ec206c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772841, "uuid": "60890810-71ae-42dc-bb90-d35a2d01eb3b", "value": "jklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1dd13af-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729586, "uuid": "066874a6-fe58-4159-958f-2424210b217d", "comment": "Malware payload (Mirai)", "value": "d959bb7bf4f6c7b193be41d8db33b120", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729586, "uuid": "2ce407b5-df28-4fcc-9985-4e92de1c0374", "comment": "Malware payload (Mirai)", "value": "2da222e7113d9131f60467f8ed3a917c9939fd65683709a459589fbf8978849f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729586, "uuid": "463c35fb-0f74-455e-979d-4d37e1fa57f1", "comment": "Malware payload (Mirai)", "value": "cf0aea20cac542e8651e17b5eabf03fb81245609", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729586, "uuid": "eb9961ea-b855-4025-aaab-69459a39b063", "comment": "Malware payload (Mirai)", "value": "06184be2490b8c36850c87e46fc30b07b87df240530f0e7384f7dacb673bc8685758245e7d0ce7dc08354396ceb438e4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729586, "uuid": "d18c2f44-3610-482d-be8b-16e3b8985760", "value": "T13FD3075AB8819F21C5D626BEFA4F519E332317F8E3EE7203DD141B2436C691B0E7A512", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729586, "uuid": "5e6ddeb3-d7ab-482f-b10e-677bdd41c241", "value": "3072:A96OstUavJre9jBxNL5nVk0KX0UTtPfIv3fHa7cBjWH7/9aCySLJj2hn535:AsOstUaBre9jLNL5nG0CjtPQ/fHa7cBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729586, "uuid": "b24c521b-cbb3-4c0c-bd38-f90e036bf85b", "value": 140788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729586, "uuid": "1a0f7f25-7ff7-49ed-bcb3-990eb04d0ed2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729586, "uuid": "af64a17f-5306-427d-8fef-1020de9f203e", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16cc6f19-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779040, "uuid": "a5b3fe15-7b06-459a-8509-0b2f585eaf0a", "comment": "Malware payload (Mirai)", "value": "ba61a26262a9f64e881fe5bf3380d381", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779040, "uuid": "1eb9bbe2-d267-43be-9745-bf6eb5e6a35f", "comment": "Malware payload (Mirai)", "value": "2dc4c91662ef8524222eb3d7015487103a98aa8b13aed43dcdcc48d8aca9b1f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779040, "uuid": "8dfeef46-1052-487a-9231-006da8ca62d5", "comment": "Malware payload (Mirai)", "value": "971685a67bc08e0fdc873f76f153fbfe15036a65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779040, "uuid": "e5aaa4aa-65b9-4d1f-8b49-2299c18ad5c7", "comment": "Malware payload (Mirai)", "value": "4d2493a1c06438dce35b3110b461827e502c1483b6319d96b1eaf3ee073201fa77669306bf4b7627d462a45e1a4f8c5c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779040, "uuid": "b61e02aa-ab8c-496a-9d15-c312835ae199", "value": "T11EB2E11253E614E1D3A461349B18C7862FDB0D28D1FBB63B32608173B69EDC4B97C98B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779040, "uuid": "7ce47494-c3fb-4717-afd2-0c079dcc59ce", "value": "768:FEqSy9yWdXdhvjB4Du2xNHB0rvO7Cs3UozMr:FnSyZX3jgPx9B0rvC/zg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779040, "uuid": "2b597eca-f9ba-4815-a794-2172969b711c", "value": 25104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779040, "uuid": "3e0113b8-e823-4981-b0c3-d5e511db1dc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779040, "uuid": "7b08831c-0d85-4fc8-9c0e-4bf84998c182", "value": "windy.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b62e770-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711724, "uuid": "925bd891-45de-4011-8ff3-23e0fe149780", "comment": "Malware payload (Mirai)", "value": "eb3da532b7bd533b59d22ecdcf3ee4ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711724, "uuid": "e7ad1de5-9564-4720-a4ea-0d2519eac047", "comment": "Malware payload (Mirai)", "value": "2e13cc138888a81143cbdb71b327a7d8a646d6a2c2bc9e6a0282548560d90072", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711724, "uuid": "bb8a0a53-a740-4cd9-8c71-6c24f4121658", "comment": "Malware payload (Mirai)", "value": "4f9dd6e0a9d8fd5970e36cf6625f8ce1ba5d7964", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711724, "uuid": "43a90642-a309-4848-bfcc-e6bb443a1e20", "comment": "Malware payload (Mirai)", "value": "0c846503f55ee20b9acf3a7628a65f0f112026bfedea62c5e8b6af62a64793ef5eee34c31169cf78c801db4a509e9010", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711724, "uuid": "cd9e7167-66cc-4087-8dcd-1b45fe3018bf", "value": "T10573028E91947EEFE5F9D8346F8C975082F10B1936054342DC0ADBC7DA9826C7A1B4C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711724, "uuid": "c969fb00-1a97-4bfb-8ba7-05a66606b8a3", "value": "1536:U6onWqQ+4oZ7IxiBgWLUmwKuKF21U46L+L8t+72h4q9YRCGR7z79xnWVJup:UPn4+4oRGS7YmwBd26Yt2/RCi7z79xnT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711724, "uuid": "62a42edd-7e70-43c2-bde9-17194d093802", "value": 77908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711724, "uuid": "060a6895-a1d2-431a-986a-dcbeb37b94b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711724, "uuid": "a24b0dfe-ce30-413b-a6a4-f610f56770c2", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "697320fc-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (MeshAgent)", "timestamp": 1766713037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713037, "uuid": "8b3ecdc6-7a22-4d74-b723-efe6555332be", "comment": "Malware payload (MeshAgent)", "value": "d5ab2ef287f0fcd97a47f92024746418", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#778693", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713037, "uuid": "7d1093a1-90d0-406a-87e0-74f9d2b02c78", "comment": "Malware payload (MeshAgent)", "value": "2e9324456ce0f350c4d0a86f5082a5d76d78849cf354c1d37f5ccca080e3bb4f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#778693", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713037, "uuid": "84cc8e19-d378-45a8-8862-ac07bc5310a4", "comment": "Malware payload (MeshAgent)", "value": "68789db0f9ba5f32d3d52704804ef678613ea356", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#778693", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713037, "uuid": "c85a5d1f-2650-4a81-aaaf-454e36d2d1b8", "comment": "Malware payload (MeshAgent)", "value": "d876be5790071e6bfe8e2f13826af1a034e946c27855a9c80c059ae710100efd332818bc158fbcf5d11e6b59dfb0a4f7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MeshAgent", "colour": "#778693", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713037, "uuid": "1739bbac-cf08-4379-b740-15012f847e96", "value": "T196F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713037, "uuid": "76a207b2-5131-4ab0-9748-8b87f3363485", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713037, "uuid": "689f9c3e-5696-4100-bd9c-66b954634812", "value": "49152:ndZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bA:dHvfGfZvZj1/N/z/owJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713037, "uuid": "af9bdc38-6b68-4e17-bd08-7cf9591cb435", "value": 3482216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713037, "uuid": "96c73eb0-3a33-4357-a697-00edb016fc0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713037, "uuid": "dbc726f0-1e39-4e02-a86f-f8423e3b77ba", "value": "SecuriteInfo.com.Program.MeshAgent.3.11121.29793", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c96ab44e-e25c-11f0-a129-42010a9c0007", "comment": "Malware payload (NetSupport)", "timestamp": 1766754859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754859, "uuid": "3de05f35-dd1d-48f4-a1ea-6486ca53a39f", "comment": "Malware payload (NetSupport)", "value": "7eae83f051fec5cb5a430209726f943b", "object_relation": "md5", "Tag": [ { "name": "flouinsurance-org", "colour": "#800C85", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754859, "uuid": "9681e044-2aed-4e0f-adea-769e55bf94f9", "comment": "Malware payload (NetSupport)", "value": "2ef396e304c7887684ec33e844930584c1eae796b24737546e21864d7eb1fcbb", "object_relation": "sha256", "Tag": [ { "name": "flouinsurance-org", "colour": "#800C85", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754859, "uuid": "c521d5a1-b610-4826-8702-6f34d88f7699", "comment": "Malware payload (NetSupport)", "value": "b06289b9bb19a039f5c80ab2de29255725183d6d", "object_relation": "sha1", "Tag": [ { "name": "flouinsurance-org", "colour": "#800C85", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754859, "uuid": "11df5890-e409-42fe-890e-56463448105f", "comment": "Malware payload (NetSupport)", "value": "9dcc31b746d518b7a2f90b2f5d43584f4127e9bfe9361ce08ae4456d4b53b85ccaed5eb7474f5f550d9a8fcb3e71e937", "object_relation": "sha3-384", "Tag": [ { "name": "flouinsurance-org", "colour": "#800C85", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754859, "uuid": "9e6972d9-c4eb-4c98-a7e3-cbf3d2752389", "value": "T153D5333830C2CD64F70AAC732CD49123BEE698C6A467C2E3AF686D375542537DA5C897", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754859, "uuid": "7654913e-f76d-4176-a680-282e56733ea2", "value": "49152:JtQk8fkv8eND7iCQp4kCBxYzZYnir6iOwtOEWb67u9lApvv2HpMDUoh8wyIFvjC8:JCkv8eNCVoDorGzEokeHpMDUM8RI9C8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754859, "uuid": "25f5305d-5b3b-4966-ac9b-73e0eba99e03", "value": 3004285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754859, "uuid": "d357a31e-6cba-4777-bdc6-25986e8cb8ee", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754859, "uuid": "99211ea4-47fa-4949-85f6-f5af28d4e914", "value": "software.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffb664d0-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792746, "uuid": "38977424-e3eb-486c-8809-d834285cb546", "comment": "Malware payload (Mirai)", "value": "f652696ab594368918b485e60246334f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792746, "uuid": "e1646ca3-1ef4-40cb-b965-3235c460c788", "comment": "Malware payload (Mirai)", "value": "2f09c4a395910453aaaac9bb2dee5b86f9d52ea6d1a4d94514486a6700ee8dec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792746, "uuid": "1dfb9398-bf05-4a74-8504-0d80f8bacef1", "comment": "Malware payload (Mirai)", "value": "bbd0e12072e643e153a10f7815d22e77d024df79", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792746, "uuid": "e4f88fe7-bb9b-46c9-a10b-2583a5cba083", "comment": "Malware payload (Mirai)", "value": "779177e89a40a5ea81cbdd088919634b6378c7b0b11f73961a5d5f701d676f2293d96f426ded8f1b8ab41dee1425a405", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792746, "uuid": "6017613f-14aa-4a9c-ad68-82e59cb9b4b2", "value": "T1375302112AC58492CB3B6BB1F7C803C3DA76096EC625F07707C899D44EB9057BD7CA8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792746, "uuid": "fcc483e6-8a4d-4500-8d9e-a0d8fe155131", "value": "768:M2m4eTIsvoEf3VSjc8yfy8RqsHVhfuvrmx9r9wUNvIXhpCTVUDWTS9q3UELgv49d:rm4ZsRNIyf8s1h2rmrNWh+jLp7EzEDhX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792746, "uuid": "1adf8790-7cbf-4a4b-aec7-5c43f35bbdb8", "value": 61840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792746, "uuid": "bae919d3-88f2-47dc-9d27-283b25c03de2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792746, "uuid": "6ed010ed-22c6-487c-81c2-73e9c4ae1c99", "value": "Space.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0812b19c-e26c-11f0-a129-42010a9c0007", "comment": "Malware payload (DCRat)", "timestamp": 1766761406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761406, "uuid": "f0c7c74e-cdc9-4fcf-9137-bc80cf67207c", "comment": "Malware payload (DCRat)", "value": "cb9ed53c9e59cc2e130064e84f10a14a", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761406, "uuid": "7384067d-1f3f-4b9f-b043-84bceccfec75", "comment": "Malware payload (DCRat)", "value": "2f1898374d25dca8f2b7f5f1e1790e2b5c7590bbfc4a9553746ce24d43db6683", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761406, "uuid": "96b07ff1-7451-42d9-8632-6d8092823ffb", "comment": "Malware payload (DCRat)", "value": "f9f9de9573582123cb90987786b05e47f7eedc37", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761406, "uuid": "178067c0-b25b-462f-aad5-b6191ea4f85a", "comment": "Malware payload (DCRat)", "value": "aae8f6c74da4a5f5a1ad999e6c717d949a80a78362f2df8f704c46592fd3aab074df38e74889297c8225100a8e7fdb02", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761406, "uuid": "40500b34-cbc3-4f85-a709-2d1cd6fc8419", "value": "T1D0455C31E65EFDAA27784C895D1459103E34AFA3473CC67CA98645B328A448CEFDF8B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761406, "uuid": "46889ae9-f768-4d7e-a1b0-7ef1715a7af5", "value": "24576:ZDH5P0+ZK3snf+HFPISAC2uyVENrkxhNVOc+Rsmq:xHVzXv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766761406, "uuid": "bd7fa907-4880-48f2-970a-8ee0210845a1", "value": 1258731, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766761406, "uuid": "35e3df7d-ce07-4309-973c-48dd8f12b313", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761406, "uuid": "c3513861-5aaf-4620-8564-50f01097a4d5", "value": "Snoser install.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e93c4e5d-e22d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766734726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734726, "uuid": "3d4e6795-7353-46e5-8b92-f95b926692c9", "comment": "Malware payload", "value": "0d7196f56b77fae4f67d294b0bf0dc58", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734726, "uuid": "2dfba7b9-be12-4ef2-a6ab-36ede03ce3d8", "comment": "Malware payload", "value": "2f76ad97a35ed0c14dcc47e33c87bb271da55f8a421d3a089c24c455d2ea3767", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734726, "uuid": "3955a691-79c5-4f2a-809a-9c3e1ac0ef4e", "comment": "Malware payload", "value": "8275f2184f42aa316ce5df00207ca322fecfccd7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734726, "uuid": "a7b34867-2acd-47d6-8bf3-0975a291fb2c", "comment": "Malware payload", "value": "956e4c88016a85cfc612fd9b9ee61fb52e6e82c40e0169afd91cbc897dbe25ab83ca50f4603704d9a0b353cbc292d99c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734726, "uuid": "15a14858-cc94-4899-95ad-6ee838845c6b", "value": "T19AD30818E610C839FCA610FAC6B90BBEF9786B20131511C3DBD1BCF5961AAE2753456F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734726, "uuid": "082ca583-a9a7-4f90-890c-d12bf6bb3e1a", "value": "386b1554197eb63ab49070d68f4b82d9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734726, "uuid": "74edb9f0-04d9-4f8c-bf5d-860543bb2e99", "value": "3072:RB/DsFczacWZyNJqfS9dIIPt6uEwY0y0:RGF7ruy0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766734726, "uuid": "4ec06b19-758c-4fb6-8e02-de21fab5aa4b", "value": 135168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766734726, "uuid": "e2c2dc4c-048f-4b61-8bdf-5ea137596527", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734726, "uuid": "a6ebf186-766b-45c8-8e35-63e5e4ecb313", "value": "0d7196f56b77fae4f67d294b0bf0dc58.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45646462-e21c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766727149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727149, "uuid": "9207d7f2-4333-4425-9baf-d993ebffba19", "comment": "Malware payload", "value": "c463ae1ba749ad0b99a51c57cefa018b", "object_relation": "md5", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727149, "uuid": "4d84f53b-e52f-4b02-b432-2f2f9ed18a05", "comment": "Malware payload", "value": "30645a2d67fa10cb7b6034ea8c5c3198a2d2e255422486893e802b075d5846f4", "object_relation": "sha256", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727149, "uuid": "ca0c229f-997d-4aed-a5f8-6b03d88cd299", "comment": "Malware payload", "value": "71757adba833b46f961e840d0f055bcce0b529c4", "object_relation": "sha1", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727149, "uuid": "d189aa56-2dee-4be4-868a-926b8e53e8d7", "comment": "Malware payload", "value": "716943cdfa18daf1363aca8d7a5425485586916c2e64cde78eb3a4e2b89e28f1bd73ea0f3472b147ed7659c8425216d2", "object_relation": "sha3-384", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727149, "uuid": "f36b4540-7fee-453b-9324-88fb3361afda", "value": "T113D5336F8660AE42E83FFFBC44B14F52C3F994CE72CEF31AA5C9495E0485C21A45499B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727149, "uuid": "15693cf3-3a4f-4bbe-b5d8-467f75ce4f6e", "value": "49152:22IQZKmVgrtutojY7pVXHsL23yJJAwrwIu/uViyOG25VSuPvaCsOWVh:22txgBaojY7/HpY2wrwIubG2faCfmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727149, "uuid": "c198ee97-0a0a-4407-915d-50ff2dd48ea4", "value": 2772071, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727149, "uuid": "6f8eafed-0b69-42aa-a354-ea0c4d9b330e", "value": "application/vnd.ms-htmlhelp", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727149, "uuid": "8438be0f-73d1-4161-bfef-a034342cace0", "value": "DAVOS Pakistan Business Summit.chm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83557604-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775787, "uuid": "d1b42667-f3f9-4538-8712-cefa0493ad48", "comment": "Malware payload (Mirai)", "value": "c06db34f6c66d361fef95919425b13c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775787, "uuid": "ac158db7-a1b8-48a5-990b-6b9fcc0a808c", "comment": "Malware payload (Mirai)", "value": "30d0452c1aa59fcd20f1b1e77c78232ec56eff3ec132de1f69f571214a30bb9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775787, "uuid": "b0d6638e-e4e1-45b9-a07c-4306013a8efb", "comment": "Malware payload (Mirai)", "value": "ce3fe5b53063a1556373c991c1912d4bb5f47a8d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775787, "uuid": "358ec670-e8bf-42c3-83b3-fcc2423578b0", "comment": "Malware payload (Mirai)", "value": "f405b2f0c03596bfa23f23b7891fdedf4eae6ae7f48e3e4dbce35285944b849f180d53c3473bfdc272345d1ec1dc8e9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775787, "uuid": "acefc2d4-6ae4-4e5c-b77f-054bd2b833fa", "value": "T146832985B881CA23C6D422BBFA6E42CC331653B8D2EF7307D925AF15778682B0D7B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775787, "uuid": "3618464c-5194-4aa7-ae07-6e534aa0f4af", "value": "1536:TGYsGlKxug65a3ymDIIVRkU8KMeNW75zr2ripjVQivQT2bVRIH:6Yn4pf58KMe652sugQT2wH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775787, "uuid": "2e374190-de31-43cd-b419-90570686ab90", "value": 84408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775787, "uuid": "9334da5c-7248-4189-ae72-116ed523a5f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775787, "uuid": "97ef73fc-ec13-4464-bb92-43cf36ca154a", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184767ca-e2aa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766788062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788062, "uuid": "05af29cb-e659-47d7-87b1-4f3ad8e97e05", "comment": "Malware payload (Mirai)", "value": "4950b789586c71758fffe26cddebcdb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788062, "uuid": "2829e408-b3d5-47fc-abb8-47e829db08dd", "comment": "Malware payload (Mirai)", "value": "310a6e8cecd8ed78e1d878db57fbd2f77697e9c0a51aaa516cba0b3492c01abd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788062, "uuid": "dc4079d1-70a7-42a6-a908-d14f970f74d6", "comment": "Malware payload (Mirai)", "value": "029c72495e2ee542026161114c96abcf18de741c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788062, "uuid": "7123119c-8e49-4bd0-9ccc-f3cd57f268dc", "comment": "Malware payload (Mirai)", "value": "fdd2de615c652cfe5a725506e5fa413939beb2d0a5e922d187b074c25b684f037be4fa443befa3c2bc9b888d7d02b447", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788062, "uuid": "02ac77d6-5737-4260-bb40-1912938df6ae", "value": "T1C4835C227D7A2D1BC4C4757E21F34634F1B2274A25ACCA5E7DB20E9DFF156102207ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788062, "uuid": "60234bec-5a90-40e8-84f3-df9df09a7aca", "value": "1536:uQY1AtSd75eITocUu4GKtfZejpZNullHwHlF0vO7LralhjqKzIPDNjZz0uhG:uJ1A8ld7UhTcZgnvOXrall3YjZzW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788062, "uuid": "b6ffd548-9369-495d-84bb-ad39422957a2", "value": 85716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788062, "uuid": "92cf6471-8e6e-4e66-bad6-9b893b144462", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788062, "uuid": "57ec53ac-3d50-4e65-9e33-f0e32bdc0318", "value": "jklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8d3599f-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747127, "uuid": "e9753232-1ca0-49bd-8c69-9785b1bf8b02", "comment": "Malware payload", "value": "cada4bc64796847b4967c49746d44b99", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747127, "uuid": "4c26b0b6-b2ac-463a-8f1d-1d1a4ed7c46d", "comment": "Malware payload", "value": "3137a4f825336a2574b3dbbf4266cfd98c82a5061ec727c5f98347754cac4385", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747127, "uuid": "286789b4-a277-40fb-8fec-83ae4567be36", "comment": "Malware payload", "value": "eac69176c845231796b305f7a91856d85bad0c31", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747127, "uuid": "3e4bbc61-36f6-4347-938a-4fd34fe87bec", "comment": "Malware payload", "value": "a3d66e1713eef3aab0c7c24fb027862730b34f8845f4a7a3bfbf5b8863601998977de2d1832d43a1882f824a86a186c8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747127, "uuid": "c10d330c-1737-4c24-96b6-d18edd7f790f", "value": "T15C732B680F531D88FE9B4CA59B25D5FA1CFE3994B1E135E9F1286330042E232A9E4F5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747127, "uuid": "58574ed6-7856-4005-98e5-b59466217205", "value": "768:I8w/h62/jWs6oS+xISN0voN5H6gBdkfScBYrwz2y8kTAlGB:I9l/AoSSMoxusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747127, "uuid": "d607d586-4be8-4556-a444-6e7a032a4a91", "value": 73432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747127, "uuid": "565c3d14-c18b-4c00-918a-777195c115e2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747127, "uuid": "72b1723e-15a8-4ecd-812e-4f3e157e8386", "value": "invoice-1645080830.pdf (95).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71fac760-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774469, "uuid": "18f81cc5-b354-43ff-9a11-336835d6a0f1", "comment": "Malware payload (Mirai)", "value": "0bf648e85c59f69581b7dfb5ad5c998a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774469, "uuid": "497ee76c-4cb6-4ecf-b11b-486be0bb9120", "comment": "Malware payload (Mirai)", "value": "31c5533c45f29a87d5e940ee50ecebb921be87cb14cb62ab5c532d0ed2d1baf8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774469, "uuid": "380f6dcc-9583-49bf-8ebb-eb1aaf4acccf", "comment": "Malware payload (Mirai)", "value": "44a89df89b990e2afe9053de38427887ae9cc1c7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774469, "uuid": "264e9f41-4b94-463a-8d68-2bfb7dd5c31e", "comment": "Malware payload (Mirai)", "value": "5a4f4ecfd321c43f13ad003e9d91f7ff1598d51bcdcc96b0e51074e6b1673bc5808861e795d2becc3e34e1da6913784a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774469, "uuid": "14608a0a-9feb-4b6a-96c7-da30b6df3490", "value": "T136D32851BD829626C5E623BBFA6E028D332663E4D3DE32178D215F217BC691F0D77A40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774469, "uuid": "a956ede5-0d75-4432-b1da-be9ccfda6bb8", "value": "1536:NG1lYT6u4RowkVyGeI5AhodB8kK6IZxnwuktDkWjDd+/QLdeg6umRD5ZB6bxfQgC:NG1lYl4RHuPdanIXjDdpYfum/z69mf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774469, "uuid": "baa50851-e3f9-42e5-a652-055f7eeedab5", "value": 132552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774469, "uuid": "72e772ca-b122-4da8-b852-bf4aea95e6a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774469, "uuid": "0e1202a8-700a-4469-97c7-a444f9db1fc6", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07d73b7a-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779015, "uuid": "f7533b8c-b1f9-4656-a426-27ea23fdbbfd", "comment": "Malware payload (Mirai)", "value": "28cb215d20f5899cf6f649d0ec489653", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779015, "uuid": "715171cb-138f-4a3b-9460-559f455639ff", "comment": "Malware payload (Mirai)", "value": "31d423164c480b1ae238259697bb38f59de35f03804e4c7620df0ae545c4cdcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779015, "uuid": "d84439f8-8faf-40da-ae74-717a266b47f0", "comment": "Malware payload (Mirai)", "value": "c04628a46e58e1201f17eb32529ea454aba5fc50", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779015, "uuid": "7619468b-3f62-4c0a-8aab-3ca1ae799f59", "comment": "Malware payload (Mirai)", "value": "48be6eaddd14203ad4eaaab59147e3b0c7c51c640405a07cddf2dd5230805055cd9519ae2b7f342176b4555273aa1c0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779015, "uuid": "d01d9802-f664-47c5-bdd9-642584c6d1d7", "value": "T1C803F139D3F6C285ED6C907156EF320A2C59D119A599C12EED8011B98F85B403F7EFD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779015, "uuid": "2bae9589-ac6b-41ba-86a4-f614a3477c6d", "value": "768:d2HJeRRzOfGyM21fczk86qp9OuCla5dBDmQMgJ4rgk11nbcuyD7UHQRjY:YCRzGGyD96k86qpSa5d8Hg9k11nouy8f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779015, "uuid": "1eec2f0a-dbe3-4bb9-9945-f7af9d01d329", "value": 41296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779015, "uuid": "253b6fc8-8fdd-48a6-9868-89e7a7161963", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779015, "uuid": "cf0848d4-cd9a-409f-b8b3-6da1ea1e14e5", "value": "windy.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "199e2bfa-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771314, "uuid": "9ca91fdd-d129-4745-b32c-8e81310a1560", "comment": "Malware payload (Mirai)", "value": "1684f3632f584d5e839de0c247acc281", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771314, "uuid": "1b59dbdc-4578-4a1b-82b6-f4f54c51d626", "comment": "Malware payload (Mirai)", "value": "31e77cc535cf8b296d879f2f41825f8b73279556c005d6345c87e4df1dffddd3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771314, "uuid": "962f16d9-79ca-4cc4-9e9f-eb9b609bc147", "comment": "Malware payload (Mirai)", "value": "f004d8d71b868a986566935de0c3b40642389c6f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771314, "uuid": "357f10fb-b6e1-41e4-8a54-75cdb5b6a7a1", "comment": "Malware payload (Mirai)", "value": "3a0ff401fb7d82e308df34ffb06175e83e2555ea4bde6aa2dbeb395c480e338adac0e5a2bd6d55a7a1a7953c050a3d39", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771314, "uuid": "0e12c079-e450-4405-b897-e5f310cbf7d0", "value": "T1DBA3188AF8819B25C5D522BEFE1E518D335357B8E3EF7202DD245B14778A82B0E7B601", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771314, "uuid": "8e254281-99c8-4028-9981-8a50e62a2da8", "value": "1536:CdnmGWaiLwq0U8Hp77gq5tLitUX42sxl+60owmsoREFQ6bq3cNlGJip5027+xZAI:IY+SUX1sjVwmscEFQ6buW577+xmq2TA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771314, "uuid": "f8b04339-2e97-47d2-b715-cbf69d9c437e", "value": 98144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771314, "uuid": "6e7ad1ad-cbcb-44c3-bf62-00a6e58cc851", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771314, "uuid": "79c6eee7-1f2d-4b2b-954d-a92ddf0e079e", "value": "nklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15d6329d-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747256, "uuid": "12439f3b-0b20-404f-a9b1-4840ca321905", "comment": "Malware payload", "value": "6691e145c8d5c513d4a505939c81a131", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747256, "uuid": "b33ae921-7d09-43d3-aee0-a8bfeb81d113", "comment": "Malware payload", "value": "32859c453ba9468acdd8ebf1b6ed8a59221a9088ef45e8a0bf7606bdb2a63e52", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747256, "uuid": "73d6c861-3fcc-4094-93f3-8b5661bfd4fc", "comment": "Malware payload", "value": "d29e268f209c9ceddd2cc1619443ec91dc8e2603", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747256, "uuid": "8fc875c3-c861-451c-ad00-3090d049be51", "comment": "Malware payload", "value": "5a89fbd59c1dfa92cad05ad9abba10d3be354c6ab59ecaf2476f161905bc4c23e3526aca593a731d77f07a8f084cda22", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747256, "uuid": "82571475-b9c6-48f7-9a4b-2d0b0bae7f68", "value": "T107733D447D127492D036BB5A4B1E31C96B2455A9FCE971E238B01923FEBFDC78EA048D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747256, "uuid": "fe3ca820-3c74-4c79-8f82-58d13bc1af32", "value": "768:I8w/h62/jWs6oS+xISN0veXZN0PdkfScBYrwz2y8kTAlGB:I9l/AoSSM6MusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747256, "uuid": "03d88ba1-74b0-49a2-8a92-8a7eb4ca675b", "value": 74406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747256, "uuid": "7f98b943-b861-4397-b8f6-847bea8a588c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747256, "uuid": "abcd5dce-58f9-4bb5-97ab-161670104c1f", "value": "invoice-1645080830.pdf (65).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e47b12cf-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766776808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776808, "uuid": "6e800232-179d-41f1-9484-7e4c167dfe8c", "comment": "Malware payload (AsyncRAT)", "value": "b812092480bbf77b7fabfb653ab7e057", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776808, "uuid": "328395b3-cf04-43eb-881e-8a3119b97351", "comment": "Malware payload (AsyncRAT)", "value": "331a5609b90c1187e31b47a321c8f954640cf2179c8b9edf17066a1ef4902798", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776808, "uuid": "56cac027-35d8-4601-80f6-60ccc84fca2b", "comment": "Malware payload (AsyncRAT)", "value": "47c5c6c38ce86e13a3bfddfa117c2bf56349e3b1", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776808, "uuid": "b58d8632-1965-4672-8213-ef9917d1f650", "comment": "Malware payload (AsyncRAT)", "value": "c572c4cd30e0413c4de3fc8498a7011cea855c965ac9e7b11f1dbcb20d4b244d1035c8e052a01a7d6fde05486db54a7a", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776808, "uuid": "b57927c2-5fdf-40e4-a0b8-1b6bd7623720", "value": "T1EB233B1037D8812BE2BE5BB45DF26251867BF2633603D94A3CC811D75B13BC69A426FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776808, "uuid": "7bd72009-d546-4311-9d1d-3f2d873ea9fe", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776808, "uuid": "07b0d283-5be4-45a8-bba2-14be90703233", "value": "768:jo5UMYZX36E4GjUfNo13wRCn1OCDyjb5gr3iBKixvdjv5LIClZt2tYcFmVc6K:jo5UMYZHxAUVebWrSHJ3rtKmVcl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776808, "uuid": "9bdf41f2-815b-42ec-b7f1-a5b5d290a764", "value": 48128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776808, "uuid": "5de473b9-287b-4d97-9a41-4ac68fd99a64", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776808, "uuid": "cb30b8a5-de46-4871-ad44-e391d8478388", "value": "331a5609b90c1187e31b47a321c8f954640cf2179c8b9.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e890141-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747485, "uuid": "30162301-7e6d-4f69-8840-666f3f897be5", "comment": "Malware payload", "value": "a6ca38bb38ae6550a430b0ab234e36b2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747485, "uuid": "7cd5475a-9756-434e-9451-b70367a8fe94", "comment": "Malware payload", "value": "333f484cefee86fa7c58bea81516d3b4afde84e11e940fd8f10b4963b1286985", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747485, "uuid": "a0a4b7a8-8ee5-4696-9889-687e0ef65b15", "comment": "Malware payload", "value": "ac1dae3d626d5dbdb841125af3f1dab5c4cbd421", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747485, "uuid": "93e500b8-ce18-4ab9-bd68-6ce2bc012c84", "comment": "Malware payload", "value": "3d01dc29b7d37cd30c9ca8e2bd5df118e5cc8b10c969ef15b83f3b30e33b4ba35ddfd4da66f1371e22775ac69f56f2ac", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747485, "uuid": "3803ee28-069f-4e77-9e1d-79bb0b9d6fdd", "value": "T155633B4937267FC5652A7022DF6ABAC7DEACDED2003001587447FFC67ACA7062E168C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747485, "uuid": "5d5d827e-2599-4ed0-938d-070b9ec3db5c", "value": "768:I8w/h62/jWs6oS+xISN0v7PsMICHdkfScBYrwz2y8kTAlGB:I9l/AoSSMbuWusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747485, "uuid": "ba1096b4-855a-4810-b907-c21a830d22bb", "value": 71564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747485, "uuid": "5964a40c-a226-4f56-a7b4-5a65b3a8c3d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747485, "uuid": "794dd651-0569-4a7e-8b05-b748732da021", "value": "invoice-1645080830.pdf (26).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9488c1a-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781863, "uuid": "a3588d9c-6744-4c0b-bc5e-ad8335ff9e8f", "comment": "Malware payload (Mirai)", "value": "504c4b70613cd7c1fd419fc72eac7819", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781863, "uuid": "b39aa995-0487-4898-ade1-c27a56c60f48", "comment": "Malware payload (Mirai)", "value": "33486059a56afd8d5a093e4711873db7095645a9a5d249fb8d1e3582d2aea3f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781863, "uuid": "566012e8-aeeb-4336-9251-2fcde48bb55a", "comment": "Malware payload (Mirai)", "value": "37dfe8be64770150ab475c105d8117ff11f98db3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781863, "uuid": "254b8ec3-8375-41b6-b34b-a32896dedd24", "comment": "Malware payload (Mirai)", "value": "3029ffc81f65cc948bbb75799bbded26440473946059ed6284fd10aa73a5a8d1fb3f30b2b220a493045dd27e095c4533", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781863, "uuid": "6b8d0823-7ad7-4591-8eaf-ec9b6d665238", "value": "T18A531995FC419A12C6E115B7FB1E428D772B436CD3EA330399265F61378B86B0E7B602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781863, "uuid": "e96bd95c-3e3a-45c8-a8fd-6ff850033ee9", "value": "768:o7HMJdQxtr72YqodI6UrfQ44MAdS1G3q1EoOeXrf2mQHjQQWmO1pL+woiWv5NMeq:dQxN6fAd93CEoOeXrekQtO36RNtjgH+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781863, "uuid": "9e52e785-4d54-4a9a-b7c7-1c576df36e3f", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781863, "uuid": "b52a3d6a-f17d-4d3c-ae6c-bba6244dea64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781863, "uuid": "5549c5af-cad7-4dd6-8bcc-b85a2dcae7ba", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8a9b985-e229-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766732899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732899, "uuid": "75f2e6f6-7c19-45b3-b9f2-961067efb9e0", "comment": "Malware payload (Mirai)", "value": "067d2512a8fa2f0daa5a87ba67c30d73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732899, "uuid": "10cdf3a6-0eca-45cd-9341-c42fb6679275", "comment": "Malware payload (Mirai)", "value": "33701981b18377038879b20a940b4d6c4a2e0740d7d322423dc15f284b675fb0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732899, "uuid": "bb50fde1-9ccf-4f84-97b6-09bcb81352bc", "comment": "Malware payload (Mirai)", "value": "db748db11772f9cceefa85797c50ce8895c82100", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732899, "uuid": "21a884c1-6921-46d0-878b-fc2b381c62ff", "comment": "Malware payload (Mirai)", "value": "271e4d318c4dd2efc86fe1ed9d5d9fbe1ef2ab5fe4cc38513c9bed7d26b8917e590e70f01342a0ab44fa79f214e7c5d7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732899, "uuid": "e2a850e0-ebd9-4aa9-a721-e80831d7dd0f", "value": "T13BD34916FB0C05B3DA631DB04E3F43F6A3211E9100FA92252518BF1E6676D77A18BBD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732899, "uuid": "579bb1f7-7b1e-4917-8ccb-db69ee15d096", "value": "1536:lWk2pRHGmJT+a44PU23zFYhRgkySBVgsIX556zRfmYK0RCLUKvM8qkaXDVUbO77C:ljAhX44PU23zgtssIbk1X0gkMJ7/XUv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766732899, "uuid": "656e4377-56c1-46a4-b9d4-8da88b23c54f", "value": 131820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766732899, "uuid": "d1d9d161-fb3a-430d-a2c5-2e7f8ccf1c23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732899, "uuid": "c22929c5-464a-467a-a386-efbea2be1d15", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e3fe78-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711314, "uuid": "ce6d5728-998f-496c-8181-ec417d0d3a80", "comment": "Malware payload (Mirai)", "value": "f7496428caa51ccd6e3715df37e49ab1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711314, "uuid": "ff5543f3-31a8-47b2-adfc-3e8e48ae24d0", "comment": "Malware payload (Mirai)", "value": "33b6cf11b7d2c79c1728c768dcbe2fe532b924ab63c83755d378511d262810a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711314, "uuid": "ebea7993-5b6b-41b7-8ce8-65a12fbb6bda", "comment": "Malware payload (Mirai)", "value": "ee506da46fbe8bbdf7b678f6c95b96c5d30dde15", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711314, "uuid": "a84cfd9a-b295-4796-b689-0a44bceefcfa", "comment": "Malware payload (Mirai)", "value": "e48a9c7c90206ce5322069fb8fffb2cba67d87810d32bb4a8a00f7c31668d23b0d9ca8d1d278681fba1f57a8123db6e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711314, "uuid": "f47f5961-2041-46cf-a6f6-bec84a58ffad", "value": "T10CF2E130645B3A32D5F32CB1AD7F4A01635D4FF4C2E936F02588666E6F4A84CAB925D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711314, "uuid": "2bbdab16-793d-4dda-9fe3-bbe562b70f21", "value": "768:SfEeVg38ifFZN4kSO3wEmGZLSp3QP3cEp5Nq3U7r0:S7UN4kSOABMgQPcEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711314, "uuid": "85994538-7925-4ef4-89e1-b97eece3be7f", "value": 37072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711314, "uuid": "d3ac9b06-398e-4586-80e7-97532db7798e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711314, "uuid": "7059ea0d-80b7-488d-ab4d-8df763116b7e", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b48d116-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747292, "uuid": "351c5bcc-b7cf-4a89-b92b-cdcd846b6621", "comment": "Malware payload", "value": "50179a7ea63c9cae6545aead9e1b0b71", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747292, "uuid": "34238fcf-0363-4d84-9c9d-54c0cd3b2c72", "comment": "Malware payload", "value": "33c4c8b11ffd5c337b17d2709f7395689759cf80a82796d3088e3e23c78013cc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747292, "uuid": "1e026b48-2b53-4c3d-9154-e07e527fcc02", "comment": "Malware payload", "value": "04236455334f5bf2a2fb3e862e7b90015703aef6", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747292, "uuid": "fdbce35e-6e43-40e5-b0e0-48f2d4879605", "comment": "Malware payload", "value": "6e0de9b973fbe6670a9706ab5289181a49870fd7ecd1eb57c2ad1cad9a001c67d47ce3a41ba5d93f91b2e19dd1cace90", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747292, "uuid": "a317c2b9-8156-45d5-a24d-92f5e1159224", "value": "T1FC635B6433277FE72DBA263C3A1106532CE75562377BD02AC0A536AF0629B9707F24E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747292, "uuid": "f2c6dc8c-37ab-44f6-8533-ef448bf9d8fd", "value": "768:I8w/h62/jWs6oS+xISN0vy9eNYUdkfScBYrwz2y8kTAlGB:I9l/AoSSMfLusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747292, "uuid": "831b63e7-4447-4873-96f1-d9576a69fcbd", "value": 71530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747292, "uuid": "0dd4256d-e585-4a86-83ad-5f85b7a466f2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747292, "uuid": "a6d12079-e743-456e-ac82-812a65c1120a", "value": "invoice-1645080830.pdf (62).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12459416-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779033, "uuid": "2c418cda-3059-42f0-a247-a06cce608f56", "comment": "Malware payload (Mirai)", "value": "a7b5fc607bb4793a6d45fe1fd57837df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779033, "uuid": "88918430-8cb9-4637-aee0-76ea9d9af142", "comment": "Malware payload (Mirai)", "value": "340902e57c810f31453b019f8b5e3df82388ba55d006355b9d28dd61d34b9df2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779033, "uuid": "83faf439-bbdd-478e-94d8-9933cfa1537f", "comment": "Malware payload (Mirai)", "value": "2f2b6695fd5d48c47ba2f680908c388cfe295b2c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779033, "uuid": "0368cfa4-fd46-4784-a5e6-50598f36da24", "comment": "Malware payload (Mirai)", "value": "c541b957c7a3eecf74441035a9c01146ebdcb99debfe283ff12338d113d9322dcc78b4c9b2e333ac28440678ab3ce822", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779033, "uuid": "6b60036c-5d0b-4002-8649-cdf9cfcd9c4e", "value": "T1FD13E1E7501EEEBEE03B9EB52A1C1BACF4FD0E5F951272A7C4B1917F44B98811621E10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779033, "uuid": "ff6417cc-236b-4570-8fd2-e851f10ddbff", "value": "768:ThIfHyA8J99JgD00/1kx+TR/MZ1kkBy8YJzWSEQhT3G4D4PgXFJ4BboKtFnOwBxm:ThIvyJ7gq+TgkkpYJzrEG3+g4JoKtFO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779033, "uuid": "7b007830-269e-43fb-9a78-69449b0b195a", "value": 42028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779033, "uuid": "85b32427-4b57-4af5-a0aa-5a3e4586e0be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779033, "uuid": "43897cac-c1fa-411c-83e2-57e3c47dbbba", "value": "windy.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "990fdc33-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778829, "uuid": "b15ed887-ee32-4373-a02f-80882470a9c1", "comment": "Malware payload (Mirai)", "value": "b784af6ced0c8aabeb62c1eacdbece8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778829, "uuid": "727d4734-c65e-4807-af19-83e040bfa9bd", "comment": "Malware payload (Mirai)", "value": "35db76d2c564d985c876c51594fb5553dd96d5835a4ce984fd0d811b28206f5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778829, "uuid": "190a7f2e-56e9-48bc-a3dc-9b560b2ed3f8", "comment": "Malware payload (Mirai)", "value": "53f5707574ec4da0aad29f2f83a18a2e9c4e9ff1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778829, "uuid": "4ab09a77-c4f9-41f3-a0ce-08570d436a09", "comment": "Malware payload (Mirai)", "value": "e358dd0d2f1b7327a7810f3a83f608096a9f9d1b17975fc399cbe2fd804d44c7461055f5cbd4ce25892aa41ff6539e85", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778829, "uuid": "2bb77d0f-ce7f-4f87-a263-538311b1a136", "value": "T1D003E0E915D214A8DFAC4CF584BE16B20F0020CD6E727BCD3B491CDC6A6399B7E598B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778829, "uuid": "ae762f47-037a-430b-9590-5793e92ce2bb", "value": "768:fhpGLq2YEQh5q10MxYWt/y/1tgPUcDpOy77nBoWH:5pD2Ynjq10Qt/U89Uyfn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778829, "uuid": "94e987a1-73ee-4868-b6fb-b5a1193d0f52", "value": 38696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778829, "uuid": "4ace3768-f49e-4049-addd-bf2c22a020a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778829, "uuid": "42180051-7776-4c2b-90a1-7355a39b9bd1", "value": "Space.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19a1ce8f-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776898, "uuid": "92f8e6ea-b968-4327-86a1-5f04bcf2b0ca", "comment": "Malware payload (Mirai)", "value": "e751ea4f4d015b3188ccd1f872393906", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776898, "uuid": "f71b48b4-da94-4e1f-99c6-470994c33b66", "comment": "Malware payload (Mirai)", "value": "3623e7e7aafb2e071a1675318cbe93040355f28c669f0b21e8d9f9d18b9418a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776898, "uuid": "62b98c44-dc75-482a-85ab-681fe02167b7", "comment": "Malware payload (Mirai)", "value": "da52ab9434f96a955d179dcb3b8e289bf2c8d597", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776898, "uuid": "cffcb0a2-14f3-403e-94fc-9edb056a2bbc", "comment": "Malware payload (Mirai)", "value": "ae4d630c414c48f3e17ba4f8212bdc0297d1de0e9ca31ed012a50923172e9a9e71377f6198e55fd2362ad8b9f80af2ec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776898, "uuid": "7a70c1a2-3380-49ea-b55a-e1bc14a00788", "value": "T105F3B30E6E25CF7CF79A833447B79E21A659378326E1C547E16CE3115E6028E640FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776898, "uuid": "52353a30-dc84-46df-85a0-8f48bedf34a9", "value": "3072:cu4zj7WKM+ftXnmF5tCL3fJosHs6QJFZY/nTIl87Qo1h2PjJxYt+lIJhbWubnzH6:cu4zj7WKM+ftXnmF5tCL3fJosHs6QJFf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776898, "uuid": "bd33d208-770a-4600-abe6-d5e9996bf8de", "value": 164268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776898, "uuid": "db20b079-135d-48d0-8c5d-78030044f435", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776898, "uuid": "376fa13d-7c55-4db0-adc3-62655526d094", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae9e8eb7-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781872, "uuid": "ea4bb084-6071-42f3-9bec-c3c5db0247f0", "comment": "Malware payload (Mirai)", "value": "f6b2b64b34336116fe1a48c30b4f2d78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781872, "uuid": "b92de5cf-c9c3-43e6-934c-97a04716470b", "comment": "Malware payload (Mirai)", "value": "375e1279ba0cf63ec33bd1ad0a4be681f5fbf75c7c2e642a718b79b36bc7cbbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781872, "uuid": "d632fbcc-8541-49e8-973f-052814ad619c", "comment": "Malware payload (Mirai)", "value": "caf6754dc0807e954f5a155ac8bfc4b959142817", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781872, "uuid": "8bad7136-526f-4c21-9aef-0344a2e43de0", "comment": "Malware payload (Mirai)", "value": "6c0a007774bd237d67fc66fe519e2f8b76980d8d04e0396ed8dfddf82b4921e951b140cf20a8744f9625092204148bf7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781872, "uuid": "d7e5232e-d1a2-4ca7-a1ec-cf3bb0143b45", "value": "T147A3C50AEF600EFBD86FDE3745A90A0535CC554722A83B3A7674C928F64A54B4AF3C74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781872, "uuid": "2928b2c1-1872-4e95-8584-e7442fb6c71d", "value": "1536:0X/710IS5GVmDeC3jZ4pq2r90526ffmVTVZBYvqyXR5yDTVfLFFCl:W/72Tdt2eM7xycTVxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781872, "uuid": "25dc75fb-2d4b-4a41-82cf-42c96fb50ce8", "value": 105668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781872, "uuid": "29cbcc8c-f47d-4ae0-a309-c44c487524aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781872, "uuid": "da091078-9304-40f0-9b0c-98650ac95cf5", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d68e674-e292-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766777817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777817, "uuid": "dd9fdba9-def7-4bfb-affb-eba2b301e42e", "comment": "Malware payload", "value": "f151aa8449d1b6467083102c0ddbbd94", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777817, "uuid": "810c23f2-3a21-454a-ae7b-914c4aaab46c", "comment": "Malware payload", "value": "37f266aef2c00e5c69e315425aaa61ef93531baeacb7b8884627f8a0547ee724", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777817, "uuid": "bf63e63d-d034-4f20-b509-5d22b676d9b4", "comment": "Malware payload", "value": "4c92fee36c06a53e3290785d48787bbe42e7b28e", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777817, "uuid": "810941e0-4a20-4932-a311-5c9000a4ecf7", "comment": "Malware payload", "value": "1f54bd8167f95e7ea47d03aed25187f4b8ea0f48ca74bef6b01711151a13f84053ab874c05fedd6d45f8d297e828abd2", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777817, "uuid": "50993b86-c2c8-40eb-a6a3-22003012e28b", "value": "T128167C31E541B174E8F914B3A3FB4BB748E59D483726D0D3A1D938C586722D722FA28B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777817, "uuid": "38bdccb1-fe20-4661-832b-bdb87aca1de1", "value": "4200aa356213a0a1ae7ebccde91ba4f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777817, "uuid": "632538ba-5555-4817-a208-44861d2643c6", "value": "49152:cSnOn419d1FqAAIEtrGcNvPdX2I7WEHPWnHMTPpPOUSaOq2GIEe6j0h:cTkbq9xtf1X7zHOHMFPOUr72QeqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777817, "uuid": "111a9ea0-ccc0-45e8-93d0-c4283c9465c1", "value": 4328824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777817, "uuid": "1106958e-74a6-4408-8e11-e3eb82a115c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777817, "uuid": "a804aa31-17d6-4a29-9dc7-1aa244bac194", "value": "python310.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33dc5e34-e225-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730986, "uuid": "04491d24-f06a-4e84-acae-41f4fcfb3d03", "comment": "Malware payload (Mirai)", "value": "3a4331a24965c1c17c172f00a14437f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730986, "uuid": "d81db62c-2ca7-4826-b78d-9e1d34521ea8", "comment": "Malware payload (Mirai)", "value": "37fca2f4b2c4638ba440835c4e454560b6b84dfdc2b24b33457b98eeca2b700d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730986, "uuid": "59ce07f8-0896-45e2-b6ba-c576e85af73a", "comment": "Malware payload (Mirai)", "value": "789d5e64ebf59d85dd99b63e17d76dd3812ea15d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730986, "uuid": "b1dc978f-d087-421c-ad84-1ddc78c75e08", "comment": "Malware payload (Mirai)", "value": "3b616dffdda4c12a02214c3efec42ed82ba7c01188ea8717f39e5ead9c1ab2dc083ae979a0cc95545af23244ac8b772d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730986, "uuid": "671a46a6-34d0-43b6-8967-3d6747f5ea9d", "value": "T1DCD38DCB724F99A0C4614AF007C78BCE3A6323119E1BC9E72E5A297A393D5CF15597C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730986, "uuid": "286b7f68-df8c-4b41-adb8-e3c8d54ee6c5", "value": "3072:NnYFtwlnUp4YNPe+nQrM1pCPaYV4oZ+dDGcgondDq:Jswi+02+Ka+UBxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730986, "uuid": "3bc16640-a6a0-4b9e-b619-2979fcdbbf1c", "value": 140656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730986, "uuid": "05dff13d-69e6-42d7-9453-dc6fd464238f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730986, "uuid": "08bce37e-d790-42b9-a4ce-23c57250ecfe", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "205a2bc1-e266-11f0-a129-42010a9c0007", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1766758870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766758870, "uuid": "d45267e3-76f3-4257-bfb6-4c52c9f579b4", "comment": "Malware payload (Gh0stRAT)", "value": "4581ad8cd7f73903f8b21c49f09f8199", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766758870, "uuid": "149b2576-6494-4d82-a7ca-9b27a5477bd4", "comment": "Malware payload (Gh0stRAT)", "value": "380bcae2cbe211bfdb5229ef129d3188a3aeca61c2e3e20888b1dc29020b3d1a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766758870, "uuid": "a070e87e-419c-4757-9b86-73d40aacbf3b", "comment": "Malware payload (Gh0stRAT)", "value": "a507d25a190ca902bd6009b65ee805112c618b23", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766758870, "uuid": "661f3e52-8853-4084-8119-cdbf12c7219c", "comment": "Malware payload (Gh0stRAT)", "value": "9ce78d9a2cfb25593d280fa14029a06e46c06427bbc42f69a17d634e9865300f3f4479ab62b419c95dfacae36da6d5c0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766758870, "uuid": "df5886a7-54f8-4c60-873d-3c5cb5b07e19", "value": "T11237338677E3D4F1E66204F141A48F3A9EA67D399374D0FB6FC0582F5F192D0E262A12", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766758870, "uuid": "765b9242-7ff9-4133-bf10-cea0584dc1b3", "value": "1ff847646487d56f85778df99ff3728a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766758870, "uuid": "aee6621a-ab6b-4b25-8158-0c083bc5523e", "value": "393216:KFRE5zKpqTufzUEejXAEy061JsRFpoooUzmRw9ipw9xYsyWM+kVdyCzF+t789FDb:KFR6CfzUEejjyBDup/oCEVpgxVMhVdyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766758870, "uuid": "267eac38-3803-4e2a-8e37-15f826dd6742", "value": 24328336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766758870, "uuid": "7bc7705c-3edc-4c16-b4dc-aeed5988f491", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766758870, "uuid": "f5ee7b33-7c1a-47c4-9be1-5aa17ccd7de1", "value": "666666.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b11560fe-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781876, "uuid": "76d7240d-d39d-4d61-917b-0914fbdae4d3", "comment": "Malware payload (Mirai)", "value": "6b2ea600258a4177df3cc3423e6069ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781876, "uuid": "4220734f-a6cc-4df3-bd8e-6c487b73e452", "comment": "Malware payload (Mirai)", "value": "38139402d78e9dcd09f03a7fa8f97b48c446d0910886410b30351694cce2f66c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781876, "uuid": "609f8314-7d11-4c8b-8c6b-31091fd0b33c", "comment": "Malware payload (Mirai)", "value": "527139db4d3ac7f88e23b5d7c718613f71be09b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781876, "uuid": "91534eb0-27a4-4fce-94bc-ef4d3077570b", "comment": "Malware payload (Mirai)", "value": "0ae800227cd6215c26ba8982cb21054d34771ac48098ea10b2295ad43e24655563ad692afb10b557ad25f6e3a31fe6c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781876, "uuid": "64449d87-8c78-4cad-9c27-902059ad14d7", "value": "T161638C67CD2A6E08D11596F0B0B19B395B63D62081CB0FB966A6C779D083DCCF605BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781876, "uuid": "9e082825-0c0d-4395-9536-f218221bca93", "value": "1536:zuLdvs9GY0OKYxsXseICCMli5Xj3iPglHM1:dJKYfeICpE+Yq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781876, "uuid": "109ad65d-e94d-4f76-a362-7d5069abe7e5", "value": 71064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781876, "uuid": "6c6ce4bf-98fd-415a-b6ad-0eaa4d21713f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781876, "uuid": "f25aa6a6-c17a-407a-a920-fa9a0abbd952", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72b723bd-e231-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766736245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736245, "uuid": "24848839-24e7-46f6-bb23-3b4abb50a273", "comment": "Malware payload", "value": "4bbf58538fafe9fd13e22df723e78e49", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736245, "uuid": "22c72c70-4e49-4cc3-a46d-7937ef0e945d", "comment": "Malware payload", "value": "388fc4c43c29e84f1446b3b6dfbc361107ab795e898f354d99aa81613dbc445d", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736245, "uuid": "06341457-4dd8-43a4-a8f5-7a21fe792951", "comment": "Malware payload", "value": "846a23966b22f2497467d8d1ba934274c98cc40d", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736245, "uuid": "40d477ac-0239-4980-85af-172ecf3280c9", "comment": "Malware payload", "value": "a691e0b749cfeb868bf9e5453b2c80efc7aa57b61fba53a1f2f464a55ee5b2b88ca3701f166670535880f18242a5260b", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736245, "uuid": "063d9a17-921f-407b-b2d6-d87b2d0d2794", "value": "T10AE1C686ACF724087417809DCFBEA21870599057474ACD9CFECC65B8DF4C6A89722FD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736245, "uuid": "03f245b0-4e12-448f-89bd-84a16386e6ad", "value": "192:OZzIE/CTK/eLg0llHYoHsfOBro2Tc/OnJSmy:Oz/QYoHsfO2/n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766736245, "uuid": "60a05ffb-a153-4043-afb1-be965ea912fa", "value": 7372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766736245, "uuid": "21d64070-a09e-4c16-9c33-45238cab4434", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736245, "uuid": "1daffe00-f436-4a86-ae48-8e4e5ba27ec6", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1225d2b-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778897, "uuid": "e19ca416-5cc2-42ef-8794-44bf2c34ff4b", "comment": "Malware payload (Mirai)", "value": "761415ee06c7f95db30b1a2a8492cc7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778897, "uuid": "ab5f965e-7c38-4fc7-96c4-1a993e075cdf", "comment": "Malware payload (Mirai)", "value": "38981ad5c9c23efdcf218239a07307a3a62e8e8cc83b6db2f975f1f6c1da8455", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778897, "uuid": "fbdfacd6-20a4-471c-ab63-ad9bc6818d69", "comment": "Malware payload (Mirai)", "value": "7b3187167f18f3183eee2efe6732a2037b27241c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778897, "uuid": "1dfb371e-cf2f-4484-9210-02ac1e232912", "comment": "Malware payload (Mirai)", "value": "984a87d10d449b5c29ece7f82cacc8eebb74d5c3add66d841e271ab07f315673de863603b95bb932ddcd87def93ce027", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778897, "uuid": "3ba21b94-1bb1-442d-9fe1-798c83888ef1", "value": "T127F33A46F6418B13C0D61779BA9F420533239BA4E3DB73069928BFF43F8679A0E67905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778897, "uuid": "0969bacc-0e92-4f27-bd68-bdc2c66f34fc", "value": "3072:i2bmltnY4BRae/xGPZ06v/mYp+C9T6Mj+HDjyoM/9Gc03:xbmltXRae/xGPd/z+cT6O+HDj1M/9l03", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778897, "uuid": "8c1f77c5-f22f-4be2-b4fc-f870cf46ff37", "value": 159412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778897, "uuid": "fd37e118-c03e-4844-8abe-9dcc6b6282b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778897, "uuid": "4cf49aee-5e51-472b-b9a4-5b0b993685b0", "value": "Space.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1695cfb-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747571, "uuid": "289d3208-7003-41e6-979e-f58245bf3274", "comment": "Malware payload", "value": "3dab617836606b37bf529e2d96436b87", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747571, "uuid": "e39fd966-d185-499a-993e-0f5f990bff95", "comment": "Malware payload", "value": "399accf5d02e8e860c2ec9776c63b8b22cf069609a709d8215db86ababf32b78", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747571, "uuid": "93caa286-f787-4450-924f-c95780afa6e9", "comment": "Malware payload", "value": "5aff824ed8d9ddb51e054061c647eabd9b818b2e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747571, "uuid": "4ee6b827-3f5c-47c4-a68e-f5e73a9161ff", "comment": "Malware payload", "value": "edf8bae4a5a3407b170d4d4130d44efd83791a42e18f001a60624fa13b54371101a9ca1c8e6674a02be3c8bf99687305", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747571, "uuid": "0d4d3782-c7c0-4cbb-b559-4fd05b2fa985", "value": "T176631A5DAA4F15ECE2018E65FFB24326983692CC6790C07A9D5BBC15C042C1F6E2FE67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747571, "uuid": "dc69869c-ca1c-4f7c-8637-f404fa5ff034", "value": "1536:I9l/AoSSMttic2v5Jwa82PNqOmd/ipmtAmyEsfp31V0r1B91PQWU79QBBh9C/7im:I9l/5MiIusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747571, "uuid": "7a00d7ae-cd6b-4f72-bf44-4f7ad4879c43", "value": 71497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747571, "uuid": "6bf207ca-29c3-4e63-b747-949579437351", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747571, "uuid": "0376f4a9-6d38-4625-9f82-78dad1e51160", "value": "invoice-1645080830.pdf (5).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb0cd5f8-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775450, "uuid": "cfd97ea2-b7e1-43cc-92a7-521f2314aab0", "comment": "Malware payload (Mirai)", "value": "9f83a2da6f7933fef4d39af4be16c032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775450, "uuid": "dbf0389e-c554-4387-a702-6e9c8e11c1ad", "comment": "Malware payload (Mirai)", "value": "39b6268ae107df0abb53c96f91316eec23703aa6760d23a03cea23e2b6d9f9b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775450, "uuid": "5d446b4b-abd3-4a58-8152-f36c39609d6c", "comment": "Malware payload (Mirai)", "value": "7a3217bc7a44978109d984d2d3bb5d1430c4e5bf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775450, "uuid": "10ca68d1-0f27-4848-8033-33e4c57cc662", "comment": "Malware payload (Mirai)", "value": "3f6ab1b7d9945838c990f92c32a6ffe1ce4de4e1fa18c4b723537fba5613b12f0b40d230a0f07bcc6673756cd0be05e0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775450, "uuid": "3429ee57-4418-4eb8-9b04-d78a73c3392f", "value": "T149141A42BD418F13C6C222F6F7AE018D37166BADD6EA7103ED256FA037865DB0D3A251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775450, "uuid": "c768b25e-ed3c-4f9f-86de-5f0addaeee35", "value": "6144:oT++99aflg0TvOAgThE44TelKINUjEZo9gW:o6+/Ig0TJj44TewNjEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775450, "uuid": "6cd36326-eddb-40ee-b358-9f173abc4500", "value": 204932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775450, "uuid": "27c50a3c-a3ba-4828-815a-a636a302ddb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775450, "uuid": "4f1ec99b-82d3-4eb8-8fc4-139f4a50d257", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f0aa502-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779027, "uuid": "1f900d67-6e54-4c67-b50a-1d3b84d331b6", "comment": "Malware payload (Mirai)", "value": "4b21319296ce682fc53c4d9dd33085f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779027, "uuid": "7006cad7-17d2-428e-bd03-4578bc8ecced", "comment": "Malware payload (Mirai)", "value": "39d2ec0f6140e29d919306a5d7d93f66e4cf53184249aa5e66c1a28b3cf405c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779027, "uuid": "4ab3b213-2a42-41c1-a685-fadadb49ecd9", "comment": "Malware payload (Mirai)", "value": "d2b704d622738d88aca5746b84f211215a2923ac", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779027, "uuid": "b6d92e20-9298-4a38-a804-47351f8e8697", "comment": "Malware payload (Mirai)", "value": "db9cee9454b7e59ad7418d03740b1d36d8afebda6bd65bb72dba79276f5764748f9d681c11ae1db009284ad546a42306", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779027, "uuid": "db72752b-236c-4449-92bf-dbb8159a54a7", "value": "T14C739E23CCA61998D25C42B8B1B0FE3A5763D51056536FF6069BCA7AA047EDCF8053F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779027, "uuid": "71115d8c-22ab-40e4-96da-e5919bf75f65", "value": "1536:J/+/lVA7lvjonbizKIJCk74Y/dAC9CM51Uz6:Jm9VUBonbi2IRx/dA9+Sz6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779027, "uuid": "b9d93221-dbac-43e8-b1e3-77eab5a68781", "value": 80376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779027, "uuid": "fd7e507a-1b4a-486b-a28e-64f7234e50b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779027, "uuid": "b0e7737b-e4ce-47d6-ac61-0ee29868816c", "value": "windy.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08bc0cfa-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747234, "uuid": "7ffededb-b0a6-4dce-8e43-3220c04118bf", "comment": "Malware payload", "value": "446919b582833fd2ab1446e2304aa55c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747234, "uuid": "3042ef89-d3e5-46c0-9708-fedaaa77bcbe", "comment": "Malware payload", "value": "3a1499b9f5c3914a916ea8614efd693b22979b42c391534d2aa567e4f9039db7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747234, "uuid": "84160df2-f897-43dc-bee1-b73737671feb", "comment": "Malware payload", "value": "2647e95a094fd1992a7122567d14157fc026c51e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747234, "uuid": "5829e8f0-51bd-44ed-a6a9-84876debf561", "comment": "Malware payload", "value": "58f45e14ac07a6a422defb30c2f8bcbc3cd40f324f56e8384be302323130b9298dc0651dbbb93d98a29b49dc863341a9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747234, "uuid": "e27481a3-1c50-4265-ad7a-0624473f2b0a", "value": "T1A6632C25BD606A32EE84F85651E731F30E6F89E8AC6C35BC600A61E817C565C1CFE79C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747234, "uuid": "0cde948f-4cde-48ad-8b45-6c1c302788dd", "value": "1536:I9l/AoSSMHIaH894dzpTMsGHYsvJS3UnzeArApWrcgbxedko/wocqqrIObR1I6CD:I9l/5MM5usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747234, "uuid": "a76056e8-7e29-4e5e-bc51-e5c694661fa5", "value": 72494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747234, "uuid": "83ffcc6e-45de-4588-8874-59a3bc2a167e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747234, "uuid": "a28ca963-087d-43f1-9857-82032ea2150f", "value": "invoice-1645080830.pdf (71).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06a150be-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774289, "uuid": "8f8340d5-fc25-4c81-bf8f-ba9e63385fc6", "comment": "Malware payload (Mirai)", "value": "2b4dd1321cf2d9c28a38c908058599a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774289, "uuid": "55bbfba4-2c89-4389-858d-2297414cfc2a", "comment": "Malware payload (Mirai)", "value": "3a838f126750ef450296820d5781f2480e19a41b8806652a4e2ae6f74c5eeae5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774289, "uuid": "e7e40e29-a01f-4d12-8f13-a89f8de0a58c", "comment": "Malware payload (Mirai)", "value": "c926178d9f43d394fbb4e561f34ef5aaf62ee0ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774289, "uuid": "a52bf6b4-7f17-46b9-a636-64caad0c80ab", "comment": "Malware payload (Mirai)", "value": "b0ea1a54df3adda3fdcb38fdcebcddd1ee7d45049131b46c42bc5d20a473e69cd5232706170facb54898d89929d74b2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774289, "uuid": "2acbdf18-dbc5-4ff7-bb4e-f54b380498d0", "value": "T1D704AEA3B70B18C5CD2406F90BCB6B9D6E2321135D67D6E3AC6E36396E364CE15123E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774289, "uuid": "4e94aed0-7855-4de6-a5a7-6234d749e6d1", "value": "3072:PYWiaMeJ3K5c3GzlU98/Owq23bTBQRCFc7fIihuqgIgUCa87XCAq+wub01u2q:PYKfwcG5BL3CRGl6uoCa8WAV2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774289, "uuid": "a298e578-32b2-459e-acb8-722a3761247b", "value": 190264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774289, "uuid": "09cbd160-d4dd-4b25-8588-a6c8a3eeeeb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774289, "uuid": "bc90ac1a-aac8-4b7f-94d2-3243f22695a8", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79f22a73-e292-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766777918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777918, "uuid": "be5985b6-eb4b-4fca-9e40-cdfb6497909d", "comment": "Malware payload", "value": "83e1b48aa0eb71d2291df4ba75e1c8bf", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777918, "uuid": "ef5da56f-4819-459c-bf77-13d5000b0e8c", "comment": "Malware payload", "value": "3a83b052e8d71b73630e7a6f96e59d85931a312c26924f73b2d6cf0e2805321d", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777918, "uuid": "70d9bfed-2dbf-42bb-bc0a-2ff5a80d549b", "comment": "Malware payload", "value": "cf79760bda7c4d1f1c4c5f5a7e404d0dfb5870eb", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777918, "uuid": "603b8f71-b24e-49b3-930f-a27a6cb6a8ba", "comment": "Malware payload", "value": "de1a31eab143b59421a4ae47adb44b69ee83eb84d5db68e21411a2aefd6847cc91e3d809ef83c2162d9e2842896e8419", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777918, "uuid": "c5bd4606-6327-4671-b554-a913d1511e51", "value": "T148E1D796BCF324087417906DCFBEA2587069905B474ACD9CFDCC62A8DF0C2A49622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777918, "uuid": "755851d5-8648-4c8e-8a37-c01da568ebb1", "value": "192:OZ3IE/CTK/ewuq0llHYoHsfOBro2Tc/O9Smy:OP/WYoHsfO2/L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777918, "uuid": "6cdc81a5-1986-4a19-996a-56096047c6c2", "value": 7372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777918, "uuid": "8a334911-584f-47be-a808-7bdbaac0f322", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777918, "uuid": "a3e69233-d34c-4002-9e75-68bb56128eee", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b6e888-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792965, "uuid": "8d62a013-cfe8-4b58-9657-02c018e493be", "comment": "Malware payload (Mirai)", "value": "cadd92e2833e21a38be702a25c3913d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792965, "uuid": "bba76454-169e-423f-b6e9-16fd974f5dce", "comment": "Malware payload (Mirai)", "value": "3aa1fa1a5efa5a43715a76ed869f08ba3e5ffbc3654f222a806d3b2e096eb442", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792965, "uuid": "87fe2fb3-8ce1-4d88-a569-90084e6586e7", "comment": "Malware payload (Mirai)", "value": "e4a61d60449446ff0370219896bcc66f55d9a093", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792965, "uuid": "5e7cdff4-ed7c-4c3b-aaf7-c88007a0fa29", "comment": "Malware payload (Mirai)", "value": "418acdaa64b402b2e43bcb24f83d9eaf5d83b6e94f4ce79840aa093071eed71b5569c36ef0f56c8b3c2368361201bd14", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792965, "uuid": "51245111-21eb-4f62-9ddf-f7017ea56904", "value": "T1E483F786B8818A62C5D552BAFE2D51CD33131778E3DF73139D205F257B8A82B0E7BA41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792965, "uuid": "9edf0777-c683-4684-9b23-dec5debf98c8", "value": "1536:SMngLR7ZyQZAfRy3Geg2jUw/44yI/vSRwFbEMgi0WyikUpBv76EYPbVR:ity4OCoy6YvSBWyikUpBvOEu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792965, "uuid": "e7072544-fb07-4107-b6f8-3d0bdff37d01", "value": 80804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792965, "uuid": "e6a8d1c1-d39c-4874-8681-94780c99ee08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792965, "uuid": "0e7fee12-d8f7-4562-975e-4aa6d8d2bf99", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88d72736-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729840, "uuid": "f01da7d7-472c-4e6e-b73a-8a1a610a9d61", "comment": "Malware payload (Mirai)", "value": "fc60665b717e052aa86ccf1aafd02fe0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729840, "uuid": "a3dcabe3-f174-4126-8ef1-42637b7c2a44", "comment": "Malware payload (Mirai)", "value": "3b2ae4ef544bfbcddcd6e095a6224cae9d45ff555a7481075a6624d024f25144", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729840, "uuid": "21f52353-85c5-45ae-9313-6f2559deb76c", "comment": "Malware payload (Mirai)", "value": "12dca79bb6504dc770eb14e5531ae308e2b61bc5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729840, "uuid": "8b8847e3-c6e5-4cb7-b7e5-10a486aa2bda", "comment": "Malware payload (Mirai)", "value": "b191aa07120c51bfefbcdc7917aa6baa8f109f06ee99b86fb5a356e0fb51fb727b0c4138d29bad9b90978dac9af4e2d5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729840, "uuid": "12bb24e0-a5d1-470d-9f36-c129405761ad", "value": "T10B44F60AAF620EFBE8AFDD3702EA1B4124CD651721A83B757674D518F10A64F1AD3CB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729840, "uuid": "e99f43ce-81e5-45ce-891c-b62ddf98294e", "value": "3072:MFuiG9d6Bqs3F3SxdjYD8tK1zwdFLByYRhWrxisRqs02FtzdE6hh15DE:MF49d66djYItQzwdFLPMrxisSoxFDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729840, "uuid": "5121c1c5-c73f-4e3b-8e69-58ff382ce589", "value": 265372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729840, "uuid": "46bd5501-2344-4bc7-b93c-de026c29c3ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729840, "uuid": "bee747e6-3426-47f6-ab66-8488972d118d", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18d421dd-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747261, "uuid": "cae76457-8558-4e1f-a850-8081ea489946", "comment": "Malware payload", "value": "5a1b13cdf6eddb63f84bbcbee5979579", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747261, "uuid": "d49df7be-305b-40ea-800a-dc22acc15f68", "comment": "Malware payload", "value": "3b4620075a2f23d746ff733b9b08810e6f54a90956ed71b85073621840015e4a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747261, "uuid": "f4b84fb8-c8c3-4fd0-a131-3f73e030592c", "comment": "Malware payload", "value": "448572ede236be394cbf7ca6f3ae6c94de74deaf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747261, "uuid": "65efb484-adff-4c5a-89a5-decfe6ac272b", "comment": "Malware payload", "value": "dff340c26525a70eed299cb53173073e12c942ffe54c672303bafcbf5440b36e444a09eda7214996dd24cf6f0b94349e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747261, "uuid": "351f77e3-bc3b-4e5c-bb08-c5fb341ad9dd", "value": "T13A631A9EEE60BFBC1B7824386B5811904AC374F28EC7679DC5812E495E5DB73A634338", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747261, "uuid": "8cc22b1c-a03f-44aa-9700-c6a8e4c0525e", "value": "768:I8w/h62/jWs6oS+xISN0vwevbeENqdkfScBYrwz2y8kTAlGB:I9l/AoSSM74usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747261, "uuid": "a7266f93-67bb-45a1-a4c8-098de80597a3", "value": 71583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747261, "uuid": "859f136b-b4d5-4a2a-95b6-821fc30a3533", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747261, "uuid": "2848d89e-e259-49c6-99b3-b59c13d7f31b", "value": "invoice-1645080830.pdf (66).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "967859d4-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778825, "uuid": "1dd842f8-871e-4d4a-a2bd-ea0170f1c7a4", "comment": "Malware payload (Mirai)", "value": "fb5c2b596bdea7a4b6880ae90726270c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778825, "uuid": "97e75290-80af-4ffc-a095-053f93b36d9b", "comment": "Malware payload (Mirai)", "value": "3b5d7f5f190805cc54f302a0cdcbd25b348f7cbb151252999fc244eb09f26d15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778825, "uuid": "c42ebb7e-8d53-4a6f-8643-ef7a0fc021b6", "comment": "Malware payload (Mirai)", "value": "96862bc6a9ee28504bc0230f0bb15aec04782377", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778825, "uuid": "221946f7-58ca-4a44-9403-f1531a1cd9e2", "comment": "Malware payload (Mirai)", "value": "6d5a1675b73ac29544bd35568f8d11024e66f80e1af1f345b7a28bae3a19bd5e14122cfcedcff60988196399d6817d3a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778825, "uuid": "ca8822cc-d1a5-4a1f-88a5-ae83d1bc9ab7", "value": "T115F2E1312741BCA5C96051B7FAA2CF87F369E3B8A1FF316815150A58E8E172358F63C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778825, "uuid": "7e2d641c-b6d4-4a32-93f1-ed5131b15cb0", "value": "768:rJTKmOVP3WWkPgb7lPBIqxwQEECBah3zGKksCWICXKSs3UozP:rAmO4POPN5Evo3F9ICXAzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778825, "uuid": "54bd7889-17e9-45a9-94ef-7a2d9f0249e8", "value": 36840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778825, "uuid": "3d8e9a86-6649-4e44-92f0-a57ddfdf9b8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778825, "uuid": "6b4c50b9-81e5-47c9-80f7-84a338ee1070", "value": "Space.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cda6599-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766778755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778755, "uuid": "d961d5d2-1be3-419e-a4a0-63ee9286b9a0", "comment": "Malware payload (Stealc)", "value": "cfd4a9eb968026d7e57b82586c0974b2", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778755, "uuid": "32236068-82e6-4071-a5b6-57c20d13616a", "comment": "Malware payload (Stealc)", "value": "3b678098ebd1ad77093f2b0da2f29bb96fbf26ba97535d59d4aa654ea6124a0e", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778755, "uuid": "336a207d-80a5-4bc4-bae0-5ce9689bfebd", "comment": "Malware payload (Stealc)", "value": "5cbda292277af492fbc119c69f2dde811c5d38f7", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778755, "uuid": "f74f92ae-9007-4d77-bca9-aad165c7d7a1", "comment": "Malware payload (Stealc)", "value": "36e6cfee0664a853440b159b9bcf09078df22cac08302b977f8c3580bb4876d15e84bad6976f2817daa124d080302e21", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778755, "uuid": "f3149a44-eea2-485e-b954-8c2da055fbbc", "value": "T13F872379D91C94C2FB4785F1E165C24A48E22EF021D798AA7F3476168C8F2E1AF32747", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778755, "uuid": "273110cc-74cf-437c-a0ca-8a984b65c7da", "value": "786432:TbbsCqh7JxlrorEkJ2xi1ACVGXPeBXhQOsYseq7tow9o1lUikFpt:TbbsCqNJYAN7YrQ7Y6Sw+kpt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778755, "uuid": "fed72518-749f-485a-af90-10da7552d9f3", "value": 38244065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778755, "uuid": "bae78e6b-70ab-4938-809c-be71630c1cbc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778755, "uuid": "8a41b06f-1c26-4132-a9ad-a74f07284374", "value": "Free Download Files.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b248e7be-e253-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766750954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750954, "uuid": "c642e3b3-b87d-4fb0-8b2f-20c1d2ce1c3d", "comment": "Malware payload (AsyncRAT)", "value": "83e0861ebf14d932ca5e5421e25a16fd", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750954, "uuid": "7b7fcc19-8e59-4331-a29f-45f7de547f75", "comment": "Malware payload (AsyncRAT)", "value": "3bb5d7e0242668c05ab627c015dd98107d940b402821475bb61bd7807c3066fc", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750954, "uuid": "4c3a5b5e-4601-43d5-a06c-5f0fb914a76c", "comment": "Malware payload (AsyncRAT)", "value": "f58354a4e36097e51d73c3a063caf117e313d2eb", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750954, "uuid": "1080f19c-7e2b-4c11-af48-5c9f53b3c8b3", "comment": "Malware payload (AsyncRAT)", "value": "0d0a0542b98c64aef93bca4df5037154f0ba5b0bc2c1ca82050e4d4efab4cbe09629549e9d4e163c5f6683ee93c0f0e6", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750954, "uuid": "af0749b2-42d6-4ae4-909d-a8bd5bd7dd16", "value": "T1F1635B4467B9C615E2FD4AB8ACF25501CAB5D9332102DA5E7CC400CF6B9EFD50A362EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750954, "uuid": "39d7810c-c84d-4fef-b14b-61acf852a2aa", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750954, "uuid": "6cd917e9-7770-4a06-ab8c-a19f67ac6a1b", "value": "1536:mg9p+/N9c1PFGLGbbYwHP66kG1YhVclN:mK+/N9cFFIGbbY0HKLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766750954, "uuid": "d100d0bb-f01d-4b92-8782-d9c62800278d", "value": 71168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766750954, "uuid": "efd8b2ee-971e-421e-9423-5145e62d1628", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750954, "uuid": "0b2837ae-1fbe-4273-aa4e-43ee201f4fa1", "value": "VertexGuardianPro.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b9a87f5-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779102, "uuid": "9b20b461-1fef-4719-ac82-764c3def563e", "comment": "Malware payload (Mirai)", "value": "c8ad546791cb45c42b1c19b9db7359ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779102, "uuid": "2eedaaf0-c52d-4103-b89f-9f5a51f2270f", "comment": "Malware payload (Mirai)", "value": "3bd6446ec398d4cfb95022dd0fa74237bb5cce7601f2ab75c0783f9e984cfbad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779102, "uuid": "c491eab4-cde3-4d6d-9f22-91b5511bc1dd", "comment": "Malware payload (Mirai)", "value": "a1bda7de1ef89d4d3d1347b6a4439ba2f1789be1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779102, "uuid": "d8e74701-6d67-46c9-bf43-3f49dba3f355", "comment": "Malware payload (Mirai)", "value": "1090cdc1a3e2ca9dc7837fa9da87316509ebf075e8255006e99127b5eb03057a0f3d83f9f306e73b0b5628eb3a05c1c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779102, "uuid": "eee6033c-5875-48bd-a93b-01e585f63f68", "value": "T16A837DC5EAC3C8F5ED2209351272BB275AB2D03E2268EA83C3A5D975EC125C0F557B5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779102, "uuid": "dc986547-090a-43cc-8bfb-83acdb933cf8", "value": "1536:pWOLMM5Md2joiye67qbqC3tAjw19KHVdxYQ51B3:nLxMd2M7wqYti+9IYQ/B3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779102, "uuid": "d01268b9-aa6a-40bd-b04b-97fef1736295", "value": 87316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779102, "uuid": "91b2fee5-d256-4463-9b0c-b4e21d1f64d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779102, "uuid": "d65df809-2e85-45e7-a094-67ae6428ac9d", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7b8b9a-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711966, "uuid": "3292b274-eaf0-4fe1-ada5-088036efd6c1", "comment": "Malware payload (Mirai)", "value": "009c0a0b2e3a681e46625ffcb31a352b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711966, "uuid": "4b9f91a9-9594-44cb-8873-adab62eae5d9", "comment": "Malware payload (Mirai)", "value": "3be2e50ec63b38d99818f12d8f999314ff48317fa7971f18bbe0cdc7ffd3d1ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711966, "uuid": "336fabb8-a956-43bc-a599-1c76ce6483e1", "comment": "Malware payload (Mirai)", "value": "d68aebf725fa1a22061fd88e11987933972ccf26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711966, "uuid": "65ebea96-dc4f-4dab-8ad9-bea7bce68227", "comment": "Malware payload (Mirai)", "value": "c75c7bc89ac687194d65c33bf96e9317c965e58521d31b6f95e0ef72978f1f3d04f15c4dcc3b7475d7d2432eadb42adf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711966, "uuid": "1e0acb2d-8102-4de5-a1fb-1ffb30621c53", "value": "T1D3141B42BD419F13C6C622F6F7AE018C37166BADD2EA7103DD25AFA037869DB0D36251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711966, "uuid": "d239aa8a-ad2c-4a55-922e-dd66f0f348b3", "value": "6144:8+Ek0o7knctThd4v7D0aU0JUTvW/6Fip3:8nk0cnd4v7IF0JULW/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711966, "uuid": "340ff01d-d0f4-41ce-9d3b-44d8acb1597c", "value": 204952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711966, "uuid": "74df6cf3-bf15-4a9a-a353-4e04165d263e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711966, "uuid": "418eff19-9cea-428a-9c00-3535717a3ec6", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31aa513c-e268-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766759758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766759758, "uuid": "94346c5d-9226-4787-ba8c-6525680c899f", "comment": "Malware payload", "value": "89d44de38d7e9cc99ae02c23fc522f0c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766759758, "uuid": "c8801cbc-677d-47c3-988e-542067f824f2", "comment": "Malware payload", "value": "3c20ead1a550ee05ee3894527f8d87143615a6ad9befb4bb01f5f59adc0e70f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766759758, "uuid": "100582f1-df78-4535-a5da-bc1c6eb1914f", "comment": "Malware payload", "value": "f2f2b357155990012c0464d6f189b44664d49d9d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766759758, "uuid": "d0addb68-2275-45b9-a3b3-e592804f68b8", "comment": "Malware payload", "value": "31c193bd95ddf541c6b3424aa7df174a14492339e13ff3876c0a2c23a3a2e66b149a97b6feba3aa01252da333af8da4b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766759758, "uuid": "cf592a2d-8327-47fd-9965-2c3d5a423152", "value": "T18F9733DE63740455D19F4F309BA9A4C42A099D1712F0E8BBF726F2DAACF9EC9059D80C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766759758, "uuid": "8ec86a59-12b2-426c-ab8b-7136d1ad5326", "value": "f4639a0b3116c2cfc71144b88a929cfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766759758, "uuid": "3f8f46b8-f3d8-48d7-bd39-42ae0945cda7", "value": "786432:dgCBvyW2CG+FcZKi84fT2kTw4c5DmUqO4mqynsU12RPoUHBx:dgCBnbcZl84L9Twm9xRBPoUHn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766759758, "uuid": "2699f7b5-7cca-4362-933d-fe4ac8ad316f", "value": 41500807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766759758, "uuid": "06d97e34-8cdf-4164-9781-f87d8649cdd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766759758, "uuid": "d52ea470-9aa4-46c2-80ee-5a477c680ea5", "value": "PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cadd2b3e-e28b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775048, "uuid": "0abce112-5a74-46b4-813b-bb7072086c37", "comment": "Malware payload (Mirai)", "value": "bdab4e53e6c8a7bf84eb226ceb922b9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775048, "uuid": "28408b14-2330-49e4-8515-77a2c1f9d021", "comment": "Malware payload (Mirai)", "value": "3ca1b90db280a329d7cbdfa1beddf2d38be9331a928eab32d8dbfbd7adef318c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775048, "uuid": "dabf35d6-7b19-4564-ba67-249105fc9d07", "comment": "Malware payload (Mirai)", "value": "38f9181fa7d373abeae1361de8575cd8346dc599", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775048, "uuid": "57e4a55d-b5a6-4bb8-84fa-6f23b9f83284", "comment": "Malware payload (Mirai)", "value": "096abcc165f2ef92bd9456a7afa866edc520fee83f9aa3fe2c0db1595769bb7f7eef201f9dbeed12c279a6551ec02fb7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775048, "uuid": "f47cf64b-418a-45eb-9a26-357dcc7941fe", "value": "T14883E649BB614EFBD85FCD3741BD4B4535DC924322A83B7A3A70D418F25A18F4AC38A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775048, "uuid": "8a544c4b-a1ac-44bb-9174-e9ceedcc28da", "value": "1536:nDj8DU5yBnB04MVm7ErXMr2XKR7JzJ5BAdjIu5L1GT2bVR:noT8UCn5LsT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775048, "uuid": "e66c4bd2-0e05-4712-b914-d80d48945f2a", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775048, "uuid": "24627ed0-edb6-4ef7-91da-ff7bb8c791cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775048, "uuid": "4da5889a-6a10-472f-aed5-b7f63afbab5a", "value": "nabmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed31a4f9-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771669, "uuid": "411c2d60-5787-4df7-bd43-1bb16283bf6a", "comment": "Malware payload (Mirai)", "value": "00dff989f41913e57c2b3b5e765948da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771669, "uuid": "f8774c95-6d0f-4217-9081-5bc287241632", "comment": "Malware payload (Mirai)", "value": "3cde78c42230a008d8bfdfafa1f5bb00fef9467619d51c9732b1bfd3c12a0736", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771669, "uuid": "21d8a2e7-141a-4465-8ef7-a368f74652a5", "comment": "Malware payload (Mirai)", "value": "96fb53287c98dbbeab7705792deb3449d3bd4a25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771669, "uuid": "2221ef86-b06c-4ead-9e91-d08d63e78b6b", "comment": "Malware payload (Mirai)", "value": "9e0c18e3b56ff2cec929e6afb91de48fe253c1ff66cc8445b348e58d3babfac3fc56fb766f35a570a55905ebdf1deb01", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771669, "uuid": "105beeff-aa0e-4236-a67a-a68edbff94e4", "value": "T12B833B87A400DD7CFC4AE2FB81774F11B53477116E930F27A56AFD93AA720988929D83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771669, "uuid": "c8819b10-f931-4bb6-8f2c-da86e1c468d4", "value": "1536:liM2ccX7QYEca0P1MRzvqR3bFcfe/kl/Zi8Q+O0pMkXzs8JUXgFMntpOETPA:liM2HVEca0P1MRjyLmlRBOAXzXJUXgKQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771669, "uuid": "4a928aa1-69c9-4708-8a33-0aaef2f65056", "value": 83956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771669, "uuid": "9686d35d-5d99-4aa1-8bcb-f33647edfd70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771669, "uuid": "064dea91-f544-46b5-a907-9c6951e2cbc0", "value": "jklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e868662-e255-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766751673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751673, "uuid": "ac1a01d8-dbc4-4c9e-ae16-df56d15be131", "comment": "Malware payload", "value": "6a4554509ce27efe5c6b8e58431f60d8", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751673, "uuid": "916d2deb-4704-44a3-a8a3-58d3fa19171f", "comment": "Malware payload", "value": "3d1763b037e66bbde222125a21b23fc24abd76ebab40589748ac69e2f37c27fc", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751673, "uuid": "b5edc48b-05af-4a5f-97af-ccaba2178d54", "comment": "Malware payload", "value": "ff78a86746bdcc6ed1390ff291a6c599e96e8487", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751673, "uuid": "81fee85c-98f8-4d26-acdb-540fd7472a70", "comment": "Malware payload", "value": "38656bc9e5813122dc3449eb6a4d245a77bb3f66fedf5c77d134303b587de549f3c158eb8503af227aa8fe658694bb69", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751673, "uuid": "25a1df31-75fe-47cb-89e8-d4e5b3ee6bc9", "value": "T13F0812217789942AC01ECC30861A8BF3D62C7CDA3B2165EF61C876392F75BE31735696", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751673, "uuid": "8cd81384-ccb0-4074-993f-0352e60b45a2", "value": "1572864:ek4be145jxtpyiu8OxesSKZl8yxuaNs5GDJVHMWuLGAbyYsYCunzSou4nFWIp/5/:V4uTl7Ds0AVsYC4SyF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751673, "uuid": "7b5872d5-b2b1-48d7-8f99-3dd4b9e33e28", "value": 80380416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751673, "uuid": "dd3a02ee-dded-42d7-b65c-ca0d4f9c205f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751673, "uuid": "4f4aface-3ef8-4c87-859d-d5d6b34dd597", "value": "emed64_25.4.3_incorrect_signature2.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b3caf18-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775585, "uuid": "2bb2b281-0203-4edb-a482-9e8f4ca162a5", "comment": "Malware payload (Mirai)", "value": "a1eab840ba4d6096394d2596dac46a3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775585, "uuid": "3420d93e-a17e-40eb-b2a6-6a3aad7ee0eb", "comment": "Malware payload (Mirai)", "value": "3d3101538edbd8e2e436c87e4a625f6d51c4d5c554f8b74d82d20d8188221562", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775585, "uuid": "7708d495-01f9-4883-992b-c35d43634cda", "comment": "Malware payload (Mirai)", "value": "59b05136a9072f2d85507ab7a0a4b773a83be464", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775585, "uuid": "d22ec3f0-0793-422c-b516-2016ca69636b", "comment": "Malware payload (Mirai)", "value": "b2c90395105558746d51906372d8ff53dc6953404aba739ddafd33e04926d3ae1f85e1f33fc9afea1194d84a528af784", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775585, "uuid": "1d1a8816-3370-49f7-817c-657d0e09171f", "value": "T186244AC7F800DDBDF80BE67744530919B530B7A250939A33B257BD67ED3A0A90927E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775585, "uuid": "51eac853-bd71-45a4-92e9-814ea4c7c12d", "value": "3072:A7OPT2r+9hZNt2f74BcLFKRy1X8SSgCH86cQfqV9GxAVbjbifLpUXduh/FLaj:GOKr+VNKuy1sSSgR68zGxLL2N+aj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775585, "uuid": "d6fc8739-5286-4e56-b235-9b581343ae9a", "value": 216800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775585, "uuid": "438a1786-7763-4c91-9bf8-d0f99e4a865b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775585, "uuid": "d307b724-00d9-4070-a30d-95530d54d018", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0952ed7-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777688, "uuid": "3c4641c1-1438-45d7-a43f-d30f57f63765", "comment": "Malware payload (Mirai)", "value": "b72445cf05d7f845b646914f8b4d617e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777688, "uuid": "cf6ac3f8-0bbe-45a3-a45c-881a547b3a96", "comment": "Malware payload (Mirai)", "value": "3d5e3be3748f98b415fdaf7f0811669840100287603ae467ae3e3b5c82983c55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777688, "uuid": "cf87c1d1-b87c-4b51-9546-da233d163289", "comment": "Malware payload (Mirai)", "value": "4a6ebda191ce74fccec01433a178a8df1a002371", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777688, "uuid": "02c6bfa1-3478-4195-913e-e5218970e285", "comment": "Malware payload (Mirai)", "value": "03fe2416a01ed727676337a8b5bedd646a3436fd380ef3bc23454a31c1b2d8f895106ffc7ed13acb93733ad1d2d2a2bc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777688, "uuid": "db6d66c0-9e0a-46cd-a189-28161a03d4ab", "value": "T15B83F69AF9819B51D5D566BAFF0F518C331347BCE3EE72029D246B25278B82B0F7A401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777688, "uuid": "5c906235-e435-469e-88da-12a7deb7f819", "value": "1536:llNn74Iql+T07RN7dava0ctMwy2jDBO13HLNl0QkijxfLj/7q4ZfYm4HT2bVR:t4xk0VN7QICwy2jDBOKQZxfn7q4pMHT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777688, "uuid": "b6f9fd80-0ec3-4f12-b380-ab531a568f54", "value": 83836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777688, "uuid": "9d01c74f-eaea-4be8-8ed9-d435cf385def", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777688, "uuid": "c3d7ae87-bc4f-455b-81fe-cbfc0c7b6001", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0599618c-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710292, "uuid": "354fbed7-d9cd-492f-bb91-860b7460f091", "comment": "Malware payload (Mirai)", "value": "4f73ea3dc31f0dc22f43e3f7a96f1a84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710292, "uuid": "5afb1ba0-ac33-4b02-951c-7b88e9346ef4", "comment": "Malware payload (Mirai)", "value": "3d78188b3033c7a8ce9e3e2455f8f66bdace0a82ee171d547e78fdeb189fec6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710292, "uuid": "2fab2add-bb58-46b9-8090-b938bde92091", "comment": "Malware payload (Mirai)", "value": "839081c05e80b0f6424cc90c6086a65d2421b3b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710292, "uuid": "07b4df7c-9652-4afd-8b5b-8aa494d7b53e", "comment": "Malware payload (Mirai)", "value": "ecc7b5e383f15b77bc1026abb5292c14720a45fa23de43346269af7c457cf93b0b305700532a3715e8f36acb335cd4f6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710292, "uuid": "48d6e4f7-f188-4cc5-ae0f-a4873418a8b9", "value": "T14B63F6A5B401DC3CF94FD679C55A0506EA68B30491530FAF827AFD93BC721A86E27C86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710292, "uuid": "45418c3a-ad7e-4818-b580-3b5278b2b72b", "value": "1536:Zx9Q/MdDRbLXbdXi38ES6pFOXwMIln9/C+Z8pk:VyMJ9bdXQJIgP/jz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710292, "uuid": "a461a2f1-9cdc-47ab-b34b-bd5d58e5f281", "value": 68128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710292, "uuid": "c84de8f9-c1ec-42de-92e1-928cde487a2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710292, "uuid": "e5d76fba-4eb0-4e1a-8b0e-e0a9bf201db3", "value": "shadow.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "378349b4-e256-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766752037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752037, "uuid": "9ee45603-4193-4294-9ade-62c54dac5bb3", "comment": "Malware payload (Mirai)", "value": "c9e2a936c27ad08b33b3dc53cb58014b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752037, "uuid": "67083f96-ba1d-4e6f-9406-b7b411bccdb8", "comment": "Malware payload (Mirai)", "value": "3dcc5fe10f68d966540761ca44fb6a2ca11e135d60adcf74598d7f458300d371", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752037, "uuid": "c2f5c077-f49b-4925-8fc4-a709aa0c30b1", "comment": "Malware payload (Mirai)", "value": "5789a91bd166c5ed369886aec33f830f803f0528", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752037, "uuid": "6b0ec7a9-d2ba-4414-9822-74b881d1c773", "comment": "Malware payload (Mirai)", "value": "bf1ac28fbf47d320bf4ef77168bb398c6a70d7f122b8cde4c04269124c5ebc37125140daf90e137dda2043dceaa1d9ef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752037, "uuid": "8d7542e8-f899-4e2e-84fe-a029591426f1", "value": "T11B430269C047499FCAA10CB84C638082B36E3CA5B1F6906375259A38F18D9DF39FF4D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752037, "uuid": "62ed590b-3343-4d24-9373-916c1ed23609", "value": "1536:PRg/PhNZHgEzyvwrM6uhOGAT/NW7t0oagTArIf5KDrI:uKEWIr9/NWAVaK/I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766752037, "uuid": "727273f5-2c7f-4b87-9616-b825fa1b7ee9", "value": 59460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766752037, "uuid": "d80b2cfb-63df-4995-a54d-c14e51c439b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752037, "uuid": "b12c411f-73f4-427d-a6ff-8f38d665c16e", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec3d8c7b-e204-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766717121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766717121, "uuid": "cdd486fa-4ec0-45bf-a455-5b07f0a1feb2", "comment": "Malware payload", "value": "c096979237d1aa6fe74fc36a81be9866", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766717121, "uuid": "756fc3b9-a189-4ba1-a604-7ed631634ee6", "comment": "Malware payload", "value": "3dd155f3c749a1a2eb1a818072588b2bdf80bda9d1e1a4843dc3cabd6a41e64e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766717121, "uuid": "ffc19d50-e89b-4e28-a8ad-a64458acb74a", "comment": "Malware payload", "value": "5a727a87d135f4db1952b8f9964db2ddf4516da8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766717121, "uuid": "91b50d6d-8cb8-4d34-a29a-551bb6d133e4", "comment": "Malware payload", "value": "4c28375a6fc06c2941637bf1f2e05d2c55f1c1eae9f67421badcc888b08e0ddb8d1edaceb30e54bff29a4cc24d10b0bc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766717121, "uuid": "69572a58-a94c-4f16-a6b2-8c8a2c453dee", "value": "T1F084293BDBAD6EECD4524078C4100395D330783A4626E6775F94034AAF07BA45EFEB9A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766717121, "uuid": "2c379217-f315-4e08-aac8-7b0d64583632", "value": "5bd026e4325f8d3a293e3592db88fc13", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766717121, "uuid": "d2bf8af2-8c9b-4f04-b1ea-d7e79db4aecb", "value": "12288:GF9bAJD7bhKh0k+jt8ZWo0RtUOo7zruw4K0oF:GF9bAF7FKh0Jt8ZWoItUOk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766717121, "uuid": "ed4b92c0-99d1-4a4f-8b2e-5568bdc89c2d", "value": 398848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766717121, "uuid": "9aa6f818-2335-4226-bfda-d4de86e784b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766717121, "uuid": "8fabd6ca-a530-4d1f-a401-6e7b09cf3373", "value": "3dd155f3c749a1a2eb1a818072588b2bdf80bda9d1e1a4843dc3cabd6a41e64e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06063216-e220-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728761, "uuid": "9c83f91d-dbf9-4f7c-9a84-16719193b2e7", "comment": "Malware payload (Mirai)", "value": "a61f8722578775c2df28ef3f301d147d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728761, "uuid": "6681dba1-a14d-4160-8ab9-7647b6811626", "comment": "Malware payload (Mirai)", "value": "3e40a1b49139fccaa3c8958b0607cbd9b235e0c770c49f4f6e0186a9f3247fb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728761, "uuid": "da86dd5c-9b73-4510-bf47-32464e316438", "comment": "Malware payload (Mirai)", "value": "25e14200d89d76c4f271350820aeaa8e50f0318e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728761, "uuid": "f1a3f8bb-37c8-4aa6-866c-8955401a0888", "comment": "Malware payload (Mirai)", "value": "bd99f338ce42658dd1d543447496535700de11a998ced6140fece95f3f3fb15ddfe0036a89a975ff34cff3ee7bd549a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728761, "uuid": "b63673ad-8cea-40f1-8d77-d5e151e23640", "value": "T15F142946ED418E11D4D622FAFAAF414833536BB9E3FA7102DE205F6023C6A9F0F76552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728761, "uuid": "0f317b89-494c-47a5-9a45-8173e459d38d", "value": "3072:voj81jJTVneXREHKVAbW58fyitqfKNwODuxEHK1gUv6yACUzcRozTKyGaL+WCSqr:voj81pVeXREHKVAbW58fyeqfKNwODuxX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728761, "uuid": "4a5ee807-67c0-4d56-bc23-cd157c980bc9", "value": 191160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728761, "uuid": "e60e5ab4-b9f8-406e-8f9e-b3580a7a0955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728761, "uuid": "11a2f918-2439-4202-aaae-49bf5f5d97d6", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e17891f2-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747168, "uuid": "35a4a5d5-446e-4b54-90b7-f83ecd0d78b9", "comment": "Malware payload", "value": "4a771cfbd4182ff5ba4f3acdd9ad6942", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747168, "uuid": "0be8b414-2676-45a8-a1e4-732602637070", "comment": "Malware payload", "value": "3e82e331d41331a067f36a04a4076436ab1377a039879d866e05bf43c9d17834", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747168, "uuid": "9b2eaf25-ffef-4a00-be50-2f1948011ed4", "comment": "Malware payload", "value": "764eef69f670d68234de99ae5129f63d9959b22a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747168, "uuid": "9fec94e1-c1e3-4847-b9cf-9a2fbe76112e", "comment": "Malware payload", "value": "64c0217315322588ba8944a1c5c131b8342ab34aea2ae7b20f31869933a2707f8f25d1c1ffdcfa837b71a5e06693b0fe", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747168, "uuid": "eb401475-adbd-4c51-b42e-ddbdad5bf972", "value": "T1CD6319DB7DE9C8AF53233CC0582C76F8A737BC37DAC17069882738799026E46A726455", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747168, "uuid": "1379d36a-deb4-4adc-b81e-95454381822b", "value": "1536:I9l/AoSSMwlDCl+Ej2anNGX4CfNTJLi0FE0gJE9uWol4x1IMVl+IUnuK2Ug6Nsux:I9l/5MjausriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747168, "uuid": "be22d1bf-9ad7-4eef-9528-ac269029fb28", "value": 70607, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747168, "uuid": "6d7d7912-dec2-4052-a32b-66eff52ce7d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747168, "uuid": "1d5d6bce-5e1e-4448-8098-a0ac6648d533", "value": "invoice-1645080830.pdf (85).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d524ddd-e1f0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708184, "uuid": "0bd4ea87-0473-4954-889c-2350799603ad", "comment": "Malware payload (Mirai)", "value": "cce721a1e5fc2873dc90d940156300e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708184, "uuid": "1e7e9376-05ae-42e4-a47e-2ad6be1958f3", "comment": "Malware payload (Mirai)", "value": "3eeb5a3e7a2f63f585f74d08bb641943cb332026bb7a9c66745b2445af0a71e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708184, "uuid": "8f5eeabf-257a-43bb-8651-4a05cdf1a34f", "comment": "Malware payload (Mirai)", "value": "6e4da3bf0c60e1c094a6f1b0621a56b002fb5764", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708184, "uuid": "18837c50-ee92-4be3-b029-1be1b5c18246", "comment": "Malware payload (Mirai)", "value": "056b6193ea827f13c76a95a71b1ead6a871925252f08510c6df9e678f9dfda03f8bf8d58a716b1a123e96bf7d16c2571", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708184, "uuid": "f682af9d-e09f-48ca-9fef-14a9f863697e", "value": "T1CE93A6197FB25FE7E82ECC3705A81B4924CC170621597B3ABD38D464FA4A64F1AD38B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708184, "uuid": "2a3e03e0-5c1f-4823-abe2-324ffa9f3036", "value": "1536:+CxqsP0ThHa9s07xsx6t56tk0llczAOkwv9b9gOPZ:+CxqsMV70Fsy6tkx9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708184, "uuid": "7dd5be34-d250-404b-b268-9f246157e2ac", "value": 96208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708184, "uuid": "4f0e43b1-de98-4c83-bf5b-255c382ea63a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708184, "uuid": "88ba0474-4fa1-47bd-bec2-2730bb5230a6", "value": "shadow.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ee67779-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779081, "uuid": "6428ed02-3394-454b-bed4-1104c293dc8c", "comment": "Malware payload (Mirai)", "value": "c6124b27fb4f13a77fddb325cf378a44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779081, "uuid": "2694d833-b16f-49cd-ab45-0d90c1b9debf", "comment": "Malware payload (Mirai)", "value": "3f1c917d6a89ee333b8cf6717aa1bf8c61fa19489433db1ee6813e3ade773703", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779081, "uuid": "8229c0f5-1881-4142-8579-7b8adad970e4", "comment": "Malware payload (Mirai)", "value": "c6bb89f67a453a82c10da1c0a329556c68aad3e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779081, "uuid": "2cfd2a9a-bbab-484d-8b40-660e15cbf96e", "comment": "Malware payload (Mirai)", "value": "fed61f400514158eeeb11d6ee5ef356a2dcb1c763ed93b9dbe41f72e4df1cdb8621276d21577ca344521f84d48798619", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779081, "uuid": "7c2b85cc-3284-4dbe-8a58-340aa312e241", "value": "T15E8328C1FA8BC0F1D91B89304067F63FCB31E8295061D75DEF9A9E36DA33581A212389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779081, "uuid": "86b6f27a-05b8-4fe1-b2a5-10316a7906e7", "value": "1536:iXDwDhVtcU4xiUWaqH3Fgo3IeEMWximKjfTsv4gz9F7vq:kDWKzQLH3FwjwmKjfTc4gq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779081, "uuid": "48444fae-46fa-4217-8304-be93284c00c3", "value": 87316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779081, "uuid": "11fe96a9-575e-4580-939d-b8c67042d862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779081, "uuid": "83c99e62-bac4-44e0-b744-41e706056579", "value": "windy.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e692b97-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771725, "uuid": "8cd7c37a-19f4-414a-aa72-ae5dce025a21", "comment": "Malware payload (Mirai)", "value": "ae949ab04425ef605cc24734cf401edc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771725, "uuid": "c5cbb7ef-e889-4649-834b-eb9b03e8d64a", "comment": "Malware payload (Mirai)", "value": "3f1cf0abb74f57aaf8e94185758a93628130ee46f772ac61f3e7778170bc691f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771725, "uuid": "327d36e6-20d3-4e52-9d11-e579c29e20d1", "comment": "Malware payload (Mirai)", "value": "30296a7872368fa84da3b76012813f85667df30f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771725, "uuid": "77c55bf6-76fe-499e-992d-da814f17ff11", "comment": "Malware payload (Mirai)", "value": "ed01ded067cd9dd106271deb032970702fec9f63ba5d0bbba21f11f0e12ee8d0dc39dc395e3ccf59902009cc0b717646", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771725, "uuid": "605c930b-20b3-4a35-8e84-ccc4f61903f7", "value": "T12444B64E6E228F7DFBB8877447B79E24975923D726D1D585E1ACD2001E2028E241FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771725, "uuid": "3bfc3f2e-421c-43a0-9336-6fce4ff140be", "value": "6144:BxZ4tEBCARUoUnBe80k5L5UgwVO1VKHubUjEf:j3FLbVbEf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771725, "uuid": "feb844b3-951c-46cd-a62c-9ba5c36eaa68", "value": 261080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771725, "uuid": "4d787b8a-36a7-4e19-86bf-89f5355c3e29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771725, "uuid": "61cc6180-57ee-4cf1-b2d0-769d9700861e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0388545e-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747225, "uuid": "1f3ed815-fc04-4fd5-bf38-3e0f7050d844", "comment": "Malware payload", "value": "e7ad30d4de22d99c5f8f532436f31e6a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747225, "uuid": "529ab999-f0f0-4160-b78a-5df58d453312", "comment": "Malware payload", "value": "3f4db6467100d3687f25db7d90cee05d7002c7c3671b5b429c9476b0a6474afe", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747225, "uuid": "e46b28b1-6509-4f16-8cc5-9bde2d97c710", "comment": "Malware payload", "value": "1f8ab78cd7844d5e050f3682e29e195e243f9fe2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747225, "uuid": "75462d1f-5fc7-4dff-ad6a-b1eee99ef52d", "comment": "Malware payload", "value": "7613b5878be0b2a338b2ddf1259a57a1f3708da13d853032665d04524e29938a66050274df72d4bfe22f6467d84c03b6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747225, "uuid": "18612bc8-7b0c-48e8-8a53-d2b16bb9dc5c", "value": "T162733CC69E3514A8E01FE0848E1978ECD4AD7DE709EF0C8EB2A7A27137125165CF867D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747225, "uuid": "dc7daaee-bbfe-46e1-9230-3afd08769f9d", "value": "1536:I9l/AoSSMEvbVuMocheswgHM7T1qOhBANrI7r3l0sLZBQKsmyCJnQ5O691h8KYYk:I9l/5MEvbVuMocheswgHM7T1qOhBANrk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747225, "uuid": "50f164a4-ac5d-4bbb-8a2b-01f3346e7a28", "value": 73484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747225, "uuid": "1c70801e-48c2-4b95-a67a-fc4d829011f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747225, "uuid": "cc7adfa6-5acc-4d25-8ee5-dca89e672f59", "value": "invoice-1645080830.pdf (75).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e57534-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777264, "uuid": "42e1fe0c-da5a-417a-8987-5c642396a1ab", "comment": "Malware payload (Mirai)", "value": "be31c4138fc2276d915ff1ea66d15b5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777264, "uuid": "56a82abd-a838-4deb-bf72-dda50440c6aa", "comment": "Malware payload (Mirai)", "value": "3f4eaf7f46a580171091e644d35798c6b4bf5711456f649325986b0662f3e7ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777264, "uuid": "22e5abd8-2da8-4a59-92ec-fee4226d482f", "comment": "Malware payload (Mirai)", "value": "d24e9988df3e6c53d40da45b358b0a4b390639cc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777264, "uuid": "1e172a16-cfe9-4d8b-a9e3-5944be820ae4", "comment": "Malware payload (Mirai)", "value": "07d690a43d72f0d30289e2edd6bc01fb6fbada66097246926ed2afc0aba3d44f7ac1b01abf4b0b0ce25bc1ec440325c1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777264, "uuid": "91d63620-f409-4b9e-bc2a-ec2786590af6", "value": "T151245C46EA818E13C4D617BAF5AF414A3332A7A4D3DB730699146FB43B8379F0D63606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777264, "uuid": "12877a8c-39ee-4e9f-b259-0ad5bf45bdc8", "value": "6144:YKRu6aVk0PmatPRKaUvbKq2AwCuBGM/9sI:BRIvmatPRKaUTnonn/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777264, "uuid": "24707eb1-af1c-4af6-b1e9-c9523bf23b69", "value": 218856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777264, "uuid": "6df8c745-eb98-49ca-8b5d-be71de77d804", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777264, "uuid": "b26bf196-161b-4d9f-b171-17c398d60255", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c866fd12-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774184, "uuid": "469dd7ed-52d1-4aec-939f-849eaf21a60b", "comment": "Malware payload (Mirai)", "value": "39e32fa1eba3a869552aa39684c0c6e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774184, "uuid": "030ab9a5-c382-4b00-9428-0176968afc29", "comment": "Malware payload (Mirai)", "value": "401c8bcf45693531c97e63be03e164b10d7365149d92b2855e366137b2a85122", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774184, "uuid": "db9dd2e2-a3a1-4560-96db-0466c67c16f5", "comment": "Malware payload (Mirai)", "value": "867d4de0beebae90f4a1213c3b2c9162bf7a81b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774184, "uuid": "0fd4a2ac-d1b4-4478-b72a-40e216bcf367", "comment": "Malware payload (Mirai)", "value": "19e55df9044eff43a24f47a67982329f225e8cec8b0ebd242e7a39387a714b7077949cd19c18a1077577a914494bc7f9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774184, "uuid": "3770daa5-ab94-402c-9cd5-3ccfe0db0d8f", "value": "T13B34D706BB611EFBDCABCD3746E9170129CC540A22A93F367674DA28F50B61F4AD3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774184, "uuid": "12392760-756e-4231-aa39-7b83750382cd", "value": "3072:EwFOIZTETfmMX0rXzvZMoiFzdRL7+PnZgEzzP:Ek18m3rXrC/qvqEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774184, "uuid": "fc32adbe-42c6-4a6c-b57d-074bd882b96d", "value": 230592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774184, "uuid": "2f927471-03a2-4882-818f-89deb92b5c7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774184, "uuid": "4d670ab4-da26-4c5a-a7c2-3159bc71fb4a", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67724005-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747393, "uuid": "08b50cf7-db49-49e4-8c96-8a4132156946", "comment": "Malware payload", "value": "c5d1f4216c3d7f79f6dc2f5167234b14", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747393, "uuid": "c70f0975-4988-495f-a9af-0c51d3423c4a", "comment": "Malware payload", "value": "4029b4e8a5d398523ab9126e0f01517d2ae4e143d1c50479e8c6bc9f14abf276", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747393, "uuid": "fa55e5d9-6817-4d50-a484-19d72e3b1bff", "comment": "Malware payload", "value": "9fab28cabc62139f0fbaeae2613dc762077fdbb3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747393, "uuid": "b81c904e-f0c7-4c9b-bd8b-b3ed57a252c3", "comment": "Malware payload", "value": "bc2ecd303cc7b5ab201a93d05d68511d0825fd97764fde9c2b91add9f00c4d12987f2e672ab49b1bc71365a46d9f21c7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747393, "uuid": "9b37ffb4-1e6d-402f-8204-54747a45372a", "value": "T16963283EBC75D2F229A1F8481D594367C28978447E81E65706CFFB8BAF68B734935088", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747393, "uuid": "d7d93e20-2d44-4bf0-b3a7-6fbe8c0e0537", "value": "1536:I9l/AoSSM6PDAUxo+gSVYSuZhpzo9strQMLsRzeUYViuVB+5O/t06Nt6sm+Ko/rm:I9l/5MtXusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747393, "uuid": "dce98212-c2c7-4d11-bb83-8ea8c820635a", "value": 71491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747393, "uuid": "b8e6f5bb-5cde-4521-be2c-8a2a2d4b6d2d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747393, "uuid": "8d82498e-2105-44af-a18f-9f5cdf774d14", "value": "invoice-1645080830.pdf (43).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88161c9d-e2b6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793404, "uuid": "92ce8e02-6a28-4d62-9632-7615c635210e", "comment": "Malware payload (Mirai)", "value": "0d270be6f629c5f7d1b1ad7c95a62e1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793404, "uuid": "8a5d0117-37f2-4d16-91cf-65a7e5e986d1", "comment": "Malware payload (Mirai)", "value": "40a71f47a4196028be88e177e6864e4619c91a4c3fe6f818cf240f8495701c17", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793404, "uuid": "02a653e3-d788-4aa3-8f05-1be72dcb436b", "comment": "Malware payload (Mirai)", "value": "7b7cc71517f241c67666dd048a63389ab708bda0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793404, "uuid": "8edd0f8b-464a-454e-b198-487b2bb1fb48", "comment": "Malware payload (Mirai)", "value": "b7093dc2de7543ef004c8ab97453b3744e54ce05736962a3ba23c0ad8994518479779b81e1f04494409235e55a9b288a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793404, "uuid": "aa52ebf3-7b51-4a42-a681-624d373c4b5d", "value": "T16C732B81BC919612C6D566BBFA5E81CD331613B8D2EF3203DD21AF25378682F0E7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793404, "uuid": "8e371066-fa13-46f5-9d7b-d5bab1d554ca", "value": "1536:xgSwHiDHSZm1CZyjF3CVN2Ij6C4rwpRZDt6Ekv5bVR:SSwHgjZCVN206C40pjBC5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793404, "uuid": "34b42b5e-2b35-4081-981c-38e6647844b0", "value": 79644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793404, "uuid": "0839311e-ee7e-4c04-ad46-becb1f69553c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793404, "uuid": "bfe17647-6a6c-423f-9144-7df811b2bfbf", "value": "splarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d17f28-e220-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728752, "uuid": "4cb5f02a-1ddf-497a-bedc-1296a9009318", "comment": "Malware payload (Mirai)", "value": "65ed69aebe5bbab432197ea14e399471", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728752, "uuid": "62f8f63b-f2c0-4217-880b-47d6347c7aae", "comment": "Malware payload (Mirai)", "value": "40ad3e7b439fd5e5a1ebec801c09db1b0fb8e3df3024e941af8eea3f8e8b1549", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728752, "uuid": "5d9280a4-01ab-42ab-af66-9532e2d53201", "comment": "Malware payload (Mirai)", "value": "761bd65d040a98a652fa538b5a9b57b78ee0e0bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728752, "uuid": "5a3e13a1-7dfe-4414-8dd1-dd0cfc681264", "comment": "Malware payload (Mirai)", "value": "79ea920bdec79b79f3693ce92f4a5b0b01df0a8ad3c5f16a2ecf320ff4abc95bb5d5d12376c391e928b493ff4ba718e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728752, "uuid": "7d925297-2ae5-429c-ad03-811b5695f921", "value": "T1787302A052552597C2F39A37EDC9C904509A07F0B35E36BAB76C8E4D18F3863A3158EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728752, "uuid": "805c6270-84d3-456d-b023-292676412a03", "value": "1536:e09csjUkbQBfpoQ66Fn8VEuY2dLfcphoRVl/ieYlYpeB/aLcT:ebDFn8VJFLfcQ4hlY0ELcT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728752, "uuid": "8f219916-34a4-489a-85b9-5b465b5c684f", "value": 74696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728752, "uuid": "2f65889b-7817-421d-b455-3610395c4c71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728752, "uuid": "3b7052f1-3ebc-45a7-a5d4-88f9bfb393c8", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5143a00-e27e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766769508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769508, "uuid": "76b2ebc2-b3e2-4e34-8a17-7b279e022cbb", "comment": "Malware payload (Mirai)", "value": "6127b5deaa894bb3ee1ff144fa36c945", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769508, "uuid": "ba952925-ab6d-4ad0-bfa1-6d31d6a25386", "comment": "Malware payload (Mirai)", "value": "40bec1ee86a5ba5ed620bbe546b09d072481d71356ba2025974c08a0e3f3fb0c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769508, "uuid": "b952a9d9-786e-44c9-9a11-afaa07362291", "comment": "Malware payload (Mirai)", "value": "29b562532baab837db97a2f1db7fce55866927a6", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769508, "uuid": "4a7fe789-2740-4dd2-a1a8-e99ffa72730c", "comment": "Malware payload (Mirai)", "value": "a87c56990185e02f1aa69db148203c33c6d584412f3e8c82902507183493c4f37b1cae53dd13d5e6636e9a97be0edb61", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769508, "uuid": "c3d2f955-c28a-4ebf-9cdb-cd77bc11f715", "value": "T15731F3CE20315BB229CD9E80B2E0914AF4C0FAD666F19F74FD9628664DD7604379C638", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769508, "uuid": "acec0790-8c1e-4b23-b018-9ca330a80001", "value": "24:nDdffi3SXdu1qO8dmsDadyHydTWTEgdkBWRdmnRdE9tbdb2bpIdSyySyjJd98HAr:nDpznarF2Eg460R02Ik8Aa5Gv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766769508, "uuid": "7a06b6cc-fc28-4522-853a-b6a101ea3206", "value": 1737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766769508, "uuid": "d61be98d-7196-4277-9752-b41140dd1c74", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769508, "uuid": "cd43f2e5-04fb-4445-8649-dbf98fe95f0b", "value": "cat.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "748b3fd7-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773185, "uuid": "f74b5f51-61ae-41e1-993c-99dd3d4f47ae", "comment": "Malware payload (Mirai)", "value": "b90d7adec1c1128661022c81ad5efe75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773185, "uuid": "e1aeedad-122d-402b-b5e6-75db077b20a8", "comment": "Malware payload (Mirai)", "value": "40ded3b23a4ac6f18f56b909a0710cc83af34f777d3b41cf1f33fc98d626d70c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773185, "uuid": "4f64508c-007f-4b52-8af8-e3ca61c17d3f", "comment": "Malware payload (Mirai)", "value": "9c7b1935bdc22d17a9c3760f400cd97f1f445c66", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773185, "uuid": "db14fd89-eb49-47dd-8c9e-b451867d3d24", "comment": "Malware payload (Mirai)", "value": "2079738ef7f558997f6213138f83fa08df73ac0a0f79113885b912e58cf2f416e3c75bbf42a780dc2a33d94b0e61b007", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773185, "uuid": "59891c11-e842-4f3e-9817-224f01ef83a3", "value": "T180930996B8918B52C6D452BAFE1E11CD331317BCE2DF72539E146B24778B82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773185, "uuid": "90ca4bcb-ef77-4f51-9163-757863b23885", "value": "1536:bwnCCaHsDKTvYxgSM/UPTZrr8dqR26XWyzLVSMaC3dAXJ+Eu3EMHinPW3uj+xT7V:w8XMr8MBXWOLwf5XPW3uj+xT27rT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773185, "uuid": "8fe9a360-8c19-425f-b806-28c6ff21fef7", "value": 91564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773185, "uuid": "046ba7e4-bc4a-4bc3-bbdc-8ab78f951180", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773185, "uuid": "28916c28-686f-4343-9aa6-0ca46882d224", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45275439-e299-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766780836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780836, "uuid": "26d7fb03-db42-4a7c-a6e0-50114cf289a3", "comment": "Malware payload (Mirai)", "value": "ee791548aa30d3d49ec53a55249d9e18", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780836, "uuid": "ee1a8549-9b70-476a-8d64-3670c76af3d1", "comment": "Malware payload (Mirai)", "value": "40efdc7ef4c9e5a47cc4766040209704bea1dd7c8b21bbbf88b8081f0e5d2f49", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780836, "uuid": "0c60d0ba-e7bb-4f28-9f4a-4f1d645f41bd", "comment": "Malware payload (Mirai)", "value": "461757a92873d0fa8ba9b3569426d9b774e46cde", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780836, "uuid": "0ec2398b-1176-4e10-bf80-6557a051e814", "comment": "Malware payload (Mirai)", "value": "09e1be54f82540711324ce2e7492e0bf71a40d637e099a7e4056d3e1a5c0fe30aed2d9f2bd71d9b4f258815b11a4a5d5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780836, "uuid": "cf0b33e1-0ca8-4627-8a0b-996cb4e3f845", "value": "T1B321E26F76112634389984AF0AD7ED9D6506903329483C44B85DEC48AFA50ADB7B0FFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780836, "uuid": "49a90c0b-1441-4b07-842e-6342db83dab5", "value": "24:WhRwzFjTGDkbPXqAhBgu6XyBRjsmgz3Ae5B6iwBQLAdAQwBQLALGNGQLAM2Nbipo:WQ5GDhiB2U1Mt5bwG6wGlXnBpGDmhST", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780836, "uuid": "073720e8-bba5-4066-b644-c567bf810e46", "value": 1290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780836, "uuid": "ba3433b8-ba3c-47f6-9478-98339663d9c4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780836, "uuid": "261ccb1e-a211-4314-aeb4-e17e38434734", "value": "wget.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9889e6a-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775448, "uuid": "82385959-3541-4b62-82c1-3d0add7f0174", "comment": "Malware payload (Mirai)", "value": "900f87796b89f70a17aeb58d017ba139", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775448, "uuid": "7d98ce97-f7e4-4daf-9d68-f98284247aef", "comment": "Malware payload (Mirai)", "value": "4102e7d0e44f867f0e81267f027e275c324ca6228382192c4e576c5444399d11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775448, "uuid": "055e12f1-096a-4341-8118-0628874c71bb", "comment": "Malware payload (Mirai)", "value": "6330ff8e3553d008a5b305c3e8355219ba42b13e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775448, "uuid": "84103a0a-8b73-4d36-919b-dd0ecb06d56d", "comment": "Malware payload (Mirai)", "value": "5d0ecd56f664a0d317aee33825190e4b9b2da109e841f9abac592e2c880812ec84e424b8e107196bf24c47cde7254f22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775448, "uuid": "9888fd6f-d542-4c2b-b0ab-4ef9d696e6ac", "value": "T135145B07B5C080FEC499C1B84BFFB53AD932B45E5238B29B67D4AF222E4DE601B2D545", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775448, "uuid": "0292f1bd-5a8a-4d0e-82cd-a741d6eb4d75", "value": "6144:p4RzQDaomzav6KAePaoOYl8HWMKMMzcf:6KPaoOYrMKM2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775448, "uuid": "c2cb60c8-8dbc-424f-b691-1d10e6fb9bb1", "value": 209352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775448, "uuid": "c9673aa1-23d0-4479-bb7e-b6e71cd586bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775448, "uuid": "38667df3-4ed6-4b73-ac35-4ff36caa1cc8", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0a8a2e-e282-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766770966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770966, "uuid": "cb190211-4761-46c9-9111-dac6dd64c985", "comment": "Malware payload (Mirai)", "value": "ba118544666364688bc9b8e07d9ee265", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770966, "uuid": "8ecf7a93-d6bb-42d7-9c23-96d465c4f9b2", "comment": "Malware payload (Mirai)", "value": "41116ebe9115c005f085867a5a66bf257b0a524fdf5e4806f0c4962adf4020ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770966, "uuid": "33359a2c-6999-4f1b-977f-6b9c5255cc80", "comment": "Malware payload (Mirai)", "value": "76107e41458fb4d16878eaa5b76653d9dc318c1c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770966, "uuid": "ec734ce7-abb5-4534-bd2c-55a3b64d71b4", "comment": "Malware payload (Mirai)", "value": "8d82e1f8de061e219c1b735f58acc33c7df196264e0b84e60920a9716f46d750879fb6f28e060abf98a7d2378c2a5d8c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770966, "uuid": "d4ce50fe-849f-4d4b-808e-d432154764a2", "value": "T1986302C797E58925F99F60311CCE3C0E58C29608616A0EA16FD4ADFB4900E787F6D395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770966, "uuid": "98981f75-249e-42f0-882d-16c49820b972", "value": "1536:JeMq++i5/NUiUZKMbWkpUjXb52aRGgBTTYFInouy8GyM:I5vo/Z1MbWDjL5/RGgBIFgout4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766770966, "uuid": "54bc12ac-ea56-4aa4-8a4a-ed207d40909a", "value": 67888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766770966, "uuid": "fc0f566f-ef13-4f6c-8a6e-b303b00d2b4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770966, "uuid": "980391a0-3851-40b2-9214-44b66b9fb8f4", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5284a6da-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730178, "uuid": "885b0362-9c5e-4763-a9e0-6f531bb7c714", "comment": "Malware payload (Mirai)", "value": "c3d0a0daea8f91665681e3600bb06a6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730178, "uuid": "f4ab2d77-d181-4311-a17b-9af783c0e1ce", "comment": "Malware payload (Mirai)", "value": "4136bbd3470c97ab33b3d8547ce442218cb59e7ff607d15e7e886181ed83e939", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730178, "uuid": "26a19989-f67a-4477-a8f7-aad86368a4f5", "comment": "Malware payload (Mirai)", "value": "3922820131e6a19002b2adf73a183c49030a2c1a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730178, "uuid": "70727247-76e3-4497-930a-405198624d6a", "comment": "Malware payload (Mirai)", "value": "ecc66003120786ecfadddcc55c823b6c287d3a0c67fe6960ce26e6e3ec2faa4cd28c7f9560daab02e1b2f14677cdfcd2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730178, "uuid": "800a201e-0279-4391-9f58-87b449082648", "value": "T10483D185B714EE06C42777B8B5C00551A2B12EFC979A050B8523B5F06BBCDDE2E07EDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730178, "uuid": "f40cd65c-e690-4968-b6c3-5187b21b94b1", "value": "1536:hBE6NLpQ2LqQZzmWTxpkSFSK75WepcaX4cDrppHpHwgFUY70r:hzNLpQ+qQvpaK75FN4cXHFwu1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730178, "uuid": "46105d3e-bf9d-4eb8-8b13-835914a773d8", "value": 83208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730178, "uuid": "5c62781c-81f3-43ab-a80c-447480ffc19b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730178, "uuid": "3167a482-5e9c-45f6-891b-dae406e4a26a", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75dcd811-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747417, "uuid": "3644b16c-4061-45a3-9bac-349f5daccd44", "comment": "Malware payload", "value": "bc594fe07adc1beaf7ffca28d190475b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747417, "uuid": "100d10e3-0951-433b-9c06-3f7265058f20", "comment": "Malware payload", "value": "4285d0b1c1ca66d78d3f5b4b02f107dec769ad93ac008190273af1a9cc6f1a4f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747417, "uuid": "17d00193-68b1-4c04-ba50-ed992d465165", "comment": "Malware payload", "value": "491e452cb3970a5e9b79c70cee5a8bd0e1eb0fe3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747417, "uuid": "3d903e20-ada8-4061-9729-a560f0af11aa", "comment": "Malware payload", "value": "77314c8c5bf50b0a001f7920f0dc1676e6d2db168d821e054b29e62f5da610e3952e42cf16b2d3fb5d230bca172e2bdf", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747417, "uuid": "1decb3f5-c893-446c-a151-d8b64a1d554c", "value": "T1CC635DC93250A9F904EACD43FA3FC7A18EB55484DAE62155D4D3BBD6C54CBAB030B8D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747417, "uuid": "5b3eb7b4-2f83-44fa-afb0-4b1305eb3be1", "value": "1536:I9l/AoSSMXcueA1GimKCPr6ii+6UndYuxUoL2BD2q8zHa0i9cpv1bqybjfTzpwux:I9l/5MXcueA1GimKCPr6ii+6UndYuxUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747417, "uuid": "0031d771-024b-4b9c-9955-a747b9347784", "value": 70633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747417, "uuid": "2c1b3f2f-0f08-4571-af2a-a91decd55ca8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747417, "uuid": "aeae1b95-7eb3-4a85-aec9-37d28c46182c", "value": "invoice-1645080830.pdf (38).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527530d1-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728030, "uuid": "662cff3d-478f-4b4f-addc-441cda6ffbd2", "comment": "Malware payload (Mirai)", "value": "aa8c2c426651d61a71edab3510278831", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728030, "uuid": "9aa29ca5-4a6b-426f-82ba-81678ae98635", "comment": "Malware payload (Mirai)", "value": "42e504f76fde24e705e3c5d5e54d8fedc44a142e3530303cdb11a9cad7f73690", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728030, "uuid": "639ecbb7-5f53-40c1-b0d2-10881a7d18bb", "comment": "Malware payload (Mirai)", "value": "9cda3c24b4dd1fa491e97c6009311c57bdaf19a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728030, "uuid": "2bf85d9b-29bd-4751-ad21-4da07cff2f33", "comment": "Malware payload (Mirai)", "value": "abbfa78c959d97876698a026d8bf9befc95a65cf8fcc9eb943c98b2f1a569a20def75345e053876b508ff6ea42621f6b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728030, "uuid": "612d50e5-63a1-462d-9d4a-2f318eaf1795", "value": "T137C31959F8929A62C6C356BFFA0F428D373613E8E3DB7113DD186B3136C651A0A7B142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728030, "uuid": "d91139b2-b232-42af-80f6-db2cd03e531d", "value": "3072:FCkUmOKdJpVJdeMNZcXqvlC1bjHH7ctXirVpvj1XqF8pcjhZ0Br+Vn53uF:EZmZdJpVJdeMN8qvURXctX4pvRZmhZQ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728030, "uuid": "3f0cf633-fd6a-4a3f-b9ad-190fe1262734", "value": 124084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728030, "uuid": "76f8a5fe-3896-45e5-9c2b-2a7c7491ce3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728030, "uuid": "3e49adab-8341-4c9b-8ec7-981e3e3f983c", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b27d2828-e1f3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709723, "uuid": "727205a7-9baa-4424-be7e-faa4eafa98ae", "comment": "Malware payload (Mirai)", "value": "c56ed3af0ce327758d40ddb9daeda27b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709723, "uuid": "ee9dd234-5706-40a1-b376-142b75b4ed69", "comment": "Malware payload (Mirai)", "value": "436c8c9956101b27cec82c77f1409407cb7c39e6b34e633b21bc6cb6e13143e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709723, "uuid": "c80712b2-b09a-438f-b04b-f62bc02e668c", "comment": "Malware payload (Mirai)", "value": "76882a12ccb9a14ce23af2318caf5927ca3da5f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709723, "uuid": "3310c91e-8242-4797-bd16-f35ef247c817", "comment": "Malware payload (Mirai)", "value": "40a36ceb0736c8db14a879eafc6a8ddf7b95c2ba4df09c0d49604d92b3de9a4d6bcb63f5b754704eae5ee3d087830526", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709723, "uuid": "59258042-1f6a-4eb3-820b-b8fa29798585", "value": "T15153F986F891D613CAD56177FF5F82DD371643A8D2EF73039918AB25368A82B0E3B450", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709723, "uuid": "68da756e-42e0-4b5e-b767-16d00caebc01", "value": "1536:x1eZtOxFM06KMOE+FwWEkJ6apLFjv4T2bVR:xsWM9KMO9VEk0Kz4T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709723, "uuid": "e6f48b40-5091-4456-abd7-4b6df22718a8", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709723, "uuid": "5f0be7c1-bc55-412e-925b-bddaebf1e005", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709723, "uuid": "ec334ab6-4ddb-4c6a-a7d7-a45b02c1165f", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deb839f3-e258-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766753177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753177, "uuid": "f82aaabc-4407-44a0-818e-f185c8fe7ea9", "comment": "Malware payload", "value": "11a4544afbe7ae2043008d6981a5b1be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753177, "uuid": "b2ace73c-86f1-442d-b55f-4751ac5c705f", "comment": "Malware payload", "value": "437fd13ca440cd325e5a6de37f472c707d6a2b5d6ef5c9cadad5ab03fb91a0a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753177, "uuid": "898e1edb-b718-4ae3-b55f-94ac315c4b9f", "comment": "Malware payload", "value": "851da3e67b55d0cc9320c097b50399eedbdceae7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766753177, "uuid": "0baed06e-31ee-4604-bf6b-db40c4f4e495", "comment": "Malware payload", "value": "360f4a75134196b4b2ef12ef516ec31ae2eaf664a7d120621a03968619d061c85278c1b9a0f46be17fabac85e4c757a2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753177, "uuid": "a5f55d64-aa8c-4b58-a19b-d4362f602416", "value": "T16F162A1BA5E324FCC6DAC074476FD623BE71B89942247EBB2188AE302F56E50671DF11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753177, "uuid": "b0043854-569d-4152-81f0-49cf2e8c6653", "value": "98304:nEmfCLfqpp1Si7ukqzX0WtP7cmNfCADtExRPERsbKP+gKTowL+TBOMV9qg2glMyn:CissbKWmTLJMi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766753177, "uuid": "9f36bdca-1d89-46cc-af92-087f1f564369", "value": 4389105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766753177, "uuid": "f58fde4e-7938-4114-9592-e8c65322eac5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766753177, "uuid": "9c4fdada-d6f2-4ad8-b4f9-735699a185c6", "value": "xmrig", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "553d39d5-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733619, "uuid": "12e0b86e-5ac8-44bf-8102-6bdc6c9150e0", "comment": "Malware payload (Mirai)", "value": "9829027c877b0bb488e54322c19ca569", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733619, "uuid": "087fe449-22c3-4cde-8088-27c160b72310", "comment": "Malware payload (Mirai)", "value": "439b5691344326a2b67d18c5414f27c50d2b5be2bba021a6c74fbd718fd956ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733619, "uuid": "8b64c90e-5275-4e40-8f2c-eefe4fca478c", "comment": "Malware payload (Mirai)", "value": "fa16161c17596d7401444b1addff746b9ffbc61f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733619, "uuid": "7d28cefb-8b72-4c5b-9b47-c8bbd92d579d", "comment": "Malware payload (Mirai)", "value": "864f20960f7ab5156b4cefe8c6a570f1bb12b407837f2747aa70526dac1d1e1502117f02ea2d4d4d684ea02dec9319a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733619, "uuid": "83592714-99c9-4745-a2c8-2d336e353fb5", "value": "T14FC39E36D878B9C4C0904134B8B5DE751B61A5C442531FFB7AE9C1790487DA8FA09FFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733619, "uuid": "f6c46881-d1bc-4e99-85e3-be2bfaa57034", "value": "1536:4qrKn5XxVHjpEGwtY4CDbD6YhCMBE5x3K8A4T45b+c0VjOtSKUvub3xKW9qUoSQm:4wcZvJz4Q6tMBeaZ+cpDUkxKaljQza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733619, "uuid": "63442a87-bc51-4473-827f-9de6d290ad9e", "value": 121124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733619, "uuid": "2a129710-c1ce-417b-a08f-58779346e5d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733619, "uuid": "b230e189-0675-48f5-8ecb-5c625880ba6e", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a82e5d99-e228-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766732469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732469, "uuid": "b203a0df-8e41-474a-bdcb-00f794343453", "comment": "Malware payload", "value": "8b8ef1b29317ffdbda6aad37f207f980", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732469, "uuid": "bd7beaed-7878-4b4d-b23e-3234f2f76830", "comment": "Malware payload", "value": "43de8d4bf8be8f3248e81c45a5034b84376d9bb2f78b5580c2dc67a744674ae2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732469, "uuid": "31b92b38-ce1d-429d-bac5-fdff64a0a161", "comment": "Malware payload", "value": "2ca5295734072054dc6190e1d636b72533be132f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732469, "uuid": "5a189de7-02d6-4191-a49d-acd4dca6cd5b", "comment": "Malware payload", "value": "eeedd93fcdd6ec6cdc6f51fe070bd05ef127921a91da02e390b0fbca7cf70624525e39629c7ed2633c744a04f4467ae2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732469, "uuid": "902d7636-252c-4a69-94c1-c3b2e6f187fc", "value": "T155B35B42FB83C0B4D1A946F334765B3B4571E5B210458C36DBF5B972ADA9882EA4A33C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732469, "uuid": "367db915-3b73-460e-a6a1-93e77b666883", "value": "3072:VJG4ukCblE13ICllORC72jir1XdwUT+4j:qzRE1hlOR9jir1tTPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766732469, "uuid": "d1e4e1b1-6065-445b-b86a-7dd32af37a6f", "value": 109612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766732469, "uuid": "7c9d4e5a-2121-4d31-856b-a240bec30d24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732469, "uuid": "a9fb43bb-f052-4221-a082-bdf02223b5f0", "value": "rondo.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20627863-e298-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766780345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780345, "uuid": "a78f1e64-57c4-401e-b668-0f49501f67a1", "comment": "Malware payload (Stealc)", "value": "0ca492aaba50d62b55369c79ef68835e", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780345, "uuid": "537e4758-6ada-4aae-90ea-ae0ad33907d7", "comment": "Malware payload (Stealc)", "value": "4435651aaf6cb09ccb5560c410aa573b9deaccde863076ed04ced982d154d9d9", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780345, "uuid": "a158a798-7c73-45fc-a535-75f41659183a", "comment": "Malware payload (Stealc)", "value": "79cd4117f62ddf704db67d09ae25a0fda8bf5954", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780345, "uuid": "db19fc53-795c-4cde-ae94-83861d351617", "comment": "Malware payload (Stealc)", "value": "5d194de9fc45235f472ebc215d38311fa45a0c4849dce72f94616867fc8b78b216eade8be7a32fccfed691f1f96d7cb5", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780345, "uuid": "ba196101-6b41-447e-a81c-393d368bc5a2", "value": "T1779633D483FADAA1D5424CBB17F1591AEC97011B35E3827DD6F43420AAFB3C9021A67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780345, "uuid": "8a687267-2952-4e35-927e-cf1659fd87ac", "value": "196608:IdqaRorridPyYSxnC26XIfgOq1bwrOi/XgsyNG4auZuTsPXauoFrYax/:EqaRerSqHC26XIfg31bwrOu4NAbrFzx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780345, "uuid": "4c172abb-4a5e-4ddf-9a93-80514fcaeec9", "value": 9446987, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780345, "uuid": "5131a55a-fa94-4802-85e1-e9d6d24de472", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780345, "uuid": "4e1b5ef7-2cdf-44bf-bf0b-cf5fa97ad89e", "value": "renpyloader-2.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b3614c-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747303, "uuid": "140542a0-fdd1-4882-88d8-15b03fbc283e", "comment": "Malware payload", "value": "c10b0101431accb6c23284dd07b6406a", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747303, "uuid": "18d5f51c-22e9-4fd3-96f9-a36c31f4db7f", "comment": "Malware payload", "value": "45530731951d09f20c5ef1a45f1194012987b18b72b06b091decfb2c504c3fce", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747303, "uuid": "3c2e4f9e-8253-4393-953f-d92508eb1b97", "comment": "Malware payload", "value": "86abaa8d46672b5f47cf36c726d04c9c8c697899", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747303, "uuid": "c77b6641-6ad3-4345-b634-86a3187d0030", "comment": "Malware payload", "value": "9019e033907f96cc058f5387b9dd2ac492a52bee42caaaeaa50620fec3db64864baa44a82d77a19f0cfca77dbcbef189", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747303, "uuid": "e3f11524-b550-40e0-9dcc-59578b9f0244", "value": "T104731C49EE23DC830DDBDECABD2374B1802D6682157711EB523BE631D19AF1B25312DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747303, "uuid": "70978afc-a8c6-46c8-a8e6-74491ca96169", "value": "1536:I9l/AoSSMUhd/6Lss5yyv6ps5Uzcf78e9MHJcyq/bSah8b/DXyEXjJJH9KdUxGdS:I9l/5MUhd/Yss5yyv6ps5Uzcf78e9MHB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747303, "uuid": "ce0d0537-5e4a-423b-814b-6c9050fdcef6", "value": 73428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747303, "uuid": "cefbb1fc-d24f-41cb-8439-cd648040ad2e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747303, "uuid": "361c86e0-0d5f-4836-9373-fae2c10ea476", "value": "invoice-1645080830.pdf (64).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d13d536-e295-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779024, "uuid": "9e333610-80bc-4cf8-acb3-1ac955b4e2b8", "comment": "Malware payload", "value": "9e00c8d0bb07b1db2b2a0de95b294bce", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779024, "uuid": "027596ac-57ba-4d4a-bbd1-877b8820a22d", "comment": "Malware payload", "value": "4555f384e6cd3fd59059d91f0a60f2bb0bf3ea890bf23aa06d8d9c852809a383", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779024, "uuid": "074499c6-ae48-4af3-977a-4ad70b00b798", "comment": "Malware payload", "value": "d5ee53fe941df056adf1f4cc9e3f24e3bb4eec0d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779024, "uuid": "56894644-2347-4a67-8575-b90b3ae4e73e", "comment": "Malware payload", "value": "171a096fcae0e7825864bff012f015add3f2d4224b6ac8cdf613dc6edc1b46354b77ad6107122816d944be0c1d17f82e", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779024, "uuid": "104850ef-8b0f-4d11-a9de-e476239db510", "value": "T1AB01B5C821B5307079A6D8FA4E320D2C30C690653DC62CB93977F8DE6B99D00F4668AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779024, "uuid": "42a5f511-34a8-45b6-8104-28cf94fb92f4", "value": "12:YkF1kcClZF70SuZHFAZHFlZHFW9FS1C+FM5gFDL9FSfC+FMDgFDPA1LRPb:ZDkH/FbuZHFAZHFlZHFW9FUFM5gF39FB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779024, "uuid": "3d1eb3f1-8c94-451a-a564-472f5f451991", "value": 762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779024, "uuid": "2f3abee1-441e-49e8-9d22-a8d6c22732ef", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779024, "uuid": "f4ad1113-0d56-43c3-bfa4-4d24857efc7e", "value": "all.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c9913b7-e218-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766725524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725524, "uuid": "6299bc45-f5df-4a5f-a764-06f260de59cb", "comment": "Malware payload", "value": "96338cc46f371c8014156081cd9305a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725524, "uuid": "683c524b-90f1-48b9-ae36-0076dcc500ac", "comment": "Malware payload", "value": "45d0ed22f30cb0f3551439fefc7ff7153f1557103fd86507152d67a500f12e1b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725524, "uuid": "08c9692a-651f-4308-8338-47162ca4f5dc", "comment": "Malware payload", "value": "71da84d5707f8cc08d09ddbbacb2fca1d3e2fe2e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725524, "uuid": "d181d5b9-6b49-4efa-a80f-e6912710ae44", "comment": "Malware payload", "value": "8faf11e2fed2c5e24dcf5e1f9dafbcb172606c71ef0e532f76b9878637fb5b054d257bf9bbc82ba4ac6d452949447bc3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725524, "uuid": "394ca7cb-961d-49ac-9ee5-2f3cd20e2451", "value": "T1FDE3A74D2D8D9550D16B20B657225AC3F3A2BD2C723483B377C029593D2DBEE949BAC3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725524, "uuid": "e703c767-b861-45ff-8dc9-f06775451841", "value": "b6b254d968104c765200ffce42b093cf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725524, "uuid": "68f07364-69f2-40b4-837a-2984be0f097d", "value": "1536:nHqFh7QcMoYGRsDuevd/2CWRr07jE4wVuG4NOWZrJz1VI3esFb:ZcjbMu+d8mIDVuGSfJzU3eQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725524, "uuid": "ed02c25d-650d-4199-a837-e623c1ab5e21", "value": 151552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725524, "uuid": "e010331b-0eeb-40a3-a700-3ccbc6667cc0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725524, "uuid": "53177091-2a79-4e98-bb22-4721e214423f", "value": "2025\u5e7412\u6708\u4efd\u7b2c2\u5b63\u5ea6\u8fdd\u7eaa\u4eba\u5458\u5185\u90e8\u8c03\u67e5\u4fe1\u606f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ade03121-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781871, "uuid": "57a1d6e4-b189-4b01-b054-06e3738d95a0", "comment": "Malware payload (Mirai)", "value": "b8e8dd31a24d513a3feead2e7816f704", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781871, "uuid": "da9e4218-6884-4e2d-86e5-bddda0dcf670", "comment": "Malware payload (Mirai)", "value": "462d7461c0e09d555f198f3ce401916e1efdbe46c7a44bb8f9b39135f96d4f45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781871, "uuid": "dc45f170-5685-4d88-a57f-f5a40062e7f9", "comment": "Malware payload (Mirai)", "value": "b8283445a71c56e4571de9cfd97fa5c1dc1aa8a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781871, "uuid": "c4dc40fc-e0e4-41cf-a8dc-857a82254b7d", "comment": "Malware payload (Mirai)", "value": "89e131e2d166ed8db574f0e93326b69489734276e38e7c448783271289198fc965097c407b3181de202ab9a7291e23d4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781871, "uuid": "e6ca6826-be58-410a-80e9-444fe6962829", "value": "T108932AD7F840EE79F809D7774493081A7230A7A589835BB67257293BEC7A1E40837F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781871, "uuid": "675c2e80-7f61-4602-a522-edc9a637e872", "value": "1536:W5WRgo1b9dtp82Qvw1YXyO6Qq4OYvPWpqhDCb4l7eNe0K+y9+lBxg6:W8RgoB9dtwwKXyO6QquPEqZONe0A9+7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781871, "uuid": "9a36f437-14af-4275-a45a-058a49a6a8c2", "value": 97600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781871, "uuid": "424900d6-f6e9-44e5-8575-e87480bb6cf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781871, "uuid": "9ebe2b31-3aef-4d2c-afaf-ccd0649e2d1e", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7daa5071-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711782, "uuid": "413441c5-50b3-4212-ab12-22ef14b6e2ce", "comment": "Malware payload (Mirai)", "value": "6ce6925fb7a864713dce0ffb50ab8c3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711782, "uuid": "d1ece28e-1c3b-431d-9d45-a5eadd979a9a", "comment": "Malware payload (Mirai)", "value": "46379d47fefaf21b69c8bda5ff516b315b5bd08621826fdeb24555982d817d0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711782, "uuid": "76a9e459-ea73-4430-a95e-915b64b82917", "comment": "Malware payload (Mirai)", "value": "6366dfcf4b4e750db86880504b0203d9df0faff7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711782, "uuid": "2d1aa582-c017-42f9-b26d-c85fad57322b", "comment": "Malware payload (Mirai)", "value": "531290427dce85b4772ba41c586eef076013bea207ea27cd8957f714b661c240be63afdd1f4d40f712b25f746253e3d2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711782, "uuid": "c0296496-406a-4e91-9c3f-20313233fc42", "value": "T135242B42F9518E12C5C112FAFB5E514D37136BB9E2EE7202DD246FA0378A8EF0E7A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711782, "uuid": "a73fcda2-d44e-454b-868d-bbbbd00f7231", "value": "6144:d5/6LdlaP9REHKVAbW58fyeFfKNwODuxEHK1gqUgE5XEILaPL2a8ukHRP4K:ddWU1REHKVAbW58fyOfKNwODuxEHK1gV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711782, "uuid": "b287666a-98c7-4c79-98d3-7f4b7bb954b8", "value": 217384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711782, "uuid": "973fc3f4-042b-4690-a1ba-30f746d21124", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711782, "uuid": "c911420d-ab9f-4721-8d7e-3ef74d586291", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7cd5b93-e22d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766734750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734750, "uuid": "69aadfb5-2ef3-4dcf-9c54-d8255cef7221", "comment": "Malware payload", "value": "f7a3ce08ae5f1f5cb63dcb377a77664c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734750, "uuid": "8821804e-3856-43e9-a32f-9ccb31730441", "comment": "Malware payload", "value": "46d591386f0a1df788ed0ead7013ab369ec4ca187583bbb676e2b1bd469a595e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734750, "uuid": "81797068-105e-42b2-994e-d0c546889a1b", "comment": "Malware payload", "value": "b2f7e6243b757f1cf6c3c361a0779fb16a897085", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734750, "uuid": "540e182e-46dd-47be-90a7-f952260914a2", "comment": "Malware payload", "value": "0361dc17ecd48c41b0c1949a0903e7ba7b427a99e3767395151aad2c34edb0d09e8adf715bf055c31d64d5c7ab4991d2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734750, "uuid": "1d519267-ec75-41fd-82eb-fb94b4373853", "value": "T1FB422A0677C8D7A2FEEE0B7618B342025774E26A4821E35A6DC4946E7E633EC17423B5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734750, "uuid": "f31b1869-3f45-4062-83db-4ecf6a6d91d8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734750, "uuid": "2438c2ec-7ce9-473c-a359-05d4a35a36b0", "value": "192:s/86bEytQNKr+pgOW/AMMMMu8Z22hcex8Jw07aDGmtMziI1GO/+jSjHjxA:EQb0qpnZcex8W07a6m2zi6GOGj4jxA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766734750, "uuid": "9945cb60-5c5c-41b2-8d59-11a8ae469884", "value": 12800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766734750, "uuid": "d34e50c3-3980-40e5-8ebd-dec644bc3636", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734750, "uuid": "e8733ebc-66fc-401d-b038-24d092a7bb3e", "value": "f7a3ce08ae5f1f5cb63dcb377a77664c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67a59410-e296-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766779606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779606, "uuid": "42f74bce-f1a0-42bc-94ba-0e09bc43e60f", "comment": "Malware payload (Stealc)", "value": "915a22f9b6c474e2b303a2c3f2d1e8c6", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779606, "uuid": "c315464a-2325-45a9-8a69-405333ae3021", "comment": "Malware payload (Stealc)", "value": "474db4f576013634cb8367d6272f6d9d4008974846c19952f35a6b9a4f9ca995", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779606, "uuid": "664b6f81-94d8-45fa-a3e8-c3731de02ff4", "comment": "Malware payload (Stealc)", "value": "01ee89c022389f615c409f94ae166d469fadba4e", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779606, "uuid": "8cce0c83-b61a-4254-a4b7-7aeac955ac07", "comment": "Malware payload (Stealc)", "value": "4bcd8182eea6823fb6dd2a27d7f43eeec0ec177e13d2738f7ec87b432ab5dbd5e17e78447658c5045907da35bed485f5", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779606, "uuid": "876bc6c0-032b-4ae8-b4fd-efc4fbfaf9fd", "value": "T1D3A55A02F5E2A5DDC937C134CA53A2737572BC245930ED7BAF94FA746E31EA0162AE04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779606, "uuid": "ec977f98-86ee-4309-9bda-f022711f8d79", "value": "3c7f2888dac5575f427a7550580ac389", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779606, "uuid": "97e36a65-dd7a-4cde-a698-d8dba635b275", "value": "49152:k9OuCqeqpVORnnzG3sQ6yKfXVBuXYipz7mDj6Tmsqz5VJNIrOGtlqqYp4wlEA/X1:kw1HY8nC3milCDj6nS5biY4nO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779606, "uuid": "f4eaf37e-0d84-4c34-8347-86b7fcadee73", "value": 2200648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779606, "uuid": "c74beaad-eb7c-459f-8243-5d193479bcb2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779606, "uuid": "ce3a538b-d471-4ed6-ba20-455b6831c636", "value": "libgnutls-30.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef42d193-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778115, "uuid": "aa8b8371-feab-4834-a7a2-7f3eb335f2a1", "comment": "Malware payload (Mirai)", "value": "877dc9a79ada001d6b962dd717b99eb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778115, "uuid": "5ac64a2e-12f8-4ce4-b7a8-127b28672a7a", "comment": "Malware payload (Mirai)", "value": "4880484a19a65757e4400eecbd5bd5fe09034865e3683f065435cd70ed4997e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778115, "uuid": "6832731c-b742-4a00-86e4-04c1531ba090", "comment": "Malware payload (Mirai)", "value": "ebe24f696d2e58fa3563234bee08d9fbbcea8920", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778115, "uuid": "818e1233-f7e8-4f03-a91f-a177ad269b3f", "comment": "Malware payload (Mirai)", "value": "549649b74b8c471fc5d8243ffc3302719a79aa89c8f2034e3f8505a10b8f84174f73c6e56d4e75c6f4c45518c6fc2c20", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778115, "uuid": "d395f462-cc43-4485-88c0-71360eeb3b6a", "value": "T122E3940E2E394F2DF7798239C7F74A219B6573C116D1CA4AD26CF9021E7034E641BBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778115, "uuid": "44dbe8da-2cba-4787-9c5f-83a13147aa98", "value": "3072:BM/75JG9EPQulRCoPmKlaNCosCU15nr4jrjX0RIn7mTj9bhJYFM4aGgyCzQ1yYKo:BMlJG9idqoqCosr2fb+cd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778115, "uuid": "54210131-b287-4b26-a294-ad5e6c1b963e", "value": 156532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778115, "uuid": "3f577470-1bd1-40f5-9210-4434b02c3b92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778115, "uuid": "4f02772f-bf4a-4f6c-a61d-50337711abe8", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7417228-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728226, "uuid": "efcbc991-bf05-442b-b58e-0d6b4d7c8628", "comment": "Malware payload (Mirai)", "value": "7124412d29b249df7026f341b8bb12e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728226, "uuid": "ca51503c-e8ae-4019-88ba-e3b2d7214e75", "comment": "Malware payload (Mirai)", "value": "48c98c575ac74d24c5c8f49bbec6cc3ea35171abfc1a686e82a1b792cf056d1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728226, "uuid": "154f945e-d79b-4fce-8253-0b8259f78792", "comment": "Malware payload (Mirai)", "value": "003131b47944932353062accf21ef58aca3a2ed4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728226, "uuid": "b9bff48a-0d1d-41cb-ac6f-f865f7b01e51", "comment": "Malware payload (Mirai)", "value": "8fdb8abab3606e8e0de8e28fbc50ac84b2736c84d984df3a62b96a801634429c49823ef7f6283f3bdc50c0015c45a273", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728226, "uuid": "8e4b22a0-5e94-4db5-8538-8aaea8490587", "value": "T14A141A42BD418F13C6C622FAF7AE018C37167BA9D6EA7103DD256FA037865DB0D36251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728226, "uuid": "74a2ab34-34df-4383-9adb-9b9d43badbc5", "value": "3072:+gwKf7ud51SvRjkL3cj4+AbIC8One46RKXW/ScYx3oNu6hh1SbV3:+gwKTOvmO3VBkxoe4uKXWKHx3oNQbV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728226, "uuid": "818c2e35-94ea-45a7-b4b2-aec1a4fc7e55", "value": 204952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728226, "uuid": "f6a96082-8505-48db-8b1c-7506106cce58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728226, "uuid": "8509b6b5-8c12-4bf9-ae01-7de97038954e", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7cf0a54-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747501, "uuid": "330c0093-68b6-42d0-9eb8-eb7cf2752949", "comment": "Malware payload", "value": "37933f2d2c8c9f2b3c638cf6e76bfcdc", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747501, "uuid": "18dd2788-216c-4255-81fb-e8885c3bbe3d", "comment": "Malware payload", "value": "48fb915651aab20ecacff8e7d120206c3924a54f660a438cba08bb84c9d08c82", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747501, "uuid": "e6540070-5eb0-4265-a50a-44cf098ddb80", "comment": "Malware payload", "value": "feddb9f9e498264fcf82da9dc894ac32cead98c9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747501, "uuid": "bccf668f-f784-4125-afbe-16983c3023bf", "comment": "Malware payload", "value": "08d41605d014d14c67914ad2b39689aeae29d62c27258cc1e65d3fef9840549347a3d4a2e9db67616987e0d6a49c78e3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747501, "uuid": "e825712b-02a9-4e3a-8ae2-22511e860d3f", "value": "T136633A979D279146A435EA3988894D293B9C284282ADC40D7C377F07DE2F9476FA1CF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747501, "uuid": "3dde2cf8-d0a6-467b-9d70-a277c8ee6c32", "value": "1536:I9l/AoSSM7V8jlyVkX9B5Xwf/SFbq4V2MVZ5hZm+eauxgjGubIZGnXFcupcrUusq:I9l/5M7V8jlyVkX9B5Xwf/SFbq4V2MVC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747501, "uuid": "ed62e6ef-b431-4632-a5b8-327f0abcb18c", "value": 69634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747501, "uuid": "7c768eb6-3228-49b2-a3d1-69830fe39085", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747501, "uuid": "2b7a1a9b-1c66-4f7f-984b-de8311e8684f", "value": "invoice-1645080830.pdf (21).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af55d296-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781873, "uuid": "443b0c32-69fc-4430-a025-94b5d44583ee", "comment": "Malware payload (Mirai)", "value": "f78fa3b217ee8f66a07cbc9861a4ca82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781873, "uuid": "a2424607-c21f-45be-88b1-22047b78b4e4", "comment": "Malware payload (Mirai)", "value": "492d0aa149c5165efc84939eb20fcbf9651a48c7f459ac3114371b33400a78d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781873, "uuid": "473958aa-0d8f-4311-8c84-fd546c726758", "comment": "Malware payload (Mirai)", "value": "01645aa38ec415455dbf6a3bab4698b3cac35e5d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781873, "uuid": "8b78d318-dcf3-4075-b666-bc7e661fb7ed", "comment": "Malware payload (Mirai)", "value": "691e58da8d87eb52fa5a3c1c0ebbdc54ec432bd57d4f596ad58dbe73173f5cfdf1cf67c85b21f2d6a60f8397798c4d7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781873, "uuid": "8b847fe9-4bbb-476c-bcdd-8e074b3f73d2", "value": "T1DF533A85FC419A16C6D112B7FB1E428D7727036CD3EA33078A2A9F61378B86B0D3B556", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781873, "uuid": "7ab43405-57bd-4ac1-810b-6f621022e963", "value": "1536:ch8wBOhwHhuHE3Of0TbUtxKwftoG5VTvNX:1wUhwMHscyyo2R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781873, "uuid": "d3396dee-38ae-4d53-921d-449fab670721", "value": 65292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781873, "uuid": "9b254b27-9b61-4d30-b23f-63c7e07e0475", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781873, "uuid": "1a14dafd-b733-464b-a17d-1d18dbec7f29", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8084b09-e27b-11f0-a129-42010a9c0007", "comment": "Malware payload (AuraStealer)", "timestamp": 1766768171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768171, "uuid": "47e5c41d-4428-4342-b995-01f6da2dae2d", "comment": "Malware payload (AuraStealer)", "value": "1b24c97ff9acc6d4ea9c4674abdbd98e", "object_relation": "md5", "Tag": [ { "name": "AURAStealer", "colour": "#64E750", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768171, "uuid": "6e25938c-c37c-43ce-a4b9-70aa929837dd", "comment": "Malware payload (AuraStealer)", "value": "495206892aea114014cfba8c9f605ad9ab6de309a685a59b36d77565919de2e2", "object_relation": "sha256", "Tag": [ { "name": "AURAStealer", "colour": "#64E750", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768171, "uuid": "067733e9-b3c4-4b8e-9e14-b4575372421d", "comment": "Malware payload (AuraStealer)", "value": "96030a52ea74e6ceff0ab56f241fad380e94591c", "object_relation": "sha1", "Tag": [ { "name": "AURAStealer", "colour": "#64E750", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768171, "uuid": "a97db399-8691-4ea9-a966-42e55247f16b", "comment": "Malware payload (AuraStealer)", "value": "813a564b7b428d2fe6da23d671da508f8c4ce0c23a4906565c489ec59dc6c4846b4fb4cc8632a0a878aa76283ee482d5", "object_relation": "sha3-384", "Tag": [ { "name": "AURAStealer", "colour": "#64E750", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768171, "uuid": "9b41583b-8dc0-4d12-b6de-cb872fb5451f", "value": "T1EE75025A52A6D4D2FD6700FD8606A240F56778524715EEFB00E8E66EEF13EE00E3C7A1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768171, "uuid": "7e064a9a-a89e-4ac7-9d5e-3de9ba275f49", "value": "f857730f3b2f98df7909878e8b7c5e5a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768171, "uuid": "879cacce-e158-4eca-ba0d-e0bd0022a408", "value": "24576:nC2ZixIc3jgQ0jt4f/QAbzeEsQHsVwNqRvP5V3aLhiHu1Z:npZ4gQ0jQuEpM2NqvdkhiO1Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766768171, "uuid": "8c4f21e8-7680-480a-bb4c-3fb2d1c662fb", "value": 1635840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766768171, "uuid": "025b60ea-1175-421c-9553-0d69e5b1be3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768171, "uuid": "0388ac01-b55a-48bb-94fd-54e39e511ab2", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07478e74-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774290, "uuid": "9bf81b8f-7136-4434-b522-a09070389c75", "comment": "Malware payload (Mirai)", "value": "61f2ffd4737743525087f7919cff25e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774290, "uuid": "317620db-13e4-452a-99d9-c38c629c84f8", "comment": "Malware payload (Mirai)", "value": "4997d19e0fce55ccf55fe02dd42f2e346867a911769443435d59441f16866a8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774290, "uuid": "a60aa243-b377-4b4c-9c19-a1fba0770d87", "comment": "Malware payload (Mirai)", "value": "32f2f1e71f7f57fb3b0a9447f3418d6422a94336", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774290, "uuid": "be3dca39-cbab-4eef-bdb3-a85d97335432", "comment": "Malware payload (Mirai)", "value": "1546dae1ef499e3af7d4965885d94747722fed885e5f5d555457c1ebf6e74e0b1649868cd876ce7cdc7a8134c58152da", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774290, "uuid": "afa87cd4-1c38-44e8-be73-048ec57341a9", "value": "T13D53F1E6AC95322DC6902CBE4B6C93C2A40601FAC17DB0765491F729F2E78E7637E1C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774290, "uuid": "13113cba-f5fe-4dc2-8ea4-e5ab96e880d1", "value": "1536:5rP8RoeyyZ8kLaMbtz2PrCVmGqq+ekHocHxZ2HurxNuUEL:JP8Rog2kFbR2nGqlewDDUurfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774290, "uuid": "1b48ec25-af59-4817-8061-791a7971a3f9", "value": 64420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774290, "uuid": "90d01808-542a-40c5-9f37-46cfbc18e000", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774290, "uuid": "2c7e6d91-fe64-481f-90c1-710af6bc656c", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3642b613-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771362, "uuid": "aaa7f251-5eae-457e-8be7-7b36d7713064", "comment": "Malware payload (Mirai)", "value": "030a12bdeec143153b033ea668c041a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771362, "uuid": "9113e7b9-e5ee-4360-ab60-e9bdf8e9ebb1", "comment": "Malware payload (Mirai)", "value": "49a28e3919c58155ba1f2e3eeb071e8a2c6ac23f63bd202f3461bf920f58b4d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771362, "uuid": "52b46e60-7f17-4d22-b932-fb8538d2354a", "comment": "Malware payload (Mirai)", "value": "251c52137aae67146c543f3c9fec1de09e808be1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771362, "uuid": "a127377f-5a1b-45c8-a07c-302da9a14c2a", "comment": "Malware payload (Mirai)", "value": "a43ada25cd13f523c9d29776f23cdc8859896c5a2f1d52d1d1136d585d171b00443eac6aa0ff56f56f4c76c20d54acba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771362, "uuid": "83292969-c0fd-47d0-b194-5ceaebed3b0d", "value": "T1E2241B42F9418E12C5C112FAFB6E514D37136BB9E2EE7202DD246FA0378A8EF0E76515", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771362, "uuid": "f42db8e8-b826-48f7-ab3f-a1b4d67f66fe", "value": "6144:xznVrkBzREHKVAbW58fyeafKNwODuxEHK1gWdnzMXMDdaAC7m5Om1JlFBr:xzqhREHKVAbW58fyBfKNwODuxEHK1gWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771362, "uuid": "89ae5575-c534-4702-a9a7-8cdea56521f6", "value": 217368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771362, "uuid": "cb004cb3-9a79-4a35-8a81-6119efe8164f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771362, "uuid": "1c2f68ef-3b30-47b4-9337-f8e3aac9b12f", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e54db17-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712911, "uuid": "b7864943-fb33-4c63-8f40-ddca211fa0bc", "comment": "Malware payload (Mirai)", "value": "fdcfbee4ae244e08fdd01b37f3e21507", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712911, "uuid": "ca82aa28-cb33-4fc3-ae55-e1c15bb918c3", "comment": "Malware payload (Mirai)", "value": "49e48abf63ef4c19cc967e414a90fddf7e2516e69a273965075fd40eb1187992", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712911, "uuid": "7761fe3a-2908-40f1-b040-f039500ab047", "comment": "Malware payload (Mirai)", "value": "c223787da2a5beab56bfc900b2c11b85c6fbb295", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712911, "uuid": "af5981e1-d0d1-4e91-8bfc-cb3b082eddc1", "comment": "Malware payload (Mirai)", "value": "659e9727d315dbed8802f776dba8a87192dee7064f1dd94fbea11bc6c39631992c3ce12c14000d3a202686bc3d5808ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712911, "uuid": "0b118a68-24c0-48bf-adea-250607578f26", "value": "T1ED836D42B3184A43D99709B0393F27E183BF995025E4B78A650FAF9A4676E33144BFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712911, "uuid": "4d883c8f-a769-49f8-be91-228d576852ff", "value": "1536:hTGNrVFtOEjs3dZ+K3yBO9+wBsqWbMkT2bVRI:hWeNZ+i9VpGT2w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712911, "uuid": "ae5fcab3-990f-4f88-bfe1-1f1aaa8254a1", "value": 81220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712911, "uuid": "6d4ddbe6-fe94-44c7-b0e5-644302637e2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712911, "uuid": "24915964-9a21-4a57-ba11-690b6beb4e7a", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff9ecb6d-e252-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766750655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750655, "uuid": "4f761d7c-5aac-42d5-8ab9-423337ad2353", "comment": "Malware payload (AsyncRAT)", "value": "ec22161ec3ccb598b56f269402406a2b", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750655, "uuid": "139ca011-b2eb-47fd-baca-ef1724faea4a", "comment": "Malware payload (AsyncRAT)", "value": "4a3a8b043a663e7434e0401b1c4c26c9b180ba0bfece2b4a65be2693360f64ab", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750655, "uuid": "0c382ae1-ff00-4c4a-8fee-1fb7e62722fa", "comment": "Malware payload (AsyncRAT)", "value": "ff453ec399f7ee90714dcd7c135d202f57802ce9", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750655, "uuid": "df9d3f15-33ff-4bb0-a949-e02d905f9ecb", "comment": "Malware payload (AsyncRAT)", "value": "6d1aeeb92b2ba4dcb06fa8b22c3f4322553fbf099d3dcd51d47ea3071a19f903efc264b00cc0f6e3c4c8ee6326b7d7ef", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750655, "uuid": "4170be7a-c11a-4725-a25d-cdee08e1a732", "value": "T1D3331944BBFA822AF2FE4F7C99F26141CA3AF5633502D54D2C8441CA5623BD189726FD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750655, "uuid": "511693f7-bf63-43da-9bcb-13986d655a90", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750655, "uuid": "ddde323d-9a95-4f4f-b6b3-38f201ffca92", "value": "1536:Fu265T1G62LyY83/V3bZXS29kOKnd2YG:Fu2qT1G62X83/V3bZT9Yn3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766750655, "uuid": "0a7bdb4a-c3d1-412c-9b7a-aae5e350c3ca", "value": 52224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766750655, "uuid": "53325005-c876-4b1b-b083-2d1db594a65d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750655, "uuid": "bfe66767-6445-44b3-985c-525ce7081692", "value": "Vertex.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406ddbf6-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707384, "uuid": "e4db3338-79bc-4d51-8b0a-65934965b9e2", "comment": "Malware payload (Mirai)", "value": "81f72f1d28c888f3d2cb1b737e6385aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707384, "uuid": "e2df110b-fc02-44a6-897d-fae3eacb0886", "comment": "Malware payload (Mirai)", "value": "4b3026625bfebabd9c01b8968132f42dec8243cca6541e1db8ed0fb17fe4803b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707384, "uuid": "049c3f9c-94e0-4eff-b263-d4aeaa1e9627", "comment": "Malware payload (Mirai)", "value": "a9babbe703eeb72872f5e9815b78182af6da2ba9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707384, "uuid": "e3ab7f25-d31f-4c08-b786-aa33ed5c241f", "comment": "Malware payload (Mirai)", "value": "128c76a367628a53f8879c1be3708b59c839144c4106bab01d3fec1a17a12d448eca9bea83e2455ff7046dc933671e00", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707384, "uuid": "5f6e9701-86b5-4e18-9836-a5285602875c", "value": "T14F5308C3F900EE7DF94AE73784474E01B174B75149530B23B37BBA93AA35099882DD8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707384, "uuid": "9b9905b5-7fb5-4fff-b749-af5b03e3bbb3", "value": "1536:VCEUWhq0jEq+eBBmvEb8QTgUtl886w3ORu0vP1ETPV:oELnXBE3h893ORuQtk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707384, "uuid": "3124ec31-ae85-4173-8a47-8ea979a9b148", "value": 65000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707384, "uuid": "6e22d467-2ffb-45a1-85c3-a8087249834b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707384, "uuid": "8562c07f-c229-4193-9883-96252950a63e", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b45bdf9c-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781882, "uuid": "01d8ec73-1c06-46cc-97e1-dd2df7968663", "comment": "Malware payload (Mirai)", "value": "82ccbeaa75d914724e2f7f40b66fe621", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781882, "uuid": "05a1a8e5-e859-4303-aa71-846a09bb038a", "comment": "Malware payload (Mirai)", "value": "4bbf01d2a50c3b8cec1c4961fccda6520eb73f0026474aa4dce42ff319921c4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781882, "uuid": "db065b5b-550f-4ce4-87bb-efefcf3d96ef", "comment": "Malware payload (Mirai)", "value": "83c10ede1f0f8686e71b7805d6767e3a1cfeedb0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781882, "uuid": "de7d15e3-d5f4-45f9-8493-19d690b6343c", "comment": "Malware payload (Mirai)", "value": "3b30cdcd59d8aca286929b4a1c5ff58249c89d49bab11bd6a830abde9469a3940dd9e3b18c00058310800e0890e8700f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781882, "uuid": "afe252fc-722b-405b-97ca-9e78e8d33c4b", "value": "T1A9336C46E782D4B6E85345F1117FA7638A32FAEA0625C683D75D7D31DC2A42083273BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781882, "uuid": "6f4cad5a-a20b-498f-abfd-1b13d5506369", "value": "1536:jH1EvsGSa1QSLUuOjxLLGRxhpf6tWUzI263jhgK:qjNLyHGR7pfmhsOK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781882, "uuid": "d619e1f0-f4ea-4cf8-b2d6-4d539e9b1ec2", "value": 54212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781882, "uuid": "914dd4a1-0d27-4140-a9c6-d7beac2fa714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781882, "uuid": "6f8aae7e-8c20-4876-99b8-4a27c14c442a", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65d0eefa-e255-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766751685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751685, "uuid": "d32988ab-b09c-4973-9a6e-381f730d5b9d", "comment": "Malware payload", "value": "a27731876e769ff19e225700085967bf", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751685, "uuid": "d348eb1d-99aa-41dd-9713-a5de1001847a", "comment": "Malware payload", "value": "4bea333d3d2f2a32018cd6afe742c3b25bfcc6bfe8963179dad3940305b13c98", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751685, "uuid": "7a85bd35-74ea-436d-9e38-bded9d71ba29", "comment": "Malware payload", "value": "e5678fd66ac09205f55dc4fae9601185a76b2f50", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751685, "uuid": "cbf39743-cabd-4dd3-8e8d-1a3e9d8cbeaf", "comment": "Malware payload", "value": "2782a2714a5932f18f2a60a99920cdc28af017ce73d9cd14db52894613afcede84b34a2b3b4398e13215a28c9823f3fc", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "WALSHAM-INVESTMENTS-LIMITED", "colour": "#BA4EBD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751685, "uuid": "3c97045e-ed1c-4de6-9e9c-22d23e103372", "value": "T1EF0812217789942AC01ECC30861A8BF3D62C7CDA3B2165EF61C876392F75BE31735696", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751685, "uuid": "d9c7bb95-5904-47e1-a036-38c584ea8539", "value": "1572864:Yb4Ye145jxtpyVu8OxesSKZl8yxuaNs5GDJVHMWuLGAbyYsYCunzSou4nFWIp/5/:AiuTl7Ds0AVsYC4SyF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751685, "uuid": "62b8d47f-5914-4032-89e3-c05b613213e5", "value": 80380416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751685, "uuid": "60aa3209-bf89-46df-912d-ec8a11a72640", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751685, "uuid": "38f3bb59-a30e-4a53-b943-6ef936ac1df2", "value": "emed64_25.4.3_incorrect_signature.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb895ea1-e28b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775049, "uuid": "e4c496f5-1771-49a8-b9de-7c6177d00001", "comment": "Malware payload (Mirai)", "value": "39ecc004efe77f9c8ce8f95eb701bcee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775049, "uuid": "70e6d8e4-0887-42ac-ad7a-839fb3b924b0", "comment": "Malware payload (Mirai)", "value": "4bee9ca651168d4c5526a3584dff965248e32d9609edad217b4194df9e9b0d6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775049, "uuid": "e7d283d1-b574-44af-b1c6-29e5b160be9c", "comment": "Malware payload (Mirai)", "value": "aeb29b0b1ffc4384fb3ae1203112ec3f9e7d6f69", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775049, "uuid": "c829d5dc-f69d-4de8-a454-24e57e6c0c7d", "comment": "Malware payload (Mirai)", "value": "11b921ee9dc4f9dbe965fec210bdc5006fab1fd4781c6c26ea688d57d62864bfb8e871b8a2838edf5a0c61f1cc38a8c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775049, "uuid": "6a4e295b-b90e-460a-a3e1-f47e0a545c05", "value": "T18B831985B881CA27C6D8227BFA5E42DC332653A8D2EF7207DD15AF15778682F0D3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775049, "uuid": "f5855332-4d11-468e-98ac-e47de6fdd5c9", "value": "1536:d0c6++uuvsl+fjUvI2xOU0BCdzAho6VFnaIBRnkmEPCYT2bVR:d0cstt9azAh1kIznkmjYT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775049, "uuid": "911c1a22-a594-4dcf-84f5-47ad5ed08573", "value": 81540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775049, "uuid": "20efcbdb-9c2d-4e92-97d5-f8c7fcbedcb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775049, "uuid": "ae51b1a1-2298-43ac-8d5f-1d65617838b8", "value": "jklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af98abf6-e1f0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708430, "uuid": "f0ab2218-1180-4c0e-9b9b-380a0a2f69ef", "comment": "Malware payload (Mirai)", "value": "76de097b4bda8aad3576ac4dcad806d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708430, "uuid": "44c2c224-4f86-4bf0-8f8a-f30311df8446", "comment": "Malware payload (Mirai)", "value": "4c045685d5d7c58821c94852b7bf4ad4489206446118be39428c69d45434c6b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708430, "uuid": "2e8e9f42-f750-4f58-ad8f-3335283b2952", "comment": "Malware payload (Mirai)", "value": "2f5c85b76dc03a05726d32562c1c0667203f7964", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708430, "uuid": "e54cfaf9-80ce-468d-b8ff-506802bcf784", "comment": "Malware payload (Mirai)", "value": "4625db9a8df14597574d306120522eee4730a239d1bd9b8854506e4c8b31e5fe30de31d4c54500a7cf8000f1f11ceca0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708430, "uuid": "cd5e36d2-e39d-48a0-8ff2-76b1dd678f89", "value": "T15563B516BB650FBBDC5BCC3B06E9170539CCA50A22B47B357934D828B54B21F5AE38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708430, "uuid": "a2c9ea91-b306-4c29-bd4c-e7ad7b2855e9", "value": "1536:jq0uV1LGcoR762qeUBjHHBKTUS6Fx+AhT4:jwbLLo4sUF++T4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708430, "uuid": "0d96ae7d-21c3-43f7-a422-3b8bac450e71", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708430, "uuid": "d6cae8c4-3040-43ea-b518-5e48dd07c21a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708430, "uuid": "6cb377af-06ed-4ac2-b886-47c0c6942b1f", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9fabbcd-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711964, "uuid": "f96976df-dd82-4eba-af90-b59508ce377f", "comment": "Malware payload (Mirai)", "value": "a0daceb13fc0bd4d2b54769655b9be87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711964, "uuid": "4d205afa-6304-4b3d-b646-be2e7f18df5e", "comment": "Malware payload (Mirai)", "value": "4c9a1bc067110f14b48cf32ffb7e7eff98b07544d3923b9af74c8271d34fefbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711964, "uuid": "9e04f46b-030c-4ee2-a398-02f5309c825a", "comment": "Malware payload (Mirai)", "value": "da1f3f8ee043d218c5be2494d27a58a21bdd0a70", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711964, "uuid": "bd5a7db7-f40d-46d6-9981-87454f90278a", "comment": "Malware payload (Mirai)", "value": "35ec4cbb0fcf2b1d7883b77347ecdbd327dccfb2d1fa59e3a9ccd90c9467efe738c4890b4387424732f4901d3c7e19d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711964, "uuid": "badbf42c-a536-4a52-badc-4d3485f554c7", "value": "T18E144A02770C0943D2562EF4363F27D183EFD9A224E4FA45654F9A8A8271E37158AEDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711964, "uuid": "97156d5c-212e-4954-9dec-c23e18bce9ec", "value": "3072:admmklfS3mNxr0X61gzQrODfJ496hh1VHS:adq9xAX61eQ6TJLHS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711964, "uuid": "bab7ccd6-19cf-4ef4-a1fe-ed8757a6a417", "value": 199712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711964, "uuid": "63deccda-e054-4681-9a77-123b13fa0719", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711964, "uuid": "69a3daac-114b-4f1e-ba38-b15d56b2ac0f", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf9c8258-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747138, "uuid": "15ba115a-94c5-44cb-9ddc-1c4439c55e2c", "comment": "Malware payload", "value": "6db5b37af9d1c83a6572f89200282bc7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747138, "uuid": "9efd49f8-4cfd-4056-b1de-39587aa95a28", "comment": "Malware payload", "value": "4c9fa188c6f9e07ee695c47722a0bf5b4ab76416520a96883adbbd9db3df5592", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747138, "uuid": "9eb76183-62c5-4445-8c3e-ef82161a181c", "comment": "Malware payload", "value": "7756e70044a5343cf69e5cf86c4263ba7ecdba8e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747138, "uuid": "a7eea3c2-f77c-4b48-864c-0aa208ee7f71", "comment": "Malware payload", "value": "665c2d95f7c24d24f686c8717f64463fefa0e887d93b30fca98915d71f03740ef1ce905928a344cb4feeb7d5afcfb221", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747138, "uuid": "d3498967-689e-4c96-871e-581077fce739", "value": "T169630C04AE00FBB506C6D63CD9B534E8FCD8BAA17403B6901BBAAB6941CF77156057E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747138, "uuid": "6d46b0c2-65ce-47f3-9f65-df35556917d5", "value": "1536:I9l/AoSSMnBIGzmeWhEGJAEK2D1HG7FacDfsvzQyF6TruxfuqlZmHj5Ud56W5U+5:I9l/5MnBIGzmeWhEGJAEK2D1HG7FacDw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747138, "uuid": "23211d80-db16-4779-83c3-7f99970f8d3c", "value": 72562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747138, "uuid": "af6b3630-ead2-4c63-816e-5b2d0c961e66", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747138, "uuid": "f847899f-39a0-484e-8c14-cb429f062b9c", "value": "invoice-1645080830.pdf (97).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f376c8-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730212, "uuid": "304168c3-c81f-4c61-994e-2b7c270d98ec", "comment": "Malware payload (Mirai)", "value": "01df81a0fb9dfe237e5a72776ec96e47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730212, "uuid": "6c296fe7-aed4-4dd3-9cee-4585fe4c4de6", "comment": "Malware payload (Mirai)", "value": "4cb28da1d2c73e35cb2a243ef3c5b815ed827563282ac06ae01202de3c83e7d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730212, "uuid": "67c3d516-9844-4064-8375-e9a650b63cf6", "comment": "Malware payload (Mirai)", "value": "ae60d1e50e3d7e1b73106243c8fb36b55a34ae69", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730212, "uuid": "0ae818db-28fb-4acf-b4d6-75f95f4ab236", "comment": "Malware payload (Mirai)", "value": "30a3c560c2f781570f177fc4e2459c3f5f2cd97b152232e80d0e086e330f3576268b9177f0486503e7e32b970e668eb7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730212, "uuid": "1e145792-fc8c-4c91-b000-5e689dbe10cd", "value": "T17C832A07B5D720FCC287D134465FA936BA3278A412247DBFA7C4FE711A35E212B0AA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730212, "uuid": "390db810-d7c3-4019-b2ed-66d43f5ff38e", "value": "1536:lXaz/egugrJLA19RiyWhvOcc31/CaKWnZ6m3hOKas4/R4XBl6ATR8qBZeX+N+IlH:VaCSMNiTZQ3SSFONl4XI6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730212, "uuid": "9995bfff-0957-4254-a7b4-1d457fe33036", "value": 87040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730212, "uuid": "1ede9742-951f-4463-a301-47dd00bf66cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730212, "uuid": "364091a0-e19f-43b2-a840-7567b2f4b095", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3edd0c48-e274-11f0-a129-42010a9c0007", "comment": "Malware payload (ConnectWise)", "timestamp": 1766764934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764934, "uuid": "7a5a1b4a-93f0-4bad-b9dc-6c13ba6a40d2", "comment": "Malware payload (ConnectWise)", "value": "f42bf1bf1f3932bcefe631b383003dd1", "object_relation": "md5", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764934, "uuid": "3475a8e2-e6e5-44e5-b194-e56e5b039388", "comment": "Malware payload (ConnectWise)", "value": "4d780470993cb94b9d71b7fbc5c65af6ef1b61c25ef258efcf4e3ac72eb59168", "object_relation": "sha256", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764934, "uuid": "7baa7047-98a7-4555-9da4-ad8169121897", "comment": "Malware payload (ConnectWise)", "value": "c86626716345bdb4dde2d838d7e5cd90a64169c4", "object_relation": "sha1", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764934, "uuid": "34b32563-7b56-4855-abb3-f41d1be0d43e", "comment": "Malware payload (ConnectWise)", "value": "061c1b0cec03cf1660d592d31554fb949fc8ea7051879095f7d6129b56bdb45106e1691f28a593aab32a9b2cb5a94b5a", "object_relation": "sha3-384", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764934, "uuid": "e3119b32-83a0-438c-a427-535bc9a4f9ea", "value": "T112A6237127F88429F1A75B39EE3A89E229387C64DA26C05F17B43D0E1971E509B72373", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764934, "uuid": "37c74aa7-61ab-4ac7-928a-f2d8d4fa141e", "value": "196608:3KaLNkbgHi4QOKaLNkbgRKaLNkbgjKaLNkbg:PWgHiHwWg1Wg7Wg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766764934, "uuid": "4121e636-27db-439c-8df6-d0d1025236ca", "value": 10072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766764934, "uuid": "e1a45013-5733-4c6a-a6d3-b19593cff9d2", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764934, "uuid": "97d969ee-555a-4782-9bcb-b8b0af6eaa5c", "value": "invite.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5bf3015-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747551, "uuid": "58b1fa9c-f42b-4d0f-992b-7aceada89113", "comment": "Malware payload", "value": "50f145e1ab56a018715c6c775b954c1f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747551, "uuid": "0ba5948d-f9f0-4de8-88d1-b4bf32dfd012", "comment": "Malware payload", "value": "4e25d252e68dd040b4caaa324fad7b77068bf0bf1326c912fd1058da60a18129", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747551, "uuid": "842cf3b8-617a-4fe7-8006-1fcff4bdebf3", "comment": "Malware payload", "value": "96ce85ac9a74d546dbc283dd80b17e48bfd5dfed", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747551, "uuid": "d27f34b2-008a-46c2-a00d-ef3b15052f86", "comment": "Malware payload", "value": "c95977efd701b9771da840e90e86b4761a7814d222e486cc043cf7fcb0b8fd9baff2f6477e730292109cf18542703a99", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747551, "uuid": "1ec58fef-8fba-43b0-94d9-48a7acf65544", "value": "T11063F9AB1E905DC405A6CA2E3D2640E2B092B3877F83FE515E597DA5F70042BB371ED1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747551, "uuid": "265ef98e-9778-489c-a842-6a4ace363612", "value": "1536:I9l/AoSSMp2X2g2223222W2v2H242W2w2v2x292F2E2/2O2t2Z2N272/2R2k2A24:I9l/5MIG7hmhB+WTBr+wEsHu5UY0CuQ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747551, "uuid": "5d146c50-a2ef-4ddd-94ee-014139ac775d", "value": 72528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747551, "uuid": "105344c2-ed57-4968-bd9c-da63f1521d22", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747551, "uuid": "749c2764-0432-4cb6-b6f2-245c4661153c", "value": "invoice-1645080830.pdf (11).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f5700bd-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771861, "uuid": "f850b3cd-836f-4704-87d3-01e9d3c7e156", "comment": "Malware payload (Mirai)", "value": "20a3385c06d44692830c7c1e16c3003e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771861, "uuid": "2306247c-0f39-4e1a-9f48-b97180a0bea9", "comment": "Malware payload (Mirai)", "value": "4e28ad837b6d78c261ddfa2f4dd75c49c65c654440fbb6da7a73e8cd58cec9f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771861, "uuid": "9a6b12c2-8963-4d80-9434-dd6cbbd78574", "comment": "Malware payload (Mirai)", "value": "33838e33285202dd1d567d2508aaad23ed6e3b31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771861, "uuid": "dc8da364-68fd-4283-99c3-6ed2cc18908a", "comment": "Malware payload (Mirai)", "value": "cd384a2d9f84c0bc817cfbb1d5327fd8dc83025b2d09cccb344a14fc94939259ce6d97a0d53b7d1578893aa7eeaef1de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771861, "uuid": "41d0600e-5091-49b3-b42b-b468ed6cb6d8", "value": "T1DF2490A2A41059DBCE0048BA73AC9F3427923C70D25F1F6D5C568168A28F9DFF1D6BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771861, "uuid": "8251db2d-1788-4e51-ba18-08f5a62701e8", "value": "3072:UclSNeHaBP4mfkBNa8RYtbAmRSyRuDWdcnesD:Uc4gHI6ZRYtbA/1Sdc1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771861, "uuid": "ddc2f3c9-902d-49d8-bb22-55f8d19c1b8e", "value": 223664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771861, "uuid": "ae4b7ce2-a2ae-42d9-9dc1-d3710455bc29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771861, "uuid": "b1c25d4f-9277-417a-bca4-c460abaf45d3", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eaf2f43-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707381, "uuid": "26bc9fe8-e44a-4796-96a9-5a6466da961e", "comment": "Malware payload (Mirai)", "value": "14890fafad54ceb1f31b056572b33c2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707381, "uuid": "fa782bb1-3b8e-4231-bfa0-72f1d49dd671", "comment": "Malware payload (Mirai)", "value": "4e5910e3133c301a79034903241b614a2d3b32fa2ea555a37e8095a1a460ff69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707381, "uuid": "2bbd0338-9b07-42c3-b579-03e79bef6318", "comment": "Malware payload (Mirai)", "value": "f36d60c4c02d7155fb475dd46f2436e2cd9865ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707381, "uuid": "5724e2ae-159b-48db-8d38-f0dae7ff7bbd", "comment": "Malware payload (Mirai)", "value": "6f4c2206b6a8428ca797bf5e879050aa1eca54ef57867a36552687e06f6724bdb34eaf9df597da7f8a51cc5d0e549193", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707381, "uuid": "9d458084-d2cf-4822-aed2-a7b0741866f1", "value": "T17693C60A6F259FADF76C873547B78E30D74823922BF1D645D26CEA014E6034D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707381, "uuid": "bb0c2056-903e-4f07-b5c1-ce1d3f4268b1", "value": "1536:ZEV4b2GJ25o8CROiRrtmJ/Vsz+LppjqdrqCePeeiYeeeNx3viokKd4bOTAbVR8x:fbxJ25dVVsz+Lppjqdr16o6bOTAkx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707381, "uuid": "bd57a82f-6256-49ab-8406-2aa2c2650f65", "value": 97080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707381, "uuid": "151a30cc-6ee0-457c-a0d2-fca2d2ee1e2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707381, "uuid": "1d15c179-1807-4058-b9c5-50779c3d1b00", "value": "nklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2885fac-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747143, "uuid": "49cef2d3-1dc2-4ac6-a09c-7a57e6f9fab1", "comment": "Malware payload", "value": "fbf8387cf42d9a8f31609475c250b2d8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747143, "uuid": "171d8fdf-da61-47b5-a87a-43cecf0ab1ac", "comment": "Malware payload", "value": "4e86819ec1b3b5c1ad18ad21a8113754ecaaeccafe06b8179da9af6439388357", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747143, "uuid": "adb89860-e215-43d9-9de9-d556eb5b9d19", "comment": "Malware payload", "value": "e351a32c19e56a59ee592dabfc1bc17a6cac0133", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747143, "uuid": "b3c14dc5-1536-4051-b1e1-e8c83a73f57b", "comment": "Malware payload", "value": "dbb434ecc0109707da9a521dbbe029e4628622b568253ac9e504601fbf08751a8939efbc30fc8292b19e604e6da19496", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747143, "uuid": "e3354c45-bb84-4b1e-b01f-8e4b7988b10c", "value": "T158632AFAEEF9B1D89833B6E10917F6DD688D411313F75496D894BA09804CE3AEB185C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747143, "uuid": "06db3f46-0097-4da8-b61c-7a5cf44ee236", "value": "1536:I9l/AoSSMx/wVsgzRRWvYyVQTvsq3zidIiuMtT6mnXgmnmnBxAkmaSAf7aA4Epux:I9l/5MhuusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747143, "uuid": "80c5f105-9f93-467a-9513-1691c02027c7", "value": 70599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747143, "uuid": "3292f715-c54d-47c5-a013-8ed65a76ab20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747143, "uuid": "e61f9cb2-9e9f-4c95-912c-eba08fd2afc1", "value": "invoice-1645080830.pdf (89).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8561fe4-e298-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766780627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780627, "uuid": "c0ce1dd4-d201-4364-a2dd-233d7751a8ac", "comment": "Malware payload (Mirai)", "value": "b2de3f2e72477028578860b86259beff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780627, "uuid": "324c4466-0f90-4641-8870-f84f5a77d2d1", "comment": "Malware payload (Mirai)", "value": "4e8f94777b42c157157575c2fc774fe2b559f7febd6eb9ceb91e6f56263342a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780627, "uuid": "483089c0-0108-4e95-a0b6-c37c7a9a52e7", "comment": "Malware payload (Mirai)", "value": "2b10413b503fa66f214483712618085502e42143", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780627, "uuid": "c3339189-43ba-4951-aac7-3221253518c1", "comment": "Malware payload (Mirai)", "value": "9c7230fff95e0996217a5d7d8a5829b18f73fc71cb68ba8478e44fd15801b2c2eef46cbd899916a4950f8811411205ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780627, "uuid": "a9c40a6b-a22b-4b5b-9717-cc072e133a40", "value": "T106F32A46EA418B53C0D21BB9FB9F824533239B24D7E763059928BBF43F4279E4E27605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780627, "uuid": "bbfcff8e-03d0-4939-bf43-0c3be113414f", "value": "3072:dtQZH+xahFHltFqBWJSDLN3wly40Gn13+ii9262/M/9f4uimqS7YStQ6:c+xahtltFq+SDlwlL0Gn13+P926iM/9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780627, "uuid": "5711bf67-849e-4d92-8f14-a840de0b6cf8", "value": 172129, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780627, "uuid": "2d0c9eee-b469-4af9-a7ee-b64159a53097", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780627, "uuid": "5bf3a2db-21b9-4d7b-a8b4-568168457068", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43cc490a-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779116, "uuid": "09366286-9bb4-46b4-8466-f27e3da20889", "comment": "Malware payload (Mirai)", "value": "b72c7f69a798501fd1a1893edc1d29ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779116, "uuid": "37911d3d-e0b0-4ef5-9071-c17203cc2799", "comment": "Malware payload (Mirai)", "value": "4f0afb06eef740acaa121e2c25161d4addd8a5ee214618cf6086d3277239fc8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779116, "uuid": "72a32baa-f464-4b62-b156-878332017ab2", "comment": "Malware payload (Mirai)", "value": "06c58ac1753c919a210680c49c6de1b65575da61", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779116, "uuid": "9e8016f7-9351-46a5-8b13-b39726cf661a", "comment": "Malware payload (Mirai)", "value": "897257c262a4e35bb5631cc29ece001c300f5008a2d11bd3d367f33bb170f7d1a4de1fdf3b6768b3a0b71bb4db924b7f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779116, "uuid": "32a12e95-5156-415c-b42b-2687b2e894cb", "value": "T109833A47B98190FEC499D03847BF7537C923B4BE1239B29B63D4AE262D09ED01F19746", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779116, "uuid": "1bd9aee8-cc24-4f1d-8017-d549cdf739e0", "value": "1536:MqbF7IdAcsgpY+EqqWEVkCkj6Rv3U8GbdGrAyvQhol:TF74AcsgpGqaVkCdRvAbdGrXQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779116, "uuid": "5915b471-29f3-41e1-94d1-2391ff4251a5", "value": 85904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779116, "uuid": "df8e52b1-3896-4b73-8cb1-79037900d5ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779116, "uuid": "14624893-ae5d-4838-92ca-dd860cf64694", "value": "windy.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43d6968e-e26f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766762795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762795, "uuid": "a670e180-f91b-479d-916a-2b12f7e7b3e9", "comment": "Malware payload (Mirai)", "value": "8ef5b1bd7caee3e103923339d904a8f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762795, "uuid": "69eaf8da-9c03-4736-bcb6-92a001a50f0c", "comment": "Malware payload (Mirai)", "value": "4f5104aa63e972799aa097c7fb18e8e1364318a4bf6fbeed906563db440407d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762795, "uuid": "4f426234-e4df-4cd5-a47d-f3425ba072e2", "comment": "Malware payload (Mirai)", "value": "e58d7e0e5e1c621aac83f2018f97a2133c751c55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766762795, "uuid": "731aae58-7f98-46d9-b8f7-8a2b462246f2", "comment": "Malware payload (Mirai)", "value": "714ab69c6b695c612d89027c7a7b2c10d1e008c1e3889d3b67b356247cb081a8cc44e73a2aff79d471bc4e0bf69fb9f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762795, "uuid": "07971f2b-349b-4742-8fd2-d7c2b894c1d5", "value": "T1A4731263C779EE64C06F9A332D6B9E46F204BC727206151FFC11A1FE4E829A5AD14B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762795, "uuid": "45ba84ad-a70c-4736-8c5f-dcbb73856fec", "value": "1536:asQMu1UjYiOopIYwpbBzBRZOuhiFwINdWqdSQu470onwNBHVFBbRo5M4q:aVyMwpIYwpNb/yYqdSQuueNpVTlMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766762795, "uuid": "628b704d-dae8-44be-bdf8-eb0e2df8b73b", "value": 74708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766762795, "uuid": "e0b10264-45fe-4e80-b431-1b3123d6a72c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766762795, "uuid": "a483e826-f251-4854-8f27-f455aecb93b1", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de1b1f3f-e250-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766749740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749740, "uuid": "2f550254-b7c4-48f7-a24d-6e2da1a483a5", "comment": "Malware payload (Mirai)", "value": "917d6365d1a6c46be3695d485fe1dc1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749740, "uuid": "f6ec65e8-c27a-4c5b-aed0-1a385c412081", "comment": "Malware payload (Mirai)", "value": "4fb53e8c8040a1a35c0a72a2f8056f1ea19ed2a5944034a9fd524b6b2c561f04", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749740, "uuid": "cd37a19a-036f-4722-837c-c9e4971ec8f8", "comment": "Malware payload (Mirai)", "value": "d19ae825dd8b73ae47c03f6c8e67b5f5cc4265e8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749740, "uuid": "d6db6f7a-de2c-4f47-8f2c-f6af7cfeebf4", "comment": "Malware payload (Mirai)", "value": "c79065b4c7ba5acd7f61a6bb9122ee7bee0ec665790d2c2ba7a8bff2ac119bcd45c95588e8e94dd2b508ec194c2954a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749740, "uuid": "97ebf980-cb1a-4b39-abd8-e0e05bbe4635", "value": "T16B530232868847ABC7F20C3258DF289E9439AFF551A0386391D29B80F7C76E616D1277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749740, "uuid": "4404d534-2ea2-4eab-bf04-90a101597e7f", "value": "1536:jf7ZSVkjaqVlGq9+nV/ij8rf5CJ6BD+25vX6iSioiO:jf7oqjHlFAV/Rfwgh+wiiSl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766749740, "uuid": "c0ee36ed-1686-4c91-a197-c752696d2d4d", "value": 64376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766749740, "uuid": "d4eb421e-185e-4c75-bd5e-6b8236075c7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749740, "uuid": "f70c9874-4fee-4aaa-a7be-8409b481184d", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bd5c5aa-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747266, "uuid": "fbbb46b2-4530-4994-ae62-5ddabe4c2c59", "comment": "Malware payload", "value": "f08dbdc29917b2fdf50df94e02e11c09", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747266, "uuid": "e462271a-cc35-4e9b-bf72-b7d8ce36510e", "comment": "Malware payload", "value": "50435f62ab9339eb359da8ac92f1b8fef739e71bf3dca9145f7ca5fda24feac8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747266, "uuid": "9851ff99-ed7a-4899-9c5d-08d98e35774d", "comment": "Malware payload", "value": "ead87e46f70802a04aafec09a2902485554844e9", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747266, "uuid": "9b02200a-6642-4fa2-b6e7-a8d9dd160046", "comment": "Malware payload", "value": "3069b73836b318409ec56236622733a0fba6dde0f6830a46ea3a83a6188c4c596cb269e4051793092138d5ebb38358ce", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747266, "uuid": "08c5ceb3-8f25-4ff5-bb1c-dd7a3d971f0d", "value": "T1AD632BD75F1EA9C7A425A2D8DF2D32FE07314F52E576740DA20EA2D78D1AB0ED923060", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747266, "uuid": "c1f4a0a2-a899-4542-8d08-c847f57a7f0d", "value": "1536:I9l/AoSSMD7WwFMLuULXOAsQtfPdrqlcDA6D3ZFPNhmUiDnMXQ1LF/BqGPRXsjnF:I9l/5MD7WwFMLuULXOAsQtfPdrqlcDAO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747266, "uuid": "c91fef4d-8278-4413-95f7-e8a86249bb55", "value": 72533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747266, "uuid": "d179fd1d-4aa3-42e9-96e1-50de39680965", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747266, "uuid": "0a42a172-33fd-49e0-8b0e-f79579c1772f", "value": "invoice-1645080830.pdf (67).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07320fdc-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779014, "uuid": "3057c407-872e-4a68-912b-a9f94cd0bdbe", "comment": "Malware payload (Mirai)", "value": "220e3cfdf54deb0cfb740ccee3e75692", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779014, "uuid": "711f7643-1a9a-4a7a-9d42-4310a71dc161", "comment": "Malware payload (Mirai)", "value": "507c94644dde67202897e6720d71dd1a022bcef84bf10f81af92228844bbf671", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779014, "uuid": "1fc2e8aa-a74d-416c-91f4-5cd6a06b547d", "comment": "Malware payload (Mirai)", "value": "9e6388fe2aac506aebdfd995e25ddc821e5c90f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779014, "uuid": "cf72082f-da63-4875-8345-d4a15fd58917", "comment": "Malware payload (Mirai)", "value": "b62c4583834dd5cb416c5b77a5e50736906255f690a87783317882b6494563a28e0b344fe5859e0732954ed1dadfe904", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779014, "uuid": "cdc8a059-e47d-448d-b370-66a9d2c21f0c", "value": "T120936C42B70C0E43E0575DF02A3F57E1C3AA66A120F8FA89790EDE4996B2D325547ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779014, "uuid": "bb1aedf0-655b-49e8-8af0-7051b7cdaaa7", "value": "1536:aDbQbediu56mJYRBNS3LJEr0YN7OlqTzxYiokFfygu2MP0l1Wrll/vp+t3b:wQMIBTz6ilu2MCWrj+b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779014, "uuid": "94a54477-eaea-4fb5-803e-df9dff27326e", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779014, "uuid": "723a6a22-71ab-4534-a96a-c8c58e579f4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779014, "uuid": "888ea131-1881-4785-8326-41a6c7bdd42f", "value": "titanjr.ppc440", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1297ebee-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766712461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712461, "uuid": "b90e30b1-cc21-44bb-bd79-ff3924daabfb", "comment": "Malware payload", "value": "b3da4e24b4f466611478e488e49b7d3f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sabsik", "colour": "#6B6779", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Sabsik.EN.A!ml", "colour": "#CED05C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712461, "uuid": "5f0e003a-2b15-49b5-8aa5-4e22fc0c0fb7", "comment": "Malware payload", "value": "5140c7701c1f7dddfc0e53071661cebd40d576a02bca960be3199c22a0c60739", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sabsik", "colour": "#6B6779", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Sabsik.EN.A!ml", "colour": "#CED05C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712461, "uuid": "be159919-e196-4258-9db5-49bd26eb5925", "comment": "Malware payload", "value": "679a886b8f8c1cab141d43c7a0a03341b1078c76", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sabsik", "colour": "#6B6779", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Sabsik.EN.A!ml", "colour": "#CED05C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712461, "uuid": "0ef374f5-8af9-49c2-aa1e-b1dcc746c275", "comment": "Malware payload", "value": "fb88cea815f66949fdbd134f38781ef0daa30b4f0c942b20fddf67ff73ddd7de9b1ec26606d7f46bd67298cfea2b1bbe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sabsik", "colour": "#6B6779", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Sabsik.EN.A!ml", "colour": "#CED05C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712461, "uuid": "681f6eb1-52d0-4857-bd5f-2be9ef470df2", "value": "T16AB523CAACAD49B5C043CF70085376F6224F779ACEE5180C1AC9DCC67E32A974156B6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712461, "uuid": "2bb5d462-a986-40c1-90a7-9b2736051f67", "value": "15e25e773d4ff8e7bd5353cc79dd70e4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712461, "uuid": "bed1e23e-e327-41e9-a473-dde9b9706169", "value": "49152:bo0ZS4gjKYylUDW+1xHGSx9ImWHE0fyc48N1tiG:k0ZS4guYiY1xmSx9IfE0fy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712461, "uuid": "ef65d9b1-9a09-4c51-9a0f-69d17b99b7b5", "value": 2345472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712461, "uuid": "51ae37f7-fec5-4370-a5bf-51d4559ea51a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712461, "uuid": "ad0b5650-ca85-40c3-b3f9-f941b07c31e7", "value": "CrashRep.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fef9f389-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792744, "uuid": "61a54460-3633-4b51-8e3b-544f3373885d", "comment": "Malware payload (Mirai)", "value": "c391fb7f51b7359cc814b198dc196ab6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792744, "uuid": "2cb3d1c7-3f01-4ea1-8797-65c96712d0ad", "comment": "Malware payload (Mirai)", "value": "51fb50d5201ce9b6ad0498f09b7b16b1e1cf6ef421022bd5345f7ed3c38ba28d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792744, "uuid": "a215aeae-ba25-4a02-800d-68ca4d0296bf", "comment": "Malware payload (Mirai)", "value": "1cea5fede7f182ed949cacfe35a4e86f216d9670", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792744, "uuid": "678f9a57-9903-4f36-8e57-9d1d60066cf3", "comment": "Malware payload (Mirai)", "value": "233e31008d876d39f97839f748de72df74f60bbfe615f17a27c3cfe1996878157592fedbe38a8548ef45c1421ce01071", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792744, "uuid": "668be37d-d1c7-43e9-aaae-b45685d35cc2", "value": "T12363121D0DA97368C1F6A47C5CEEFDC7DD58A938D699A1F6978034088C83B46180BDF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792744, "uuid": "8308f5af-f983-41ac-868e-64f3851e431a", "value": "1536:fH8ivRHzLa1I1Y6LmNgAgulz9smgP5oua/Ess2nouy8Gyh:fH8m1aO+6LDAztKmg2ua/Esxout1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792744, "uuid": "75603430-0cc1-4f6b-bed0-7bebe85899ae", "value": 67688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792744, "uuid": "c786c619-5b09-4ad6-b7d7-5afd5f4fb8b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792744, "uuid": "4a7cc1ff-6870-4027-9e8a-f9dcb5eedde5", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1e6c6d2-e253-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766751061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751061, "uuid": "cf49e591-11cf-4762-8f14-a632db25db29", "comment": "Malware payload (Mirai)", "value": "ff7f877a976b6e63141b355eb1c82684", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751061, "uuid": "fe1dec61-3a2e-4e44-a734-81744d6a176e", "comment": "Malware payload (Mirai)", "value": "5218eec0785aca9ca6681ef67b0dc06c409d56daabcc9e8231650d05c600cafa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751061, "uuid": "85d7a9c1-1c0f-443f-87d6-52ec5d2bd7bf", "comment": "Malware payload (Mirai)", "value": "1e9f7d7c13cf40de84a84a4a7943589004e980d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751061, "uuid": "0cfcdfe3-e4c7-4c04-95ba-2dbbe755024f", "comment": "Malware payload (Mirai)", "value": "46d3512c36b9044003af936c3eba9186cf2bb46170ffa1e5e8ab17830ad69e4d34517ffe226bc05e55efb21a499cc225", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751061, "uuid": "cd8d9fe6-1cf7-42b0-8c8e-cf73b52d12c9", "value": "T10F43F162A45F65A9D1F219BDDCF05411FBCB0BE1C2BD38D04026DD0EB9A2C4E367DA12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751061, "uuid": "0c67d6f3-a2be-4a19-8996-ee3a9b6b070f", "value": "1536:1KGInEjbTfLPA+wlW6GvE1C6/7K2qWzaDUAaPwDSX4AwsPHbsXn:aEvTfjwg6wE1C6TKXWDAzA4A5TsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751061, "uuid": "3c8c7d02-c5f8-4c03-ad03-e62a32212c71", "value": 57752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751061, "uuid": "2a630c3b-1e99-488a-bcd1-4bcc3a08c327", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751061, "uuid": "443621a2-ef00-4996-91cc-10bf120e8ada", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "414ed46f-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707386, "uuid": "bb1ff0d1-3fff-41d2-bd5d-959f44f5e859", "comment": "Malware payload (Mirai)", "value": "cab7113d999a87e7c1b19d968d3e051d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707386, "uuid": "57a79f91-ccbe-461b-8c54-ac4fff10fbc7", "comment": "Malware payload (Mirai)", "value": "5228f23f1bc360ff378baceedb086fbdaf9e7bba963b83e9b374fd13eadb98b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707386, "uuid": "1dd3229a-1ee4-4b82-97cb-517fd49ea053", "comment": "Malware payload (Mirai)", "value": "9a610fef17b4fa10f7cf3ea1f19b930172af50ae", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707386, "uuid": "7d40d882-a469-43dd-ba4f-08ba415cb925", "comment": "Malware payload (Mirai)", "value": "cd7c006e2f553e88262d85cad3727267ff47d035cc36c25d25e6e15bbfff9498aba1259e5dc87ea74f3586be73ab1b7f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707386, "uuid": "e52548eb-7f24-4279-a234-fca181f9f8f0", "value": "T189331985B8C59A16C9D4227EF92F019C372623B8E1EF7207DD126F15778A82F0D77612", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707386, "uuid": "6ef8705e-5120-4f27-a78b-3a1b3b944c8d", "value": "1536:o5B9Jxy0iapHyBnfo27edXc70rYPC2tAT:o5Bz08Yq2tAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707386, "uuid": "ff06f5de-7287-488a-8f6c-5fad2afc1746", "value": 51912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707386, "uuid": "0cd5b7fb-d899-4e54-b9a9-62b84d5214fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707386, "uuid": "945c091d-78fb-44ca-b836-abadc1cb98c1", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49483f29-e274-11f0-a129-42010a9c0007", "comment": "Malware payload (ConnectWise)", "timestamp": 1766764952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764952, "uuid": "de4593f6-6837-4773-bd92-ddfb787544fd", "comment": "Malware payload (ConnectWise)", "value": "91b1d4dad154fd464e77fa4ac99e43c7", "object_relation": "md5", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764952, "uuid": "f0b63a80-a82b-44e4-a58d-565701075f2b", "comment": "Malware payload (ConnectWise)", "value": "527a521f0cca55ce3bed8b03b9b0917d0929682a0bbd55c15c4e2e449121c644", "object_relation": "sha256", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764952, "uuid": "5c3c57a3-9d30-4fef-a757-87c00a9bfb6a", "comment": "Malware payload (ConnectWise)", "value": "41c1fa890e7ff13e3c42d89ffb756a4c35f9dadb", "object_relation": "sha1", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764952, "uuid": "ac0df670-f3e1-4ac3-971c-370db8db6f61", "comment": "Malware payload (ConnectWise)", "value": "9cabdb3874f85aa68ad7c5777ba904bda606069ff0210622fec20d69ed2ff661cc92489bb830570b6178e1308fec2ec6", "object_relation": "sha3-384", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764952, "uuid": "03ba90bc-9177-4657-94df-d8ef97f01c52", "value": "T14CC6237127E98425F1A79F39EE3A89E229387C64DA16C45F0BB43C0E1971E509B72373", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764952, "uuid": "690dfef2-1de4-4402-be0a-8c57be5dffe0", "value": "196608:nKaLNkbg/i4QoKaLNkbgZKaLNkbgTKaLNkbgFKaLNkbg:/Wg/iHOWg9WgrWg5Wg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766764952, "uuid": "d839c826-6103-42fa-a421-7c64861e5eb1", "value": 12185600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766764952, "uuid": "6e886b32-9fcb-4057-8e3b-b0d01398d96e", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764952, "uuid": "879c1c2c-5806-482e-84ad-131bf3cd9af8", "value": "adobe_update2415.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c4656ae-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747455, "uuid": "23b70d8f-9c6a-4330-8b45-97da3aa5ab36", "comment": "Malware payload", "value": "5c810fbe08ec1669c93b8b7a1132571f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747455, "uuid": "f6425599-e224-4554-9274-4b66d7aed649", "comment": "Malware payload", "value": "54dea9956b6b0b2f21995075965415edd7462fc61dc576c060fb369309538ff1", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747455, "uuid": "6546ef80-17ac-4bc9-815d-dd5fab7b1f2a", "comment": "Malware payload", "value": "8d3b0ca0a1acdcc30762bed07e38358e6f2bf510", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747455, "uuid": "619f3b35-0f5b-4b63-a169-d6c9e5914a3a", "comment": "Malware payload", "value": "ac3afd9b58eb889855f190fb8d58314f8c2b00716ca4658840bbbb8321e5a3147fbb7c245ab91a2f62146592a9c76501", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747455, "uuid": "0c1c1144-f2f5-44c3-84af-dfb93a18ae0b", "value": "T1666319D978333E85257D78926BF198F23B0A44E72F9C13299B438110BC29F5B3649D8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747455, "uuid": "6484e3fa-6952-4774-8c2c-673b8fe83fa8", "value": "768:I8w/h62/jWs6oS+xISN0v5B5WsFZl6Src+BuSRm4BnB6dSCSnRKsf2rXrEnDQyV4:I9l/AoSSMususrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747455, "uuid": "f34c1fd1-956d-42b6-952d-9a35d9d42eb2", "value": 70595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747455, "uuid": "c9561ac8-08f5-4011-88c2-e446904d98a0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747455, "uuid": "a8ba2efd-ff91-44cc-8e3f-72b054ebc6f3", "value": "invoice-1645080830.pdf (28).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef2fbbc2-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771672, "uuid": "8d4937a4-5a47-4816-9198-e8a950364180", "comment": "Malware payload (Mirai)", "value": "fbd2bc1fc63c39074af23b79c5b0dc6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771672, "uuid": "e04317f7-0b27-4177-98b6-b324c116f90b", "comment": "Malware payload (Mirai)", "value": "55041c48c2ebc35b23fe0e1b876f604ef793c6c29037c05ad5b5af2e4fd499a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771672, "uuid": "4a872ed1-f049-44cf-a130-d2ed2aa1967e", "comment": "Malware payload (Mirai)", "value": "0990841df9a531e17d8b90abca99b84a2c096898", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771672, "uuid": "3db34c0c-a144-4300-a0ab-aefba50a1b08", "comment": "Malware payload (Mirai)", "value": "4ab2b080b994b1fd37391b6d96db5bb47dec4183b85d2a892ba9c7bf2c1359e0e3c499431d39ef03ca9144b280f910ee", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771672, "uuid": "c0b41e94-5ada-47e4-a247-bac83283647c", "value": "T12E630247E03E152A74E1527A2F791D8710E0BE1A1AD209B7DFC2C156C9B879ABC707C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771672, "uuid": "4c3ed095-5e6b-4c8f-8ccd-c8754b458bcf", "value": "1536:IvoduskqPzg86lS2a4wnejQczkT1eF/1AT2Ra3oIQE5zknouy8HyQ:I6kqPzn6lS2azcSeFNATjoIpdUoutX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771672, "uuid": "23633ea6-6423-4997-846a-3a034d50aad1", "value": 67744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771672, "uuid": "aea88b86-5fa9-4374-84ac-19a1fc011e99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771672, "uuid": "3c15b6fe-e755-4861-b519-54471696127f", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6299ca9-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772838, "uuid": "97aa0d68-4914-480c-a105-cb3edebad04a", "comment": "Malware payload (Mirai)", "value": "8488a998cc8a975c7ad4649e91b9a91f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772838, "uuid": "c66520f7-081b-4be9-8a92-f636de522234", "comment": "Malware payload (Mirai)", "value": "561d0101bc2b5579d7f3b70ac25ce83f9f849be74fe1fc0ed418fa9c1f719951", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772838, "uuid": "43f64a77-8466-49f6-b937-65337a94e7f4", "comment": "Malware payload (Mirai)", "value": "91b99f664a0e482f7b335947ca6ad3e4b5711dd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772838, "uuid": "37367cb3-fa5e-4e81-a6ef-2453944875cf", "comment": "Malware payload (Mirai)", "value": "f04c5e114c79c2b4377227e7d3b29f22f3c3d56a5b56f28cd4a0b568285d926ccd28753eae43b6d90c345997adc5b8a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772838, "uuid": "fd677987-14a9-4bd3-bfcf-17dc519133d3", "value": "T10553025AED985713F6BD0071477A9B4A11D3D232E989D0C9CB302072E6E127BBDA8B48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772838, "uuid": "b5cdc0f0-03aa-40fa-8ece-5b86cfd97f66", "value": "1536:fDBnx5+nHi6794azk20fyWW+tZ5bQxjYenouy8Hy0:9nSHGcd05Pfk5Y+outb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772838, "uuid": "7320f3f0-29e9-4c6f-b150-accb7809582d", "value": 65228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772838, "uuid": "a8a5872b-2209-4538-9cc6-4c1ca04dbb40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772838, "uuid": "7d06b820-99c3-4b48-b259-af99640609fc", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad4b5b67-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747510, "uuid": "60a54219-f3e6-43fe-9d53-adcbffc60f55", "comment": "Malware payload", "value": "627c3d3bd0ef596d386b08cc47406d83", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747510, "uuid": "66af0ab2-525b-4f2d-aec5-543e5cba9131", "comment": "Malware payload", "value": "562f61fba70dcf8acd7afe0f96d9c9d19b22fea0f152eb15d4183babdb7d0e81", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747510, "uuid": "fab1e5f1-57ab-4d0b-a809-3e43199b75bf", "comment": "Malware payload", "value": "d9f63ce6b51312edc7355b0d2b3cf1b34f5c9d38", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747510, "uuid": "94b46192-7fa1-42ee-8058-76b66d891edd", "comment": "Malware payload", "value": "d8c662499cbda5571f4499079ee9599e939b464d8adecd5e801f1c920cce863975cda06daa02338a80509850190be1d1", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747510, "uuid": "e09cab03-e5b9-4234-929c-a0981d62f934", "value": "T15F632C114DEB1D17AB803EB55C1F948288FCCA0D77699FBA0B4ACD68D81CB159BC0D7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747510, "uuid": "0e56bf6c-203a-4e2b-a430-914fcfa5a0d3", "value": "768:I8w/h62/jWs6oS+xISN0vOONnt1fdkfScBYrwz2y8kTAlGB:I9l/AoSSMZ1usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747510, "uuid": "a1031361-48a4-47fa-84dd-607c83638ce6", "value": 69725, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747510, "uuid": "b6a050f3-7fe1-4fab-b2d4-e0033f545812", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747510, "uuid": "391fd288-3b5e-4459-90c8-922d7467fa0a", "value": "invoice-1645080830.pdf (13).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f32458c-e229-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766732857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732857, "uuid": "7310d257-da9b-41d1-84d1-ef1e79b56933", "comment": "Malware payload (Mirai)", "value": "58e69c12b7cafb52693b741973433b01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732857, "uuid": "ec559ce6-de4c-4ce0-a226-9b84fb08d749", "comment": "Malware payload (Mirai)", "value": "5685f6acc12447b2c183f0e999c2c20b602cdda03771b8296b4d0f107edb4dff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732857, "uuid": "a92f8b5b-e1db-452d-bbbc-1d9a0b800e87", "comment": "Malware payload (Mirai)", "value": "a834b09c32fc0793df56f3ab44dbc24eb332995d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732857, "uuid": "31690b77-ea01-4b34-9c21-dceae15a00d2", "comment": "Malware payload (Mirai)", "value": "6e37d7fab0b85d47de6954afaaab0ff378fc16a121f54141e406599e2143a5bac5851a1e1f8698d8ef3e837e139d473d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732857, "uuid": "6c408c8d-e752-4060-ad15-a83f13b4fd21", "value": "T1B23302FD8CE2D8B6ECCD5FB2D85901BB6D544E191CE3D14A3E4AD04055B6B840AC7CAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732857, "uuid": "a483cb56-0feb-45bf-aaf8-6e3fbf79dabd", "value": "1536:gGUKwA8FXZAG0Ed7kmE7DZkjDQ8qgKDyv4rPr:lUm8FXF0SAzDYDhcGv4rPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766732857, "uuid": "72dd622e-7435-46a4-8f80-2178ad285493", "value": 52696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766732857, "uuid": "c343b792-9c16-4be1-b7e3-0d98a6c21539", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732857, "uuid": "4c541ffa-131e-40bd-bec7-501366da62d6", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d604e437-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (Amatera)", "timestamp": 1766777643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777643, "uuid": "f83f4304-0dbe-4956-85ff-5845af95400b", "comment": "Malware payload (Amatera)", "value": "1e50fab9198cd2629ebe6963924b3661", "object_relation": "md5", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "AutoIT", "colour": "#C5D2EC", "exportable": true, "hide_tag": false }, { "name": "CypherIT", "colour": "#566C31", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777643, "uuid": "e72849d1-b41f-4c51-a3ba-81e8be73e0a8", "comment": "Malware payload (Amatera)", "value": "570130baff465b9d23b4dab752fa3923c92a538116f1d161b760b89c4cfe835c", "object_relation": "sha256", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "AutoIT", "colour": "#C5D2EC", "exportable": true, "hide_tag": false }, { "name": "CypherIT", "colour": "#566C31", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777643, "uuid": "23275722-5c3f-41d3-8810-bda54febd996", "comment": "Malware payload (Amatera)", "value": "76e9c4b0019258e0e7c8d21e0d931383e8a4c70d", "object_relation": "sha1", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "AutoIT", "colour": "#C5D2EC", "exportable": true, "hide_tag": false }, { "name": "CypherIT", "colour": "#566C31", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777643, "uuid": "894a32a8-b913-4254-b0f6-dd4d77ba1d5a", "comment": "Malware payload (Amatera)", "value": "48bf67a5f9c61cf4e0f711400f1d79db5b0e43150c253634639e157ea3d8e08b4df08d99edde4a56953326ff300e41bc", "object_relation": "sha3-384", "Tag": [ { "name": "89-124-68-75", "colour": "#73E69E", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "Amatera", "colour": "#385F2F", "exportable": true, "hide_tag": false }, { "name": "AutoIT", "colour": "#C5D2EC", "exportable": true, "hide_tag": false }, { "name": "CypherIT", "colour": "#566C31", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777643, "uuid": "d3b8887c-5d89-4449-966e-553aefc1f71e", "value": "T145B6125A23E425DAF4F733794BF60E829B32B8540B7746EF5279C0AD0A237809E35716", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777643, "uuid": "c442332a-1b19-4bf8-8034-8e2b954461b7", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777643, "uuid": "8e4078b0-2177-4557-bb06-f81d6cd45737", "value": "24576:/C4j6v2gK/Z4dGRXG2QX3CXoxxK5Y1jF58V75GRLKIF:ao6v2gBUXG2QXio/K5YTWV75ML", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777643, "uuid": "fb847f5c-b5f1-4e01-be06-6aed1f409e80", "value": 10485760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777643, "uuid": "85cc6d0c-7bbf-486a-a2bf-1624b5db12bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777643, "uuid": "3aead144-dd43-4e11-a102-afaca6a26033", "value": "Setup_Installer.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aede44bd-e2a1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766784449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784449, "uuid": "3222252b-2c8f-471b-ae55-d9bf0aad3102", "comment": "Malware payload (Mirai)", "value": "0be1abd6679dcbde4353295049e5714f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784449, "uuid": "92303220-d55e-442d-a82d-f07536a60039", "comment": "Malware payload (Mirai)", "value": "57279b4d92bac69ab7bbd89628a8501a862860b655317d1150a8060579b83f6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784449, "uuid": "920d1af9-2aa5-431d-a126-f47a4a85f600", "comment": "Malware payload (Mirai)", "value": "ba49caf08113e8f63d914776323a8c3b35d0729d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784449, "uuid": "c09adeb7-899f-4668-a440-86bbfb25dbdd", "comment": "Malware payload (Mirai)", "value": "627656297e14f7dc65be04fdce07a211a247c797fecc0522e45cdf9fdf2fd3cd9d03636bcd5c22ecdcf3a02c099968e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784449, "uuid": "c2bb984b-fd15-4770-a4d4-a9fffd8105a8", "value": "T197335B21B97A2E17C4D5B4BE61F74724B2F61B0A36ACC65E7C720E9EFF1094021076B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784449, "uuid": "b77a91a4-513b-4c9f-ae2c-0307cce3058e", "value": "1536:amASmLbBKPPSOnQG/yPQaMLNuCFle6LFnz+:RV+kV4+p1Zz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766784449, "uuid": "4a875023-5ca1-4deb-972c-369a3c15d7a3", "value": 54108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766784449, "uuid": "73b1ae65-5b18-4efb-960e-dd55e75e0c8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784449, "uuid": "78e1199c-add1-41a1-846e-6a7438e7b8df", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa4d8841-e260-11f0-a129-42010a9c0007", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1766756525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756525, "uuid": "68da2887-7dbf-4dcc-915a-1b97c1e28d52", "comment": "Malware payload (Socks5Systemz)", "value": "901d2bf301a02d18ececa8d015a6b48a", "object_relation": "md5", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756525, "uuid": "0a34f42a-3919-41eb-94bf-72ca029f73c3", "comment": "Malware payload (Socks5Systemz)", "value": "5736e130f422a680a0ad65f6a38b5b7dbb61cc71a1a82dca6e8f4910289a98d5", "object_relation": "sha256", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756525, "uuid": "8138ced7-fd13-4344-ba08-faa23c91c5e5", "comment": "Malware payload (Socks5Systemz)", "value": "63326dbdc331cb3be08efa0736799ea35e62849e", "object_relation": "sha1", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756525, "uuid": "91253d81-951d-49a8-b4a7-9952935eb7e2", "comment": "Malware payload (Socks5Systemz)", "value": "60447c9c922ed0e04b05ce716b818ed8a5d3abf87bec9b85e4238ff664fae6777b4c4c6b10974dcf8f8f08ace5eb67d9", "object_relation": "sha3-384", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "UNIQTWO.file", "colour": "#7CBCE6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756525, "uuid": "0881c3d6-1a0f-42e7-8c22-163c2d58b6e2", "value": "T13DF53301AE969461E0794738161AE1EC7E3ABC92E3F684463DDCB9CF7F57086B109F42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756525, "uuid": "1a12f1e1-de6b-409f-8f71-b6914adefe9e", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756525, "uuid": "fcf0adcb-ffca-49f6-8217-47fa459fe7c9", "value": "98304:MLYTfSWT0NuV0qqy31GJ/g+g0Xb1I1EmAi1:NPT0RTy3g/gmaKmr1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756525, "uuid": "f935d410-1669-4f66-b23a-87c87dadb6be", "value": 3519185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756525, "uuid": "05c1b90e-2f5d-440e-83de-18959b4b41b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756525, "uuid": "7e773c58-e51d-4cfa-bb76-cf25b8718bbe", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6538c654-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766777454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777454, "uuid": "59c9b6d1-3ab1-474b-a868-9a6d42574939", "comment": "Malware payload (Stealc)", "value": "caa0969a4db68ae8f2a1d2d4818f6aba", "object_relation": "md5", "Tag": [ { "name": "217-156-122-82", "colour": "#B50A5B", "exportable": true, "hide_tag": false }, { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-6108", "colour": "#9EA2B2", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777454, "uuid": "f0c6ca6c-3496-4010-ab48-af8fd49ab917", "comment": "Malware payload (Stealc)", "value": "57d1f740ee355dd3cf4d8cee684f7150741586493e967e6d537910439beff751", "object_relation": "sha256", "Tag": [ { "name": "217-156-122-82", "colour": "#B50A5B", "exportable": true, "hide_tag": false }, { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-6108", "colour": "#9EA2B2", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777454, "uuid": "d07a9077-b35c-49c7-9fd0-d8719b31db3e", "comment": "Malware payload (Stealc)", "value": "b196a8dd108ec4daba9b83baf2c5256b9204a20c", "object_relation": "sha1", "Tag": [ { "name": "217-156-122-82", "colour": "#B50A5B", "exportable": true, "hide_tag": false }, { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-6108", "colour": "#9EA2B2", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777454, "uuid": "84ae03df-8733-4e7f-9942-e8ec2c963196", "comment": "Malware payload (Stealc)", "value": "d2c5ad6cc0e74aacd112a74c6d4fab4ef55e54deca8a16967817580060e9bb8db69b9bb107b08a2351f372083c26a311", "object_relation": "sha3-384", "Tag": [ { "name": "217-156-122-82", "colour": "#B50A5B", "exportable": true, "hide_tag": false }, { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-6108", "colour": "#9EA2B2", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777454, "uuid": "27bfef7b-4962-4397-b7d5-c7d334432923", "value": "T14FF633D6FB1BBD9FF195365B37161D1824C2BFED0E2FB548291030D80968F1EA9025AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777454, "uuid": "916b7695-93eb-4b95-99c9-a29f7392081b", "value": "196608:jNllKmkrsCFW1hLWgfiAddpjWPNBsUkYD+aR0MEeMOdY2Xydf22ALcduJ:jNbWrsConW6r3kVBsUk98QDOdJwuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777454, "uuid": "ed2db7a2-1f24-481f-af1f-848eb0cf4e21", "value": 15296083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777454, "uuid": "cf28eeee-c29e-4f1d-a1e3-10897fa7a443", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777454, "uuid": "6f1d7fbe-3b86-4fa1-baf2-38280f9b9148", "value": "cx-programmer 9.1 free download Full.7z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b0c730-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775785, "uuid": "cc1b6b09-0fda-404c-a05b-ed47c62572c6", "comment": "Malware payload (Mirai)", "value": "341b46b74658da1a0f701c733cb6c35a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775785, "uuid": "77686f1a-e0a0-483f-8510-aa1f93df65ba", "comment": "Malware payload (Mirai)", "value": "57d9bb6d2fc2aa66158e7c0553383e041fc346d9f3c41503664058b0d6b3ff15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775785, "uuid": "a86662dd-ead4-4773-ba9e-1e9cf2b5b4de", "comment": "Malware payload (Mirai)", "value": "29de9b714668094db110363d7ba752a3c1f98bef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775785, "uuid": "f658499b-a5e4-4ccb-8499-acca6542a5c1", "comment": "Malware payload (Mirai)", "value": "c4a2161f76c53f20f0690d16babc1aac27252c79f7346b5b5db3ac3297bcaefd7413a6afb72b0fbde1017ef613be3749", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775785, "uuid": "b87e30a0-12f0-4af4-bb77-a787edcce396", "value": "T1D9331985B8858A16C5D8227FFA2F019C372623B8E2EF7217DD126F15778A82F0D77611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775785, "uuid": "3fa37dee-cecf-4c23-84a3-9dc6c86495d2", "value": "768:nMwxA2lWBws6BSHhc+jSeqCvQjl7WO9Wa20A7slxTIiHGq35MWKQNFd/EYWIM5T:9xTlWBwYTjhqoC7x4a20A4Ei5KcxqT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775785, "uuid": "7d9534d3-86c5-42a3-9604-63a1988401f9", "value": 51848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775785, "uuid": "81e42ad6-e324-4c09-ad4d-98ff272e7b38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775785, "uuid": "52057a6e-f3a1-450f-8fa8-b2d53b576ede", "value": "zerarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "379189f3-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747313, "uuid": "6149221c-ca4e-4bdc-b5d0-0bfb68f76c85", "comment": "Malware payload", "value": "0f478134a7d51e10a53110cfd74f41e3", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747313, "uuid": "b184f400-2690-4b85-8464-04ac0ba29e55", "comment": "Malware payload", "value": "57f1db3a8c55601b603764a1873320237aeacc603ff44c8b9b387dcbe21b6335", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747313, "uuid": "e43543b0-abcf-44ac-aafa-7215dd7bc1cc", "comment": "Malware payload", "value": "e80af65a8a2f002bad83805482b6fbb02eaea8d1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747313, "uuid": "6808a820-97c6-4272-9f95-0656b12ac1fc", "comment": "Malware payload", "value": "70f7d6d3f6a3909446091e12c2b7c6778c125d18286b6e5d313c2f49955cda9db9b436c7295194a207146f2e248e9fa5", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747313, "uuid": "f9c6753c-0b3f-4662-b90a-290a4cc4fb89", "value": "T104633B5EADBF4BB243FE52799533E79CE100753D4E73406BA64863094EB26AF44AD0C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747313, "uuid": "93d7559e-bc4b-458a-b5b0-c64d6910c7b7", "value": "768:I8w/h62/jWs6oS+xISN0vIBUe18dkfScBYrwz2y8kTAlGB:I9l/AoSSMK2usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747313, "uuid": "1d9cdce8-8ef5-4fa7-91d9-afaf215fe9e0", "value": 72464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747313, "uuid": "ec6b7bbb-a181-4edc-8989-0a1d9f73197c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747313, "uuid": "8adb0c0c-c4bc-4d4d-8814-c953245d5442", "value": "invoice-1645080830.pdf (56).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f13698e2-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771676, "uuid": "266d48f3-0de9-4022-a0c6-454b7ead4755", "comment": "Malware payload (Mirai)", "value": "8c4d7bd371ec3088155eaed28db536f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771676, "uuid": "905084c9-feee-4b7a-86ca-e5a4cd65bd4b", "comment": "Malware payload (Mirai)", "value": "587a11245f0c9dfd34acc4c287977592dcaa4d7e1c0b5afee3d2120882dbbe58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771676, "uuid": "dbbe5c80-3f14-4cfe-b764-3fbff1bc1b3f", "comment": "Malware payload (Mirai)", "value": "e2b36df8b73df0fdbfda490be8e0a87931ce1405", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771676, "uuid": "f43f5502-39d6-4b01-9df1-73dfd3b74f55", "comment": "Malware payload (Mirai)", "value": "06657415ec80fad72f205bfcd4cb0de3fe8fd710863335d5c0597e61b3019fa05220e58ab4b8a73a71f181f144eb85f7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771676, "uuid": "150756ac-3c02-461b-b7eb-8d5eec7ddc02", "value": "T178639D76C86E5E54C4585270A8B1EB351B83B40093972EF76E89CA768003DECF68D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771676, "uuid": "2f60868d-fd20-43b9-a35d-3fc0b979c55d", "value": "1536:HaYSJuemBNI4ACqU4JlXAAU7b4tACmj6MDxTAbVR:HrekNVB+Ji7b4tAnGMlTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771676, "uuid": "53085238-fcf4-47fe-9d25-47c1274e438b", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771676, "uuid": "b9d570fd-8f84-40a9-bca1-9684d8372851", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771676, "uuid": "9bd99928-07b7-46e3-bf08-22df67cfc830", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85bc930e-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777079, "uuid": "7d4bf880-b846-4f22-a3af-72f54f4f6e27", "comment": "Malware payload (Mirai)", "value": "1acce1631e6a2acc9a99d95e273e6ce0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777079, "uuid": "7dc920c3-0156-431b-8014-7cb1274ac750", "comment": "Malware payload (Mirai)", "value": "58f3a7ddac1695096ac6a923d630908247c7e338e8b0e4723b2c9fe8583927e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777079, "uuid": "04c0555d-2eb3-4163-bbf9-f0abb6c4cc10", "comment": "Malware payload (Mirai)", "value": "4b966e7426c77aa455c9762a260d73599b2726bc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777079, "uuid": "55efa848-1c54-470f-bd98-13c1463f1b3f", "comment": "Malware payload (Mirai)", "value": "f0bfa8dc97943c7123a2cdcdf95267a6325601170e4707d756b90bb9a7c278cbb20304f8f263e84b109b34e5b53612cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777079, "uuid": "43f451e3-e7fa-4c52-af46-6f1ceb1f7132", "value": "T1CE934A21BD7A2E1BC0C4657F21F34725F1B6274A25ACCA1F7DB20D8EBF156502113ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777079, "uuid": "97547ed6-a334-49b8-8c23-677c98f4c807", "value": "1536:ICbIjmSHl7uCgsttmf8KZe/FeNu0juHdj0qoQupyXp/Xe7ciPr8zm7uhC:dkj3gpsM8Ko6Wb3Z/Xgh8zmN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777079, "uuid": "5d61f0d3-4c9f-4a91-a731-7fa1489b9584", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777079, "uuid": "74e20af2-a97c-4a86-9a7d-eecadb19f552", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777079, "uuid": "1d67dfb8-d632-4497-a8f0-d05915809184", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc422bc3-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772070, "uuid": "3f91d63a-87f3-4301-b8bb-6d9ef0d9813d", "comment": "Malware payload (Mirai)", "value": "bf3cdc6a979ff3408834464c3d47e8d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772070, "uuid": "7ee03de9-22e2-4df0-abb8-f67072b0f496", "comment": "Malware payload (Mirai)", "value": "5932517fab05fd1cfc5d9f403ca5d68dccb4860c354042a1fcd379eee45ef33a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772070, "uuid": "1bb30975-c50e-4472-b2c3-97be2bcd99c2", "comment": "Malware payload (Mirai)", "value": "481b43e1fd97e45f23bce967baa8bfa2883f8080", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772070, "uuid": "8de4fbac-fd57-463f-8c14-181da8ef5dd3", "comment": "Malware payload (Mirai)", "value": "b914824d92e21a9e79d1705ac24ab31fa974b19ed1db0ecfa66a786b6203f0a767c2b252585087b6b0abb762fde39f94", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772070, "uuid": "88a7488a-cf47-4061-a725-989568011ccc", "value": "T1B4732A85B8858627C6D423BBFA2E42CD332653A8D2EF3307DD156F147B8682B0D7B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772070, "uuid": "eac7c867-8bbe-4691-ad06-1ed6f40aee76", "value": "1536:7uVuAwOWBIC6cnGdXACxR1KMePAC+sjuh7qiy4vtTAbVRA:7uwZ4X1KMeYC+Cuh7OetTAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772070, "uuid": "877b0d58-aca9-465b-b647-bd05d2aca8bb", "value": 77752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772070, "uuid": "edfa85a1-b71a-4a12-9ad9-386c49bd4e27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772070, "uuid": "7b684906-5247-491d-872e-b36f826a83f7", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24ca094f-e1f1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708626, "uuid": "cea715b1-fbdb-4548-ad64-acf35e896a2c", "comment": "Malware payload (Mirai)", "value": "ec6734b65032d88f0afe95615b9e7927", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708626, "uuid": "1a23e936-9835-4d5a-a2bd-5a53bcf5c2eb", "comment": "Malware payload (Mirai)", "value": "5952a52be77e0217bacc899109b4c10a3e5dd8e33dce623cb2554722ebf37440", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708626, "uuid": "e314c32c-1199-44b4-ac95-d351cde94500", "comment": "Malware payload (Mirai)", "value": "c12a8ba91bf0665e4e909cd8babeeec814c35f31", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708626, "uuid": "22d6f3af-7ed3-4566-8889-b8899cd1e0e8", "comment": "Malware payload (Mirai)", "value": "6673d947b7726bd443a5d3b9abdc8f28241c0565b82f06d805e77bbfe5df2ac892c54ec0eba2540cfdca8305827454bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708626, "uuid": "a84cd52f-a3ac-46ce-9ecb-20d354f01ec6", "value": "T147439E23C9215F18D2999AB0B075CE784B53AA5093A71F7B6069C23C9443DDCF52B3FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708626, "uuid": "0e8325ae-838d-4b61-9dc1-612b3e5da0f9", "value": "768:4m/m8J+WWjegNiQruQSelZznKH8JIazola2x/fCfn010fx4bzOtvN/hYLOR8II:tmCWjeOldlRKH8JTElF3CfB4yN/x8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708626, "uuid": "7af05347-b301-41b9-8bd5-1db05c22df31", "value": 55232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708626, "uuid": "2d26bc22-c89f-4045-9e8c-7de53d803179", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708626, "uuid": "15e952ce-fbd3-423c-942b-f3c10e15d038", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5207d2e9-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767543, "uuid": "0fcbdc43-82b1-4e7f-aa9d-d295f7e6a6b7", "comment": "Malware payload (Mirai)", "value": "da2fab31a16d9b71f49b0b8d0a8130cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767543, "uuid": "7141cfda-b5a0-42ba-8732-440e7d5743de", "comment": "Malware payload (Mirai)", "value": "598468fff9c718a64da0ee3e52eeede7a6ddc22eda3484de0b7c5ceb23afce23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767543, "uuid": "646ed184-81ed-4c3d-b7b3-28e8665fe6db", "comment": "Malware payload (Mirai)", "value": "5779b3643eef45854853903a9cac7bcc6da26fdc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767543, "uuid": "a94416f4-9893-46e9-88d8-279e8bc51ac4", "comment": "Malware payload (Mirai)", "value": "7ede74f7efef7841e80520e72c101b0340716f3b7ce4ff330155ff641f14005689ba7043950487dd156ef8e7a9c5509c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767543, "uuid": "a442ea8f-fa61-4916-b750-1a84b5a0590c", "value": "T14003F781B9924A6BC1E013BAAA7E618D332173A8D2CF7757DC255B047BCE81F4D63B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767543, "uuid": "02e4c8e9-9234-4d90-ba96-e73392019d31", "value": "768:VOwgSuFzX54uRq3GfFVKKLUo2ThBpSXaQNRG6MjDs/1bkU:VMXfRmGx2Th7d1s/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767543, "uuid": "b5d6e395-ba16-4bc9-9def-23bca64eccda", "value": 38556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767543, "uuid": "37e5f5bb-640b-4499-bce9-ebd6be1578a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767543, "uuid": "ad4bccbb-f72d-4c99-91f9-03b00dcbb512", "value": "parm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78ba4d83-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747422, "uuid": "07a7b0d8-89c8-4175-9cb1-a8db6f49d4f7", "comment": "Malware payload", "value": "6dc8e268048912ee5ae32e9fcbb28f1f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747422, "uuid": "863198cb-3403-4c90-97f0-515025f79ee4", "comment": "Malware payload", "value": "5af5e405d660ba3963c0b6b033409a00fdee4f905c6e0e3896c52df3a7be86d3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747422, "uuid": "6a93e53b-2cc1-4df7-9c5d-8dcee9d53747", "comment": "Malware payload", "value": "c85cff03a0fcb3fb240d58078be31a029920343e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747422, "uuid": "58f69145-cffc-4875-9c34-8cd4e0ab537c", "comment": "Malware payload", "value": "5a405ba3e7523a68b2f7e2c138c093d88262b03b9564e2b5cb0d62087bd6b8f6194e9b24b79071effc24e28b65effb08", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747422, "uuid": "b72bb388-e1d1-4ed9-9c1b-7b7915555469", "value": "T103733B715010EF31DE2B89599D674A1E2BA3B834EACB55CDC1D3B3A3CE1921B81DD4E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747422, "uuid": "8e46a765-98d0-4c60-8660-7d39f0f56c6c", "value": "1536:I9l/AoSSMDRgPEQypIUbRoCRnEq2WRcE+i5LCgqcFOavy2Q+46V21VxneAbBsgIW:I9l/5MdzusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747422, "uuid": "031597a9-7ae3-46d6-8e9b-58f75b5f8443", "value": 73531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747422, "uuid": "52ecb556-1e9f-4166-b4dd-164caa3b4f59", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747422, "uuid": "52942c8d-8527-467d-a586-e42ef3a0590f", "value": "invoice-1645080830.pdf (39).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d34ff7e-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767455, "uuid": "55350ccf-bb46-4bb5-9b50-3ae7143d8deb", "comment": "Malware payload (Mirai)", "value": "c11d61a7060ac1b2b280697de5e5bc45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767455, "uuid": "53027336-65aa-4049-926c-4f736f66c793", "comment": "Malware payload (Mirai)", "value": "5b65b05e77a9f23bb8609ec1476e498f8cebabc94d7d84da6e7fd83a5d309595", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767455, "uuid": "78659e58-12d8-4e9d-b36e-43bb813b78f4", "comment": "Malware payload (Mirai)", "value": "ddd12f7e8cb9f48663ca1457538ca68189f0a184", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767455, "uuid": "38da405f-b83d-4355-872a-2ecdaa09293d", "comment": "Malware payload (Mirai)", "value": "aabd1868c4fbf865779726e3ac7341ae8f3117cf19a20130fad201fcebfe3620c809082dde83ac8f44ea1ee572231b23", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767455, "uuid": "f80e9043-6bf1-4bd0-b378-fb1403cfaab0", "value": "T180736B32B9751D27C4D4A87A61F30721F2F2479A25AC8A1E3DB10D4EBF35A5032537BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767455, "uuid": "2da56760-9d08-472c-b30d-f078f8de9477", "value": "1536:/kjnSCObFJmCGSJRNgk0TQPtkYiNM5GTzgnsvt78/XI:s2c6jQuCzN8caI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767455, "uuid": "8ffa932b-2b6d-4193-91da-fa68f2ab2044", "value": 75720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767455, "uuid": "da039cd3-a057-4fb4-8bb1-6ff92c213f35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767455, "uuid": "5943f5ef-ad63-45e5-a3a5-9d587b625bd3", "value": "pspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1f2e11c-e294-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766778844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778844, "uuid": "e99bb1e8-4bb8-4a8d-bf80-2d50b28b537b", "comment": "Malware payload", "value": "8924c2a76ff1a897f1ee8ca0e26b1fa7", "object_relation": "md5", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778844, "uuid": "c9e3eba5-a8ed-4187-b937-b0c22bf5f99a", "comment": "Malware payload", "value": "5bfdfe8de5fd9c0fa773c4bc4aa417b323f62bdefbbd0d6fe1b2f8874ba9ebf4", "object_relation": "sha256", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778844, "uuid": "1a8fdefc-85e3-41ef-9d4c-ac5fb60714b8", "comment": "Malware payload", "value": "0682b4bc17cbf43de63d8f7fb5640ddc1001fe43", "object_relation": "sha1", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778844, "uuid": "75ec51f8-d2ab-490e-8fec-979e24151674", "comment": "Malware payload", "value": "d01c6cbc914dae737c64a716397647a6d248d843ade9694f340e8e347b36a386356063aae02eb2a8c671b5e689f67396", "object_relation": "sha3-384", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778844, "uuid": "932c44b8-7194-41fe-b514-967cb3579a1e", "value": "T1376723B9DE1E84C0F7074AB6E565950D4CD2697090E2E9E6BB343F069C9F2C09B32787", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778844, "uuid": "4362fde7-2333-4061-93c5-504164e392ab", "value": "786432:y5J5OYZIveDWCVGXPhPXhQOsYseq7go9J4hhS27A+ceOHArW:s5Om07YgQ7Y6l9JYhrzvcAS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778844, "uuid": "37c43635-25a4-426b-be79-aad2de5ca4b5", "value": 30458240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778844, "uuid": "d2ab0d38-8431-4a03-86b5-2224038c1606", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778844, "uuid": "4319c266-d5f5-41fd-99d1-97bbb3f1c699", "value": "2 Free Download Files.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f489649c-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777265, "uuid": "45901459-7d06-4943-b13f-11d030a23066", "comment": "Malware payload (Mirai)", "value": "037a6488309f611a8b8a40eea063d0c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777265, "uuid": "d8c2eef5-b394-4f79-bcc0-990b49b5ca13", "comment": "Malware payload (Mirai)", "value": "5c2c44c4122633729164253f0e7a1aa41396f146e38d51e389433bf32543c25e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777265, "uuid": "9a93d61f-6a2e-4e97-b98d-eceeda875918", "comment": "Malware payload (Mirai)", "value": "482a9a44c7923d0de7c2077fe730d743692007b5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777265, "uuid": "d0e2f524-ba37-4970-8a54-4c59010e0105", "comment": "Malware payload (Mirai)", "value": "e164a99c1ec558cab1ea1ff929c809b423cc71f54d1ff3b8aaa60869764e51e83d19800fe7e4699198a563912b5ba4d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777265, "uuid": "08d33011-d7b2-47b9-9ea1-f25daefcea39", "value": "T19C33F1BA556A07BEC1A8F9770C7C2AF6D117F104A3DAC4BA9A603173085BB4D631D237", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777265, "uuid": "711f5d9d-049b-4737-9c17-23098f6a0969", "value": "768:p4H2uSyCmpEw/gjkIJtrYxhdurpjVQQawPtREJtsfZ03gpdqL9juDQmsrO3He1nv:p2miUPYxhdurDjPtOJtspU/Xd1nouy8N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777265, "uuid": "8962fc72-4f44-4b88-b722-2472106b2b50", "value": 50980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777265, "uuid": "be4956b5-7023-4658-a695-4a240e50fe85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777265, "uuid": "78b58007-8899-4c82-8cd3-fdfdf60bfe2f", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edd9b7af-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771670, "uuid": "213381f1-fe16-4670-8993-e9f4e6a5cbdb", "comment": "Malware payload (Mirai)", "value": "4ca6f6e799c0c272573a9f67e80adfa5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771670, "uuid": "0c3e2eb5-d7d9-4b90-ad1b-2c173536c231", "comment": "Malware payload (Mirai)", "value": "5c2f9c2b2d9e2ad1c984a4488a961562e70c1e705d75ef35f21342231db3e2b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771670, "uuid": "8c492e92-517a-46cb-af91-a2f66079bb64", "comment": "Malware payload (Mirai)", "value": "972f6045f4be774f9d3959b55787c1e4b291a854", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771670, "uuid": "a82038d9-a7b0-4814-beb7-be17c84fa6a5", "comment": "Malware payload (Mirai)", "value": "af8b4494133b29a8aa656fd23cb965645aeddee4b6177bf6c3e70f0d9aacf65647a5bcb2b51be85b78d6aa037a902e2f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771670, "uuid": "d3f63263-f502-4b95-83c9-ad635f03bea3", "value": "T1987302295A030EDFFC0526FC16712BB0F4E35EE39247990639E5E802FC095D67B6AD98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771670, "uuid": "815134a3-404d-41cc-9c55-848a647a3b9d", "value": "1536:x2kJxkIlVJEkFA9OlJVrkDwcHGLHPNyMkUfFbjW24VJuob:x2UxkIlVJEyA9UJVrjHPN7k8bjgVQob", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771670, "uuid": "47ce6d3e-4a32-4c70-af91-2138b9d2bf61", "value": 77756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771670, "uuid": "f7599720-13f5-43ce-b629-cd200c4cda98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771670, "uuid": "7dd7bf7a-eea2-4c1d-89c3-313396519d0e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb7a33e2-e20a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766719643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719643, "uuid": "ff3c5cf1-6595-4a72-922c-f4d2f9c307be", "comment": "Malware payload", "value": "2575c616bbd37745785bd3b9998079d6", "object_relation": "md5", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719643, "uuid": "799b8e85-7559-44f2-abc4-7f44c3133947", "comment": "Malware payload", "value": "5c350e1111e730e18304362ecb2750c442d26b05a1d570eb0a5d719aa56ce809", "object_relation": "sha256", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719643, "uuid": "e317de8f-383c-4dcb-8b77-22b97583040f", "comment": "Malware payload", "value": "0ebeb6ac9f6c93405ca7b18f19cef344d663b45e", "object_relation": "sha1", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719643, "uuid": "c98cd4eb-6f58-49f6-b9ce-47900d33d27d", "comment": "Malware payload", "value": "7d7fbeba869370df894a2abb178a2983b12a25e53cf73fb1a8bd92cbee20017eefe94719ccaaeb1b5edb04d50a44ca5e", "object_relation": "sha3-384", "Tag": [ { "name": "D", "colour": "#199F5A", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "EU.file", "colour": "#D46697", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719643, "uuid": "71c413e2-f670-4c4c-af24-2e3b78dae566", "value": "T19EB623CD406CCF94B232F20FAD61BCE24829C4FD6D0A6B6161AD7AD616CF4D906971E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719643, "uuid": "20a0aba2-90ce-421c-b8a8-252eca866997", "value": "9aebf3da4677af9275c461261e5abde3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719643, "uuid": "d014a958-d892-4d7d-9d9d-555c57037ba8", "value": "196608:bl9j6FsJG6KPZhmAeShwXaDIwj9vO/MbIV9cXLTfSAv0bNyzweaWu5OeAePjfZPE:nj6FrVZXeShjDtjMmoc7TqDNywZ35Oeb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766719643, "uuid": "b359b2a8-75e6-42bd-8322-fc90afd2696b", "value": 10851328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766719643, "uuid": "34cc479b-8192-408d-a398-f5a7d0887b50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719643, "uuid": "92985626-3707-4767-ac4d-9d50d381502c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fb031b9-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779028, "uuid": "a5d6de28-7455-4cff-9fea-80754d7b68e7", "comment": "Malware payload (Mirai)", "value": "1e7562243f126b9ba24b129dc2e0ae05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779028, "uuid": "561f9c0b-a6a5-4c5a-bdf2-1247e30c44fb", "comment": "Malware payload (Mirai)", "value": "5ce78c9640535cc6133577f76d653caa01555dda6ce7dcc7d52e1820a36228ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779028, "uuid": "95152b21-f15e-4b8c-a282-391022958d23", "comment": "Malware payload (Mirai)", "value": "107901a10719b672575d3684dbf4a31c4a385bb8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779028, "uuid": "15745f6c-787d-41c8-83c7-73223afc272e", "comment": "Malware payload (Mirai)", "value": "454375eec95f1f0efb307333b2f80bfa264efd25d510b75f81433eba3b3a6f9d6c46c4d1b92d276b8e396d4b47fd50e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779028, "uuid": "8a704c85-a1d7-4871-b226-902a96a08d01", "value": "T19E03E09DD9724D12FB775DB46902D6E257F66F123D500EDB12CA33136334B0AAA09EC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779028, "uuid": "9b6c9122-2113-4dfd-bf53-7b08843741f3", "value": "768:cSzdohQnW2qDAYx80qV3mv2y6pQ+Exx9H0cuHvBKfBmIj4uVcqgw099:tzd3nWND9Dgp+x9UvvB4m04u+qgw099", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779028, "uuid": "89dbf2ea-b267-47b3-acb6-8761015106f5", "value": 40172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779028, "uuid": "5500adf0-c5d3-44f4-a58c-097e9c70059c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779028, "uuid": "6b7e71dc-736b-486c-af92-92da5e719fee", "value": "windy.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f08455f-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (PureHVNC)", "timestamp": 1766777095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777095, "uuid": "bef3bfd9-07bb-40c2-8780-5d428cf70987", "comment": "Malware payload (PureHVNC)", "value": "7bfa91f9c2f18326fd2ad4d5b3c4c970", "object_relation": "md5", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777095, "uuid": "f0f422c5-9e3d-41fa-8296-088cd0b2c569", "comment": "Malware payload (PureHVNC)", "value": "5d42601a51e3c123115dc22561ebcea6759a5761ecdb449ee990e73aeabe3910", "object_relation": "sha256", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777095, "uuid": "c96eff8e-39d1-4d18-b3bc-6dd2b3101583", "comment": "Malware payload (PureHVNC)", "value": "3a32306d45d3da4b353c073468c37875d371fdfc", "object_relation": "sha1", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777095, "uuid": "31212cb8-9684-40da-832f-6ba78e58462c", "comment": "Malware payload (PureHVNC)", "value": "72e2df0aa052ba1e17f98f9e30f4de8efabcb573cecfd0db8b0b70790d503117b0bc71f2dec917ada43c11300330b1dd", "object_relation": "sha3-384", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777095, "uuid": "838777b6-68a0-4f79-98b5-10a2d19dcb9b", "value": "T181E63310580AA4ACF518197429A201877F6B14EE8B5DAC1F791D3B687F313E3C91B6BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777095, "uuid": "37b65cfe-adb6-47ac-917f-1f7f549c88f0", "value": "393216:ly2V7d3+TqXtFQPl0SS9fPkc3dWXOtqwqpy:lnFdFEed9fPn3dWXeqwg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777095, "uuid": "1b7867b7-5d28-4269-aedb-7a17e4467a00", "value": 15128576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777095, "uuid": "0868febf-47cd-4704-83e9-8d1d8791f3d0", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777095, "uuid": "1e8977e9-4aa1-47cb-8752-3134e7ca71fb", "value": "Installer.iso", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83956abc-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747440, "uuid": "680426ce-39dd-4abe-820d-04b4484a553d", "comment": "Malware payload", "value": "a22a2d75b6d6f135ac7f2801f4d94ff7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747440, "uuid": "201ed319-8e8f-45b6-b6ef-fec789262dc6", "comment": "Malware payload", "value": "5d53d02052be23543108e4e1b50a124e224b58d144acf754571e771948d93028", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747440, "uuid": "31911223-b29a-41d9-ae0f-bd85ac89f5e6", "comment": "Malware payload", "value": "846d316cf35d37452b866a2f05d30ec2acb01e68", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747440, "uuid": "afb96f75-a662-40fc-918a-8d996406e0f2", "comment": "Malware payload", "value": "095afce846dec57eaad9fe42b43737bf594d0e798c92394366e68c0718ba4e49cd9ff28d7434073eebf01418b8cb1508", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747440, "uuid": "2ad52ad7-b0d1-4bcd-baf2-8c1c22b144fe", "value": "T1BD6329A6307339ECEAD44D59B42BA1207DFBC9C27D59CEE3C6A7DD015CB2F860409269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747440, "uuid": "ff9b2594-9364-4ed3-919c-9d18cb085d38", "value": "1536:I9l/AoSSM8/WJnR2nu9LktuNb0Vch99mfK4v6G6ZPg0jYnj/nlyEm2jb90fljusq:I9l/5M8/WJnR2nu9LktuNb0Vch99mfKK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747440, "uuid": "6de872d7-cf2e-4e88-958f-46325fe4205b", "value": 69733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747440, "uuid": "7e8a2038-c0f7-44ba-989d-b81ae2e49245", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747440, "uuid": "ca272206-ccec-46df-acd3-1e886ca708d2", "value": "invoice-1645080830.pdf (33).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f861571f-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710699, "uuid": "da40ec05-152d-4af2-aa7a-38a170178e5b", "comment": "Malware payload (Mirai)", "value": "128f1165f0d8f09ae94a752d5362ce9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710699, "uuid": "041a6df9-2ef8-45bc-a3b6-01c2f55b2205", "comment": "Malware payload (Mirai)", "value": "5da741da7823a5ebddd2d5fee560f28e89c74d102efb9dcb81c533db276d26fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710699, "uuid": "87f28c92-da8f-4e91-a99a-60b372f6df5f", "comment": "Malware payload (Mirai)", "value": "4bf4a491395a59553481d0b0c0b826118a5a4754", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710699, "uuid": "6a2801fb-5198-48db-b7f7-2dfb39921116", "comment": "Malware payload (Mirai)", "value": "481e2bfc900af1504bec6916d5148f0c9676be3ffa1bd783b2b1f6f8d4d34960d256b252cad89758f3968210c7f46797", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710699, "uuid": "0f6e23e2-7322-4727-81ee-0edfa1354e7a", "value": "T1442449C7F800DDBDF80BE67744130919B530A76250935B37B257BD6BED3A0A90A27E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710699, "uuid": "8b16978e-2be6-46be-a903-ff0b2c7ca5dc", "value": "3072:zADH7XwyPfguIeokF7xo+wUy3cWX5UQMylWA9T1TELVbjbiaLREzmuh/FsGCz:iXwRWVy3zX5U7yZxTEfLeihGM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710699, "uuid": "8ff3d92c-ee0c-4cd0-9461-bd9e5269e080", "value": 217056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710699, "uuid": "cb9b39f3-7d99-4b66-aada-f80516669ddf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710699, "uuid": "bce2c7da-0144-498a-8264-8fdddde22db8", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e47c9d4-e288-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773550, "uuid": "79d2bdf8-7543-44bf-96d2-f17e131ac68b", "comment": "Malware payload (Mirai)", "value": "984ea8195e5ffc71e15aba76456bacb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773550, "uuid": "53b2ad30-e20a-4a5f-b766-b5b0d438e4b2", "comment": "Malware payload (Mirai)", "value": "5e112c695088bcf4aa2b573146555cd2d00bca46913dcd3bfd38ec4e94cbbc99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773550, "uuid": "6c7d674e-12fa-4917-8438-9fd21fab0c98", "comment": "Malware payload (Mirai)", "value": "00d6274750db303236c774e54d25815ea6b6247f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773550, "uuid": "c9bdf527-70ba-42b2-a418-8565e6ebf891", "comment": "Malware payload (Mirai)", "value": "d29714bbf20609f698f3ef76deac4dc206cfc0066a891a92be948271f548566f0f4f71a36edd284b9963683d70a0c76f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773550, "uuid": "7bfe65e3-9376-48ec-aad7-a064cd59b0d8", "value": "T18F93D61A6F259FADF36C823547B78E31D74833922BF1D645D26CEA014E6034D681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773550, "uuid": "ce4902e4-42b2-4558-8d37-61ccee7ff585", "value": "1536:SEV4X2GJ25p7tDRKiRvtMW2gtYxY7qgVRCePeeiYeeeNq7lhFPc35YTAbVRo3m:sXxJ251OW2gtYxY7qgVtZha5YTA8m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773550, "uuid": "d236b59e-f108-4389-98eb-eabc955a0efe", "value": 97080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773550, "uuid": "9163f276-2881-46dc-a50c-b9ddabbaa789", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773550, "uuid": "1e3d5166-d52b-47b9-9a54-1e0cfa9ae1a5", "value": "nklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1029108-e297-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766780239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780239, "uuid": "d243fc2c-14a6-4060-9fd4-36af5e752660", "comment": "Malware payload (Vidar)", "value": "051e7640abc8297c3aee642e7fc87b72", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780239, "uuid": "94fed377-583e-4b14-8210-aabb2d751e11", "comment": "Malware payload (Vidar)", "value": "5e47d682a8f8cf4133363ad9d1b88c670f16f87a118b0e583f9c71b6e8158af7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780239, "uuid": "0c71f016-891f-4f06-b145-d6e14e5ab3cf", "comment": "Malware payload (Vidar)", "value": "db9c3d9f814b95f1e97c5ade69b5b64f22372e2e", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780239, "uuid": "72005e1f-461f-4f1c-93cd-377f24a8e0b1", "comment": "Malware payload (Vidar)", "value": "1b60c2b9b5c3582a8487cf641a26b0a183065031bdae16526cda8208b85471717d9cbf24b2cff27d67ca52c2c62926da", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780239, "uuid": "67ea6f9a-405a-4f18-ae4b-768ea2600144", "value": "T142C64AD2FE411725D6ABE239D9B162552230B144033515E7BBB907AA4C2BEC8173FB2F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780239, "uuid": "b5c911ba-a5c5-4486-9cee-393eccf8872a", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780239, "uuid": "33ec1695-4595-40d4-bda8-d061e5222279", "value": "49152:UMnnK4878Srb/T7vO90dL3BmAFd4A64nsfJ4G51t1TuXVPZxHNTc3ciYpD6Pq3y3:UYnCGKSVcUH6XFjy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780239, "uuid": "f2cceeb2-02a8-4260-9ae4-91e6d8e44fbd", "value": 11642496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780239, "uuid": "acd18b77-421f-46f8-b023-11a3a1be0a04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780239, "uuid": "83c489eb-0a48-4e99-9878-a3c096a1db28", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44efc915-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747335, "uuid": "0ebb0807-ff03-4676-8b42-9752d6c773a8", "comment": "Malware payload", "value": "fd081c1d42a8a078e6906d32657014f8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747335, "uuid": "6f6045a0-2ff7-49ac-84b8-fabe47404e70", "comment": "Malware payload", "value": "5e5528098adecb56aa2fe160d0d154a09e7bd6609e58ee08d1f0ef17d5ca2858", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747335, "uuid": "d1d31015-c298-4a53-a524-2d32e6dfdff0", "comment": "Malware payload", "value": "5148e4d98454b5b6e6522cb3235440bcff9e210a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747335, "uuid": "554ce6f9-9f91-4c6a-ad8f-18be1cab7f9c", "comment": "Malware payload", "value": "16d0844a53326ad819874d3d6130d92d0724fa245980e0a062a81400f982675ae21db21fd8761dc132da8315c0cca3b7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747335, "uuid": "e1c8463f-b291-406a-860a-0d733b620e6d", "value": "T1D9732B327971F045A1ED7B10BE7E0C46F7895FC6BBE68865ECB703824D48EA1ECA5610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747335, "uuid": "84922d5f-eaa2-434d-9dad-7e24528178fc", "value": "768:I8w/h62/jWs6oS+xISN0v+5VN1O2aRX2xDjrvBokCwKu6FeFFBbTJamPmVa3ryJM:I9l/AoSSMnXusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747335, "uuid": "7fed6411-a45a-4a6b-954c-4fe59a2e8324", "value": 74438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747335, "uuid": "d67fa7a6-3362-4d05-8d6c-8ef7305b98d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747335, "uuid": "00c9d121-81fd-4794-9b25-2866dbded7eb", "value": "invoice-1645080830.pdf (51).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb022d17-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747533, "uuid": "965bed34-d74e-4b14-87e0-5294bd916936", "comment": "Malware payload", "value": "e2c337ae429ff2babffc446c33d03473", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747533, "uuid": "2467e9cb-2aa4-4f84-aa76-c33bb1ae6cd5", "comment": "Malware payload", "value": "5eba8965275da808c873d8413049393c65aa3cdd037177f1bc47eb0581445860", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747533, "uuid": "bb513484-9076-4c08-bb82-df7d1015ff3f", "comment": "Malware payload", "value": "b9ef4ba331a748c1518baa191c11c1910c5508eb", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747533, "uuid": "18f99cc9-ba88-4a46-b2c4-d7c6d784bad3", "comment": "Malware payload", "value": "caa06d10265ee4f3669c8a068ecc3861979a216e11300287c474c48800d7b603ff1087330217fbe235a2ed53d4c9e21a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747533, "uuid": "9c162d1a-7aea-4e15-af75-2057551e5bbd", "value": "T12A633C5791B63CAF004815F009F663168EF6A267059DC10A1BBD7ED0E33E747ADB88AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747533, "uuid": "0dc5d4e6-e60f-4a5b-a113-618c393aa7f1", "value": "768:I8w/h62/jWs6oS+xISN0vH98fUeZ9rSyfyJytyvy/yWy9ysyEI1U1uUYl+bLqbZp:I9l/AoSSMbwemgIp05FvusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747533, "uuid": "27ff4930-8115-4739-8427-3d858b1b0586", "value": 70570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747533, "uuid": "ded38c1f-1168-4e0e-95d8-c1257248ae30", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747533, "uuid": "5ddf4b9c-242a-499c-9d4c-ac389fc8d662", "value": "invoice-1645080830.pdf (18).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4a524d9-e21d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766727819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727819, "uuid": "c565d458-709a-4149-a24a-4f66b2b1fdb4", "comment": "Malware payload (Mirai)", "value": "d72124b70c6151333096e4ff4627b289", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727819, "uuid": "e136428b-464b-432c-a69f-c9dc67dde80a", "comment": "Malware payload (Mirai)", "value": "5f66bb05b7b4f81ba7ccf5b8f154ab3b970372b0020952b840c6d295f32936ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727819, "uuid": "4c4605b6-cb8f-41f6-bb68-2efed699968c", "comment": "Malware payload (Mirai)", "value": "efd96a8358d9b730babd4151ee21186fbfff693d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727819, "uuid": "57d93186-1a9d-456e-b8a5-0e58abab81d5", "comment": "Malware payload (Mirai)", "value": "8410c74239d1aafee87ebe349f2a13ddc18797b49e321b39abf05b68797215da6b3c9da15942deb7c2a29a03e85316ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727819, "uuid": "7a7bb133-14b0-49db-9830-03af1162578b", "value": "T1B963F1B0D1ABA81CE37DDDF21149AB426FB18A4F19F3E909B141BFC4679B8560B50982", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727819, "uuid": "21995694-56bb-4709-83d0-46435150bbb2", "value": "1536:1PFnYF+ae3vb98S8Cgipo7nijwpb7U+wNrLdfU9isYX0yp4u+qgw099:o+jfbx8reaiSvvwVRU9isYl4u+qgw4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727819, "uuid": "2493a8b2-91dd-4661-946e-400145f8e344", "value": 71672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727819, "uuid": "45b29685-408e-49a6-8c7c-f3363a7696da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727819, "uuid": "cd1db28a-a356-4d48-a6ff-067a5701126c", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e709988-e25b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766754196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754196, "uuid": "f56fada4-057c-4583-ae64-d2af656b8792", "comment": "Malware payload (Mirai)", "value": "deb50ca61a95d3070b7b6e5fd710f694", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754196, "uuid": "c910d5f6-c069-4145-a2c1-fe813cdf6edc", "comment": "Malware payload (Mirai)", "value": "5f8982539f2a9913b9960920ce39b56984f218ec289fd5710445438797eeb32a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754196, "uuid": "8e1263f6-76bd-4c7e-9bd0-e4471ce46027", "comment": "Malware payload (Mirai)", "value": "9f8e2a6664c80541306b16fa1dbe22738ca60229", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754196, "uuid": "4b733edd-b9c9-4db8-a835-67c50378c282", "comment": "Malware payload (Mirai)", "value": "8f571ef931886cc33b15de4ea9ae12e44ed51b006177700737b9d4bc8150c377bd31f8e3653c6165a397da9399cb223b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754196, "uuid": "d4dabe3b-9c47-4000-a8bb-cb9f02380e66", "value": "T17CD319C0F643D5F9E90A07715136A7338232FD39602AE697CFA4EF36B871A80D65925C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754196, "uuid": "1c3b800e-18f3-4b90-afa5-45900a1a71fb", "value": "3072:D0nZm1psWvfRWPWfKlpMgFAi+Zod4j9rqV0QzJa9/lIzGn1Thj1bLkBcJAc305Z5:IY1psWvfRWPWfKlpMg6i+Zod4j9rqV0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754196, "uuid": "2e48d351-3e5d-4f2d-b420-90f8afb559f6", "value": 133068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754196, "uuid": "87e3d84c-786e-47a5-8164-abb9e5264a79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754196, "uuid": "c1a29a21-0b26-42f5-b70d-97ec43d85d50", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "886c59b0-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771500, "uuid": "8b74d238-65c9-48d7-825a-8d9fabc6ced4", "comment": "Malware payload (Mirai)", "value": "5cbdb8e67951b879cd6435a32289dfff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771500, "uuid": "688668c3-d4ca-4e38-b47c-284c45471830", "comment": "Malware payload (Mirai)", "value": "5fcc038f9a9f27644ff4f588370a1870baa8d9ffcda211047aa206c8fae5ee42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771500, "uuid": "4edbab0b-f054-4b83-b3ae-a65d22322928", "comment": "Malware payload (Mirai)", "value": "adb74f65701f5ad2a45a99979d816ccf426417fd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771500, "uuid": "8523b3d5-73fd-4d89-82f4-01832346cd60", "comment": "Malware payload (Mirai)", "value": "8e23c8143f1b00702ce58500ab2b884c1e315e752670cbf2952cb5af161afa1f5df950d3e75ccc85538a0833995005d2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771500, "uuid": "36e7f362-b68c-44f9-bb65-64885017406b", "value": "T1E4430225A4059EC3DE6FF4E1844796A23333B7943BFD57B08810EE229B674176625FC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771500, "uuid": "7fdbdf2b-38af-401b-b647-ffbad9a128ea", "value": "1536:Ud8U3WkNpknhHJfhQuoE42Xcd2CZpv4u+qgw0VuW:U6kQhHJfh8r2sd24v4u+qgw2uW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771500, "uuid": "45111f72-916a-4bc1-9e07-fda08e2785a3", "value": 57780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771500, "uuid": "7f56bdb3-1c3c-4c89-8949-6a3dcc971c0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771500, "uuid": "df75d3fd-bc6d-4952-9c9a-fda5110062bf", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a49d4c-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730182, "uuid": "d83ec1a3-1373-49fc-a273-aca411b9655d", "comment": "Malware payload (Mirai)", "value": "fbbc24c70c051412a6ace8e66450b657", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730182, "uuid": "adfb1fbc-7e3d-4a66-bcbe-e27c2f6990f3", "comment": "Malware payload (Mirai)", "value": "5fd65a250c8dc1b98ae762c87e9e7adc2e7efafadb02cdea089fcc081fc0cfae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730182, "uuid": "41ebdcf7-bc65-4c7c-9a28-963f53c05db4", "comment": "Malware payload (Mirai)", "value": "bed788044b45bb0defb3261ab0808faaeaee6fb5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730182, "uuid": "eb4cc873-7c28-4261-aa79-31baefc5d68a", "comment": "Malware payload (Mirai)", "value": "effc6c7e720ec3cce9f45c0987a09013551564cb4260f9f118f375947bd3d36aa7a1a7b85eb4625b9201c1e4ddf2bcf8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730182, "uuid": "d7fa4923-5bf6-4d8f-9ea5-447d889e56e4", "value": "T1ECA3E0E5F32765D1D1A302BCC0D0528243A15EB5CB92020913ADBBB4757D9FF8AA4FE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730182, "uuid": "0af6371c-0935-483a-aa93-1a38a83e9a78", "value": "1536:nV57RQL+/1daOO4nOZRWNIiF1lSBZ6oqZAU98N63Htr9cjYJERsFnLzqg9uMCSTK:V5lloX4nsRoIcmBEAUeINsHQMMTnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730182, "uuid": "f4bbbf50-c4fd-491b-bbd0-4be87f659837", "value": 103300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730182, "uuid": "a772be0f-23eb-4e8d-9506-b990f13275f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730182, "uuid": "16fb94e5-993c-4319-9e1b-696af9d278c7", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eaaa089-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767457, "uuid": "347502b5-ef47-40d4-999e-33b1ed50c67b", "comment": "Malware payload (Mirai)", "value": "a4432664a35bb210e10be63ac8199262", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767457, "uuid": "b114ba5a-5723-4323-a983-5475b1ce7c69", "comment": "Malware payload (Mirai)", "value": "5fddba43227c703d15db8896f59bd2665a738e2700ce4b20310bf376d2906303", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767457, "uuid": "663cd9b8-2002-4d97-816c-0e06e6fb63fd", "comment": "Malware payload (Mirai)", "value": "27dddb5b72b8e569476b4c132d750f8b07413b2c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767457, "uuid": "732c8857-6dc5-47d6-8b93-d8cd21c4b00c", "comment": "Malware payload (Mirai)", "value": "052a21d114fa0996fe657822284c7281fd788508d1361f69fb9c1fc208a699e06439ac9f0862edab926b986e5deec4b7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767457, "uuid": "0ee4ffd0-d96f-4f8f-9d9f-8f129ed3fe13", "value": "T1D6F2F2B51607AC68FD6244BEDE1CC340565109B9D3B27FE0128491F0E0ED88976FAB3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767457, "uuid": "61e19491-d203-44ce-91b4-08b885aa0497", "value": "768:TpGiYi/rwybrQcy1+TnVkMSAnMDdkV8s3UozU:lvY0r11Vadu5zU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767457, "uuid": "b965b2f1-1f12-4add-b523-4d961893a9ca", "value": 34572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767457, "uuid": "8e3ec08e-5afb-425a-9618-80a4e51a7f0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767457, "uuid": "b2fcca65-17e2-4a81-baf0-eb8195a0067a", "value": "parm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee660bdc-e262-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766757498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757498, "uuid": "183de5a4-247b-456e-8724-b42cc1dee92c", "comment": "Malware payload (Mirai)", "value": "4a9625e1c2d5873d0f4cd1c6ece2e032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757498, "uuid": "b9b81e2c-f141-47f2-a34b-f8e49f97d987", "comment": "Malware payload (Mirai)", "value": "6056d173c5be9da191c767674b2e76bc1175dce0c664fddcb251f8536220095c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757498, "uuid": "a67c67e1-c7d9-4b2a-8ed0-df87b6b6f9fd", "comment": "Malware payload (Mirai)", "value": "1fd1e2e888556cff5bbec599065f0f452a34bae5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757498, "uuid": "5eb12dbc-f7c5-41dc-8713-8b4e98c90031", "comment": "Malware payload (Mirai)", "value": "a79b82021514c322452dffd962e7cdc804522a69029800d7c201706aee58a164ae76b2ab3d6ae4cf4649facedf640d8a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757498, "uuid": "d92896f3-3382-4978-8e1d-4fba498f4602", "value": "T1F4836D42B3184A13D9570DB0293F2BE1D3AED59020F4B786690EAF5A8276E33154BFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757498, "uuid": "d96221b9-2063-4a85-be3e-257adb2788ba", "value": "1536:oPZJmSJNuv3m8b1f8h89CNBmj9UYuMkbeJlFT2bVRv:iw+ufw8979zu0FT2n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757498, "uuid": "0641bb75-38b0-41a3-9f2c-29c1daeb06b5", "value": 81676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757498, "uuid": "cd5f987e-e520-44f3-a21b-e1f08d8d74ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757498, "uuid": "81abfbb0-00c7-4452-908d-025383fe8a41", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89825db9-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747450, "uuid": "b554d266-a453-4040-8ba4-34ae8711459c", "comment": "Malware payload", "value": "ced1cf08fd13beba966398a6613f3b57", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747450, "uuid": "b3afef99-a6a7-4582-a984-302779bb8d73", "comment": "Malware payload", "value": "60992ab5fc79fd101aaa2f81d5c4cb9f0ddf7f2c80c0ea73de62009a579ff1db", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747450, "uuid": "ba93fdc7-f0b6-4452-a103-f22d16f447b2", "comment": "Malware payload", "value": "6b408e7dd9312c033abdbd254e5869de266c3998", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747450, "uuid": "1e94fe70-b42f-413c-b1c1-7fd1f3c2a4cc", "comment": "Malware payload", "value": "cf92faf372f584a721d23deb145c1ce12cf5a836aad9ebef260726920c4bd3c7bbe6cf7f7194976ba6ac1e746a4e6322", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747450, "uuid": "e0cf9a9d-f448-4e8e-b1ca-f4a31fa331f7", "value": "T106630A9761611CD919FF6E05DB4C1EC223CD0EB31CB4522B994BF316D9A1BA86D2B331", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747450, "uuid": "a769374f-6172-4663-a967-f122159fd150", "value": "768:I8w/h62/jWs6oS+xISN0vCj1VMPBdkfScBYrwz2y8kTAlGB:I9l/AoSSMCuusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747450, "uuid": "e83ac9ed-40f3-403e-9867-7572a9a06e41", "value": 69689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747450, "uuid": "0955b223-dd55-4ce1-927d-d40491ec2203", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747450, "uuid": "e306b0ac-2d56-4a5f-9952-c3d8634ce60a", "value": "invoice-1645080830.pdf (27).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4222b837-e254-11f0-a129-42010a9c0007", "comment": "Malware payload (RondoDox)", "timestamp": 1766751196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751196, "uuid": "12a17918-eeb8-4bfe-a7ef-6dede9a3a00f", "comment": "Malware payload (RondoDox)", "value": "950e7f9d38959fcbdc6271bc731e9c3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751196, "uuid": "bbd2c9de-8cea-44e2-b19a-b3dd6a07b827", "comment": "Malware payload (RondoDox)", "value": "60b6bdfb2e378d6749ad4f69dcd61b2255dee10067cdb863fc4eb0bb9a07e34b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751196, "uuid": "c0f05f43-42b9-46d8-8705-046c7644b019", "comment": "Malware payload (RondoDox)", "value": "a1a0c3f48e92d3fe45907c492b9f9ed371a04cc0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751196, "uuid": "b3394cd7-779e-4849-a819-cef313d0e7cd", "comment": "Malware payload (RondoDox)", "value": "1b3bf9055e13b2a84567e7817a256ff031f81c66de8753a84bcb2f0121b6f4a06f352d7b0a6e89e8d2c4eafa964f3227", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751196, "uuid": "4c228aaf-86b6-465e-8e0a-85c8c6e92d78", "value": "T191B32A6AFD81C556C6D316B7FA1D528D372702E8D3EF320B9E294F61279782B0A7B011", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751196, "uuid": "faf8af0e-81e0-454b-83f5-2d9ffc376aab", "value": "3072:Jpr33v+V6Hl0lGlalLlSal/lgld1lwlOlul2lDlk9lIwlrll1lxlHwl8lBlUldll:Pz3v+V6HawwlUaBeP16MIExy9awBlPvw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751196, "uuid": "7789632b-217d-48ad-a373-1f22a344dd3b", "value": 117620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751196, "uuid": "2d7fec86-aef5-41f5-a95b-f9f76202583f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751196, "uuid": "907b896f-d302-454d-a4af-2ef4069adc34", "value": "rondo.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae341631-e2a1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766784448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784448, "uuid": "5cd06c8c-bb26-4fdf-9145-a65ca8752243", "comment": "Malware payload (Mirai)", "value": "fc3d46e78b3c27497bf26480bb553dc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784448, "uuid": "6cbb4efc-8dc0-42ae-a06c-1866543d4f6c", "comment": "Malware payload (Mirai)", "value": "612ee27482f4ef2980ab8b6ecbd02bd276cf7a57d767dffe8ce7cb09c05303f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784448, "uuid": "3171e6cc-5088-4f80-a819-9c5842b4305a", "comment": "Malware payload (Mirai)", "value": "7e5ff698946c2e6af6cbfd4c08e388195e87b069", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766784448, "uuid": "de4800c6-5515-4507-869c-e539c546c6be", "comment": "Malware payload (Mirai)", "value": "285a9da0f4d6871127debb0be5ac3ced77a80a27ab0bb6ba4d77686c4eec54e6f934802a3d5781c4299fe79e31f9b95b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784448, "uuid": "5c3c3807-46ce-4fc1-8a34-603ee34b8758", "value": "T15F93FA96B881CB62C6D462BAFE1E51CD331317B8E3EF72139D145B147B8A82B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784448, "uuid": "ffee4db8-ae27-4d49-bea2-87be6efd0208", "value": "1536:+Lxnmtg0yAr1As1UqktyLgCE/9/ZXpOrB1crj3IM6iBSKLFAtnq7pXYgTAbVR:+AFyrs1tkcZA9RSgSKLFAtnqlXrTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766784448, "uuid": "6a4dbff4-544d-4cda-9b6f-71cc73e6f450", "value": 91320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766784448, "uuid": "7427b317-e19c-4d8d-8b15-c113a27c0e94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766784448, "uuid": "c45c93d7-0a04-439b-828d-c33b7cad3a85", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a904102-e22c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766734137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734137, "uuid": "9e0a9446-20e5-4a30-8c8f-f582310a3a15", "comment": "Malware payload", "value": "d12a8d129380297569734ab9ee5ddb24", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734137, "uuid": "a8aa5e66-f7ff-4d63-9a3b-f9f67e073a90", "comment": "Malware payload", "value": "6132ba2be7acdad1bdee760b3227f88d26b61677b6ddff3c48af98053d13ea82", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734137, "uuid": "b0e57101-108a-4735-80ed-41c3a5d443e6", "comment": "Malware payload", "value": "c85e9f52e706e3f49098d88b6d46f9f3f938ed97", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734137, "uuid": "8622e1a8-2749-4f88-a53d-fc523c9eb0a1", "comment": "Malware payload", "value": "d850c729cbe1a22fbb00787980061d337b4044d998d6d90f4266eac65bf817d4de1c43655b7bdd71120fd55d66974be8", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734137, "uuid": "a35464e7-2803-4fdd-bb65-b6ec5fe6a298", "value": "T1F5B5338591820432CDEAE1B5F7D2355EB05F7DB05C11CA6B69DCB50E2F0F3AF8826698", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734137, "uuid": "3c7c6d7a-592d-4c2e-9107-c1ebb055f2e2", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734137, "uuid": "e7d8c1c9-f5b2-46b7-bdd3-7bf6d8925780", "value": "49152:QoZvZ5TMrVXb/loLNX9pxuf2BtpOo6oSzL32t:FZvZ5TMRrtoLru2HpOV332t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766734137, "uuid": "6499416e-d871-4f87-8516-d0679bd34a07", "value": 2341376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766734137, "uuid": "a6e82e2b-8eae-423d-b7fa-ee54da95c640", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734137, "uuid": "09dc3838-54b3-4f71-93ca-63c166a88513", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "564a2f32-e274-11f0-a129-42010a9c0007", "comment": "Malware payload (N-able)", "timestamp": 1766764974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764974, "uuid": "fc309af6-fb43-46f9-aa08-99de372c1d49", "comment": "Malware payload (N-able)", "value": "e2cefb3537378823e570f5e066673a25", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#3DA18E", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764974, "uuid": "81a90b67-622e-453e-a2cf-41041ce9c08a", "comment": "Malware payload (N-able)", "value": "616d10e3fc2b5baf5b5681330e3a45cdfb1e23b5ca7347610209ebf5c1397fd6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#3DA18E", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764974, "uuid": "65668b25-3e3a-4d1e-a9be-adb665487577", "comment": "Malware payload (N-able)", "value": "42ac4b95569f84c9d71317918d8abfb908181189", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#3DA18E", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764974, "uuid": "755b4f97-847a-430c-be89-b5c4ad4c6485", "comment": "Malware payload (N-able)", "value": "94c1d0593caf95b21326ec423074c616c3f2fd7e721ac36675959f2f107eb35d14fe4d916ea71083f25d983aba4cf347", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#3DA18E", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764974, "uuid": "4c13ae70-c955-4de9-b91f-1bde9ee81021", "value": "T1DBE633527C88DBBFD4212770C6429B77529B7A74481018AB6F0C1CB66FB38CDE529B87", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764974, "uuid": "5e3ec7cd-7f01-4b17-9e58-f781c7502e94", "value": "0c40996f6e1e5f2a82b51e9950881bf1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764974, "uuid": "3e5b7ad5-69d1-490e-8a68-0f1fb1a95f32", "value": "393216:KFF/OiT86xvk7HiMPo7c7rd+ljUxrwn5UcmQMD13:urRxvoC/7a0jUxX7h13", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766764974, "uuid": "3f62b8a4-c844-4f00-a851-ca2abe391eed", "value": 14781984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766764974, "uuid": "31a31d0e-637d-40d9-99b5-0f794f73a2c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764974, "uuid": "c19dd652-0858-4043-b9a8-af1b88b26112", "value": "FILE098675786878976879In98767AGENT_470113_V10_14_4_RW.EXE", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efe31baf-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771674, "uuid": "6ac63302-a53f-4f92-80ac-8287bef66a56", "comment": "Malware payload (Mirai)", "value": "eddbd13716d91d956cda42e514fc35a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771674, "uuid": "4a90dc33-8507-4a17-963e-0530e5b537fb", "comment": "Malware payload (Mirai)", "value": "6193587d83afdb3f361f6b9683006762dc792c6c7c1064defd5eab3426573a08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771674, "uuid": "44948c8e-9f70-478b-bb08-e4086a52ae40", "comment": "Malware payload (Mirai)", "value": "20415fa47daf009d48333cd7f351816bdcef87c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771674, "uuid": "348e1364-86e1-4599-9a1d-e40fb7356100", "comment": "Malware payload (Mirai)", "value": "55815455f606121dbac6d5244594f140b4622aff11fd238151de4f494234128c9751bc5db19d8c24c42051706e256ea6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771674, "uuid": "c5bac1c4-fcb6-4f3b-a76b-a9e09a5ba4b8", "value": "T19DF3FA0A7B150EFBE85BCC3F05B8270128CC595B22E9BB3AB934D518B54B15B5BE3970", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771674, "uuid": "92e0a5a8-37fc-4651-a55f-d2365bd1dac2", "value": "3072:mR17j9VBdZa2MQd2Mlg4VpPMKpFldqmbhI76/6iCvbFEAKmK:mRFj9VBdZa1k1lbVpPVqghI7MrCvbFjK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771674, "uuid": "42223769-9465-4acf-acaa-5dbc45ee673a", "value": 170204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771674, "uuid": "f041ce3a-2355-4e9e-a2c5-925c1d218184", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771674, "uuid": "20189f6c-96f6-4798-8834-f20eed0b8e14", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0ef888d-e260-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766756509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756509, "uuid": "8b6619fb-a3dd-44a6-8fc6-757e307bfb7d", "comment": "Malware payload (Mirai)", "value": "62231105b70c6550404e2a1edc522d98", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756509, "uuid": "56da7d7c-ea98-40c3-8d54-b55c8537fff0", "comment": "Malware payload (Mirai)", "value": "61abf53d0eb28ab2074cd37a4e3b23ff9a288cc98a4042663943d817d07ed015", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756509, "uuid": "fc41631e-867c-40c5-b801-f6962aca715f", "comment": "Malware payload (Mirai)", "value": "f82795f57e79683ed309de1e053d7c8cc7978d88", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756509, "uuid": "8acb2e19-5898-485c-a8dc-10129843dfe9", "comment": "Malware payload (Mirai)", "value": "5c850848739c475dbb78e18c5302bf5ec301fefc48d9dcb493861536d117e2c6909cb7576724796ec0c6ddb014512151", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756509, "uuid": "e54d3110-ee63-410d-a06c-0909a08bff1d", "value": "T1C85302299B0A09C6D093CC3515D603FF5F022BF2E6EB488A339ABF05E9625C47593ED4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756509, "uuid": "9b40ca96-587a-4171-aab8-11cdfcce64ea", "value": "1536:hwVhJofXciznxw3GEKDfF+zdLd3x4ZP79atg5VPgjjisYQQnKnaVSu:hgheFzxwWEKDfsz10ZD9BkzYLcaVt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756509, "uuid": "b0c07fe4-42a7-4682-ba42-e26eddf3e2da", "value": 63396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756509, "uuid": "282c3491-4ca2-4295-9f0b-d37bae25a5bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756509, "uuid": "09bb099c-165e-462a-98a2-3e159945128f", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57249bb5-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747366, "uuid": "5c24369f-b267-4635-a470-035642cdf5cd", "comment": "Malware payload", "value": "eb5525acc1de59e015b41ea38875598e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747366, "uuid": "b577ba54-f2e3-4c7d-9303-d2c132d3e805", "comment": "Malware payload", "value": "61aeec7cd332e351ba14aec66b441dcfb5ed3f0e25391962ca55f0ac5265646b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747366, "uuid": "a672a302-518a-4f26-b4bb-c5947d85855a", "comment": "Malware payload", "value": "f6a46562196ae6fd74ff25420f90bc5627029904", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747366, "uuid": "1098fdab-b903-4102-8661-b99ad7ea8938", "comment": "Malware payload", "value": "4d30b38215da738ef72aaa58e7ff7861ec1c8b420047a45116690727accade3bde08454b6acf45f88a5db3d344ca47f8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747366, "uuid": "2ba030fc-1f1a-4e03-8ffe-e2b9b2f5dda3", "value": "T1227319CFCC5235D9ADD99ED93D71216FC40B6B43C12B846E8A67E439AA1AB3129211CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747366, "uuid": "eb7b66f9-87da-441f-ba4d-b686991b89e7", "value": "1536:I9l/AoSSMqi1fSz9t2vT217J3u2GtJfJrcEZ2iN/9+ebY6bvqjk/XVl8jgjF6t58:I9l/5Mqi1fSz9t2vT217J3u2GtJfJrci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747366, "uuid": "fe2529ee-7148-4461-8224-9ba653bbc86f", "value": 74398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747366, "uuid": "de3c12b4-dac9-47c6-aa46-591694641004", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747366, "uuid": "7d2f3973-3d2b-4e29-a81e-6f4b6cdadb0e", "value": "invoice-1645080830.pdf (47).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866e982c-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777080, "uuid": "b0f05f8b-9743-4ad5-8649-c7b989100046", "comment": "Malware payload (Mirai)", "value": "00d8a4d44a4f19cee1b730b043b276df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777080, "uuid": "fd913b2b-7ed5-491a-acaa-49fd45202ecf", "comment": "Malware payload (Mirai)", "value": "61ed408c757f8068cff3d50fb1e78148f0779ea90a441517885cb7393da84772", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777080, "uuid": "0a1be60a-f232-4827-a255-92d823749d11", "comment": "Malware payload (Mirai)", "value": "0d4024b54516095f98779b0494ed604afba7116e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777080, "uuid": "d005841b-292f-43bb-a113-1556dfdc685a", "comment": "Malware payload (Mirai)", "value": "294a28d3f4d96dd08915d7d58ae4df3008c8ea80125faba4019cf2c631daad32711da9cd5c2eba351dee725084ddb69d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777080, "uuid": "6ed2427b-363b-4044-903d-da994776e740", "value": "T1DBD32951BC829A27C5E523BBFA6E018E332663E4D2DE32178D215F217BC690F0D77A45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777080, "uuid": "735444d2-9ae6-46df-a8be-30bfe4463855", "value": "1536:TucXex47gpc3VlI9i34q3P7dpGYaaHJXEu4Xf/+8Y+GTrder4wBYrDZAFR25isv7:TucXUJMfbbGYBn++8Y5EkwBKyCAu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777080, "uuid": "d0069b8b-76a7-4546-a6bc-6848acf97c1e", "value": 134092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777080, "uuid": "d04e205f-b07e-420b-92e3-7ed5487ddac7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777080, "uuid": "36b0651b-19fb-476d-82c6-f565fe59082d", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2d00fc-e25f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766755914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766755914, "uuid": "fea1956b-2e08-4981-b0a3-0456c27d6ee3", "comment": "Malware payload", "value": "cf1176696d7cd913815e53b14b2140ec", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766755914, "uuid": "86a498d0-62fc-4778-807e-0d2619fe6244", "comment": "Malware payload", "value": "620ea55c255aea28092dbe0122c47ceb360ff35161d19c5795d290ea7e672094", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766755914, "uuid": "063e1f50-b24a-4f6a-9769-e2c30fe37e3f", "comment": "Malware payload", "value": "1d19bdd42d4994408ffaa3a6d8583d8182d83c50", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766755914, "uuid": "30abeca5-e804-410e-bbc2-2002286a8994", "comment": "Malware payload", "value": "4eb4342dd0590b345a985f281bed6334fd5dee6a53116f1ae969593230b5df116a9ddb1ddea30d2034220d978b15be8f", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766755914, "uuid": "2a12b6e8-69ce-4515-b588-b94bb46a7ab4", "value": "T1BBE1C696ACF324197407805DCBBFE2587069A057874ACD9CFECC65A8DF0D2A49622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766755914, "uuid": "951e53e9-24c3-4360-b442-c50476088fb0", "value": "192:OZI5p/1IE/CTK/eh9T0llHYoHsfOBro2Tc/OjSmy:Oq5pT/oSYoHsfO2/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766755914, "uuid": "420e63dd-2f55-46f8-bee0-6587e9298ee5", "value": 7373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766755914, "uuid": "3463b68f-4cab-4324-8a9c-44dce36e4382", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766755914, "uuid": "e36a555b-a91e-4546-be71-6a2434267142", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23705a0e-e25b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766754151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754151, "uuid": "cf15e77e-dc89-47ca-a0f8-91eda3e37282", "comment": "Malware payload (Mirai)", "value": "a9324c3b5d0caf622e9cb1216e9e7d71", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754151, "uuid": "f64a40c4-77d4-41e8-96ee-5dafc9d48826", "comment": "Malware payload (Mirai)", "value": "6216e3803ec8f823b4bbfb23bce6e8b1622b8978593e593ba41753bed3fa4a01", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754151, "uuid": "e87665aa-0eee-4cbd-8a1f-6f719532b7bb", "comment": "Malware payload (Mirai)", "value": "67e6a37a9503b4284a3800d1e5fecff466900afc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754151, "uuid": "c84e28e2-8b34-4dbb-80eb-bccfbe5bb0cb", "comment": "Malware payload (Mirai)", "value": "49f79cbbfbace41cb90e4cf75ebd405c1cec0a69f79422cb9e7afb81a264ee44ab275a66d0118912080ec04068d77979", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754151, "uuid": "e2e65450-07db-4351-8185-87f791cf9d49", "value": "T10E33F19862789E96D243127C2D7E3E4B55C4B1DA728825DDE5C923088399B0CBCEC297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754151, "uuid": "b3683da1-2b85-4658-8355-e8c01db62105", "value": "1536:wEwv4I1MsK/4PTT8FyWfYHjuynKlcj1wenouy8l:9lWMfQPX6wHHKsZoutl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754151, "uuid": "442a5cfd-ef9b-4031-9ed9-fc47d3d21ba7", "value": 50868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754151, "uuid": "d773eef9-cded-4166-b14e-ed7ee44aa50f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754151, "uuid": "301b3af8-913c-4daa-80d8-948b35439d0e", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21665052-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767462, "uuid": "fc98e98f-eff6-445a-bcd9-e84106e56ab7", "comment": "Malware payload (Mirai)", "value": "abfd15fa82e15ed5fd7721de0925b793", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767462, "uuid": "db82d2a6-a8b6-49df-bf61-238146b6747d", "comment": "Malware payload (Mirai)", "value": "6217ff9b1e7b0a591d38cbb59ae1cafdffaed91086a83f77313cbccbf34c19ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767462, "uuid": "23a404cd-b368-462e-a2b4-9b216a3b2cbe", "comment": "Malware payload (Mirai)", "value": "c97fd3c3286e217ff61fc71fcd406074817bae7e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767462, "uuid": "8782a48f-2a64-410e-a67c-337accb1c720", "comment": "Malware payload (Mirai)", "value": "0d73e50bc8c03a5024130ac901498b5aafea3a1474ad6d6c95cb1b7965b7656fb7535af995e7b914ccaa3275973dd66c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767462, "uuid": "e71d5691-66a6-45af-962a-6198ad8fe351", "value": "T1CAA31A46B9819F11D4D621BAFAAE408833136BBCD3FE7111DD20AF5127CA99B0F77612", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767462, "uuid": "95452fff-7ce4-4261-9298-1b8b00bac782", "value": "3072:oOZ2sGZ3cmcpaR5V5GzLB3iqefGXJP4mMu:ZZ2sGRUpaR5V5G/Bhe+XFMu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767462, "uuid": "90420607-eeb2-4e4d-82ed-6837f2a255d2", "value": 105508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767462, "uuid": "2d30efc8-b6a6-4517-9330-d7d88adcec72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767462, "uuid": "44581290-d80d-4301-a1f6-8deed7e4b32b", "value": "debug.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfae863a-e282-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771163, "uuid": "977a3364-dc44-4b1f-80d5-0c208714ac92", "comment": "Malware payload (Mirai)", "value": "a79e439722931a01b250563debf8bbbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771163, "uuid": "7c073df0-25a4-4189-97da-249a30a149de", "comment": "Malware payload (Mirai)", "value": "622d2741a8e86b2b4c932fc47f6adec5c4c69942539142be1367ad25f3360e46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771163, "uuid": "9f790464-d63c-4345-9645-b4bcd5d97220", "comment": "Malware payload (Mirai)", "value": "68d8549641a90dc5b2e806d0154326677f9a3ab7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771163, "uuid": "b163c4e0-c328-480b-aeca-c875eb928eee", "comment": "Malware payload (Mirai)", "value": "cfdeaa3db08117ddffc1fd3fb041313ee8abfc1890291e9f834180698dd8c06d36ab178681520f266f45151a9e8b2249", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771163, "uuid": "b6517914-63cf-47e8-ba44-eb6a7b982f84", "value": "T176730749FC815B25D4E522BEFA1E118D336357B8E3EF7212DD101B15778A92B0E7BA02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771163, "uuid": "220ef451-2810-4fb4-a5e5-235ba03bbe23", "value": "1536:iNnEZJSjknCDYsrg9GJyf18ICWT0b4Sw7ATmCQs9pP9lpriWHw7jB9cTG:v0kPUrsSw7ATmCQsRTHojvcTG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771163, "uuid": "ff2b271b-f690-4603-9a73-51f5b19d0d0f", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771163, "uuid": "8815b9d1-4b9c-4cc5-ba93-6621f319f603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771163, "uuid": "ba8fd368-996d-48be-b21a-8068eb7cc943", "value": "z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2f106d8-e279-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767276, "uuid": "c49043aa-66a2-4bb1-9c02-5ffed29956cf", "comment": "Malware payload (Mirai)", "value": "1f738097266c44ef688eaaf7de73e8f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767276, "uuid": "8b3a7cca-a512-41e4-add4-a14b0b313ff4", "comment": "Malware payload (Mirai)", "value": "62a1e657f22977d43397c66823a51894a6d38c47ecb5894eeb294a1f7b782918", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767276, "uuid": "dba242bd-ff70-485f-ba11-1ce99af726e7", "comment": "Malware payload (Mirai)", "value": "b06151c0fa2e895f42cb576255ba66b020a1d0bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767276, "uuid": "02d6c167-ed37-4a3b-a5d7-7688bd777886", "comment": "Malware payload (Mirai)", "value": "c46173800c24172d48b9a4a9db7eee7c7d460b290693de218c87538f1535e50ef88ef41fad7fdc5d3d1c737df6a9b4d2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767276, "uuid": "042c2065-55cc-4df9-838d-e32509d5bf62", "value": "T1AF732995B8814B12D5D412BEFA1E118E3313177CE3DE73229E206F24778B96B0E7B916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767276, "uuid": "61cb1ce0-885a-41dc-91a7-99f1eccf4c31", "value": "1536:eDnWmQsTyn2JXzm3F4E9waQ7ImQqM7iHjD7SoO7Cn50Y0s/g1:yJTNYV4E9waQFjD7SoOenqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767276, "uuid": "b64d8d7b-e2ba-4c87-a133-bd24593cd918", "value": 79476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767276, "uuid": "c453e74d-5929-4311-8556-5747916a74c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767276, "uuid": "d0da427f-459d-4a08-8970-3a33d9cacec4", "value": "parm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08805e28-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779016, "uuid": "d65b1786-6ed0-4637-819f-3991355540ca", "comment": "Malware payload (Mirai)", "value": "e0926e7232382c727c373d0ff1c0f594", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779016, "uuid": "56ac5e04-12b5-47d2-8798-2f53759e68d1", "comment": "Malware payload (Mirai)", "value": "63dbbf2254cab953f2f316e68f7db077b9dc289c1b89b30196d90f9e24cb6784", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779016, "uuid": "bd853602-0ffd-4967-98cf-bb99bd6cc498", "comment": "Malware payload (Mirai)", "value": "7db0e4eb3af777a806146784a175916a02a7a05a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779016, "uuid": "d828faca-345e-4936-b70c-3da06ca814fd", "comment": "Malware payload (Mirai)", "value": "39eaa7481fd6853e93a8d7637b2683e01148a3f061e2b0aae26e21452e1c6b3be496eca64c34190f684c52d8e3050d17", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779016, "uuid": "ee113501-4bfa-4fcb-b28a-a70f84fd2666", "value": "T1669318C6B401DC7DF80FDABB4463290EB631E36156831B26675BBE53AD721E05923F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779016, "uuid": "1d1ca3d6-26b5-46f1-8e1b-f8d0a922951c", "value": "1536:6sdLEbXJld35is6pRA7O7X7wW0XM9FW2edNP/8b47e1ov5TaCkg0zjX9JK1Cm1ke:6DiPpAO7X7Fw2ed1nqeTadgqGCm1HqAp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779016, "uuid": "e15c7694-d171-4a52-80ee-d0e9c4f42503", "value": 96736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779016, "uuid": "f3f9c5bd-ea19-44b5-80ec-ccac4e2dbb97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779016, "uuid": "db4f8a7d-088f-4996-bbc0-55067cb83c7a", "value": "windy.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99389ea0-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747476, "uuid": "b6131750-9095-4a6c-b41b-23b9bac2b548", "comment": "Malware payload", "value": "4a019fd06a58c0d1b797f2dba6717b29", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747476, "uuid": "e39ea56f-82c3-44ef-b1b7-c6185598aa48", "comment": "Malware payload", "value": "63e4a8883e13dc8b69760c90e3502e16a089ddc79b8da7177c99cefc791d2745", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747476, "uuid": "fe63aae2-1840-4450-94d4-10cd60bb45d5", "comment": "Malware payload", "value": "e21ae41ea82d0cdab3d8cbd178b79cbccf70c6c1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747476, "uuid": "29c6c811-4fa0-4c9a-b4a3-30e9aa2a0265", "comment": "Malware payload", "value": "d20cd81ba5b8cbc477272ff773f26b2a9bce68b5baa21fc161fabd5ad03e37885357d68b078ed36aa3ef431dd3586d98", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747476, "uuid": "f72105fc-d3a7-4878-baa6-2365e021f10d", "value": "T189631A6B0B23F5EC3A79EDA4EA7679829F6C9AFDCC0D2105E1975292E790039730414F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747476, "uuid": "1844e819-42c3-4b9b-a741-467bbcaad206", "value": "1536:I9l/AoSSMAgPslTIoQCp+dBxVtDn7/cy7sy7faLmRFDn+AzAQdpEuj3WELLy0uux:I9l/5MAgPslTIoQCp+dBxVtDn7/cy7sY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747476, "uuid": "4f768242-8718-4689-98d5-0f2af2d07e06", "value": 70644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747476, "uuid": "b3398bb0-fd77-4fbb-b87c-eb97f89df115", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747476, "uuid": "d279a778-77f4-4cfd-be94-6d4f3b6ca009", "value": "invoice-1645080830.pdf (24).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ec86691-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711784, "uuid": "791de095-7063-40f2-8eb1-e4e299186de5", "comment": "Malware payload (Mirai)", "value": "12e21197606a5b8dea119569148d2e20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711784, "uuid": "7f96bf2a-3271-4b45-bbc5-3cd89018644b", "comment": "Malware payload (Mirai)", "value": "63ea90236765ea5e4020ef32b325a6b1c7a6bf240e317eb5fed77e77f2654d3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711784, "uuid": "16875075-bede-4b8f-8640-905640b7548c", "comment": "Malware payload (Mirai)", "value": "350333e968edcc8383aa9e5d5b9efb878c2fe564", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711784, "uuid": "96528f04-44d5-474c-b135-58eea603708d", "comment": "Malware payload (Mirai)", "value": "0b77d2d3e654a445f518efd3f605eb005971ade6f104b625e20392f0cff03f25d6a7828e07adb0c424c92caa04db9d71", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711784, "uuid": "09bd1cf7-336a-4828-943f-8543d948a5ee", "value": "T14144D74E6E228F7DFBB8877447B39E20975923D726E1D585E1ACD2001E6024E641FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711784, "uuid": "50b2eeab-ca53-48cd-8611-648be95556ab", "value": "6144:iohbFUqHQe3RE9IOQunN95UahZKE1KRKVXQBbjBrr0:3jLB8bKEMtrY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711784, "uuid": "d5b07cc3-2b4c-486a-83d9-6180389ac13c", "value": 261244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711784, "uuid": "c5fd2c3a-c771-4022-a7b0-3895be45b2a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711784, "uuid": "38d761d3-3be0-4d17-97ac-631b0c550e07", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00b51416-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747221, "uuid": "ff161a14-11bb-4ad9-9e5c-74fc14510ef0", "comment": "Malware payload", "value": "103326d3da6f000b6c7bca1ea7830e18", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747221, "uuid": "5724c8c0-087a-4b9c-a179-33cda0a43d6b", "comment": "Malware payload", "value": "642aa1a96843456058465a77d8601ceaf26136d5d49aeeb58fd41a746950a08e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747221, "uuid": "2aa26e33-cb61-4b19-b751-17891e4dc30f", "comment": "Malware payload", "value": "1bf0b69ef36bcafe77a5c2f15be3b8565639121c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747221, "uuid": "7039a84b-9c4f-4ea5-87da-be0aad2ab6a7", "comment": "Malware payload", "value": "6c7998edc7ff3dcdcaef5c1745c34104a8e14ad5f7710e793570a07f707c8aa632b33986b5883312acd5b84fb1cb6f1d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747221, "uuid": "4c462982-68e6-4cac-a4d7-04d161159f11", "value": "T10E6319E19DB4FB2C4A53CDCAF860798150A78158D7AF38F9098F770B0E29326631676D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747221, "uuid": "d12602eb-bcef-4a6a-aba0-2032b80f9f9f", "value": "768:I8w/h62/jWs6oS+xISN0vqtaB5m5SUrDelwGHLdCm5lA8p2YtVRYeR98xVch3ujl:I9l/AoSSMo+usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747221, "uuid": "8de0c51e-06d4-463e-bba7-b73a559c1969", "value": 71549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747221, "uuid": "93110f3b-8a4b-4a69-bc6d-22e969f4a6d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747221, "uuid": "8a9115f3-9cf5-4a42-8d92-0f9bcd9ee396", "value": "invoice-1645080830.pdf (79).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b578067-e2aa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766788282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788282, "uuid": "a8da362a-2063-473c-a2aa-0aaa3562cd87", "comment": "Malware payload (Mirai)", "value": "f110ba12f69a78c42527af01076505c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788282, "uuid": "3131ab4e-a1e7-4edc-84ff-d404c24328b5", "comment": "Malware payload (Mirai)", "value": "65049c7418fc2fddaf97b3ea4c38777e8748545225b02e0f72c3340a48b927f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788282, "uuid": "2843a51b-fd2b-494e-b614-cbe81797a34b", "comment": "Malware payload (Mirai)", "value": "db1f165ad846ccd45e57c71d59f1ecb479a362da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788282, "uuid": "c773d20c-d2e5-4663-bfc3-205a0804c412", "comment": "Malware payload (Mirai)", "value": "b5cce2a1bac2f658dee48e2bbc1955dc6c29e7c4b829835a26292703c0ab7d9c12e4754bccd28c755f80c4433b6717b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788282, "uuid": "7888fa26-0fdd-4aa3-a9ac-934be7b65b80", "value": "T185935B31BD7A2D1BC1C4757F21F34234F2B6274A25ACCA1A7DB20E9DBF256502107AB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788282, "uuid": "2b6b81d7-e6a6-4a54-b4bf-1a84db0d28c9", "value": "1536:IvDfbSoe6EnGDo0TJlLvZe08jKNulBPH5mOEGwwyDvzFn38C9bILLL0dPKz0uhf:qfebGk8tXhiEGwwgvlMC9MLTzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788282, "uuid": "6851a09c-8651-4df6-9d57-173a63cb9990", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788282, "uuid": "21b5bb41-b8e4-48cb-83a8-0d912014bcca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788282, "uuid": "96e47dda-484b-45bf-93e3-c1e280142ff4", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "132eaa8c-e2ab-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766788483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788483, "uuid": "9df5d87e-cfbf-4362-9e35-69e4b8961018", "comment": "Malware payload", "value": "8e3445a793c3309e2e649398b924d444", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788483, "uuid": "6680687c-d4c2-4f15-97d0-902675cf8647", "comment": "Malware payload", "value": "650835f7fb66a806e2ee540af05e2349eb9e77998bbece855a0d0ad43dcbe443", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788483, "uuid": "b3949a69-f962-40bf-899d-9da6b21e88c1", "comment": "Malware payload", "value": "6c59e3eeedea15f8ba35799872c48ff9ce13dd93", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788483, "uuid": "a97a613d-c4ba-4c13-a237-ab2d5b63a129", "comment": "Malware payload", "value": "fcd055e39d3aa644a3b92ab4ae46238840cabccf1f40248701fb4cc191346e0c939ec7454abf2d564d32e8db93af44b0", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788483, "uuid": "b36004c7-10b5-4a0d-9fa2-2aeb898d8f04", "value": "T1A6D05E4CB8560CB7F4759CB9B6DB2956970F93D92E4A59DA5584011FB4F0C24A060453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788483, "uuid": "8222ab0d-28e9-4309-923a-da177af1b7d6", "value": "6:/VJ+pUKUF2RVYHYUiwIrO3FsDKVKAOXqIKa03IKq1IEE1IKBKW:/VJ+jRGYbWgAsONI08W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788483, "uuid": "bc7fd802-044c-40f9-9625-f7072e382f29", "value": 256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788483, "uuid": "89918950-9acc-4cd3-aa6a-8331c2923ad0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788483, "uuid": "3b2d0801-5bfd-44c5-90f2-68188d74317d", "value": "sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c3340e1-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711726, "uuid": "33762812-ae60-462c-805d-ed199c870d53", "comment": "Malware payload (Mirai)", "value": "5a22ad08de48b2ff0f74a1b0275ca6d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711726, "uuid": "1ada01b0-1b9b-4eb9-9649-bb8cc3da2dd8", "comment": "Malware payload (Mirai)", "value": "65711aa36e7e71d3ed9eb0a381d40bead6f56ab9912940204dbfc7f664acf5b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711726, "uuid": "d3a24e7b-2560-4fba-9519-2a81dbdee02a", "comment": "Malware payload (Mirai)", "value": "ae0c8b7fd6f31ac18d0a30a5aec49885a583751c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711726, "uuid": "3b88bb98-2b4e-41db-b695-a9675c8fe346", "comment": "Malware payload (Mirai)", "value": "3eb57a7350d2661001db68ac3486dbc27cf9703591c5d3497f106be92178bfbaa72b466f524fe98419ae7382fdaf8559", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711726, "uuid": "9dafc336-cbbe-4aa1-a54c-4b43368e5f14", "value": "T17853121AAB67D206E5CD44796DFE3B070046CA2718745AA5BECA400B8E35FFF9DB5403", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711726, "uuid": "45c40311-bffa-4f6b-9238-6368f282cbf5", "value": "1536:EvqPkUoDq+On8f4ArAQf5NGcm9VbtMU2H3uNog0Jnouy8tyC:EvqPkUodFrZ5ocmH6pXua7Zoutz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711726, "uuid": "34cafc6f-ccd5-4d5c-8a8f-f515552cc30f", "value": 65336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711726, "uuid": "4251b44f-c92f-4fd0-b0d0-6c9d47270e72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711726, "uuid": "f0701028-6b1d-4b8e-9e9d-370e4862d67e", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b51f6313-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747523, "uuid": "d2e5c20f-e1cd-43fe-bb7d-cb2acdc8bead", "comment": "Malware payload", "value": "81a3b3d51bc18f8409079dd193944cd5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747523, "uuid": "ecb66c04-c330-4217-98bc-2fcf25b268de", "comment": "Malware payload", "value": "65f9dc4bc48f2e121d4f82bd70c5f3762839bf7e9a4197fd2f0766c850e2cada", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747523, "uuid": "ab924924-def8-4c0b-8c9c-e13cbbebc83d", "comment": "Malware payload", "value": "3cfe4fad80ea6a3ae6c9ce0597b9035cf1c44eaa", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747523, "uuid": "792745c0-81e4-4124-9f77-17294b982716", "comment": "Malware payload", "value": "dc519ecd877dc91ec930c6bc25c39c83227f3532506cf9f5945ccb400aff17d23e8951667d0ed152809bf0a3bd90d9d3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747523, "uuid": "0431e2a5-42fa-4c3a-a326-7431d875dc82", "value": "T12F631ADBDE9774AB8A008160EEED800E1F046442886F66EB2560FD0D52BFC51DAF65FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747523, "uuid": "5b4ac4a2-bad6-4d0f-8d75-8c9a83ef7f72", "value": "768:I8w/h62/jWs6oS+xISN0vtgQUNMYdkfScBYrwz2y8kTAlGB:I9l/AoSSMti/usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747523, "uuid": "7861e865-775a-4e49-a8a8-b1de4f2a24a3", "value": 70612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747523, "uuid": "8b696af7-053d-4da4-97f1-ae39cd64c77e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747523, "uuid": "940bdb82-d9bf-4ab6-9a37-b11092319d58", "value": "invoice-1645080830.pdf (16).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "501fe775-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733610, "uuid": "a1c23c23-0a45-4fce-b4fd-ba4e3f670180", "comment": "Malware payload (Mirai)", "value": "cd0604bdc18b801ed8b8a4ecc2edee6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733610, "uuid": "71a1609b-44e9-4908-b69f-f3cdec1adf68", "comment": "Malware payload (Mirai)", "value": "661966147abc2d55a6c77fec793b632ca5ac1117ca6a85574fba7744be0227c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733610, "uuid": "9450c990-5250-4cfb-8f20-8b053591c545", "comment": "Malware payload (Mirai)", "value": "42a033a112887bafe4a2e1ecaebd3fc6d59cf2f5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733610, "uuid": "1ffc95b4-c878-4b33-be10-882dfaa2191a", "comment": "Malware payload (Mirai)", "value": "233c48a019195650dffeb2429db441aba4e4940eee2b25085bcd5549ddef4c75735dba1352c8c435eab26e703fbd0c7c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733610, "uuid": "3c1a64d4-a3e5-4e44-a3c4-fb46502a4612", "value": "T148D37DAC2E8E3DE2D3C7D37DCE084E21702B74B4C62152B1791253DED29EDAA99F0951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733610, "uuid": "29fd3019-750a-403f-8d20-7ff33c479e65", "value": "1536:spTmQ8MEj4B94CU0O7y22bt+jINX5EN15DSPTUcbp1Bt291elcepzVE:5cId0jkINX5E/5+YQBwneWepC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733610, "uuid": "64eb204d-f4a3-43ce-aced-495393c1f731", "value": 132960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733610, "uuid": "f09b224c-d21c-4701-8e89-eecfa79b0bc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733610, "uuid": "8f7b7c1b-2183-4e51-b94d-fd960fb2b177", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ed921c1-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747271, "uuid": "e7ccaf21-e6dc-4d5f-a3a7-f2ad7c6f3c37", "comment": "Malware payload", "value": "9c5fc953939b5c09b4855fbd0499217f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747271, "uuid": "22bd134b-c311-4494-b068-e45ccb9debe7", "comment": "Malware payload", "value": "668be9ad285a0d266168e4b73958b5f1982d32cae5893dd1908a11c177644375", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747271, "uuid": "e06c128c-7d88-4426-bb36-686325a89f97", "comment": "Malware payload", "value": "df51f22bc70d276a75582807b93e58116f659732", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747271, "uuid": "67370f38-7b67-4bb3-a010-56aa2885bc16", "comment": "Malware payload", "value": "fb05abb870d7f27b2e2b504e12fbbabc8469268817960d468af7e057982ab27a1167e39e5fc8f0232f09da9ed270f799", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747271, "uuid": "7cf45de9-eab9-4182-82b5-3b521f463fe6", "value": "T1BC733B74CE21E2632ED9D878EBE3009E5C974755093880E98982F0E353BC9556B9F3ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747271, "uuid": "fe411c8f-c8a7-48aa-bbe5-50dd755c5420", "value": "1536:I9l/AoSSMzGmTaOdV3XP6bsPFQbfqDqCVy1TyOpPxIZZZJDjqDdPlTVTin/S/CvZ:I9l/5MzGmTaOdV3XP6bsPFQbfqDqCVyW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747271, "uuid": "5d866ad4-34da-41bb-b3a1-30b3bf638907", "value": 74436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747271, "uuid": "05c4ebb6-ad32-4088-b8c8-d90dfec5c0e4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747271, "uuid": "9d62f0db-a254-4ee3-b957-f5fc178875d6", "value": "invoice-1645080830.pdf (68).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29968c63-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767476, "uuid": "f87ef00a-b052-4bbc-8ffa-9f13014354ea", "comment": "Malware payload (Mirai)", "value": "0d40d022588b2e8fe9f8c03556ce3b18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767476, "uuid": "44cda518-042a-4c24-aad0-73312a1e8f3a", "comment": "Malware payload (Mirai)", "value": "67d2ac62a39e4462b47a1ccc7de307569b991060f52adc70c29f20492d7f6367", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767476, "uuid": "f88afdc8-ab68-4f55-aee7-21cddb1067c5", "comment": "Malware payload (Mirai)", "value": "383e76f62415fd0b3699097deaa517bdb08a935b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767476, "uuid": "c4019c39-dd88-4ecd-a6bc-cb5cbca2ff76", "comment": "Malware payload (Mirai)", "value": "6034f0a920219c3df1f4a7b38cd88b793f9101598678965d92c5da50a9a7429b60991186b70f065db427a74c82f397ce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767476, "uuid": "386f4472-af05-4373-9f2d-24054f835fee", "value": "T18F83180273180F47D15329F02E7B1BE097AEFD6214F5B684A52AFEC54231EF22546F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767476, "uuid": "a7b7f4a1-8e8f-4832-af0b-f7c373f1d9a3", "value": "1536:o9rp1SusF6HHP2hJNrnkhzy+1iOJt5o7wkAbl61d60p:YsFVhJ6j1NJiE4Zp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767476, "uuid": "8f99c374-b295-40ec-afe6-2642008b0e04", "value": 84340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767476, "uuid": "14881f5f-6395-426a-a6cf-90ad49110e8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767476, "uuid": "58ecfcf6-71c5-4f6c-96c6-6562539b5cee", "value": "debug.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "453003fa-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779118, "uuid": "ac53bfca-3695-4f1e-ac5a-3c48702d47b5", "comment": "Malware payload (Mirai)", "value": "ce097c788727547644508416f3e4eb27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779118, "uuid": "47d2ead0-b769-49fc-9a95-91e71de1e100", "comment": "Malware payload (Mirai)", "value": "6823c1b4f2a9c3e0615d3765e6a91c2ad8e1107c07c0b7d2c7eb3b46ad4aee8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779118, "uuid": "21f218c8-aa57-4177-bd27-8a695ae0ed34", "comment": "Malware payload (Mirai)", "value": "b4ebe5d3d221d6a9aed9c304de1d9e6a34c43193", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779118, "uuid": "f76888f4-7b8c-4f88-987a-72cfbf11dd28", "comment": "Malware payload (Mirai)", "value": "c8ac512a8dd381d501e70e1df459f02427f8acef0d92e2faec8a783b86a4f88fc25770a26f931bf11234fc4631009fec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779118, "uuid": "37d78ea0-7e94-4c98-a482-1c6f2bfe8115", "value": "T1A1044C46EB814A13C0D62779F69F524633239BA4D3DB33069918AFB43F867DE0E67601", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779118, "uuid": "eee02617-21ad-4d1b-bb88-c8c0a68aff2e", "value": "3072:/lE4Ho+DImaehF/h9PZpgBmsXCKiHUdnQy3d0fM/97ezERM:/lOKLaehF/h9RpwJCDH0nQy3dEM/9DM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779118, "uuid": "62af97ea-f9a2-4a98-ad62-3c587e4b0794", "value": 176507, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779118, "uuid": "8b47c5aa-ed2b-4300-8b04-e1b7fc4163fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779118, "uuid": "b8153b1b-aaa9-48d8-841b-874e6b06b712", "value": "windy.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a8e3ded-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711723, "uuid": "d6a74e73-f98f-4b5e-b46f-4a3ab161c64f", "comment": "Malware payload (Mirai)", "value": "a5807e057c510d21644244eaa8200459", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711723, "uuid": "deaf4eb0-b162-4c61-b363-6f52b9b6496b", "comment": "Malware payload (Mirai)", "value": "68fbd36795806eb89f739096ca0118a0dd7a399c74e6a279054bfbf0756f2523", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711723, "uuid": "bc4333ad-be69-4adf-b045-eea1bec89216", "comment": "Malware payload (Mirai)", "value": "a1ebaaa280c35a054ef6cc78783ee39a1f311adb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711723, "uuid": "70400237-6f03-4a85-ab9e-1ee0c28a0c31", "comment": "Malware payload (Mirai)", "value": "aad4191a21b16e3fe20a12435003a27c6f259e79abda39b0fc9ef72f2548d8a116db5642be85da872677778393663a12", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711723, "uuid": "e2965696-669a-4594-a9c2-0caebbb3d8e7", "value": "T11B7302E5D52D55228C7B2C6FF082E7C42C316AD8CD6DA9736185CADE6370B836182A1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711723, "uuid": "09ffe32a-0c49-4f3d-9ced-cb581c851468", "value": "1536:k5BrECfKERjTeTGrOJPOB/Qzq+QZ+/vE5mlOLMHpUev1yjKGLS:k52qKymTpJq+Y+/syfs+GLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711723, "uuid": "6c21118a-f3db-413a-8ce1-6b6dffeecd7d", "value": 77568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711723, "uuid": "d56ba16b-2e99-41b0-9347-ef8b2fc7ff22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711723, "uuid": "cae0a2b0-5eb5-4f8a-9737-6d4de2522920", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "705cc0c4-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747408, "uuid": "f757bc9c-aba3-439c-bfe7-74b8ec70ec77", "comment": "Malware payload", "value": "21faf1541a14e7208a4bc77ebdcf5385", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747408, "uuid": "c63e3e4e-8a11-496b-85fc-2c6fdcfe9467", "comment": "Malware payload", "value": "69735664fd1719a9d054e2e3f90dc2a6bf117ebef9468e95d0d6c27d88e74051", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747408, "uuid": "cdd584de-cdbf-4390-a5cf-7afe1992b9b4", "comment": "Malware payload", "value": "7b540c678c6122cec52c544fbd2f23d2435b7621", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747408, "uuid": "42a66ada-4565-4acb-8399-432607238ac1", "comment": "Malware payload", "value": "6a970bf52b8891c33ed124a30856b00f94621cb94d55574c8b5f1d5d8e2658c6bef62436ea37c01b88c967827580a2bb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747408, "uuid": "3559530d-4e3a-4123-ac08-64e26761986a", "value": "T17B731B4F799F6D25452EC73B9E3290832CBD0BE80E6645B915284F7282B47FC2D562F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747408, "uuid": "7d669c64-3641-4c59-895e-12d5c88054a5", "value": "1536:I9l/AoSSMNzbLhptdKhOK+/LLBfW6G3e0O4Jt/feAYEgVL54v7NuNNpjWB4TXYrA:I9l/5M6PusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747408, "uuid": "f6d156bb-95c3-4495-8232-e8ae432cd95a", "value": 73526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747408, "uuid": "d9140ecb-e263-49ff-84f2-0dcb465b1ea5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747408, "uuid": "b37a6331-4ce9-4b93-bf6a-8556a06b8b21", "value": "invoice-1645080830.pdf (36).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c356309-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747374, "uuid": "7d26c474-203f-4b53-8cb3-d9cd58ecb898", "comment": "Malware payload", "value": "becab51bda63d1b814a2dbe3297420e1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747374, "uuid": "7eea5eef-d6ba-4743-9aca-4f02490e19cb", "comment": "Malware payload", "value": "698596a8868c313e0742b30da0096a13e1c00ee57b714a23ecef963048b3739b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747374, "uuid": "3f78c2f6-db61-47c9-a29e-ffba7a7abac6", "comment": "Malware payload", "value": "1d25e7bcb1577369f99647e8e16e0a252afdfbe4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747374, "uuid": "466e4474-bd9a-47fd-a52c-a1aa8b96243f", "comment": "Malware payload", "value": "fcea48c4c8960bd220e7a9ecb3f71b2ea65bbcc76aa6bd5c223fb585b8d54b0aa99489bb5fb2dccb673262f8c59d57c7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747374, "uuid": "d07da3d9-6fd3-416d-90e7-1cbb1de885d1", "value": "T11E630A9F8682B57A1000471CAB97F00E65B79C241E171F9FB52E0859FBAE71EB1BE311", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747374, "uuid": "9cac72e2-994d-4a94-b127-bea81f7689b7", "value": "768:I8w/h62/jWs6oS+xISN0vbEjN2+dkfScBYrwz2y8kTAlGB:I9l/AoSSMkzusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747374, "uuid": "de9eced8-b75c-4017-9431-5b2dfff546e5", "value": 67793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747374, "uuid": "03f2ad52-769c-4fb2-8ff7-59eb1a3799dc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747374, "uuid": "3886d49c-5462-489d-837c-2d4ce5da6bb1", "value": "invoice-1645080830.pdf (49).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fb9cb76-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776505, "uuid": "c97ceba2-7b3b-4055-9c27-548ad12c527c", "comment": "Malware payload (Mirai)", "value": "a47a99e04bda295193b6ccfba84454ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776505, "uuid": "b17eeed2-e3ef-4fa6-9a8e-869a17417165", "comment": "Malware payload (Mirai)", "value": "69f6b20b6277712d07f77b653d10b29a2af8d12a109347562111ed308aeb64b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776505, "uuid": "1739937c-30cf-4174-82bd-a57a5227d745", "comment": "Malware payload (Mirai)", "value": "f7805301186712d6a0cd0dde638742b5530f7e5b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776505, "uuid": "6b3a021d-62a3-407b-8a43-de3818095a71", "comment": "Malware payload (Mirai)", "value": "f47df11085864d93739b7850870dc1668c29bba790d761d0eb5cc383413bfe58fbc10e9905b5a8ee7ac08c2da1e4ae70", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776505, "uuid": "cb9ce510-8c1e-4f82-9b87-b6336e651f47", "value": "T1C1836D4273184A13D5971DB0293F2BE083AFD99025E4B7C6651FAF8A4276E33144AFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776505, "uuid": "d5eec019-7032-4efe-b1de-142d2b2fd32d", "value": "1536:62GFu1PmRQ78N8Xt/+Kfqy29OgZsS3eMpiT2bVRm2:m9Q79d/+r915aT2+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776505, "uuid": "f4a3170e-0563-4241-afdb-f17293fa6d23", "value": 81212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776505, "uuid": "4fc06a46-4982-4d16-b411-4500c32aa84b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776505, "uuid": "bfea6514-4272-4889-a6ef-dfe460c934b0", "value": "jklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7ac081e-e298-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766780626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780626, "uuid": "07aa45d0-eed2-454c-99c9-9747d99d2a10", "comment": "Malware payload (Mirai)", "value": "bc82a224a17fb3997e3fa0d37eef9d34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780626, "uuid": "bbdf5b70-87d7-4091-b13e-c6be39dc6752", "comment": "Malware payload (Mirai)", "value": "6a924fa15269fd2157c372e18e4c4ab921534e0ac030bfde9be51ef36850ce51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780626, "uuid": "9b4f4278-61d6-42a5-aa56-ce4d9e62e4e7", "comment": "Malware payload (Mirai)", "value": "e4daecc91b0e36e5718b9a7ff8483c0c97f60a98", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780626, "uuid": "e694bf7a-6038-4a99-a8b5-844cb4275b23", "comment": "Malware payload (Mirai)", "value": "f53511408fd46853bf51bc83d6446c9d1ea2107b891378e30b731d043e37f13a9b3a8f4584f95a2af3988d167c453929", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780626, "uuid": "65eb8d57-e226-45bd-899f-0edbf435b41f", "value": "T114736C17F4C090FDC99DE2745BAEA326E93770391134B22E27C4EE267E9DE211E5D250", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780626, "uuid": "977eb600-b8b6-482b-b104-2c755ad0bdb6", "value": "1536:pj8pRV4zKCu2l/laVwi+/nurTg53q6Ru:URV4zY2pl9i+0TgJXE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780626, "uuid": "50f39fc3-ad14-45cc-aabb-47bce8bd4147", "value": 76520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780626, "uuid": "ff1198fc-0908-4fee-acdc-320dd35f7436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780626, "uuid": "bf7d22a1-2660-42b1-8ffa-7024bfb1edc8", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61d9bc08-e227-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766731922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731922, "uuid": "46d55690-1bfd-4c3a-9270-f05fcea60610", "comment": "Malware payload (Mirai)", "value": "b44d6cf9a048543391f2684d21b75f70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731922, "uuid": "f1473f5f-7abc-4391-9768-1c2e9dfcb9c1", "comment": "Malware payload (Mirai)", "value": "6a9914d42b78eff4c863cb9c297b695935e91b8a65ca4e54136fe037421f9e5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731922, "uuid": "5bae8e8b-dc16-40d8-abab-37890c49848c", "comment": "Malware payload (Mirai)", "value": "61f7601172ec1d81cf8e637f16d4763181f18efc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731922, "uuid": "cb01a5ab-552b-4ccf-96d9-01c5c220df87", "comment": "Malware payload (Mirai)", "value": "41f0d6eb16d483fade6d32e0e3cd0d3523c89dafeec255dd75ff160cc3d0b50098163bee476769c73c59e55102aac91c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731922, "uuid": "ffb31193-8453-4452-a682-f27ddf6f7c31", "value": "T1A7E3940E2E394F2DF7798239C7F74A219B6573C116D1CA4AD26CF9021E7034E641BBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731922, "uuid": "2e5224b5-2ffa-4a36-9c63-29d0674c1ff3", "value": "3072:BM/75JG9EPQulRCoPXKlaNCosCU15nr4jrjX0RIn7mTj9bhJYFM4aGgyCzQ1yYKo:BMlJG9idqo/Cosr2fb+cd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766731922, "uuid": "4bf70913-099b-4885-bd80-3c658b65c7ee", "value": 156532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766731922, "uuid": "6da43d39-a5ab-4aab-b8b5-b832636b7cd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731922, "uuid": "fb71d676-f7d2-48d8-b918-3aee67eab18a", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3a1c263-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773371, "uuid": "f6455abd-264a-4d79-9225-1cb0b712b990", "comment": "Malware payload (Mirai)", "value": "d3976992bc3b9ad05218572e92617708", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773371, "uuid": "f21d3e62-48fa-472c-8d52-2eadf93aa90f", "comment": "Malware payload (Mirai)", "value": "6b2b7a39f36b725b0959753444db43269aa1590ae3f5b55d8fff9eda8ec27016", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773371, "uuid": "0f4889ae-a826-4470-aa7f-58683a1c96c7", "comment": "Malware payload (Mirai)", "value": "513255a1d6361f7818e07a5121e1ff8d9c21d913", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773371, "uuid": "a1d1a15f-f50d-49df-bc2f-89c82c9deb3c", "comment": "Malware payload (Mirai)", "value": "cc131a21dcc361cb7d4a3338f61e64524af3a1fac519abc2799744ec2fbe7cf0531e8ba6d8a77fed3aa4662e28959899", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773371, "uuid": "b67c3d47-a6f1-4646-97da-01ec3f19ab67", "value": "T14F63E896F991DB21C6C162BAFE0E519D331307B8E3EE73139E146B24678B46B0E7A405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773371, "uuid": "493b5413-f049-4b41-9ccf-6d7f23c70da2", "value": "1536:Hhn0/jq5iX6w7tXCrZ+8p1pms93EMjiA/LduLepf7DhYZT2bVR:W/m5wZXCrz/J/LduLepf3hST2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773371, "uuid": "e22864a6-6cef-49f7-911f-3e8d14273de6", "value": 70824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773371, "uuid": "14f1c169-10f5-4f2d-9fc4-5bf652344038", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773371, "uuid": "b18461e7-74e6-4b88-ba0e-536f7052ca20", "value": "nabarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61ffaaea-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771865, "uuid": "b37877f6-e0a1-4350-92a4-ffc3b3191c67", "comment": "Malware payload (Mirai)", "value": "234cec05f6a6d28c91d83cc9a11cc7bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771865, "uuid": "722de095-7cbe-4ec8-8222-b9622e81d1ac", "comment": "Malware payload (Mirai)", "value": "6b9ed21d25708d3bef0ea0c5704c1593eb96a30030d8ac7422617a9fcbecaef2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771865, "uuid": "71dd479a-d617-4bb3-b93c-5f2ba1a72bb9", "comment": "Malware payload (Mirai)", "value": "cc9aab6480dddf62b48dc20232cd9c465aec9eb9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771865, "uuid": "59c1e279-d249-4a67-8523-78b768f9a545", "comment": "Malware payload (Mirai)", "value": "0bbff473801d51ef8294dc3d5b50b5a05ab0b7d7a4887ea1a421064a6751848eea5fcb9e9b2fdd1d180d82e638de9973", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771865, "uuid": "760813bb-827f-44ff-99db-bd2aae4dbbd4", "value": "T10DD35B2274391E27C4D0A9BE21B34762B1F26BD921A8C90E7D720E4FFF316506547BB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771865, "uuid": "a175dff6-cb0a-4328-a1ea-5933fab67424", "value": "1536:bHGo+/dXAyVJ7aUSPWVTSqnU+lwlR7qKP3yzp92TDEgEVHKHPt8Y2lM5e6PSkYhd:TGBnJ7sY/6NP3yNGEVHsqY2l8eFoeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771865, "uuid": "234b569e-5906-4c48-83c4-2b8e97756057", "value": 132568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771865, "uuid": "f8faa2ef-4201-4b3b-b647-93b94d00808d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771865, "uuid": "131d4c1b-1863-4425-b09d-675f0eb2d94b", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eca85a26-e22d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766734732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734732, "uuid": "9b7e40e7-e0eb-4c7d-8893-b096c1b2d21f", "comment": "Malware payload", "value": "cfa34aea9531ab5528e83b2ac577db7c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734732, "uuid": "a55797b7-327e-4919-85bc-43fa6ea415f0", "comment": "Malware payload", "value": "6ba9c5c312d160ccf800d382af52348ea66c6bdda44f219dfbae36c44251e9c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734732, "uuid": "7ee9e889-873e-4279-bc0e-248a192bc16b", "comment": "Malware payload", "value": "c9d5c13dcb7d7a312a52d7a7b9c6dcbc1f5287c8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766734732, "uuid": "f57988a9-452e-48e5-a9aa-f1e861583081", "comment": "Malware payload", "value": "b4b11ed13be8e9efc5e7dce62f6c3ed1ed8c7fa61cf1575e67d52bf24a5362f0fafb8e36806888a08da3d84adafeee22", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734732, "uuid": "041bd4ce-0db7-4428-a3e5-35ab0dfb4bfc", "value": "T13DA7232369044DA7C80E1AF49CB65DC8B5DBFF922F1B048333C9560915A9ADEE6C7CE1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734732, "uuid": "7ed8e366-abb7-484f-a452-03c46b403522", "value": "744b8668340c0780ea1865df1a6c1af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734732, "uuid": "7705b4c3-c4df-42f9-9f5b-6cf466138d5d", "value": "786432:8GLI/My2XtNOEtG+z96O+q+8x484g11uCrQNNcHeMiQhQFNnWVk/L2:8jEBOEtNzsO+n8x3nucHeMdQznWVk/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766734732, "uuid": "82fd4102-4ba4-4175-93e8-b9d8a4cc0f34", "value": 44692992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766734732, "uuid": "75323751-4434-444d-bfdf-57a303d5a771", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766734732, "uuid": "b4d96ccf-b6b5-4f75-8795-d3c605c78bda", "value": "Nature.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55fc740d-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733620, "uuid": "bf042450-6281-45f2-88a8-59d3dc658928", "comment": "Malware payload (Mirai)", "value": "4b1ae273fe0844485a04115b725a9973", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733620, "uuid": "edf25b4c-dc97-48d5-8a2a-57404aa0c457", "comment": "Malware payload (Mirai)", "value": "6d2acf6dadd434eba2646ab214b943fc57c5ee6ee6294c71e3e1cecb71b532f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733620, "uuid": "e9df6360-a595-43fa-8f64-5e3f80ae7624", "comment": "Malware payload (Mirai)", "value": "e7cad2bce28f0bde9da38cd8b6c06961563d4986", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733620, "uuid": "d0030692-182e-410f-b578-e4c10186f4c2", "comment": "Malware payload (Mirai)", "value": "68cb0b07a5912adf1d7e45b1ab97121dbb9161dcca91ef229eef344fca605db3985a3f7100414db4aa7b3dde05bbbc3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733620, "uuid": "67f7c139-d582-49cb-afcf-85bd55fa3822", "value": "T162B33A00FA82C4F5DD1B497190ABB63F8B31D62692229E44EFE81F65CB27E425B1735C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733620, "uuid": "96fe5159-855f-45d9-b7ff-50971ea8ff04", "value": "3072:6fNw9muw4tirF+/6pyzQ9qtY98LOIa9/i24j:6fNwFzhl1AJ/Wj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733620, "uuid": "f78a7784-2d9a-4d70-83cb-4912bdbd994d", "value": 117444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733620, "uuid": "a8a7fc9e-59b9-4523-bccf-f66165007072", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733620, "uuid": "32a50072-7786-42bc-bb4d-f20cf2ad838c", "value": "rondo.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eca26eb-e274-11f0-a129-42010a9c0007", "comment": "Malware payload (ConnectWise)", "timestamp": 1766764988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764988, "uuid": "7da3dcc6-216b-4ee7-abd4-9ddb0377683d", "comment": "Malware payload (ConnectWise)", "value": "1283bf67033c1c8312b23e71247b20c5", "object_relation": "md5", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764988, "uuid": "dd40c597-2bcb-48fe-8812-6b64e027f182", "comment": "Malware payload (ConnectWise)", "value": "6d8cd8555a396cfa21f92429db2ad8a957f67df7d6822dc544f5a69e2c5766f5", "object_relation": "sha256", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764988, "uuid": "85de6e8a-536a-4395-8607-0198aa085f19", "comment": "Malware payload (ConnectWise)", "value": "94b60c57ed8b0c5c826d196f99f9d5b27f644b75", "object_relation": "sha1", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766764988, "uuid": "dac10526-b418-43c5-86ab-5322a848be92", "comment": "Malware payload (ConnectWise)", "value": "a861e78aabcca3efec206136de6aec972b472b053c389c6292a97a34cb293db37385a700d71c73efc46a82c19374f5ff", "object_relation": "sha3-384", "Tag": [ { "name": "ConnectWise", "colour": "#0E7BBA", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764988, "uuid": "48038dc5-8e42-48e1-aff4-c61b31c0450c", "value": "T101A6231126E89134F6B31735FE3A56F55A3ABC25DD23C12F1268B91A2A73D808D72373", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764988, "uuid": "21e95a06-a5d6-4abe-9c28-bab402d773c1", "value": "196608:3suCcGaDprmcYMDFsuCcGaDpPsuCcGaDpksuCcGaDp:cuG7hMD2uGpuGcuG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766764988, "uuid": "13c6b337-a3b7-4047-a954-3011520b6e5c", "value": 10059776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766764988, "uuid": "bbd5b6d3-2370-4a71-a02b-f7365e151377", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766764988, "uuid": "f8d4c2e5-4b02-4e5b-9eb3-19c14c5f1dca", "value": "Guest_Invites111.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04e7567e-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710291, "uuid": "679eee01-95d1-4599-9154-4141be675c27", "comment": "Malware payload (Mirai)", "value": "2d86ae69df76d01a1925dab6d6458336", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710291, "uuid": "5fbe199b-a3b0-4055-b8f5-d708776d9133", "comment": "Malware payload (Mirai)", "value": "6f17b345167cc84d5f3e1563adb376803afdda2f0da8ee3b34d23a9a47fccfed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710291, "uuid": "93e13e83-3e53-476e-8bd2-21da068be323", "comment": "Malware payload (Mirai)", "value": "69b3cafb21f4c96fe21bb039af5fd5b600a87212", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710291, "uuid": "e4e9c458-ae4f-46dc-bb26-35a2027d2548", "comment": "Malware payload (Mirai)", "value": "2fb65c641dc3fb50580787860051050e9eba143dd93e1c760d049e2044eda555ee8b5f0a8a2e072753babd8289ac2fd4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710291, "uuid": "cf2793a8-0d54-4fba-a12e-550af1ddcd17", "value": "T145F2F155284235B16B3019339D388A016F9F9F7EA4FCF21C23C622A86BD6D5F1A35C84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710291, "uuid": "f30c2760-d7ba-451b-8f24-b8c752a7d41e", "value": "768:Z1TqulM4ZJzjS3whY6gMhgvvlLPPN49T69vYfl5oRfm6dTMFUcp5d817s3UozV2Y:ZVlM4T9ZMBm+BYIRfmmTMFU47BzV2QJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710291, "uuid": "fbb25ea4-ed06-407e-992d-f1dedee8d242", "value": 37372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710291, "uuid": "dd456630-5fea-4e2b-b2e2-f7d720a06064", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710291, "uuid": "e80782bb-cbdf-4ff1-85fa-65d20ec5f77c", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c93780c-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775587, "uuid": "022c33c9-9792-47a0-8ee0-cc4aa05fc076", "comment": "Malware payload (Mirai)", "value": "35c0fb1c7c226ab2a3e8630955af5918", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775587, "uuid": "b6d692ef-162a-48b1-b339-d4981fcca729", "comment": "Malware payload (Mirai)", "value": "6f772bb77305a057c256b38c529b567e95cb99f178d852deb508fe2c558dc785", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775587, "uuid": "693de0a9-fa84-42a0-a28e-5b8be414f109", "comment": "Malware payload (Mirai)", "value": "23ecb151b635470547c8871dd67594fae0d06cef", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775587, "uuid": "10170ba1-970b-4c91-8db3-d709e3a3a8cf", "comment": "Malware payload (Mirai)", "value": "1a0e91eb9b208b8e0b3fca6cb27d2a109ec794456818aaeadb708a6bb3d4c2896cfa133b0632987df1b232ba62a28653", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775587, "uuid": "1e7c017f-5710-4ffe-8aae-8603dca794b1", "value": "T15CB3AE35D079BEC4D0A14534B8B4EE711BA2E2C442462EBB39E684750487EA4FE1DFF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775587, "uuid": "1261551f-339c-471f-b787-d45c3f39b80f", "value": "1536:EspS9Z5X6VFhLUwtsOsZV/xXfuKs1575x94KYq9OTxcKxTaIF9aB/CDPZLCeDt:EpjZYcnO0nX415FrbsxDxpaB/WVFDt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775587, "uuid": "2aa17a35-d9d9-4633-b098-a142ba4e7a22", "value": 116164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775587, "uuid": "a533865b-cbc3-416d-8b0a-9f5c78ce90fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775587, "uuid": "b1fd8a66-9f2b-4188-87a3-1d8253749466", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e6527d6-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778650, "uuid": "c14ec794-267a-4f8c-83ce-916b4e62c36d", "comment": "Malware payload (Mirai)", "value": "8c2fdc2a1f9c770407f83b03cae593cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778650, "uuid": "26e6eea4-5f02-4b96-81b3-1e0b34afdc25", "comment": "Malware payload (Mirai)", "value": "6f7ab0ebc8930e99e8761bd76f94d22957e2f10f7a585ab4d41a782a8ac0a7aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778650, "uuid": "9c5079c5-0b67-4661-a5bb-3a83935e5176", "comment": "Malware payload (Mirai)", "value": "c5fc2aa342de1632427bb8351e9f43bda6fe69fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778650, "uuid": "e2506711-d23f-4d25-84e0-844993e88a32", "comment": "Malware payload (Mirai)", "value": "13e61cc1e55edf9406b3fcb21b0cb05d7dc3ce02fb040d28ca0d7a0e38255922816719e0df65c5963295d119e3c4b161", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778650, "uuid": "1de6500e-189b-4461-8056-d5301ecf86cf", "value": "T1CED31855BC828A22C9D503BEF92D018E332267E8E3DE7216DD111F21778B91F0DB7A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778650, "uuid": "bfe3a80f-a864-478a-907c-a0c271f1354b", "value": "3072:7eXWw5yRHYhuPpufatvaqvOkE2FtH07sd:C4RHYhApufiva0q2HMsd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778650, "uuid": "8a8fecc7-72a4-4097-8b22-37fae1f42157", "value": 140740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778650, "uuid": "25a601a6-6b03-477a-9b72-938fa419ffc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778650, "uuid": "b047123f-1fc5-4344-a926-4187de24e194", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "473d458e-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772679, "uuid": "f7daa7da-f60f-4efd-9a8b-4fe76c233e01", "comment": "Malware payload (Mirai)", "value": "ccc0b0468a6548c132d5c1bde24f4ab3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772679, "uuid": "b0cfa293-773f-4502-b3f3-ebd504bfcca6", "comment": "Malware payload (Mirai)", "value": "6fa578dd0444652544c3ac3602d4b86f3aa82cdc4a13dec54f7c2b688e4dd3b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772679, "uuid": "d3cc49f0-bc41-4b36-9616-11c376d6183a", "comment": "Malware payload (Mirai)", "value": "71d8abdf534b15be82af53924ca73a19e0cdeb77", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772679, "uuid": "a8a0ecda-1c43-4149-b6ee-8608d8b8b86b", "comment": "Malware payload (Mirai)", "value": "471181642514c172ebefbfec6b7dcbdd43b758209c7a29efe46576028dd985173b8862403a3369f8ea01f06943d72aae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772679, "uuid": "9ee0bde2-76a1-4116-be3e-0225a7526126", "value": "T1F643E985F991CA16C6D4667BFF4F82DC331653A8E1EE73039918AB55768B82B0E3F440", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772679, "uuid": "283fb6be-9cfa-4095-b577-15270f53eb93", "value": "768:ZEDWLIleIx76j36MOwKAxsrjTaVH9rTXzTNUJBGWy/h5U9W4YafYP0iFZRT2bVR:SDW+/xdAxsrjeDvSJoxLzF0aRT2bVR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772679, "uuid": "4a342a9c-22af-4d03-854a-bccdd6a0173c", "value": 59168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772679, "uuid": "b21b6b0f-adfc-4e5f-b698-38cc43152073", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772679, "uuid": "fd4e11bb-6cc1-493e-a222-29b071e8355b", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04733fca-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729188, "uuid": "f4bf9715-864a-4f50-be17-ec3d5f2d413b", "comment": "Malware payload (Mirai)", "value": "a1db7fc5f56204aae225a29841c8b281", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729188, "uuid": "457d3549-6a27-4110-9945-19dddb65ae26", "comment": "Malware payload (Mirai)", "value": "6fe54517f58511db6ee8574dffbc65cc7a719c70d54e24d5db9d350675978350", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729188, "uuid": "dbc44a86-a3b2-49b3-b19d-743f1486e3de", "comment": "Malware payload (Mirai)", "value": "a38e8ffa19dc132493eee63948a45a277f951ed6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729188, "uuid": "9a0fa21e-beb4-4265-a788-ac883ccb4d44", "comment": "Malware payload (Mirai)", "value": "88757bc620df924bf8808f07fc0b3963ddce99ecd7174494eceaaccf012c3da2932c85750d214503ae806c981f36444b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729188, "uuid": "69f60b6f-54a5-4483-97d2-b0938c9516cd", "value": "T14AF35030FA0663B1C8721A38A7997E566E7B14559FDB16312D1F233DEE628508B30F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729188, "uuid": "cd171021-12c8-4d8b-aa0b-98d813fcbb7b", "value": "3072:2L+/iiiiiiidR+TxkQnjnRkwnKsNQXp2lLFGTq4S8UXc:2KmkjRksw2BF7BtM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729188, "uuid": "764f97cc-c0b8-44ad-b174-167168ba8c39", "value": 168600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729188, "uuid": "9c3b40e2-5283-4b1e-a1f6-18935181781a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729188, "uuid": "6db4fa98-462e-422a-a975-1879c12c581c", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aea799e4-e1f2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709287, "uuid": "4ada69f5-d460-4e7e-804f-2fbda77a89cf", "comment": "Malware payload (Mirai)", "value": "60858c2aeb12177f8cb3f02bb6247db9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709287, "uuid": "446e36e2-78b8-4f61-a26f-1ff841393131", "comment": "Malware payload (Mirai)", "value": "7013c8f23270bf95c167b11d47d133fcc11798be3825f01b8d37dac12d699ac0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709287, "uuid": "c0cef4e3-7698-481d-a24f-8305d0f5de38", "comment": "Malware payload (Mirai)", "value": "384299b2ba696d5844075b2395755eba6ba7e5a6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709287, "uuid": "cb1b46ef-dff8-4673-8135-ba0cf5cfce3b", "comment": "Malware payload (Mirai)", "value": "a7655acf281b2504be7c59db539b160aa410067a3c9aa6c841166b5583c395346282dd3069f51e711d20adfa8b31d2ff", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709287, "uuid": "3bdf433b-611d-4036-9d4f-3c3b8c83ecfe", "value": "T1E6639D76C86E9E54C45C5270A8B1EB351B83B40093921EF75E99CAB68003DECF68D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709287, "uuid": "c1b90a48-73b1-4247-a383-07a1381184bf", "value": "1536:HaYSJuemBNkEhqqg4JlXAAU7b4tACmj6MDxTAbVR:HrekNdIOJi7b4tAnGMlTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709287, "uuid": "152a1222-da14-468a-801d-e12dc6df0ec3", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709287, "uuid": "ae92ca63-6eed-411a-a577-af9cc956e5ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709287, "uuid": "696662ef-7168-4347-926c-845584a234eb", "value": "splsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02870274-e2af-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766790173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790173, "uuid": "dc38bc3d-cb77-4c41-a496-277d9c9c5d2f", "comment": "Malware payload (Mirai)", "value": "8edd4c2f27fb7eefb4d76d0ec0f1d576", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790173, "uuid": "38148af1-d1cc-4fd3-8206-c92639041b29", "comment": "Malware payload (Mirai)", "value": "7098b8f2165e10af7bb21d32d74af96248dff086e5ab16e8efd4c7b0cbd11494", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790173, "uuid": "0ce3013e-1e4d-4b96-b37a-933be60134f2", "comment": "Malware payload (Mirai)", "value": "a5e4dc23852487df27cc16d9c23132903c975a11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790173, "uuid": "f18db05a-66a8-440e-9b7d-537c69cbbf45", "comment": "Malware payload (Mirai)", "value": "244f58a223301d2c94a060398d820a5e9c0a575b5906ed6d6d4c1766a8047d8347b8fa76c0bed1386bddbe799b8f16bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790173, "uuid": "532a205a-c6d8-4eb5-aebc-fec40bd03c6e", "value": "T1F9B318C56440CDBEF54B9A76C9232F05F854E7606F830F37B9A5FC92AE12029787AD42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790173, "uuid": "41e10090-0b41-47a2-a556-f0989300ed74", "value": "3072:K5U+JEEpSG7cOcsnUUb7BqGig6it5q1xCMKzvH:a2E8i9Figp61xCTzvH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766790173, "uuid": "64dd47ff-ea35-464d-8e0f-60a2e4ef3599", "value": 112068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766790173, "uuid": "7979f675-e44d-45d5-a4d3-6ae92e4c041e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790173, "uuid": "eaa62cb8-7004-4281-8e89-b58a9b6288e1", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64a888d7-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747388, "uuid": "600675e0-bd95-47ff-86a4-5f6bac1bf74b", "comment": "Malware payload", "value": "2586505cda98c25f33e759c420133068", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747388, "uuid": "7519910a-d000-45bf-a791-31f6c5e41df5", "comment": "Malware payload", "value": "70aa2001b1e47a84aa31d82585283c5138fd7e62e55a2bc17cbcf90abbdaeaca", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747388, "uuid": "dcf95c92-a127-4afa-8afd-1c59ff52bbe0", "comment": "Malware payload", "value": "9fec6f8c918170b1a2593df3e482f9baa065b5f4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747388, "uuid": "472816d6-5fa1-44e0-9071-b28e8c90b1a3", "comment": "Malware payload", "value": "462bf434bcc1c4d900df4371a37673160edd6ec3797a0b7e6d004d4a09e7b393aa573b9cf51516965e1088f2901116e9", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747388, "uuid": "864923af-0f6e-417d-a717-c0f31736ce12", "value": "T171633B8A8F67B40F20287EF2FF15218A953EFA05384BD714FA1BA490F2F4FB05252556", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747388, "uuid": "00086382-c9e3-4523-a1c5-a3dfe5400f08", "value": "768:I8w/h62/jWs6oS+xISN0v1Ls6lFfKtghHShUTxdkfScBYrwz2y8kTAlGB:I9l/AoSSMC6lFStghHShUVusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747388, "uuid": "a99b958a-096e-4100-8a21-c59a9195e49e", "value": 71459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747388, "uuid": "6a2b163d-91c7-4284-b0ef-f3ace88d945d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747388, "uuid": "112c9a40-fd84-42c3-945e-727565be9d76", "value": "invoice-1645080830.pdf (42).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8876d6d4-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777084, "uuid": "34c5587e-bcd8-415e-9054-fe3399cd9850", "comment": "Malware payload (Mirai)", "value": "15de19cdda4dd1f2b53f51cb8972e73b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777084, "uuid": "f565f01d-358f-4810-b9b5-9d39e146840d", "comment": "Malware payload (Mirai)", "value": "70b614bad64d40f9711998442dfe19e9ad4ab06547b101c39fd027bb2d44aefd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777084, "uuid": "160f8036-98f5-4ba0-8305-e96b32738191", "comment": "Malware payload (Mirai)", "value": "578ac453fe314fdca27492ce61e7758d17ff3ccd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777084, "uuid": "db98737a-c1f3-462c-b63b-30d39e86d305", "comment": "Malware payload (Mirai)", "value": "4fab5f04af5b86d27fa852a9dd24630f21ca0272f8f109bae67c6e96faa8ca88a845e39ee6595452ab17afd2bdb80dd6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777084, "uuid": "5abf772c-5c48-4f9f-a96c-95d2c4b44b3c", "value": "T128B3E74A7B650FFBD85FCD374AB85B45258D960722E83B7A3934D818F24B24F09E3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777084, "uuid": "6d590ca0-a0f6-4b8a-97b5-e384622c1c32", "value": "1536:xwqw4NhchRKdZEdBF9tn1qwbmH8fJoLjFFWZxmOz+tYIB9XTcT2bVRf:xilhkdZgLqOVFGjXYT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777084, "uuid": "d7f4b200-a45b-40d6-98c8-091cf9b42e87", "value": 109420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777084, "uuid": "6ff249d4-3485-4fbd-b93e-3fb563d2a5f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777084, "uuid": "6f30e431-cb21-4275-94f3-04a135168266", "value": "splmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c955f59-e255-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766751643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751643, "uuid": "d60dcf65-f299-4162-add4-8c80120bb008", "comment": "Malware payload (Mirai)", "value": "603c74704806a05e10b94eff370315c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751643, "uuid": "763cdf5d-7965-4385-b588-0dfeec71b5c3", "comment": "Malware payload (Mirai)", "value": "7106a745b877b1e3865d410b1d6e91acf9299e1e59a49470528db0719614f633", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751643, "uuid": "bf9e042d-ba99-4804-b066-e9d1b07c25af", "comment": "Malware payload (Mirai)", "value": "d9252dbe9723224b7b8afdb150f3f103e9088744", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751643, "uuid": "90f35d78-b939-461f-81d3-30873c74b166", "comment": "Malware payload (Mirai)", "value": "ce5c11c59940bd650216fe73c5b279434de55c8fb1cc761e266ae2b31b0dff92eb76e221ef8b0c0ac73d121a122a5ab9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751643, "uuid": "51278ec1-1dd9-4631-92c4-ff6c17bda077", "value": "T15E53029F59542987E60E8CB89A7D99E0F2C6149078C3973381B0DD8B4687C5D3DE379C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751643, "uuid": "a9216ebd-378a-4b64-8666-f6d384f79f02", "value": "1536:nKlGATPGEQo/Y5EerBSetktX9TuB4rh2ZdBWc/:CGATvderBrtGXAB4t2ZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751643, "uuid": "f7d8fbee-969f-43b4-9f70-22d839cf526f", "value": 65760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751643, "uuid": "f64ef963-a4b3-493a-93bd-ff3363134c2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751643, "uuid": "72804d9e-236e-4d63-acb1-d78e674acf4c", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1599e63-e200-11f0-a129-42010a9c0007", "comment": "Malware payload (BlackNET)", "timestamp": 1766715305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766715305, "uuid": "cb6469bd-f468-4255-8b23-df774c7b96ae", "comment": "Malware payload (BlackNET)", "value": "ab589067a6a2c25307f25f2e3ce8cf71", "object_relation": "md5", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766715305, "uuid": "9ad6744e-ab67-40c8-b022-dc3a8752bc29", "comment": "Malware payload (BlackNET)", "value": "7212509bf08daa26e936de56ddd4d513dc5f18660cd303cf3e05dbb91fdade72", "object_relation": "sha256", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766715305, "uuid": "2a77b975-4c2b-47d9-a6b4-a5d2544b6137", "comment": "Malware payload (BlackNET)", "value": "a19549b19b964e48f5886ab71f66ccc5f71532b1", "object_relation": "sha1", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766715305, "uuid": "b6f82d35-b9cd-485c-9743-841f8a9e4cfa", "comment": "Malware payload (BlackNET)", "value": "9f0d27a3debdf09e1d9e45ec64b7d7f8e0ca50d77fea79ea730ac3a8e3d9733558278a5124f1ba5d3fa493abe3be1daa", "object_relation": "sha3-384", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766715305, "uuid": "e78797df-1cf5-4151-965b-6261e0771efc", "value": "T1ECC3E51277EC5C69E0BDDBB4AB724680C7B5FC164A23DA6C4CC160AD16F6742B901BE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766715305, "uuid": "14a06742-4cfc-46dc-abae-1ba95d2ae589", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766715305, "uuid": "48f4410b-44d6-4ec2-a982-f640cc0fd8d1", "value": "3072:FYRAs27aOhVf5w/oV90RKyfKW63beFEKyhFfau:SmZuMKRPfKWybi5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766715305, "uuid": "512ac52a-d64c-4073-902e-991827a80541", "value": 119296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766715305, "uuid": "c9fadcb4-f112-4a6b-833a-a4f5f9f70e9c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766715305, "uuid": "152ae7b2-9c16-4c34-bdbe-c11a23f6ba4a", "value": "AB589067A6A2C25307F25F2E3CE8CF71.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c791d31-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767454, "uuid": "a79771d0-0081-437e-9490-6df22a690f63", "comment": "Malware payload (Mirai)", "value": "a981b4d0a10a6dcf99225ee99a5fe5cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767454, "uuid": "f884a814-29bd-4188-8484-d4020f4ef796", "comment": "Malware payload (Mirai)", "value": "72afdb366a0092af278eb4d0b39b8be53adde9e7e68ed7f3e7e130e7f656f13e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767454, "uuid": "7dd33903-b3d1-4807-9804-4e3a681d8af7", "comment": "Malware payload (Mirai)", "value": "dafcab47a1c6de24474b869f8dfb926c479338da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767454, "uuid": "8407be18-6f7b-4866-af4c-ceb51816b8c3", "comment": "Malware payload (Mirai)", "value": "8ab333cc1143ddfc0dc6684cf64dfd0407d98d0764b83016dc43402e6aa42159b044d41b8c4243612e5c481825aba378", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767454, "uuid": "4b6aabd6-65e0-455e-897e-50a58f6f4657", "value": "T15BE2E0AFD2C9653AE18E03F5431DB86AE9BF54E62E5A4240D3015934AF773B3D7A0220", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767454, "uuid": "c1ab97a6-52a3-4ea6-8b1a-53aff1661f4c", "value": "768:SJhFGtH+pyWnPuP5zgSg13Cl+o4BDuYqVsBatxIkKKTtoAGDO1:SJhFyH+pKJ23CK1aQkLTmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767454, "uuid": "79043b22-9a86-45dd-b44f-b1b1862485b3", "value": 32636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767454, "uuid": "1614d937-494c-4f10-9d15-2eb8bc00152c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767454, "uuid": "340fe9c1-9a6a-409d-a0c4-8e22c1443077", "value": "px86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09d24f81-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779019, "uuid": "52190275-0d6e-4d6a-a795-c7ba31b37bd4", "comment": "Malware payload (Mirai)", "value": "e854af3aa7ead7a4c52c8bc7c2029df0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779019, "uuid": "59de8e9b-3688-4049-8bc9-a829da34ca76", "comment": "Malware payload (Mirai)", "value": "73f446612e94da46a191aadb967f6ca32667d644f728e6b3ce29aa288d7b3aaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779019, "uuid": "226d21fc-6b4f-4679-80a0-eb069ab1a63b", "comment": "Malware payload (Mirai)", "value": "7609e3550013964cbbb300348c0000a9d6c26a57", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779019, "uuid": "47dd360f-f384-4b72-a608-6a88841bde7a", "comment": "Malware payload (Mirai)", "value": "5e4966e1873866b8697babf6658020f87a1d8bcbf3b7d84475f3ae9de7029a291dcef9a44733434f697cf0d1c1463787", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779019, "uuid": "b9e1cfc9-9abe-44bb-94a6-09fcc97d48f5", "value": "T13E333902957C2A2BC4E0A77701B74363E2F62B9941C4E64FBD660D0FEE593501ABB6F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779019, "uuid": "e928c0d9-3849-428b-89b5-526be3928be9", "value": "1536:1+jsLiKiFReixh3lCOGUC4t2qqG2mvxOnqKVJ:1USizod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779019, "uuid": "2b3f5853-27a0-4d2c-a8ff-cdce844d638e", "value": 53700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779019, "uuid": "dffdd19f-71ef-4716-afce-138d41cb4492", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779019, "uuid": "6cce7f95-42ec-47ae-8b2a-f36dca28e461", "value": "titanjr.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8208229c-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792964, "uuid": "a4eb905d-b12d-4ea7-9324-9063b8a52f92", "comment": "Malware payload (Mirai)", "value": "4fc0ffee04169daa4fdb590f8172b71b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792964, "uuid": "0cff826c-93a3-42b3-a18f-e70fd608c241", "comment": "Malware payload (Mirai)", "value": "7401a8e8fcc90e6f09d8dee28b4802667d40827902d8c331c2ef93c7771b14b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792964, "uuid": "8b48d2ed-9b76-441f-a20f-e0426082f963", "comment": "Malware payload (Mirai)", "value": "88b0bafbe7153f6a2f00d38b321e763eb63cfe6a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792964, "uuid": "b079b114-8b42-435a-87fd-a464a46c12e1", "comment": "Malware payload (Mirai)", "value": "d3b7440de0df6b3a90cbcdbeb9c9166983d58dbcc8c566f0af6c3255a55c2d530af0803a2211cb319dcce4e5e49652ac", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792964, "uuid": "ea52ae90-2741-4f93-91eb-619652b805b1", "value": "T194734CCAE400DDBDFD4FE67B84670E05B914B3818A831F2BA6E6FD536E721944815EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792964, "uuid": "50545e48-f52e-41e9-b6aa-9bd9a63a6cd7", "value": "1536:Mv+lb1MelAEsP9YZsDWjKCC8I8u4bhFLxHVdDf8K4mkqTPgH:Mv+l1lAEP6DWeCrbbxHDDf8KxeH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792964, "uuid": "c4212509-461d-4ee0-90dc-6cee9c9e0ede", "value": 79268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792964, "uuid": "99119863-a091-4020-9cf7-6aa38dbbc47a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792964, "uuid": "a9a72f1e-0d64-48f0-8e37-be1a0e1a00d7", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce0f5e5-e2ab-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766788500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788500, "uuid": "c279305f-fbac-4dd3-aa1a-757c428c88da", "comment": "Malware payload", "value": "6b167324e5a95f7f4a927d95a12cb78f", "object_relation": "md5", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788500, "uuid": "5eba0e12-95e4-4af1-be7b-9fce18d46907", "comment": "Malware payload", "value": "743eba65cd7a6b79082cdf7af044eed9a33a1c70e0153e186f6d9d50e632c490", "object_relation": "sha256", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788500, "uuid": "6b78c50a-ed77-452f-8d22-6ac58917104d", "comment": "Malware payload", "value": "42a18bc2b49034ad4374e69dd4bb576e0f7a6b19", "object_relation": "sha1", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788500, "uuid": "f2117e11-cac0-4f10-a5b9-06d773656e64", "comment": "Malware payload", "value": "0271b7ceacf417a688492e5ce73c46b6d7ae451d9e82a0e7912ef4083fcebc0a0d93212a8bc1ac40ef2f74cbaa286c86", "object_relation": "sha3-384", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788500, "uuid": "49162414-8f63-4d7f-a5be-3516bcda7be3", "value": "T1CE3633D41BF1BCD5E498B4B90D579E7B6A42857A18A4209EF4B292D30F02AC5DE3F42C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788500, "uuid": "67090690-eb6c-4bca-9868-5fede83648c4", "value": "a56f115ee5ef2625bd949acaeec66b76", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788500, "uuid": "988fa6e5-ec93-49a1-a5c7-a6b9eed7884f", "value": "98304:kDhLFI+VaVfdSkmQCHNZof/foJDtkCzPbaNOJ1EeSWyV8rQI33A634:kDhLFI+V65mQCtGXfoJZkLZmQilI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788500, "uuid": "1a09272d-b0ae-4030-9d5c-c9b467b7e84a", "value": 4895760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788500, "uuid": "1a840b57-fb5c-4fd3-a6b7-4e39805b0019", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788500, "uuid": "98d6673e-7b68-4d2d-877a-4ff11526c549", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53330046-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730179, "uuid": "a0eadb26-0619-49ce-9270-b2c9edff42bb", "comment": "Malware payload (Mirai)", "value": "23a7cce8accb61d9b5a9c3c8af648f84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730179, "uuid": "d9fa729e-1fb9-43c6-960b-330ef2136e96", "comment": "Malware payload (Mirai)", "value": "744704c65299ab114c1394aa7a91e84d60764861048ee4e0149f212a6e410111", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730179, "uuid": "7cba3a2a-41a8-4e5b-a53d-5d6bee1de1b2", "comment": "Malware payload (Mirai)", "value": "f837aa9bda4369943078b9bc919ffb846ef7cc25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730179, "uuid": "b1cd9ec8-c794-40ba-ad2e-e33671888c55", "comment": "Malware payload (Mirai)", "value": "bf389e50a033906fd7c537bed7d939df04a0f24c3e2716ecdd8ff157ac756d2bd545b167e420addb4c723582743e3147", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730179, "uuid": "00354441-6d16-40c0-b22e-d63179a0c5ac", "value": "T1EF13025034EC8762C0C737F7A4FD078772E7AF814452423D4BAAC55A22D6EBAD7AC690", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730179, "uuid": "574112e3-a192-4398-bad9-27ee7d78e8de", "value": "768:ujAq0i63UVW4OPvdg9oX5Jhn8tS4gBIsNWO3B5RfOhj3/MHumWZnqMJx+/2aJ/xv:ujG3Uk4OPC9oJv86BjNjbVIjPMHijCVF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730179, "uuid": "20b93bc2-4d94-461b-ab2e-6f226ebc2c1b", "value": 45540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730179, "uuid": "2fd6909a-34ea-499a-8199-5803ad6d1aed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730179, "uuid": "049d99e3-7a39-4845-abbc-7cd50810da33", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9536ab6-e29d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766782722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782722, "uuid": "26bfb2c8-0632-446d-a972-41e755e72f42", "comment": "Malware payload (Mirai)", "value": "5dc8753cee35fe05960ed84d07763b94", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782722, "uuid": "f364a263-6a15-4abf-a019-67b0fe44c27b", "comment": "Malware payload (Mirai)", "value": "745eca93f44d61434eb86b63ce2d63411d5eca8c82ab191b9873eefa42e557ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782722, "uuid": "ff331f9e-851b-4941-a2fe-506aa58ed396", "comment": "Malware payload (Mirai)", "value": "f7c4b3cf05ca510ee9c65c120d9676260d499c04", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782722, "uuid": "05b013c9-53a6-438e-9494-fb0ce3492ccb", "comment": "Malware payload (Mirai)", "value": "1e6515ba897bb72c3acb29bca38396ccc12d20c73d44bb98bd28690f82dafaf0b834d180521186763e017a2091217fd9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782722, "uuid": "2480da6e-cde5-4c53-869c-462ef79d9735", "value": "T1B763C516BB650FBBD89BCC3B09A9270439CCA61B21F97B353934D818B54B11F59E38B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782722, "uuid": "20a0a97a-9e4c-48cf-bbe4-6de1e10eafc5", "value": "1536:uYreNJMc0zSiYauP36SQTwWBPrqGl6BT:uakJMTv6OxkT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782722, "uuid": "14ed5da9-e4dd-460a-b5bf-6ad3d5297b82", "value": 68240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782722, "uuid": "fcc8b92f-c238-47d1-8fa4-8734b89b3ab7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782722, "uuid": "5c6ff952-5ea5-4b07-932e-473ea783cc96", "value": "zermpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a491044-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771315, "uuid": "514842a8-c45a-4428-bdb3-dcc716e9ec8f", "comment": "Malware payload (Mirai)", "value": "6d054b2fe99469e00e6255020e6eae2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771315, "uuid": "6266cc28-2e13-4ae7-9276-a83c76119a19", "comment": "Malware payload (Mirai)", "value": "74d3eac28d0ed60a6d4146ec892303e9ea6501c64f5255a9a0a61802b3f07841", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771315, "uuid": "1e768180-0082-4cf1-bec7-1586028ef70b", "comment": "Malware payload (Mirai)", "value": "ac8a02a351f6c515cde0d06cda6cd56b9778b082", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771315, "uuid": "c1bd8b84-8e09-4b19-a783-14bc930a299d", "comment": "Malware payload (Mirai)", "value": "0d650b5be92fc7f63bf224a85f20547951e341d256eda5d18c3b9c1634d2513c832868b82f01d9ff2834f2f54ad2fdb9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771315, "uuid": "d2e4edbf-32d8-4df9-82b5-ae6ef7fb94e3", "value": "T1D3A3D81A6E159F7DF768C23587B78E21A75833D23BF0C645E16CE9005E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771315, "uuid": "1e0b8152-a7ae-4d48-a09a-d5766f63c0f9", "value": "1536:npJnlip+Q4kSInGiP923rKQY/jWt1giK8yKm0yKKyGq/skI3sc+NhOoBD+6T2bVO:nfls+6lP927u/jWt1safc0gKD+6T2U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771315, "uuid": "9540a731-c1a5-485f-ad52-a7ce0d77821b", "value": 105324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771315, "uuid": "fe8c9e71-afa7-4921-bcbf-0c47c7a0b965", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771315, "uuid": "c64de378-3917-4824-a304-b6037c2b84b5", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0514815-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766777661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777661, "uuid": "cea8b275-8e1e-40f0-8ae2-9fa4cfb5c66d", "comment": "Malware payload (AsyncRAT)", "value": "7530eb3e57eb5f9646af5430380fb442", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777661, "uuid": "d41bec49-6064-4e2a-a728-8c35e862d56b", "comment": "Malware payload (AsyncRAT)", "value": "750c891fc272de6bf2f3d12d81fe02903528e3eea35e75cc3196fe938b4d4bd4", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777661, "uuid": "66f626e8-b32c-4d52-b2a7-f92b24b82c99", "comment": "Malware payload (AsyncRAT)", "value": "caeec25430cdb6981766ce600b0ae7d0406440a1", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777661, "uuid": "fc58ee0d-a4f0-4ba9-aed2-a463e9c5c51a", "comment": "Malware payload (AsyncRAT)", "value": "d0f76a2bca6556f218fe29fdc7e4210364b37aab8545863103cc9102b5a8cada6c8e3aa9026bb487141d8be0e8c4bfce", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777661, "uuid": "4beacd05-f9ad-4db4-98e0-74386d27a6e1", "value": "T119232B003BE9812BF2BE5F78ADF22145867AF1636603D64D1CC4419B5723FC68A526FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777661, "uuid": "56a38a7f-5ccd-4a42-8925-ab77f78e384b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777661, "uuid": "aa75ed2d-c1b2-4f13-8a56-868c1320021c", "value": "768:iu98dTsw6PpWUBRxTmo2qt+b7D8PIewjbxgX3i+Hj0VUBDZ7y:iu98dTs932/nNe4b+XS+Hj00d7y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777661, "uuid": "d7de34e7-46f8-45e5-8b12-8ec19c2b76f4", "value": 47104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777661, "uuid": "e8a018aa-2147-4e39-bdb2-ea55d8a520e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777661, "uuid": "af09894b-2d75-4074-b700-3c804c1ee7dc", "value": "Google Safe Browsing.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c946bff6-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707614, "uuid": "52173928-a233-4bd6-b207-2b9fc00823cb", "comment": "Malware payload (Mirai)", "value": "0f869f0ca5ec242b06ef2801c8130766", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707614, "uuid": "90d1032d-3baa-44ab-93c0-03a05b060b50", "comment": "Malware payload (Mirai)", "value": "75ccfeefb42286a8710685b3d41bcc38d280f9f7fcf0bf66e76a259f72ce6c3c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707614, "uuid": "356ac964-ed91-42b8-a013-4a6331e1b8d5", "comment": "Malware payload (Mirai)", "value": "ead36151105e530a17f49e3869dd2940045a682e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707614, "uuid": "a7c742aa-d338-4f3a-ab01-199a9df13cd5", "comment": "Malware payload (Mirai)", "value": "ca8f434baab93d1486f7361449b64ef812612065dac8783676e0509ea27e5b9dc1b86ff40abdc13d1aee5e07dd22faed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707614, "uuid": "82c5812a-c088-41a2-8f2b-9be7dcbaac5e", "value": "T1C5E2E161F0289EA0DABA7AF1CCE5E1812BF36F4DADD50AD682A27C011C71B6D1541BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707614, "uuid": "79c6d82e-4b02-4ed5-a680-18eb79e56575", "value": "768:QRRzRH1CSD6jK4RrdrDjrhrEuc5ngNMRDx4uVcqgw02NWX/:Q3DMVNVE5cS94u+qgw06WX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707614, "uuid": "46e3ecc1-aef5-4145-a384-62da2a6009e0", "value": 31224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707614, "uuid": "73f58d8b-8869-4305-b439-bd007198b260", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707614, "uuid": "2571c293-3dfc-4257-9854-4184fae10a59", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de5079c1-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747163, "uuid": "cd33dd80-cd54-4cde-8d80-5b4ed324921f", "comment": "Malware payload", "value": "05dc82b7d9d44c1f4730fbaf6a0a8eb4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747163, "uuid": "c583f2d1-9728-4e8d-b9af-6a6b5d344b49", "comment": "Malware payload", "value": "760a0a4edf87e2a89ed11b4bb17be1c25e8a5fde749d1ebaf9de7ed49bc89c79", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747163, "uuid": "bdbaf466-a377-47f3-bc05-5937185b33ab", "comment": "Malware payload", "value": "845ba9c5e4142d8f4859c9b0baac125839707f01", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747163, "uuid": "47071a92-ef38-4d94-86b9-b5b2ba1bbeac", "comment": "Malware payload", "value": "3337dd5695d595d57776f08f4c92307f00873de300ba959a6f166c36269ae65b91ced960ca10bbd69587576ae63dbf8a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747163, "uuid": "ecf24975-fd71-4b04-9127-a2dc74d1c556", "value": "T12F63E9865C924F2CE545236CD36A319AF33D3C0B94A3C5607AA56DE028B935D9F0DBF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747163, "uuid": "e4ffc894-eaa4-4577-bac5-9f4b61e06c16", "value": "768:I8w/h62/jWs6oS+xISN0vOr11zsdkfScBYrwz2y8kTAlGB:I9l/AoSSM4wusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747163, "uuid": "71ba655a-d8c8-456a-a804-f787386305eb", "value": 72519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747163, "uuid": "108f7648-df05-4879-b37d-b734b9bcb714", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747163, "uuid": "27bb32c2-a99f-4125-bbe3-80f516fa0a29", "value": "invoice-1645080830.pdf (84).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b242041-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779021, "uuid": "d194413d-e895-4fe9-bdf1-a7413da5ec96", "comment": "Malware payload (Mirai)", "value": "c991ac4a2e3e14e878650e1cd035aa15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779021, "uuid": "ee7cd976-91a0-4c68-95a7-c15f3baa7934", "comment": "Malware payload (Mirai)", "value": "767a60fe6a951c0f3524d79e23639c7c4dd6495a77123306069f97e13ea92dee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779021, "uuid": "95e0be68-d478-4a7e-bf35-2b70e98e6e27", "comment": "Malware payload (Mirai)", "value": "1884f41b0d1103eede743993d8acf9480107af98", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779021, "uuid": "e04a76fb-806d-4a5e-a80e-a1f45bbbc4ec", "comment": "Malware payload (Mirai)", "value": "e098e7e35c21c3594c9432b7d6b765ddf5ad041c1c469be791c6ecf6e9c9d29915b6d21186241a9053982564a7a5e53e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779021, "uuid": "1b93546d-77de-4ba9-9851-a9176c12303b", "value": "T176938E85FB83E0F0DD0609B011ABF7798631DD362024DD6BEB98FE76AD326129116B5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779021, "uuid": "486e83dc-5046-4769-b750-fa621738a261", "value": "1536:JUj89KwKFRAXmD1DDCczo7Js4z8GGsYqop8c3vUX31QUHL6kjyDr:w4KFRA2JDDCczo7Js4Irqui3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779021, "uuid": "ecff132f-86cd-48d3-bb46-6089ad590fec", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779021, "uuid": "c33b8815-3ed3-4c20-9afe-94f0d5d97862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779021, "uuid": "1eaab846-ec84-4213-b478-0f930533a1da", "value": "titanjr.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90306db9-e253-11f0-a129-42010a9c0007", "comment": "Malware payload (RondoDox)", "timestamp": 1766750897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750897, "uuid": "5edf134a-feff-43fa-8712-40cbe0089dd9", "comment": "Malware payload (RondoDox)", "value": "18bf264e636172a4eed947bfd33b7faa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750897, "uuid": "416b7d6b-dc06-42a1-aadb-ba0e4ccf41e7", "comment": "Malware payload (RondoDox)", "value": "76817011188dc0939fc026be83fdbf48be41ea362a8c9146195761cd71ab57d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750897, "uuid": "51a7fa96-3ea1-420b-a0d7-89dde0fae8cd", "comment": "Malware payload (RondoDox)", "value": "d977e6a2010976964023041eb55bb6ce18fe95c0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750897, "uuid": "44c413c6-d23a-4c9d-8879-fcc4ea87cb92", "comment": "Malware payload (RondoDox)", "value": "5d6e44f7cf6a86516c961aaec079727ecccc4acff6c81d6cb40e327e7527b556b44085b9610857e44431e4ae10ad46af", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750897, "uuid": "93c1e438-a31f-41cd-a168-2800a8ebfdd8", "value": "T1E6C32B66EC819A51C9D716BBFA1E958D332313BCD3EF32179E284F24278A42B0D7B405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750897, "uuid": "138f357e-3b19-49d6-b92e-26fbe9169b40", "value": "3072:iuYYIYdKGyg243xl7RlnVac4m+JTPir1ekAj:7YYIYdKGyg24Bl7DVaeMPi5eZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766750897, "uuid": "c3a1c1c1-e9de-4aad-8672-2b0057eb0565", "value": 125108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766750897, "uuid": "b1d596d7-13d1-4b70-8c03-a853c33ad33b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750897, "uuid": "31bbcb58-d446-42c3-887e-86876772b4ea", "value": "rondo.armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "419ec02c-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779112, "uuid": "f50dee27-c0bc-44d2-9cfd-c04beec63df3", "comment": "Malware payload (Mirai)", "value": "f027cf31f8c5098250ea89a8cf11587c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779112, "uuid": "e0adab9e-9d95-4d8d-bb56-d61d5655212a", "comment": "Malware payload (Mirai)", "value": "76e1f75a98e9bff71a81e51acc173f788631a4ec0b152e3c26ce77e7b2fe36b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779112, "uuid": "cbbc9279-f91e-44b2-9ca0-5432d6727029", "comment": "Malware payload (Mirai)", "value": "c51c994d67caad294f8eb37a55956135a12e3078", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779112, "uuid": "684fc050-1be8-456d-8114-e6936186a7cf", "comment": "Malware payload (Mirai)", "value": "7e3b018b2450b9c10776b2134ce4cea9cf752b9e8175524077439ebb22c570f0b512bf14adf68fdd706c2be67458f18c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779112, "uuid": "d05c28ea-f451-4801-9854-aa8ddb6eaf42", "value": "T1DEB3E709EF611EF7E8AFCD370AF9270124CD592A22A97F757530D818B24A28F15E3974", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779112, "uuid": "f722be7c-c02b-48e5-baba-1e8c5b300c8c", "value": "3072:Ddub7djS5HECMfBjmThRhFczcmVRh865xZ:Ddo7djS5EC1TozcmVRbZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779112, "uuid": "5e5fb959-ca70-44d8-afa6-5a7e1f68a332", "value": 117968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779112, "uuid": "4560b5da-17a2-48f0-8638-5db01383591b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779112, "uuid": "2808b585-5397-4e50-b070-a82cc68115fd", "value": "windy.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de831b62-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772074, "uuid": "ec3fcb17-6bfc-44aa-9a78-67fc9c0305a7", "comment": "Malware payload (Mirai)", "value": "4b01d71d9430bd4717b4c77e430507f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772074, "uuid": "d2f19a42-65a7-4c81-bd40-7dcbbee34234", "comment": "Malware payload (Mirai)", "value": "76f1e72d58e482f5e89b717b3ca435a3fb87a4d120e788e1a1f9ce23b4b9fc61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772074, "uuid": "e065bc37-9fbc-4410-84e4-9d9c9794eb59", "comment": "Malware payload (Mirai)", "value": "c5f5dd384199732af75dab1e8cba59a0e169470c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772074, "uuid": "65e16c2d-14be-42bb-a3a7-baa9a2105510", "comment": "Malware payload (Mirai)", "value": "3f3bf8bf38fdfc5382fe9de8fd00afe40e89f932b6a52a495b233a554c6a4ae8e2f902dfd6883de2fafde6c41d759f1c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772074, "uuid": "65162f13-3bcd-4596-91e2-17f847e1e210", "value": "T1D9836D4273184A13D9971DB0293F2BE083AFD99025E4B7C6651FAF8A4276E33144AF9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772074, "uuid": "8d0461e4-93c0-4cf9-890a-22044aa215ef", "value": "1536:62GFu1PmRQ78N8Xtt+Kfqy29OgZsS3eMpiT2bVRm2:m9Q79dt+r915aT2+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772074, "uuid": "e150b599-7de8-4656-a431-d546dcda393a", "value": 81212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772074, "uuid": "4d8bb01c-a97d-4c4e-a2d8-08569a761fbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772074, "uuid": "b18ff475-c646-4501-ac8c-12de48fda221", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4de69d6-e1f6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711123, "uuid": "61c07548-72ee-43eb-b056-c72811b93523", "comment": "Malware payload (Mirai)", "value": "eeb7d360177760510d209ea414397f96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711123, "uuid": "ff698c8a-6301-45a4-8a2b-ed48d6c5ed3f", "comment": "Malware payload (Mirai)", "value": "773359bb3f8688b759931ef9094f27cd586b6708c47b623c39fb0f20658877f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711123, "uuid": "a044176a-688e-4315-b143-518ff13fab79", "comment": "Malware payload (Mirai)", "value": "86b73932c33a142b236dfb53dede4046d52a1c04", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711123, "uuid": "0a320b05-b4db-4f81-82ba-e6db2d298e8d", "comment": "Malware payload (Mirai)", "value": "089c11ab95733be9c48ed14c99e4aa19299ca289b6057d1d0967735b80118aa49f2252a74903e544e66169acec8bc666", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711123, "uuid": "84b2b472-ef41-4d2a-a180-e26d42932b26", "value": "T18A73F1B7A56677BAD25788B20C4D07C0EAA03607B3528E1B049ED4BC8C1BF94DA35FD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711123, "uuid": "6922472b-86a3-4ba3-b34c-abcdab0763c2", "value": "1536:Gac9YHTkA5qVpFnwZ9g96uwFUSG/kMvwis2WMWAzUnQtlwThnA3:89PAWLAnuqUBzqxMAnLhA3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711123, "uuid": "35a7560e-4efd-4417-ab6b-7669441a314f", "value": 74892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711123, "uuid": "c797c349-53d4-40d2-9f06-86f67dcd7389", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711123, "uuid": "50b4394d-4d65-4434-9745-523406675df1", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b65798cf-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781885, "uuid": "73e794f1-f536-419f-98c9-b7de65a0dcb4", "comment": "Malware payload (Mirai)", "value": "2aa93e2ffaa8656b4b9ac932da39a04f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781885, "uuid": "a94c183a-dfbe-4aac-9de3-cd6271eb3c25", "comment": "Malware payload (Mirai)", "value": "77557661b9f08d7b2185848ea2cb4ecbf4003ed97857df8023225257c0b7643d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781885, "uuid": "569998d8-35a7-4ad5-a082-dcf1ed3537e0", "comment": "Malware payload (Mirai)", "value": "04be6a1beae53460d1497c6142e3274f87db25a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781885, "uuid": "4ecca2b7-7c3c-4812-892e-1868edb41949", "comment": "Malware payload (Mirai)", "value": "de7d7491fd8285452c27d6d7a81dab810e06fd01b1a0db105e734a275c9756e2ff7f68ac382e232a793ea3125ebc71b7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781885, "uuid": "b847b6ed-e3c5-4a0b-a96b-e9f1733806de", "value": "T11573199AFD819B11D5D116BAFE0E224E7323073CD3EE72169D24AF30678696B0E3B505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781885, "uuid": "19601119-76f5-4385-be34-5bee1a536403", "value": "1536:OBnKRWY65woaIKaIRF+DFTMIiOMfXiq2vqAW/iE5+Y/nZ:fYH5woaeYuMfSq2W/TUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781885, "uuid": "19b3c362-9e41-46a0-903d-09403f7de772", "value": 74992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781885, "uuid": "5d0cf719-0c92-421d-84d6-d5015b1b3fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781885, "uuid": "1f32ab8a-4c8b-4b5f-b988-e62d46920d29", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01165b03-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792748, "uuid": "24dcc2a4-4bb0-4e8c-81c5-41c8d3406fd9", "comment": "Malware payload (Mirai)", "value": "7d108fcecdfb7f6c320501980d3948da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792748, "uuid": "79e6ec22-368e-43fc-b8cb-302f415aa564", "comment": "Malware payload (Mirai)", "value": "7779f8281de22672fa8fdf09ab98c1c70e25684bf83a3c2086fdd04b2d94755d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792748, "uuid": "20743e79-8db6-4a52-bc54-56cfcefdaef7", "comment": "Malware payload (Mirai)", "value": "138c4b89dede5946b530dc33fd2b620aa957b8e4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792748, "uuid": "98099b9d-ba8a-4294-8220-1ca2b4e85056", "comment": "Malware payload (Mirai)", "value": "42999e2fb69efcf15e4ecd9ea751f4f2344b2b7a8985600145510eefe0b671d046a66226d8bebbeaad57bed8750fd565", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792748, "uuid": "48a16494-16d1-4e23-a0d4-ac3d3ce4375d", "value": "T1E1935B23613C2E1AD1F0A47712374393B0E6265E0464DB9EBD720E8FFF662D41E6A674", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792748, "uuid": "86b0783f-4be5-4c47-aee0-54b4aa125b91", "value": "1536:fl2ASt83FL/Fp0IWsPZyn0j+/+8nbpiLgWIymQY2AUYci5hh1RD9:92AtG0jU+8baqhh159", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792748, "uuid": "1575460d-6224-45df-8110-1972ef3f0b38", "value": 92676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792748, "uuid": "8e544155-dfca-4d7d-9170-bc6eec10ef9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792748, "uuid": "7394ef82-96e3-465a-81ca-26812446761f", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ab0e61e-e256-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766752096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752096, "uuid": "6b4732d0-0874-4ca7-845b-010ff510a950", "comment": "Malware payload (Mirai)", "value": "ddde53e36b7d56e262b293f48877ced9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752096, "uuid": "c13db06d-1cd0-4cd2-ac6d-f9095a7b9a8c", "comment": "Malware payload (Mirai)", "value": "7790f2719690afb135266c14aa0a33ba58a72d265f3aca05382457506366769f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752096, "uuid": "deb1d6f3-3b55-447d-aefb-845d22cb5ef1", "comment": "Malware payload (Mirai)", "value": "b9806242940c6c612e089033ba787201d2c6c173", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752096, "uuid": "b4ad76e3-19dc-4d8f-a915-fdbb45e9de81", "comment": "Malware payload (Mirai)", "value": "81ecacf0da272655e3f1aa3cde7266df175f6b4ca97e3da360afaf84c4b08f875fb86b4ee36333f4ec74faaec785cac7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752096, "uuid": "e7eded24-4e87-4ad9-b66d-e86bcd4209a6", "value": "T162042A91BC505F62C5E623BBFB5E428D371513A8D2EF72078D226F243BC695B0E7A241", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752096, "uuid": "76e70677-d755-4376-8e39-bd8a602b2080", "value": "3072:U2ZppZf4Sz+kutsU5h+ipNsWSnEcvF7nC/4ff+GGxQ0tRNS:U21nEkC/4ffjGxZzNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766752096, "uuid": "632933f4-9b6e-4b8d-9501-f146866319b6", "value": 174476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766752096, "uuid": "1d7999aa-7e1d-4d07-b9be-e3f20582eb79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752096, "uuid": "79a8c98d-8c65-40f0-8beb-5932af6c2a81", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5f2405d-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747149, "uuid": "fc5eeb1b-7677-448b-b73b-280fab758f59", "comment": "Malware payload", "value": "635dfea832b58b87eaca4da2b5ff53a9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747149, "uuid": "017a5deb-ad2f-4758-9a60-c8e61b39bb85", "comment": "Malware payload", "value": "7822feba908e0cadb05fb62658f8989845d57fb37917b1791e1d8f0610ab3a86", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747149, "uuid": "bab424c1-efd4-4986-b60e-49fd5439d9ea", "comment": "Malware payload", "value": "35b91b9fcb83b25fd8f4d1f0a6d90fc8d2acbb3f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747149, "uuid": "1254693e-60e1-4f56-8681-982cd87a2d22", "comment": "Malware payload", "value": "64af2b5998c695466c7df344dc3b9153350694f55179a6dae0d40a55a934c2f36f4347d44daf12bb843010190a0aa25e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747149, "uuid": "ffab173d-7bb4-46f1-b2c4-12e2a5bcbbd7", "value": "T113630A1AB772AFE83F77FAF3D1AD02A496B5754C90731294A8CAB0306417211A537F1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747149, "uuid": "9684d20d-56ca-4452-bd1e-d51ac5145046", "value": "1536:I9l/AoSSMu6uPA2jRAHhBjq79tKz4WF1Ltmu7w6FUVFRyH8+Fj269IuzNsNOVdBQ:I9l/5Mu6kA2jRAHhBjq79tKz4WF1LtmR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747149, "uuid": "85619156-f7f8-44fa-b00e-1efc9f37f869", "value": 71636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747149, "uuid": "eb7bb61f-9790-406d-be48-c4022307bc61", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747149, "uuid": "10451a2c-87b1-41dc-b183-2da6ef977af9", "value": "invoice-1645080830.pdf (90).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aaf43c4-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775262, "uuid": "ead7263c-4fa8-488c-aede-f5e9f0c85522", "comment": "Malware payload (Mirai)", "value": "18536b39a53408b6d2268484dae5e68c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775262, "uuid": "2b5875f9-1a16-4f94-b93e-72707632d002", "comment": "Malware payload (Mirai)", "value": "7844c59753f3654911589de428c5ae7928f6098256e52139e1b3c17b525948f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775262, "uuid": "0681295d-1b22-4e9f-8b9a-7f5cf2012e07", "comment": "Malware payload (Mirai)", "value": "afd53fb966bc5f5025871dc4933c44f58d8df3e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775262, "uuid": "3c3ff630-90f0-459d-ba67-f0f2bec6a32e", "comment": "Malware payload (Mirai)", "value": "111b42cae7159b485ac2ff49bca0067e83041dca5e94dbabeeab87021ccb80b619ac6d657af38da2e1c023ee6420ac08", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775262, "uuid": "7ae6d052-5e0a-4146-8f95-d0712a729ba1", "value": "T127142846ED428E11D4D622FAFA9F014833536BB9E3FA7102DE245F6023C6A9F0F76552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775262, "uuid": "2ca0ba77-dbfc-46b9-8b1e-8816e5595f97", "value": "3072:9giSH2tnTCREHKVAbW58fyitrfKNwODuxEHK1guK34AXwuMj//75QJobaioVtZE5:9giSWtTCREHKVAbW58fyerfKNwODuxEe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775262, "uuid": "6bc8cc81-bb90-460d-8d45-b29c089bfc7f", "value": 191144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775262, "uuid": "548b4864-d604-480e-bb42-613da0c1a6f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775262, "uuid": "c8b85de7-3445-4f47-9fb7-f106a4a8e407", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2d84de-e24c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747752, "uuid": "5e1fc4f8-a0e7-433e-b023-bf0c5fb535d8", "comment": "Malware payload", "value": "7470b875b81e0d5e187df00bf552a9a7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747752, "uuid": "6de35fd1-fc0c-412f-aa97-c3f29a53b694", "comment": "Malware payload", "value": "784ce917a01cc0eede501ab8f98927cb732486c9262215231c4c4885c5ade680", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747752, "uuid": "52405e4d-3633-40e2-a6c8-2c36a3387419", "comment": "Malware payload", "value": "a972f9346508ccbdda78e972535b18f414dacc39", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747752, "uuid": "d769b990-c747-4def-b3e3-b0c6f26537b4", "comment": "Malware payload", "value": "b62231e86b6bc4d7646a5ce6c1c64e6316464362f3875fe6cfde88711cadc7f8b10db9376899d8725ac05ca33ac3f2a1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#662DFA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747752, "uuid": "7939e8cc-a10f-436c-a0dc-3a76b986e11d", "value": "T1B717BE96B2945AB4D102FB3CC95182AEF22DFC5C5B51878342DA7D746E733A80C29FB1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747752, "uuid": "7ff88f88-539b-4a84-a313-1256e17e1e57", "value": "570f953ea293dea803f4e1dd101c73b0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747752, "uuid": "f44aed4a-a802-4ce9-a4f7-9e7a2bc8cbec", "value": "393216:kBFP0qTRP2YbXiUZ08RBCxXJq3oeNyfmHtSYceS612Q:5qTIYbXiUZ08RBCxXJxWyfm44Su", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747752, "uuid": "75204033-8864-459e-bfb9-9f20aae1c0a2", "value": 20224000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747752, "uuid": "5e722780-af7a-4392-8357-b893a3cfd927", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747752, "uuid": "d7be55b0-e9e4-461a-a223-8171797e2321", "value": "OneDrive.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcd80a2b-e27b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766768152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768152, "uuid": "f51abf05-e9be-4fe0-a193-70e1293a2766", "comment": "Malware payload (Mirai)", "value": "87ad0f41d25179cabc203f03b1074bbf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768152, "uuid": "cf618171-c1a1-423d-a26f-18860a6b0ba1", "comment": "Malware payload (Mirai)", "value": "78bb0fa43afc2eb36a96179ea86c474b82b7d420dd97a79cac73f13665cfc9ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768152, "uuid": "593f12b6-8af6-46fa-b754-5d4d0346f1f4", "comment": "Malware payload (Mirai)", "value": "409b46c9f01eca140d3eeb9669a20c73ee774e9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766768152, "uuid": "b87dbd76-7461-4bc6-9869-a17b3e28cfcb", "comment": "Malware payload (Mirai)", "value": "d6a2a24f0deacc816dfce64d7fb338029c5ca52ec3c2b7b4f32130b04437fd3bc9dae661dd60707f0c7b890e3ac3b56c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768152, "uuid": "fa95d3df-08ad-4533-ba6a-40d788769bbd", "value": "T169735B42731C4A57D9A719B0253F2BE183FF995010E4B78A754FAF9A8272E33044AF9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768152, "uuid": "9e8535e9-823d-45da-95de-518dc513dfe3", "value": "1536:XzSaJzthHd7Bb9+HpMaWuzSJuS/BaaSEhrTAbVR1:+GHZH+HdSJuC/bTA9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766768152, "uuid": "59501a70-2ea5-4ce5-88dc-cd7977c42c35", "value": 75044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766768152, "uuid": "962bbffc-c7a3-4954-a65d-c31194fdc729", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766768152, "uuid": "50d03eb0-d872-44d3-8d7e-0c425840eddc", "value": "nklppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce9a2c09-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711918, "uuid": "42065ce4-05fc-4197-bf3a-72913b04c389", "comment": "Malware payload (Mirai)", "value": "bb67e4481efa797ca4035d6b10387044", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711918, "uuid": "92f42df2-f094-4c0f-93d4-dd8bf8f9d898", "comment": "Malware payload (Mirai)", "value": "78ed2eed2218c91258488eea7377a0ceec4913447c62f0a81310b390a3b49ed2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711918, "uuid": "126c9017-fec9-4384-ae09-643737e70f10", "comment": "Malware payload (Mirai)", "value": "b1d9f19eba80ad269603900c4dcc8c2975d79763", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711918, "uuid": "183ed771-0c5a-40f3-9db6-290da57300df", "comment": "Malware payload (Mirai)", "value": "e5dc7306a49df118cae1f51d919e165687dfcc17c68185626f8fb7f7bcb338307141ba975a18163c83d7e554b69388bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711918, "uuid": "bc557376-5aa7-4b2b-a4e2-068a4f5903e0", "value": "T1C56301EDE1269FD9C8F78FD13B140EB172B3099A77A1DE20050EE25CCB6884E6D614C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711918, "uuid": "563daca1-b49f-4cf2-b744-ac0c2268b6f4", "value": "1536:PjhW3I6mMNZht2GX1RDkSva0pkZ9rxOfajuWzM94u+qgw09T:LhW3DnlnlRkKSznW4u+qgwm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711918, "uuid": "ced324c5-8289-44e0-8508-1ec62a375d63", "value": 71712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711918, "uuid": "1282e91a-54fb-448a-bc81-cffb9c0fd57b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711918, "uuid": "2cb0f4c6-6620-4abc-866c-2b1a96bae0ce", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e499dc3-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747431, "uuid": "c99f1505-af8f-40db-8eeb-e6118be98921", "comment": "Malware payload", "value": "abfedbab3e86627bee908390e7d1f7ea", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747431, "uuid": "efab696f-bdbb-4d17-bc86-691728ba04e1", "comment": "Malware payload", "value": "7943040ca7ca5f5c0e28f47ca133866fc5b8166efe63c03e766faa79fa54eafa", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747431, "uuid": "43524af3-a996-496b-850b-b1e5fa5fe53a", "comment": "Malware payload", "value": "c110101a152ed08823548551ff91c8c1bc66dd70", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747431, "uuid": "e2e73cae-9a57-4bac-9a7a-f17c169afbf7", "comment": "Malware payload", "value": "765da727c18eb0ce922c9b20b9710ce66d3e8d740a48b3e220d2fc8b20b0e30667fa39b8e7c99f775140de59ffeeed37", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747431, "uuid": "625d730a-b3e7-4b8d-90a2-3e9436f46eeb", "value": "T16D631B1D79729206524A58192FF52E8B1A043E4004A54EFFDC2CFD73EC2DE8B6B9C6E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747431, "uuid": "2a17831e-c7a9-41ef-aa76-c3dc60623a87", "value": "1536:I9l/AoSSMJ4K73btPsTsmtLlZP8yhdjxQMJC274V+1e615i+KCGA9UiSPapMZusq:I9l/5MeGusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747431, "uuid": "00724b1a-1a55-4cd9-bef5-1b31d5489bc5", "value": 69627, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747431, "uuid": "acbb77f6-ca39-41b8-a2b7-97895701b36a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747431, "uuid": "f74c68c4-81af-41f1-bd7d-051e207b9f84", "value": "invoice-1645080830.pdf (31).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28beb694-e22c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766733973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733973, "uuid": "c0ad67d3-26dd-411f-b0a2-c373b16dbd08", "comment": "Malware payload", "value": "7f5e8238435210cf7f286a05813e7fed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733973, "uuid": "89273977-80c8-4933-af4b-03300bd46ebc", "comment": "Malware payload", "value": "79e5d54c11dd045634f8bc626c9208a7e05f43fdd20e5e37e6a95509e9c814aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733973, "uuid": "3c04d8df-cb0e-44ad-9fa8-897c99188521", "comment": "Malware payload", "value": "b5b86d06523c7b47c916778814d25835e35e5244", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733973, "uuid": "0c81df4e-96e0-46a3-a5ab-35eba2d7489b", "comment": "Malware payload", "value": "8bfb6269cfadb2fbc04058a179e53d20dacfd7d1f9677e7e56bbac9c79284e2758566a03af793fa724d4ddedb0732562", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733973, "uuid": "4683a708-c0d0-4fed-b1e3-20b5b02f8d36", "value": "T12B7423003AB439F5C3F07CAD04CDFE9C99A64924581AAEE3D96890F956C61071ECADBC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733973, "uuid": "8cd68699-7617-4c95-9a6f-3f69eaa97cfb", "value": "6144:4Fq3qYcWvV7ljfTkYvzuzhokcfFJidztRASUFYvdDPA0xeokj7G1tuV0on0qv/Bv:Cq3fzffTItBUXwVdDPOjS1tbozv/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733973, "uuid": "6f45ea66-182a-43a2-9c5b-416724266dc5", "value": 343804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733973, "uuid": "4802e9b6-8d42-4550-88ae-2f0832094dcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733973, "uuid": "72267397-9066-4f2a-89e2-4f4d3442d537", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc36890a-e28b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775050, "uuid": "2e416567-315d-461e-8693-f4dda9f57225", "comment": "Malware payload (Mirai)", "value": "e44a8a9ba9a7328b3116e31ad2e8e9b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775050, "uuid": "df4693d9-de02-4769-af7e-f67e6a6a9155", "comment": "Malware payload (Mirai)", "value": "7a0948804f3cebbbe78f7516a481011c277ed65f5d0e82de6d732c0cc512c249", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775050, "uuid": "fc97907e-cd65-450a-9081-bd0c5d44cbea", "comment": "Malware payload (Mirai)", "value": "4789841123c438d4cf7d99695fc6a0a62c5db1db", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775050, "uuid": "5fb9fd51-93e0-4d5a-972b-5b29fb80ffda", "comment": "Malware payload (Mirai)", "value": "eb8177b37e61e1a002c0595e983d1a38889b8956fa68431688609172ffa8081ba0f54643f05c94b4f4f096d639ddda5d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775050, "uuid": "feab8bdb-d323-4d04-8a5b-ed8be4def90c", "value": "T1C0C30940F94B80F5D50B8C7050A6F33FDE32D564827A86AEFF999F36DBA7642811528C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775050, "uuid": "8e879f23-bbce-4b37-ac00-96c7cf857782", "value": "3072:r3z6AYoY4giSKjLaDEeqg8S33MIF760tvEEbNsZshh:bz6A1giSKjLaDEeqg733J7pnhh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775050, "uuid": "805691fb-b8ae-4a94-a87a-8cef7c852541", "value": 124180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775050, "uuid": "ada28c45-281d-434e-8989-1daf8e9a9c51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775050, "uuid": "541cb9bd-5cc5-4aa6-8daf-ae5748936990", "value": "i6_x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "254331de-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747282, "uuid": "9a9248da-af7a-46bb-a933-cc7e6747b977", "comment": "Malware payload", "value": "f40b88f769eb8bbed1049383213faf5d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747282, "uuid": "ffe1d890-d33b-447f-be60-3d74aede6d15", "comment": "Malware payload", "value": "7a2c7b2f6d51bc34a20c31af818b6d624b4eaa3f7067aa34c53a72ea883bd5a0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747282, "uuid": "eeccf4dc-9d2e-4c98-ba78-7658efe64557", "comment": "Malware payload", "value": "a8d3157c1fad800de8a19af7de4c7a48c2927213", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747282, "uuid": "112bbed0-f7e1-47fc-8088-b838fa764379", "comment": "Malware payload", "value": "6e6a3e98fee1fdf0bb2d52c04c4e9e214d7179988490a0deb5df76f2269b22960e65b3da886d416992c9e858c73d7db2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747282, "uuid": "6cfcab1b-1051-4171-bf9a-ee282ecd9f64", "value": "T1F763F70F2D5235E4105BA1AD9FDC386B7428EEE40DA9D51843E2A260F569F1F18E4CEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747282, "uuid": "ed40c4cc-a1b7-4adc-968a-4e62eeedc505", "value": "1536:I9l/AoSSM4McMOMMMzMmMhMKMJMZMXMHM3MtMRMKMIMxMvM9M3M1MHM3MkMBMJMm:I9l/5Mw5OusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747282, "uuid": "64fb82ed-31cc-4c93-ae6a-ca213cc80b0b", "value": 70654, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747282, "uuid": "ec0b9806-e2ca-4165-86e3-05910ead6345", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747282, "uuid": "f6d54c36-ad5c-4620-b872-69f5982ac0ee", "value": "invoice-1645080830.pdf (60).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0be65522-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775586, "uuid": "04b29f60-ab22-434b-820f-e1ab769ef973", "comment": "Malware payload (Mirai)", "value": "4f1fb63e6da91e8ce6360fa45bd8b4c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775586, "uuid": "e6808ab4-c054-4f24-9d45-41aad4d1c832", "comment": "Malware payload (Mirai)", "value": "7a85e75000896fba1962bf58bd16c478e91c087ba81521d7a0409c90a4ae5f9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775586, "uuid": "99d6db46-e15b-4040-a794-9afad77fbb2a", "comment": "Malware payload (Mirai)", "value": "cae023c72d8c0dee131efd7eb4512c7fac3bded8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775586, "uuid": "2140d69d-9063-4610-8f38-7716aa77a544", "comment": "Malware payload (Mirai)", "value": "fddf5eb9ea08ebdf5b00dc85f53e94ed770a08d54f88208b27637efc67ae9219972d978acefeb5b1cc6287041f19e422", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775586, "uuid": "6cecc896-c0cf-4f09-91c5-0b0377855e7d", "value": "T1BB730985B8858A27C6D4227BFA2F42DD332653A8D2EF7303D915AF14778682F1D3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775586, "uuid": "b30bece5-4a81-49bb-857a-eac8c1842217", "value": "1536:axxE+LQQbJ3cEsUUDoaaJDvBwAhTSVu5tZQ4caPTAbVRT:axRc+bJLBwAhq+3Q47PTAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775586, "uuid": "3e0bf706-da22-40d8-b4a8-c6cf2f03ba36", "value": 74944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775586, "uuid": "750afcae-5c6c-4285-80e4-b97ed27ebc6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775586, "uuid": "8710ea36-2814-425e-8bbe-2b60bbb36a24", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b503ffbb-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781883, "uuid": "cfd6b930-a24a-4c2d-a1fd-0a09b3f712ca", "comment": "Malware payload (Mirai)", "value": "724994bf0e1b8d862447256903d841ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781883, "uuid": "a9dbd253-a451-498b-8600-94f631de50f4", "comment": "Malware payload (Mirai)", "value": "7b8497b6665e3e8694b339a485e85e6e14a08907f8768894795d1f8f78247b70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781883, "uuid": "331bbf5f-86a9-4c96-800a-ae5ba20f9949", "comment": "Malware payload (Mirai)", "value": "f94cc54856d2fb571ffded29f10b7b3eb1fae1c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781883, "uuid": "176845a9-3f41-4f91-8c63-8064717884b9", "comment": "Malware payload (Mirai)", "value": "0be147a0de89cfe4769f20b5373d3e1b2449a34fe09033c64fb00d68a1b381a94206e7f075cc3c4885520becd51e57c1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781883, "uuid": "cd463582-c8a7-4089-9e67-fd82af7b94f1", "value": "T109834C02B70C0943D1671EF03B3F27E5A39EEAE111E4E684664EFA4591B1E331586EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781883, "uuid": "421a4fce-3806-4b4c-9c42-e1c856e9f560", "value": "1536:Tjl0KrleY0M/jyyF1wsxwMujypodoxIJOHXrwhA6FsmK9z3cQDtv:hr0nM2MP6JGwhshp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781883, "uuid": "1ef6574b-3e94-4604-858f-a53c03872f74", "value": 80864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781883, "uuid": "2612d493-869d-4db4-8f29-9a51403fbb93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781883, "uuid": "7d161e1f-8c2a-4eb2-8770-6e1ddbe429cb", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3f7ff67-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772486, "uuid": "0fe64ca0-37fd-4f63-93fa-f9b35e5d316e", "comment": "Malware payload (Mirai)", "value": "56539e84649512a59eb5ed1a46247cfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772486, "uuid": "61587c80-5415-4b0c-a980-52f6dd370ba2", "comment": "Malware payload (Mirai)", "value": "7bb0779caef2931ce8b6097849c1d7faa43589195625ede23b5fd0453bbd4869", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772486, "uuid": "2eb91ecd-5d79-4002-990a-503e1abf85b5", "comment": "Malware payload (Mirai)", "value": "aa9a0420cd006c76f498600a17dd57b6b30a3845", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772486, "uuid": "3dac5a93-4d4b-4144-8885-ba39ba01b12c", "comment": "Malware payload (Mirai)", "value": "894eb0859620e001662155468b6547cbac5cc1a84029327920eeb13fa8d210ebc259c5622e10ae80e3d50caabc8169d7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772486, "uuid": "1c7d29f7-818f-49f3-b7df-c62b285d845e", "value": "T1F1233BC59503E8F4FC160AB01572F7B3AFB2F0751139FA93D3A49E33A852640A60A2DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772486, "uuid": "50a6ea2b-33b1-45e9-8e4e-08bdc57cbce4", "value": "768:oDL35NF2ynIckFU8Co9FVCfcaDYzfsC7hNoF/Esoptm7gHjH:oDdNF2xU8Co9ZWYzfsy+R36E7gHr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772486, "uuid": "2031818c-23bc-437d-8aaf-1f0cf0cc2ca2", "value": 46444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772486, "uuid": "3589d416-94a1-4b27-8584-994b072f954a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772486, "uuid": "9a5e14e6-4719-4a45-bc02-a436b9a26167", "value": "zerx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edf37721-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778113, "uuid": "c8a84e59-2165-4748-8058-e1127c105c44", "comment": "Malware payload (Mirai)", "value": "6a09b0a4123511d5e1f19364cf541b34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778113, "uuid": "79736b49-6ccb-4904-b242-e1985b738c00", "comment": "Malware payload (Mirai)", "value": "7c64161d85a59d82fe2d8e282abf1c8d985ffdfcfbd73987a080ee24b3d1b076", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778113, "uuid": "22e1fada-e5a7-4840-852c-fba69a920eef", "comment": "Malware payload (Mirai)", "value": "3945d0167e1192bf18626d643358f390576049a9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778113, "uuid": "7403bb1b-f8f5-4465-9eee-e8effca5907c", "comment": "Malware payload (Mirai)", "value": "c3888899abc1d432c0ed437c6e16c1be4e2576e6c5402db8f37eafaa2fc3a2393e37898f3cf98386054f407ea463b25a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778113, "uuid": "681f43a7-6ee9-482f-88e8-30053110f77a", "value": "T19D331784B8859A16C5E4227EF92F019C372623B8E2EF7217DD226F15778A82F0D77611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778113, "uuid": "1a4ee295-2096-4e49-ba86-ce167d8ed1ad", "value": "768:8iw5VGfw78chwSGNiyS+42/E+WUr7qtxU/ulOlIel3PMV02xNF5RXl2yTTr:y5VGfwPJyx4kE+Pr2txUdKei02DqqT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778113, "uuid": "2dad3635-ade5-4562-92d7-dce3158298bd", "value": 51816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778113, "uuid": "305b796e-f8a8-4774-89a9-d750447dd777", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778113, "uuid": "58c800f2-fce0-493f-b2da-c37d2f6992ea", "value": "zerarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dd4c80c-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707380, "uuid": "0603ec81-46d6-4149-ad7d-9ecba2a444a2", "comment": "Malware payload (Mirai)", "value": "14b977aa26d3d251ec895943be363f23", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707380, "uuid": "78fe1ebc-efa6-4e70-9dc3-e8e75241a751", "comment": "Malware payload (Mirai)", "value": "7c9f68e5e318047e74fb87f4f7a5c4257278ec57791579c9784a663a653bec92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707380, "uuid": "8ab8019d-7d47-45bd-9d2e-e5c23bc8aa53", "comment": "Malware payload (Mirai)", "value": "c76f8930675500d7c02e6b2c47cd677b045dd397", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707380, "uuid": "e490ef36-f236-45c0-9d2b-c4c34776b9c0", "comment": "Malware payload (Mirai)", "value": "e9bfb27cda2fc282ea25d09f2d6344345dc9604086737a0075d6557da5e42bd1c22d3379385eb25956c3b79a42f0d921", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707380, "uuid": "1ed285df-130f-46c0-b3c3-22b6489e79e3", "value": "T104639D36C86A5D58C94C6670B8F18B751B53700096432EFB598AC9B68043DECFACE7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707380, "uuid": "071c7284-d0a6-4b33-96a3-9f864bbfcf81", "value": "1536:oarSJBDObnWN2krPJiba8DUfFoM4CBaU9lTAbVR:oDDSc2kAAfF148hTTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707380, "uuid": "27aa25ba-e5a0-4286-9a59-f3d24eaf142f", "value": 67260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707380, "uuid": "84042c5d-d676-4bcb-a39e-ff43613dcd2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707380, "uuid": "628d36aa-0aac-4ada-a74d-f0163d5ec33a", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9aec8d6-e256-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766752229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752229, "uuid": "e86f36c3-f6dd-41a2-a99d-37a63baca13b", "comment": "Malware payload (Mirai)", "value": "253bdfab9fc32cda9a3e7838c81408d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752229, "uuid": "ba76bdc2-87e3-4b44-b53e-1af3e13497a7", "comment": "Malware payload (Mirai)", "value": "7ce6df04a2913a518ab46862178d6e7129f1fd68c72f42dc894714b3a7f8bca3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752229, "uuid": "da30dfc1-6117-4114-8daf-0b0908bab051", "comment": "Malware payload (Mirai)", "value": "a2ad6d8215ef3f7a3b706ddd8fd508da409bd3bb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752229, "uuid": "07af40b7-0e31-4025-9447-337c1fb75838", "comment": "Malware payload (Mirai)", "value": "190a6fa8847a2a0af7fac797d690417d3845a3ee151d1fb65530f4c6b40d146213fd7673a16d405f9b1f4e685df6be9d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752229, "uuid": "82a267df-e6d6-449b-b005-6de2c0f3d812", "value": "T15CF32A02731C0947D1A36EF4363B27E093AFD5A125F4FA44291F9B8A9271E335586ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752229, "uuid": "4de136d2-02b1-49c2-932c-e268397e20ac", "value": "3072:P9QxwBN2uEsi24zF/4Pvxpz+2DORjXrjE:KxYN2uEX/Ovxpz+2DOxXXE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766752229, "uuid": "f74edba3-4346-4f22-b475-67922fe39866", "value": 166404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766752229, "uuid": "4f527725-2bf0-4ad2-8d01-3e40938f5fdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752229, "uuid": "a7f0c6a0-5a37-4e50-95de-35dfba690fb2", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d879f407-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747153, "uuid": "59d0e780-bb7b-4558-95fa-4fc9baedd898", "comment": "Malware payload", "value": "0d15fcd195c0f3f0b00a2b04fe7db9d9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747153, "uuid": "b6dc5fa2-ad4b-46ec-aaf7-acf41635a814", "comment": "Malware payload", "value": "7df22e5646bf27dedee643020c0977c714d879fdceae709d4eceb60dd1ccdc0a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747153, "uuid": "54e4462d-7841-4e44-b0fb-acee6faf96a0", "comment": "Malware payload", "value": "698f47c109fac59dd42d0087232ee0185b30e574", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747153, "uuid": "dadbb55a-1fe1-4a1f-9700-c4b9647ee239", "comment": "Malware payload", "value": "c99da5ec1adffa903a7d5d36471802e0f13fa03ee8e657e90de2c5b43b08442cfb8e4b862e8ad59ec18e01bf74e9699c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747153, "uuid": "ae6f99de-3913-400b-97cf-331bf60cb11c", "value": "T134731B329F63F9DB44A78F4F4EB2542D480684068976072DDA65ECA7704CAFB3D066CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747153, "uuid": "64fd72e5-4288-4694-93df-43ba6e84ea7a", "value": "768:I8w/h62/jWs6oS+xISN0v0mH3NpqdkfScBYrwz2y8kTAlGB:I9l/AoSSM0S6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747153, "uuid": "effe7e58-a49b-46e3-98cc-24efe0a8aeaa", "value": 75432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747153, "uuid": "491b5087-e795-49a7-9c6a-a579b18c41f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747153, "uuid": "1662168c-9edb-4eb1-a4e3-da52e9d0e47c", "value": "invoice-1645080830.pdf (91).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "495c08cb-e282-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766770965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770965, "uuid": "b9da1acc-6178-4e07-be1e-b7cdfca2f88b", "comment": "Malware payload", "value": "a5354988e5c6e1ab715e8045f15ac93b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770965, "uuid": "51401fa5-384d-4554-822d-2ac1af027514", "comment": "Malware payload", "value": "7eaea22a4ed17a0d54eab4ec6a602b5482e628fb3dabfb62cbfc1529810e1b1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770965, "uuid": "77a12d29-a8f1-49a5-80b9-c52eb02bb059", "comment": "Malware payload", "value": "ac0ee268998da7f4f25309b5ff7803b1d425cb26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770965, "uuid": "80925339-15ba-45f9-9517-be74f71350da", "comment": "Malware payload", "value": "2cb895e1ba16d3654c6af04aa8d7269adc86a0bda013f7067fdc4321aed234c81f7e6929b676955ca398893f22631958", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770965, "uuid": "6e2e195e-80ea-4df4-a7d7-7b4693208ab2", "value": "T13594D112E3207A97E14AD135588147046B44AE7573E29302FFA3B2BE712F5B5CF243AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770965, "uuid": "7d9e477f-b772-4ccf-a068-4591c1bd7bfc", "value": "12288:UXK1TUguZyZ19NB3nIj/CqPdeK0z0Sy+LDthz9C3D:62KZy/jB3IUL75Cz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766770965, "uuid": "953ef7e5-8b21-4e10-9bfd-8ce0b632e229", "value": 426976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766770965, "uuid": "9e7e937d-ba6f-4306-a18b-bd134212a736", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770965, "uuid": "2642f7b1-5cab-45b2-97d0-15f68cb717ac", "value": "rondo.armeb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7903aa2-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747178, "uuid": "cdb3a8cc-6f77-4864-a5b8-dab202a053aa", "comment": "Malware payload", "value": "63f4eb2f852b8c16179ff11334f53347", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747178, "uuid": "a3aa6022-291f-4ac2-b7bf-ecae496ce347", "comment": "Malware payload", "value": "7f2a61f9e92808902d698adefaa26d224a7e199401a40beaa8b6340ba216eca2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747178, "uuid": "c9074994-81bc-4eac-b2d7-1cefb8578500", "comment": "Malware payload", "value": "dae88ce807c3958d1fcfebfa598e030428d89d25", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747178, "uuid": "3586986c-fd95-4e5f-847f-858d34f50499", "comment": "Malware payload", "value": "489c969edc5d28cfa2481148794223ffc6f4eade7e171f98c6031a9a474797a891e39444f252009ece21c068912bb008", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747178, "uuid": "c3bd1717-d78a-42d9-b96a-0cb9084431ab", "value": "T114731B0D1AE3B1D987078461749C31EB80111D7F8EEF061989BEB18F8A6C5A80596BEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747178, "uuid": "b03bfa51-778c-4352-90cb-0508145cabad", "value": "768:I8w/h62/jWs6oS+xISN0vqDbBMzOEFkrk05lMho7Jc1Ktd0FdhIBl2C9CrynaUOG:I9l/AoSSMhxusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747178, "uuid": "2d3f4451-bfcf-4619-9874-9c2ad702294f", "value": 75342, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747178, "uuid": "eefb252f-85b3-4ab9-9af0-b1333cc0be87", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747178, "uuid": "71c9020d-db62-4438-a4c6-9f45bccb8d93", "value": "invoice-1645080830.pdf (87).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940c1fb5-e20c-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766720409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720409, "uuid": "3fe35367-6601-4fd0-a110-5bfb0d522bdd", "comment": "Malware payload (ValleyRAT)", "value": "d9474a549799d6d7cf3a9ca29e65636a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720409, "uuid": "6050b672-c943-422d-a193-1f85569f12f5", "comment": "Malware payload (ValleyRAT)", "value": "7f526f51e12c0e66bfb00b2b5132669010db2fc3664394ce8051e1ccb9c323e3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720409, "uuid": "3380299f-2e32-41cb-b334-22e97db8ab1b", "comment": "Malware payload (ValleyRAT)", "value": "d2ca2adceba5369d39912ff50b5d6332b4ceeb35", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766720409, "uuid": "97527a03-0e8a-4dea-9305-efa1e72915ad", "comment": "Malware payload (ValleyRAT)", "value": "c098ea906b4a7e43209ee85402798bd1cb4d9654295aa43c0ec4dd364c8175abdd33e123c274f4f0e63f94744f872bbe", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720409, "uuid": "56ab2071-e7f7-4080-8c51-6920c8d9f3d8", "value": "T1FC43F11F07E89ED9F2BF63790416150728AD3499EB7B8B590F1011A53A7B7794C03A26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720409, "uuid": "e644178a-e0ac-4b9c-8d0d-4c37576449c5", "value": "9a9b2f4b038869f8b4d3d4be7e7e6e9f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720409, "uuid": "90348214-c906-478c-b41f-5821a20104b1", "value": "768:Djr459uzmIAJ1MrSklnLQDUGlWAVWjMJ/USBuHPQgD6TlIOZG9JnzqqreEQmdw:D45Q0YSoQIAWAQyhBuHRwlGJOqCEFd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766720409, "uuid": "c58ce5db-2caa-4ad7-bb98-b48e5b1e6a14", "value": 56832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766720409, "uuid": "0b3df6f4-7719-4449-ad73-62a35ed9a0e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766720409, "uuid": "0d771cae-9232-4bf6-8ffa-c2bbac9fdc7e", "value": "7f526f51e12c0e66bfb00b2b5132669010db2fc366439.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea3eead1-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747183, "uuid": "727539c7-6858-4f41-9606-f120c6ffe747", "comment": "Malware payload", "value": "9747025e73b929c885d34feba5c54ba9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747183, "uuid": "7d0bb765-e97d-4e2d-9a54-059f587071b6", "comment": "Malware payload", "value": "805885305fde0947f4b2b4e679a41c98e01d0779d1902b47cec6653a778a068e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747183, "uuid": "fc46a3b2-0459-4fa6-9c83-07725107aabf", "comment": "Malware payload", "value": "3ca0d337baf2d08b5e53ce37a70e3bf5a01348ba", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747183, "uuid": "e1b6b751-a1a0-44c9-a36f-aa3b040e783e", "comment": "Malware payload", "value": "4d1a15ab2e0375a55160cb7d80f6932be0c2cb643c35631c2c34301d22098fe2f147c552160b114699ca3a74285b0bbe", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747183, "uuid": "ba59280b-6616-43c8-b603-47dae4e08e5e", "value": "T1156329D39A7678A719E58452BBB25ED0CE4C86C3E083F7D319056B189F89EC0C42BE5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747183, "uuid": "963959f6-188f-49bb-be64-a7b734364f5e", "value": "768:I8w/h62/jWs6oS+xISN0vNHDoSi1rdkfScBYrwz2y8kTAlGB:I9l/AoSSMxo/usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747183, "uuid": "51b0c5e5-eeba-4c6e-b094-cabd7e0ca2de", "value": 71590, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747183, "uuid": "205dce46-58f8-4569-a8f5-034a986f47a5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747183, "uuid": "12cb8223-715a-4a2e-a898-b00fa3a3db8a", "value": "invoice-1645080830.pdf (88).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9b2b5d-e2af-11f0-a129-42010a9c0007", "comment": "Malware payload (Amadey)", "timestamp": 1766790351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790351, "uuid": "caffaf57-20d9-48e0-af3a-79906b297501", "comment": "Malware payload (Amadey)", "value": "2492b52d5fe23c0f375c3bf18f079893", "object_relation": "md5", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790351, "uuid": "78c9bfe2-edb8-4b6f-a6a8-f1121b3abeae", "comment": "Malware payload (Amadey)", "value": "80c509c5f78ec27f214377ec05d032f695c56340e973e13d06118983745dc1de", "object_relation": "sha256", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790351, "uuid": "55a1f95d-31bb-439b-9f12-15d60756eed1", "comment": "Malware payload (Amadey)", "value": "d8a8fa9f240ebb448855b2f0552c29a786f67f01", "object_relation": "sha1", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790351, "uuid": "39feed9c-5265-4ec2-9ff4-0c538fc675ba", "comment": "Malware payload (Amadey)", "value": "683383754ef3314b27ced1125412c6934e169cde2c7e1fde3eef3d44e2f668e0c4c0fbca3c2fc15c1fe420fa54afe90d", "object_relation": "sha3-384", "Tag": [ { "name": "07072f", "colour": "#19557B", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790351, "uuid": "bda7ce3b-74ca-4df1-8216-8a91259234bd", "value": "T18CF528217B5999EEC15AC078C3474A726A3270CB0B35BAFF449486383F69AF51F3D258", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790351, "uuid": "d31f5de0-0866-432e-8a9b-0dfb7dfa69bf", "value": "f734f92eefdd7dd8a080146bce5ae050", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790351, "uuid": "d66035ba-70e4-4dc3-ab22-6b728fed7407", "value": "49152:n+pYCLDYc8nwY69Au2swouX8bl/nA8z9URgI+pNg6Dk9YAtePRx7H+C:08+VA8quDkhe5x7HP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766790351, "uuid": "cf14c471-a0c3-49f6-a79f-b116814408f3", "value": 3623420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766790351, "uuid": "0b0e9456-7998-4209-8fe7-455466ab9b7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790351, "uuid": "22248fbe-0a64-4d8d-b3df-fd93c6f065a9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6652ffaa-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729782, "uuid": "7838cae3-722f-45e3-9217-542e9a3e5bb1", "comment": "Malware payload (Mirai)", "value": "018d50fabe5481be05d03102e1564a8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729782, "uuid": "63ec66ee-6ac2-482a-8714-5accd7032b66", "comment": "Malware payload (Mirai)", "value": "81f2885b1dec16fc077eb969c019fa8e9469800410976a98b49821eed314aa3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729782, "uuid": "65c4013c-643a-4825-9b41-cd4fcf5a0f2a", "comment": "Malware payload (Mirai)", "value": "f7e73a3dea0d17406b68bb81f893ab489975d391", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729782, "uuid": "491c07c1-74ce-4854-98f0-e1a1fbbbd6be", "comment": "Malware payload (Mirai)", "value": "ae948d5f4be6c2a98b455584148f2fa82d9fac64aee1fe2e0dd660bb15f2727c1b789dc4f024889c39c6d30cfa103202", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729782, "uuid": "0ffbb9ab-20e1-4850-a8be-f98745f15cd5", "value": "T1B7730260A2B78D50F9434A30AD964F922C4F1F6CDB2F65633CC7C52CEAA151107A9BE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729782, "uuid": "3a2b38ac-d700-4b90-8e2a-6a000843a3d9", "value": "1536:MuPsf8Gd2HPX29bgv9ovOzBKbqxAtS6HYpjRbk0wELJ:MrEg2vG5QovJs6wjRtLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729782, "uuid": "5e9681f6-c220-45cf-989b-5920f271f3fd", "value": 77424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729782, "uuid": "fe6a62c1-7cb7-4eca-9e41-6965346236d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729782, "uuid": "603894a6-f086-48d8-bf4a-03f2bb00a559", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a057438b-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774117, "uuid": "f635d28b-85a2-4cb4-baf1-5661c6efdb7d", "comment": "Malware payload (Mirai)", "value": "6948d4197d8c9ab180d65f18a90b0279", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774117, "uuid": "79a234e6-dff6-429c-9bc4-63bc984e56d6", "comment": "Malware payload (Mirai)", "value": "82bc0edf7becf8f453947b1d7a7192f01f2677ce4ef7e1b8541b78d3b55315f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774117, "uuid": "3505106b-268f-432a-81d4-b5852e682ef6", "comment": "Malware payload (Mirai)", "value": "6e6e2f69d92d1c290c59293c0d2acbf2a74c9a42", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774117, "uuid": "b6ec000f-442b-485a-9854-6e3a9ef2ed1b", "comment": "Malware payload (Mirai)", "value": "ec97c4102f02e69ff5f9ee0ebea5fee518909b198e41c9ba51ae644a6dca3e502148f1cd3df60b603d8b75a1504d360f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774117, "uuid": "8ad13426-8047-4bab-a9c9-b3edfa3dba42", "value": "T132639D36D86A5D58C84C6674B8F18B351B53700096432EFB598BC9B68043DECF68E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774117, "uuid": "df6b9753-b5fd-46ee-8ef1-6756f4d98016", "value": "1536:oarSJBDObvl3kWPJiba8DUfFoM4CBaU9lTAbVR:oDDSxTAAfF148hTTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774117, "uuid": "9cc27af8-7298-4665-85f0-e06ecfe22b70", "value": 67260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774117, "uuid": "8f8bf490-1b11-469d-bae1-b258bff04b3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774117, "uuid": "c0e6ea15-e7a4-4800-a446-08516e1da31b", "value": "nklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be11b7cc-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747538, "uuid": "2ef91d73-0dbe-4c51-8727-b9176157d095", "comment": "Malware payload", "value": "fe8a04f78e96ed0e6b5d08949013b88b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747538, "uuid": "81db4144-75b0-44d9-b9fc-d0bc33f1c832", "comment": "Malware payload", "value": "82be8ff5226926766fbdb0cb53a7b1f95325ab160844a6d4438ca9d1455b09f7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747538, "uuid": "c4bb260c-bf10-462b-834b-ead2237ac0ff", "comment": "Malware payload", "value": "4a2d8a0862896de867f411bc8d80d165e54fac7c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747538, "uuid": "9ff64bef-1aaa-4261-82f4-883dffe9ce46", "comment": "Malware payload", "value": "cad8caf8b66be7a7bc30468b5352f446803ac94ba494746edc2a47c831b356fbbe537d8e61e47ecb7806b1f22a082c3a", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747538, "uuid": "a62b19fe-e6af-4070-9a28-1abc3dfa5785", "value": "T1E1633B416B9410874DDAE6FFE283A57546AD443C8FD623C5EDBAAC306C198CDEB70239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747538, "uuid": "0a0c5280-79dc-493f-a351-d54f661c6b74", "value": "1536:I9l/AoSSM4RFq63AxuPFu+eyEHGV8870j+0AWpZMh4n/vbucgnH4t5mnOf5af8Hm:I9l/5MLvusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747538, "uuid": "4735dd3b-46c1-477e-a8ae-3f73b70a9004", "value": 71548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747538, "uuid": "9198c084-30ff-4788-bf3a-3102003442f2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747538, "uuid": "91ba9ebf-2019-437e-9674-c6c0d78288ca", "value": "invoice-1645080830.pdf (8).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c75da08-e28e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776043, "uuid": "7b3053cf-9f1b-4abe-b39a-053c3c7ceae8", "comment": "Malware payload (Mirai)", "value": "d5674661f314a33ab9d8287372809691", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776043, "uuid": "5207cc8a-71f2-4ec2-939d-6f86899d29ef", "comment": "Malware payload (Mirai)", "value": "82e7d1ae0ed6756cb2a43de06b72fd1041b27d9adc3646d4f877150ffe683cc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776043, "uuid": "b07d7522-b014-4f08-b8b6-42be2feee5f7", "comment": "Malware payload (Mirai)", "value": "d9a7f28d5c1e108f40e7f4ef5419fd2d878d0b1c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776043, "uuid": "634860bf-7a12-4d7c-9ebc-3db756c26d3f", "comment": "Malware payload (Mirai)", "value": "528458e47d318e923d28cb842314f26eb4bab269cf7bfb72440591d937e40fa75539a23a98b8e16912eb7f248a379315", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776043, "uuid": "f6b64f20-ac0a-481f-a579-32d8c65bd0e4", "value": "T13044B64E6E228F7EFBB8877447B79E24975923D726D1D585E1ACD2001E2024E241FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776043, "uuid": "d7c320e0-54c0-4225-965c-810a9900bf8a", "value": "6144:EIZ49VlrmAneb6yOTkNRKyE713Qxyz2BCueIb9:Fk3jBQxB9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776043, "uuid": "bb1d1516-fea8-4f75-a0ae-1c447f8ea8a3", "value": 261080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776043, "uuid": "50dea75b-6c2a-4c55-8b29-9fe866931928", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776043, "uuid": "25082695-4795-4836-91d2-a2e0f5623a13", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "236d37a5-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767465, "uuid": "4c59d463-86c4-47c5-b102-60f259513826", "comment": "Malware payload (Mirai)", "value": "aeb1a674a3f8a7e5da63e25075875daf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767465, "uuid": "958eec75-01dd-4bc5-95e4-2fc192e85ac5", "comment": "Malware payload (Mirai)", "value": "8313f1e329ae38c2aeb54908c030b9a4f29ed0b934dc099b54b0e8a3fa528687", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767465, "uuid": "60696c2b-a68f-4082-8517-8d670435cb5e", "comment": "Malware payload (Mirai)", "value": "52de57c8dee22cc37296c5f5e96c95fc81b944f3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767465, "uuid": "48c3f093-4aff-4c88-8a8c-0c7d82cc617b", "comment": "Malware payload (Mirai)", "value": "ec4e68085778ce4d94d4aaad5d1a0d30be98598751af81410e45c608484773e797443071aeabc178c6f75a4cdb6426e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767465, "uuid": "5a39d6c5-3859-41e2-afb9-0550f517f52d", "value": "T185737BB7DA269F56C04761F462F68E740B12BC284E670EF295A4EEE65003DECF9053B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767465, "uuid": "638f4a85-10cc-4757-931a-e5fa09db3331", "value": "1536:lanfwtuIlNhrGvvz4/qUQK47edqUGrBCH+aBw8Spl61d6tF:lOf4tEzc347XrB7aafp4U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767465, "uuid": "4bf67869-0e99-46f7-8db0-59a312d38fb0", "value": 76028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767465, "uuid": "fe30fdfa-a6f3-48b9-8f42-fd3c7851cf64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767465, "uuid": "648a28fa-2abe-4a6c-9bf3-36ab7b93794d", "value": "debug.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4cee272-e250-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766749751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749751, "uuid": "b7cf3828-ab08-4839-92b2-f0110dc31b9b", "comment": "Malware payload (Mirai)", "value": "50ac72b20ecf61186785774ef8c7e534", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749751, "uuid": "d3c9a1d8-37f8-4e55-be16-2caaef905d26", "comment": "Malware payload (Mirai)", "value": "832cc7c034773a992f9815bd7b908f5b19493a911ae11e0a38fed09a09fa643f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749751, "uuid": "acdee814-7a99-4076-ba14-a47cb587b111", "comment": "Malware payload (Mirai)", "value": "366d9820417f1bd76719854b9f1e408b3ca74837", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766749751, "uuid": "1fc6e2d4-dda9-4eba-9672-f05755075ed7", "comment": "Malware payload (Mirai)", "value": "89fc578dd2df0c63fc86ee92f15304d9d852e37546156770387e6468fe86eb954d13509d86a7a03b385aa7e3e164ef47", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749751, "uuid": "cbb5a4c1-97e4-4384-a369-8e6cb69fdceb", "value": "T1B7041846B8818B11D5C423BAFA1E028D33172B3CD2DFB2169D146F257BCAD6B0E7B516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749751, "uuid": "d4ac0a3e-eeb8-48db-ba35-91ea5d528e72", "value": "3072:FtP9Jurro7nY7ZLS1UkSUihX4KTmWAaVgYIKmFz4f/uUnN76Q:lJNn2E/ChXJC/aV/oFzWXnN76Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766749751, "uuid": "8006d961-c21d-41f1-932f-27e7290c8952", "value": 182992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766749751, "uuid": "408a39c6-c050-4834-b7b5-5bee4eaf7879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766749751, "uuid": "fe925a22-df8e-44bc-a301-4c6cafbe2163", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41ebe16f-e28b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774818, "uuid": "3754f370-dccb-4b67-ac5b-bd029676e00f", "comment": "Malware payload (Mirai)", "value": "9126df03f7cb22e6de7b654f68a02f13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774818, "uuid": "ab77fcb2-c2a5-46f4-9812-d7f6fc99858e", "comment": "Malware payload (Mirai)", "value": "83722174ccfd5a4769b0f2ec4178e68ffaf6ea8690a9fb6d9597d8235fcff7b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774818, "uuid": "9c940d5c-bc75-4e55-a39d-569cc2d5ea09", "comment": "Malware payload (Mirai)", "value": "d758868f28d127b9bc5fd325de49e84e4c08ba11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774818, "uuid": "b17d31bb-7a6c-4042-8374-8da3bd51a891", "comment": "Malware payload (Mirai)", "value": "d853c5d48051cad9299cacb7cbd528ac7d6e51fd899045ac7747eccfaa3a38a3d9f83e0119981fa750df9728495058c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774818, "uuid": "114dbcc1-bc31-4738-a43f-b778cf3f194e", "value": "T108A3F88AFC819B15C5D522BEFE1E518D331357BCE3EE72129D206B25778A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774818, "uuid": "1a34f5b3-97e6-4e88-a9c6-0ac018bff870", "value": "3072:MPOGqpZ98adpxLiu4mTBleuSsv87ExgSqT2e:MPxqpTdxz4mTBleurv87ug1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774818, "uuid": "8f3b54c3-855f-4f54-9662-c96359bf3368", "value": 104976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774818, "uuid": "86abc29a-9118-485a-ae56-593ed3fe2142", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774818, "uuid": "aca16bbc-4027-4c7e-b0b9-b510d4d699d5", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98cf8642-e21f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728578, "uuid": "f34c6c42-739a-47ca-9cda-eb449695adf3", "comment": "Malware payload (Mirai)", "value": "56b2ad4fc6a63f270f51c069c16dd221", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728578, "uuid": "4b8fa3c5-d992-4406-98b5-3723e6bd25c7", "comment": "Malware payload (Mirai)", "value": "83b34a8d6b20a120c434eefafe564a69e15ba0d8bd0f4cb8ad15a201b67dd944", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728578, "uuid": "21270c1c-6360-4785-a19d-83107d46d7ae", "comment": "Malware payload (Mirai)", "value": "96ad067ce2af682c7b34fbc5b9f8d1c2f09343f1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728578, "uuid": "f030466c-7a72-471c-bd97-d5b07119a5ff", "comment": "Malware payload (Mirai)", "value": "0671c5af3dce2c8b140a10c92dd29703ea5c0991071415e340d9ca501e50eea8f0771c0509f5f06ef3783d408dc6ceab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728578, "uuid": "d7a7f8bf-ecc6-48f2-b554-b29627fed6e6", "value": "T16ED35B2BB3C39CE6D41062314C312362676FCB441958EFFFDE1A3794AAA77125A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728578, "uuid": "14479f2e-f354-4d6c-8f33-b8aec2845c7c", "value": "1536:C39YIFdvH5mxXjXuL4P7ux0ebY3M27wVAqtDImv7fcKVUJw647IK0Mb1XUPgtN90:SZA1ax0efyQZDXN7IKZ5ti", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728578, "uuid": "f3a99b9b-8e60-4354-9d67-306ca6a3779d", "value": 131928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728578, "uuid": "50b0497c-79d5-4a0c-b78b-1de7ae8629a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728578, "uuid": "01d120a8-ee46-4f42-b53f-4ec9c86976c1", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b32cacc0-e260-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766756539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756539, "uuid": "5709e64c-b5c2-4892-bcc6-0751d5ffa190", "comment": "Malware payload (Mirai)", "value": "b7927387287637ee9eb0e40d3aef01a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756539, "uuid": "3e83d6b5-b414-4bfe-954f-faeb28aac59f", "comment": "Malware payload (Mirai)", "value": "843e15693e4f07016785097f12aa5e16245ae6c9f031d29807c6d7a7087fc20b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756539, "uuid": "11e7e002-8c23-4a68-8d07-624cb21b09bf", "comment": "Malware payload (Mirai)", "value": "a3e6608862afa0f8f623ee840b23af4fb76e844d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756539, "uuid": "31cd90cf-9273-4667-a15f-36c5c7bafd63", "comment": "Malware payload (Mirai)", "value": "8c600ee857f6b79b048c7541402efd88012d8287325f686e11942b588d9781b0f06f492360cb8a9cc6d01faee27a89c4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756539, "uuid": "d9b2f3f3-050e-4d78-ae98-7add87e32cf2", "value": "T1CA24A51E6E228F7DF7A8873047B79E21975C23D636E1C641E1ACC6111E6039E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756539, "uuid": "48efd8df-39bf-4f5e-82f9-0ca4004707ca", "value": "3072:Q936OkAgW8y4idNR6zQorruiCxG6QSnRc5t2E1xb45M:Q9AAgW8y4idN80orruy7SRcF1xc5M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756539, "uuid": "31933a6b-1208-42a2-8a18-a20485bca2a0", "value": 222396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756539, "uuid": "abafc750-be66-43b7-8399-95b311dedadd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756539, "uuid": "f14e004d-4d9f-418d-ac8e-3cdfa32eb7fa", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "861ad0e4-e295-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766779227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779227, "uuid": "ac7fa28d-a32b-4e91-9453-b9e4cc79cc93", "comment": "Malware payload", "value": "a65397f6d500ec6e16f845beceae2ad9", "object_relation": "md5", "Tag": [ { "name": "GootLoader", "colour": "#9156D9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779227, "uuid": "9ee37056-0d53-48ef-9d71-ed59b02201c9", "comment": "Malware payload", "value": "849d06de86ac24796d562ee309b56b04cf338f6631e36316a0341b678b21af2c", "object_relation": "sha256", "Tag": [ { "name": "GootLoader", "colour": "#9156D9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779227, "uuid": "938376ec-1036-4cb2-a81b-6c9a269b7e56", "comment": "Malware payload", "value": "59b21c3f08e80a46cd8514a0362f2a7b85fa4b3b", "object_relation": "sha1", "Tag": [ { "name": "GootLoader", "colour": "#9156D9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779227, "uuid": "457898b9-4a57-4927-b7de-52d76a11f75c", "comment": "Malware payload", "value": "0b6373f69e290ebd32a0f641265d06ceb116e10d052ef5292b05cea9803ad392263c406843c8af51a500e4589c285449", "object_relation": "sha3-384", "Tag": [ { "name": "GootLoader", "colour": "#9156D9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779227, "uuid": "93eff21f-faa1-4553-ad44-36738cb98f59", "value": "T1CA87121C2230ACBD991EE5B123AEFE5F570D85722583D529EBB40D41F70E29AB2C63D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779227, "uuid": "31bc1c2b-fad6-4f94-ac91-4fd5c293aad2", "value": "98304:fDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDT:7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779227, "uuid": "2d7e589a-3bc3-4239-9024-4d3e530a0093", "value": 39452786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779227, "uuid": "d7822cf0-eccf-4a3b-921b-1f14096cb093", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779227, "uuid": "5cb3376a-8ea4-4404-9853-6297a1976ce9", "value": "Legal_Case_Management_Guide_2025.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11ab6ff0-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779032, "uuid": "1cb7657c-017a-4e27-82dc-0821c04c13e3", "comment": "Malware payload (Mirai)", "value": "5d214af5e7e65afd258a0bdc8f44f1da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779032, "uuid": "88d25ad1-0a8a-4b1f-8b4a-751e333ed9c8", "comment": "Malware payload (Mirai)", "value": "84d54b49c488bf0106f61ff427638497b59295c88d5b7fc4b74b1aef066974fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779032, "uuid": "fa3ea332-81d0-4dc8-9662-0aca25c9a037", "comment": "Malware payload (Mirai)", "value": "70e3133fd0aca21bfebaf7f0d2da688693096007", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779032, "uuid": "380b5740-47ec-4afb-bd18-d7ffdfa78c0a", "comment": "Malware payload (Mirai)", "value": "94fd9a2d2541c749af02f00a03b30b900fe8f7a954850fb6f8b0381121be05dc536c1306cff39be52fdb0b282df75bdb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779032, "uuid": "bbdd6532-72ee-4d0f-b90a-4f09c959020f", "value": "T1EE432B91FC9245AAC7C117BA771E978A33A26369C2CF7313DC080B5076C9A4F4E67B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779032, "uuid": "d32e2abc-1171-4d5e-8657-e95fca225755", "value": "768:b2uoWsjpIE9StBkNxCU8d+bc7DdZVOIr9QKw54u8iMo2FX0nOz5k2:bABjpIE6auz8gDXcIr9QKwFfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779032, "uuid": "7489ee97-5f39-4da9-803f-1cac8f3f8078", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779032, "uuid": "473f4757-532b-4a00-9ef1-62bf6f09c0d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779032, "uuid": "736e571f-b943-4da3-9a84-5fc2754fd7a4", "value": "titanjr.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20af71f5-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767461, "uuid": "c332fc31-4e4b-4b07-a168-38f4a899c0cb", "comment": "Malware payload (Mirai)", "value": "0cd9556335fae7db64303a4bf5eedbfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767461, "uuid": "20db244e-8300-4c4d-b54f-13fa3640439d", "comment": "Malware payload (Mirai)", "value": "84e3f0e9ae812e7da2b101156fa943f73c6b06c15e93b975df6128e2be30bbb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767461, "uuid": "ade61ec3-29ed-4b43-8923-ece92af2907e", "comment": "Malware payload (Mirai)", "value": "b3550e990180d5bd6a98b89b051706c46d4e16b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767461, "uuid": "adaadaea-0266-4235-8b9e-ae3b8184bdb8", "comment": "Malware payload (Mirai)", "value": "f866ff57a4206e668f4c7fc5b77b78f254d7e18bb5dc60a3d9ad943818504635d90afc334dcf7036e5bc0ad138d50a0d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767461, "uuid": "6ee4b1db-6c36-443c-98cc-0210e0a0f695", "value": "T144633BC1AB43DEB7E41301F012F39B365A32FD3B182ADA82D365FDA299525C1B51636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767461, "uuid": "c1176c36-5fe6-4245-9fef-afa46c043aa3", "value": "1536:3NtPQgTF5VX0oWLtUsX7vLunN0PIYcKLkaW63KBxGSxB67s:wgTnF0oWLtUsLYGPQKTd3k6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767461, "uuid": "c1195d13-689d-48bf-be79-1e28a62943fe", "value": 72092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767461, "uuid": "3e019c7c-8734-49d0-8faf-35db859923d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767461, "uuid": "f409cc0e-d538-4189-8d1f-366db78566be", "value": "debug.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99b186d9-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778831, "uuid": "fa727cfc-3498-4060-a644-1258a21bed0f", "comment": "Malware payload (Mirai)", "value": "268ee5fce696c8da9029df4199690c79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778831, "uuid": "e5c4a8e2-00cd-4375-8dd8-836573a890f5", "comment": "Malware payload (Mirai)", "value": "8556b314fd3c94aa8c1d44412a855ac13634786081b1d04b3d4804ca6c95a8ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778831, "uuid": "a10ad375-39a2-4118-af5d-a5159d2bda36", "comment": "Malware payload (Mirai)", "value": "89c743176a5231376d0852a2a05fa03ad6b8c18f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778831, "uuid": "b453bd1f-ea97-44d3-8cbe-b57b6a94e376", "comment": "Malware payload (Mirai)", "value": "829965bdabeb67e3b47a0ba0990d6d226786d4df6c842bc4633e8d2310dd178729f098d753179b24392dc37b7a86a910", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778831, "uuid": "ec257d74-8001-4112-b1b4-5772b18bc479", "value": "T17AF2E060F59034C9DEA999390CD6D2C5A3E24FF97308AFF16AC11F00090EC27A957EE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778831, "uuid": "153f7cec-21d2-4562-bdf8-2b941a12fad9", "value": "768:X7160aX0xrq5uHZEUZxhIvTyWKeB/SKnOLwa4uVcqgw09Q:X7160akRou5EoxqyCh+ca4u+qgw09Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778831, "uuid": "84e8bbd7-2aad-4894-a748-75a00e245e53", "value": 35108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778831, "uuid": "77225a61-ef4a-432f-a33c-7c55a64579cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778831, "uuid": "41f304d8-0790-4fc3-93fb-2a4384ebc5f7", "value": "Space.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6783ffd7-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711315, "uuid": "255e68d2-be59-4c2c-a326-f3384b75b8f0", "comment": "Malware payload (Mirai)", "value": "0266799b10a0d1a1bf0c478f5cc0fa76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711315, "uuid": "2f4181bd-a4a4-4f65-93f3-3e8c0ba40c28", "comment": "Malware payload (Mirai)", "value": "85737cfee54e747fa215f7235a6785c51c9bc5c248a4bdd2e52d1c88ca6a7b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711315, "uuid": "9c462194-5daa-45ec-bd7b-ee1aa4d5c0d0", "comment": "Malware payload (Mirai)", "value": "5681bc82325f22e82891c5472d8f7f3d3f388acd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711315, "uuid": "77e6d504-b917-41be-84bc-0aa7eade0be5", "comment": "Malware payload (Mirai)", "value": "d1b77f65a40ccea3f5940a59a15269f09aec1fd48de185a2afa3a0053a6562762aef54eddf7997d2506b7cac2dff4f35", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711315, "uuid": "b46089b3-54b4-41b9-a334-ecff9b366727", "value": "T1E2832A85BC81CA17C6D8227BFA5E42DC332653B8D2EF7203D915AF157B8682B0E3B551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711315, "uuid": "4ff28cbe-f7f0-4750-8d22-baf12be1e469", "value": "1536:glMmKqorEKV58CWx8AEXMb1pMm7MMcAh54j1h2yu5lzbcmO1T2bVR:wMRfnYNMMcAhG1tu5lbc51T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711315, "uuid": "9fbf1011-8657-43ec-821c-1d17e4879542", "value": 81604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711315, "uuid": "378589f4-8a13-4857-908d-df4712edb87f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711315, "uuid": "d29d47f3-f3fb-4494-99d9-cfb4471656ee", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8717f38d-e253-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766750882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750882, "uuid": "52cfbb8c-9219-4ae9-8a04-37c5081ad2fc", "comment": "Malware payload (QuasarRAT)", "value": "91a1e843f68c354c5985d529a8ecc09e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Quasar", "colour": "#D17794", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750882, "uuid": "06be0eb9-41f7-473e-ace3-84470d073891", "comment": "Malware payload (QuasarRAT)", "value": "8583c9ca5e88f167def716a23984b50d06925abfb49a724d8d5625b4c0e975fc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Quasar", "colour": "#D17794", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750882, "uuid": "15b6f539-b9a0-4a7f-8e5a-d536b46eed72", "comment": "Malware payload (QuasarRAT)", "value": "1ee0eee16b9786106bfd2b66436636ebffa0ed50", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Quasar", "colour": "#D17794", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750882, "uuid": "698ae937-c2a4-44e0-a14d-8e7aa7c4015c", "comment": "Malware payload (QuasarRAT)", "value": "b4bc3778a7b518fd0154f732ff1c6d7d963a4ad75dce9a2c8fc8e2bd10982cb927693f1958e288f72ce90c156a952017", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Quasar", "colour": "#D17794", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750882, "uuid": "6b6f005b-2b85-4b9f-a09a-f430f48fa9a4", "value": "T111E54B1437F85E23E1BBE273D5B0041267F1EC2AB3A3FB5B6181677A1C53B505841AAB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750882, "uuid": "0f9ed24b-0bff-498f-9b5a-6eee1220d291", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750882, "uuid": "e7fd2325-053b-4b9f-a5ba-5299a4c07c94", "value": "49152:mvlx22yvaEXJfPalYjx1tiHq4KlCs1JnKoGdYuoTHHB72eh2NT:mvT22yvaEXJfPalYjxfiHq4KlCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766750882, "uuid": "284b78d0-2cf7-4052-8e4f-d50fa08ba272", "value": 3271680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766750882, "uuid": "67546e53-1397-44ff-9939-a082e8cf62ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750882, "uuid": "956e24f3-b4ac-4873-b1bf-12d14c0f6f78", "value": "VertexGuardian.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d198be0-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778648, "uuid": "0a9b0456-548a-429d-a4f2-ed68c2b525fe", "comment": "Malware payload (Mirai)", "value": "ef343f272a91f4efb66f340aba57cad4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778648, "uuid": "95ba8ae8-e107-4a4e-b429-41bfcd53b076", "comment": "Malware payload (Mirai)", "value": "860bb2d8e380c000e61ce5498c3ec91b958fd6cdbda57ab6258d056af506772b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778648, "uuid": "413bed78-c2c2-4fe2-9f35-3d68c93bde1a", "comment": "Malware payload (Mirai)", "value": "590c5d5f4bbd0453784e781e5696728d12959133", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778648, "uuid": "894f531a-3280-4b68-af4c-671ff0c0285f", "comment": "Malware payload (Mirai)", "value": "0e14e4e93ab092f955eed38fb80f96a1311fce09266507b69e83c8faba3d2bf06daa73af6d5c9eb7da4257feeb5abbc6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778648, "uuid": "31d89048-55dd-4c59-b63b-77b321de1ff4", "value": "T1E3C31959F8929A62C6C356BFFA0F428D373613E8E3DB7113DD186B3136C651A0A7B142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778648, "uuid": "6b476e53-9803-4438-982c-b8e1cb883486", "value": "3072:FCkUmOKdJ8VJdeMNZcXqvlC1bjHH7ctXirVpvj1XqF8pcjhZ0Br+Vn53uF:EZmZdJ8VJdeMN8qvURXctX4pvRZmhZQ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778648, "uuid": "ea0e142b-0259-47b8-9d95-6ab2994c098f", "value": 124084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778648, "uuid": "0b684071-5a6d-46b9-999a-f9f0d371e923", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778648, "uuid": "e2d804c5-9477-469f-81a0-6b5f1cc68856", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18ae4aaa-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711183, "uuid": "b148c6e2-fadd-48a8-9f4c-c9794e53d340", "comment": "Malware payload (Mirai)", "value": "589f7ec08a5ada1fc625636b4164b1f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711183, "uuid": "d43092c1-ec50-453b-aec6-fd3f32c98207", "comment": "Malware payload (Mirai)", "value": "861594e2f4e64e61b268d57305110a115cc4dc2ea920e56c1e901f13288391ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711183, "uuid": "0a059be9-0b07-4969-8ec4-9741f2790857", "comment": "Malware payload (Mirai)", "value": "3e5f5ee7604177f4e594aceafe259ffe06b6f61e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711183, "uuid": "e6d79067-550d-41a0-922f-057b8ef1755c", "comment": "Malware payload (Mirai)", "value": "ca9de635ee9f3bbe8ba1779b24e5ff9d7c87bec49ea17153d4db64e8c706fb6d61d99eb20ff7fab6b1518840a837ecfd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711183, "uuid": "561c408d-5692-48f9-85fa-233d5e0507cd", "value": "T143144A07B5C080FEC499C1B84BFFB13AD972B45E123CB29B6794AF222E4DE601B2D555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711183, "uuid": "274f4b03-b2b2-43ab-a346-adcbe774e188", "value": "3072:Mhzm/Obk/+lDdzBiu/eqjkZtzyGwh6EIynK1xyYyv7I56Aneun5J9QLRhmx1G9ai:M5m/ObkqDdzBinmjdkMYDwAx5Qpc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711183, "uuid": "254dd85d-1725-4ed6-8572-4d5737dc0fed", "value": 209352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711183, "uuid": "c70acc4e-9bad-4b5d-aab2-21f03afe004f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711183, "uuid": "8139838a-f2d8-4189-ab6c-850d8466ef2c", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a858eff7-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781862, "uuid": "68ff7006-63f8-4eed-9277-270c52bf3fc5", "comment": "Malware payload (Mirai)", "value": "b3cb5b6e91fbcd8f39a769d69edeaa0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781862, "uuid": "ff7401f6-c89a-4393-9922-24bc68821736", "comment": "Malware payload (Mirai)", "value": "8615c605803586498ed882561565c639ba2804dc57305a3eca012e2e0037836c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781862, "uuid": "d33e83ad-45b3-47ae-8a41-652acb285da1", "comment": "Malware payload (Mirai)", "value": "27fe5901dfc7e7f6ec440059e5af3269e0fe1ab6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781862, "uuid": "1bd9e8a9-9c3f-46e3-91db-d2578c39fac7", "comment": "Malware payload (Mirai)", "value": "24f04933b8cbc03d39a542b37500fadfd3d361e07d7633d263b4059e8d346172a9734229e96b0bf635e3c2f5d1a4be39", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781862, "uuid": "a5b7efd7-e24f-45ad-85ce-fb96a1c6376f", "value": "T14E831995B9418752C9C256BBFB1E028D772B036CD3FA320799269F61378B85B0E3B151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781862, "uuid": "d6808698-39c3-487a-8410-dd98eecce631", "value": "1536:40PEARFbrWTRzl3UaW1O9KYe3lqHF6gnE7GDv3CX:RPNRFnWTRZkaMvQg8U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781862, "uuid": "6f89e872-fe24-4275-bd16-e14d781d1593", "value": 83296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781862, "uuid": "03473198-1957-4b86-8187-5b4f9e16fe06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781862, "uuid": "b0754424-bda1-4d53-afe9-7f21fe333e2d", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af8bb7c5-e1f2-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709289, "uuid": "5e5800b4-9724-4b0e-858f-9a9d0e481dde", "comment": "Malware payload (Mirai)", "value": "c3c26b27ea16b6fbdc7de8e9bb7671ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709289, "uuid": "5b6cfda6-19f7-4b0d-b92a-d219af79674d", "comment": "Malware payload (Mirai)", "value": "876ff20ad4c2d9b76c97613b7ca3d952ab52b0a880a6de88f1684d468fd52cfa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709289, "uuid": "4367ec82-08d5-4941-89ef-e9b6d5d6af70", "comment": "Malware payload (Mirai)", "value": "8bec11efc49d754c8a8052e1d1c1f292b3617045", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709289, "uuid": "14c3e32e-59fb-460d-873c-615aa382b499", "comment": "Malware payload (Mirai)", "value": "a6eb11c75bdf0b05f484c0b50a4f8c59e62d521939cf5073197864014d5af6be944a33a4ec43766bbc4139a245a411ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709289, "uuid": "c73e8f84-9781-446b-94e7-552c600313ec", "value": "T1C9334B21B93A2E27C4D1B8BE21F34724B2F6171A26B8C65D7C720E9EFF1494021176B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709289, "uuid": "4dc86a12-cbbe-46a5-97e3-6d200efa706b", "value": "768:990ouFq9H2r9dx/p077WUxI7b4VWG8MLIop3O+0868lBzKK8l:990vSWJdxB077WUxI7b4VWSLPx0ezze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709289, "uuid": "56f2f1df-4b60-49f7-8c8f-baaf0fcc3c73", "value": 54052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709289, "uuid": "79a48625-8a71-440d-b45f-1dee2c993bc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709289, "uuid": "b5da7f26-5184-4eb7-95c6-505c66ec9251", "value": "zerspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e868f7-e296-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766779655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779655, "uuid": "8aa1c2e1-37dd-4738-9c0d-ed006f93227a", "comment": "Malware payload (Stealc)", "value": "799261f351ad5509ea5c697dbfd8d7a0", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779655, "uuid": "f0a12ac7-083a-4547-9b70-f0834c731fb9", "comment": "Malware payload (Stealc)", "value": "878bef133f8e872fde2f30115ba790a1e25c7058579c208604b7701f6f78fb55", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779655, "uuid": "28cd5cf7-4703-4462-b6ed-5835fb6f6b24", "comment": "Malware payload (Stealc)", "value": "2e2dcf5d0bce72e43c79661305f8123c3e3f21c9", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779655, "uuid": "f25b47c9-f3b7-4d8f-a759-3ec0bbf73c03", "comment": "Malware payload (Stealc)", "value": "359ebf87d7d9ad4a107178218ee7869e17124f6dfb6325bdecc302376f3aea22196748635805c693508fe472d0e83807", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779655, "uuid": "63bc2007-faee-400b-a5eb-4f680fbc788c", "value": "T1C7953B03D6A34D78C9DBEBB4925B53369A60FC2546787C6E5EA8C7306F22D40932FB14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779655, "uuid": "08c288c4-b568-45ee-9aa9-34480bf90990", "value": "ad8e050e3de2a4c51b3f7a78c24d6b8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779655, "uuid": "c74e7835-95b4-4d9f-a53f-da71adce61bd", "value": "24576:JLbdOi6HQ1JkJUyue0AyCeNReX2Xm9Q90QEaMpYnhSMXlrCYIEl0b4E:JLbdbGQ1JZe0AyCeNRy/qEa4YD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779655, "uuid": "fe95ae98-78bc-48be-8559-3cc0f852cc14", "value": 1977928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779655, "uuid": "239d8f80-6fba-4c22-8fda-6e35d1dd7691", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779655, "uuid": "a85f10ca-db9d-41e5-8b95-e7cda500b4ce", "value": "libstdc++-6.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "220cbdbd-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767463, "uuid": "bd871537-b194-48f4-b853-2178efb2b144", "comment": "Malware payload (Mirai)", "value": "3027bc4bb255a046a9046192c35394c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767463, "uuid": "780c8149-dc91-4e07-9de5-de8d2ffaff44", "comment": "Malware payload (Mirai)", "value": "879df6dc96056b57859af7a64d521721d11b3d3392cc858a072eed1fad291feb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767463, "uuid": "230cb607-a072-4847-ac02-63e207033aad", "comment": "Malware payload (Mirai)", "value": "80fe8598e5c17bb650fbf2a2e5a5a6bbf445a88c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767463, "uuid": "c1c48fda-0717-4389-b175-0a3963c49fae", "comment": "Malware payload (Mirai)", "value": "4e05b32bd8d4665f4f58ed1c17fe6fb0a69751160fd15d010b99aa5e8d775c755b50533cc93f6e482b2cfdba6db86a19", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767463, "uuid": "ba1b0840-43b7-4973-8e53-fbeb10737431", "value": "T1B7834C42BD825F13C5C222B7FBAE418C3715ABA8D2EB3102D925BF9137864AB1D77711", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767463, "uuid": "76d181eb-0615-45af-8171-c484c7b53fd3", "value": "1536:neWzsqrcBu0XIf8Jqft+YVZjnqtz1byEcU0iIv6l61d6f+P:neqssKIfhNZjk5DA64m+P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767463, "uuid": "13bd0a34-aa26-46c0-9cd3-36fa29bffe8c", "value": 88324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767463, "uuid": "287ccc44-4b61-4606-8120-43b64d5cd8cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767463, "uuid": "c842454f-9aeb-4864-8d90-9ddacdf1a9ec", "value": "debug.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ecb37ac-e224-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766730574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730574, "uuid": "98aed955-a255-4ae1-bd2a-8c6d302b8fbc", "comment": "Malware payload", "value": "47e50e1414591ac809991dbeca94b1b0", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730574, "uuid": "6ca26d9e-7104-404d-ad83-fb4c3888d615", "comment": "Malware payload", "value": "881d6623f3b714e1d23df01c0a0655135b6de58d7b161de61279add74fbcd4d5", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730574, "uuid": "c963957b-fed0-4862-bcf0-ac3a54489eb2", "comment": "Malware payload", "value": "74e35a6db8e05a636a08a092eca64ce051fc39bb", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730574, "uuid": "14131995-2341-4487-8c60-54726535f256", "comment": "Malware payload", "value": "d8157e4a61b464eb50344757425c5a9e4ce64241204f9692795943262a080c618144223d89cdef3892000d1e31edcaeb", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730574, "uuid": "320eea97-d04c-4531-9c68-76a9ccab48bd", "value": "T197D1B796ADF334587407906DCBBEB2183059905B470ACD9CFECC62A8CF4D1A45622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730574, "uuid": "02179559-c1b8-4795-804c-299719284be5", "value": "96:nOZdLI1DwyIE/CnTK8+t9yiYe94ewZelHNfGGAvOYHLQc0PWHARG2WAJZ8Ul+Dbh:OZwIE/CTK/3yilYoHsfOBro2Tc/ObSmy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730574, "uuid": "486d3e8a-1111-4f36-ba2b-69e1cc71c708", "value": 6653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730574, "uuid": "594e5e7d-7e07-41d5-813b-c3786f59a0aa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730574, "uuid": "9e1b12da-d818-4ef7-8181-aa40614513e2", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13ac980e-e280-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766770016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770016, "uuid": "d243372d-0c66-4e33-b156-06b104993289", "comment": "Malware payload (Mirai)", "value": "201843ea9a684e5cc01c34fbbbfcb060", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770016, "uuid": "d0d1a2a3-c220-45c4-bb13-6c10b373221c", "comment": "Malware payload (Mirai)", "value": "88462482d28c5d3d95ba8ee5f243a814d3b11d3640d18413efb58e12f5e5f35f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770016, "uuid": "e4e92d4f-6f96-4a9b-b14d-ef00b67ed877", "comment": "Malware payload (Mirai)", "value": "1b3dbe25f2e1d3fa573e71edfc89506077afcb11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770016, "uuid": "e0c5e6f8-310b-456a-a51d-e75c3915b47d", "comment": "Malware payload (Mirai)", "value": "422795a7d1bdaac0dcf9ba7dc3788c5f559ca7950e0bc85bb940e19126eea48ab34f47ff77da1c15ef745b4d79ae6ddb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770016, "uuid": "86d692e7-ac55-43b1-9aec-8a414240dfbf", "value": "T176245BC7F800DDBDF80BE67784170909B530B76250925B377257BDA7ED3A0A90A27E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770016, "uuid": "8d0b265f-464b-4ce0-8996-78d3bfe487c0", "value": "3072:C4kxpjEPAbCt3G5BzXnpq6F3BySckS812PO619u7PKR/GVbjbiGLhu4Xuh/Fl45:OpAPjd8JxySJS81L6GSR/wLc8Q45", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766770016, "uuid": "ffc6b803-c534-48d3-951c-f62fda068871", "value": 216448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766770016, "uuid": "f584faab-520d-40b0-91ad-afd192acae8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770016, "uuid": "baca5689-785f-49aa-a320-f8c68692d3d5", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2424c965-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "51f1f449-4146-44a7-b9b4-ae20bede5403", "comment": "Malware payload (Mirai)", "value": "ec5f5d7206f9b8fda21b5677bc5274a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "c158e52d-47eb-4fd6-8554-818146c774d4", "comment": "Malware payload (Mirai)", "value": "8880ac09898869a63d5839e97a5a59a81f9e50b1227a9180cc4de5f609786305", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "6d4c5cbc-0727-4539-bac1-828e3958fdad", "comment": "Malware payload (Mirai)", "value": "3eb0eb489b4248d2e5c163b2dbc6de8ae12f546a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "b580dd9b-128e-4294-99a9-30432f3dfa29", "comment": "Malware payload (Mirai)", "value": "9d06ea487402e0231da009bda6d2a58c9c427a43b037a63ab81352e61b2fa07ea302958535809ff87c3477747e18d92f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "a2c79c4c-fe0f-43df-b5bb-89e71e49d94c", "value": "T16B82D01BD20967B1D2F19879CEFC434267E20A78C3D53A03692174F8E2DD45B63F92A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "33faf37e-386b-436b-8cab-f9368ddcb8f9", "value": "384:vU8ucP4fqbh8HqMq6c/gcDKtF10whC3GmlhymdGUop5hTwM:tryqkqMkDKtFidXls3UozyM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767466, "uuid": "79544fbd-c873-4689-bf51-88fe09334afc", "value": 18616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767466, "uuid": "22a67216-9e9d-4ee5-a536-7e5614c7a842", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "a672100e-9a8d-44d1-b6ff-94627b480868", "value": "parm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46b3a326-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779121, "uuid": "2aa4c135-70c1-44e3-b19c-cfdf279b14c4", "comment": "Malware payload (Mirai)", "value": "fb59b21a84ce01554459c0af8615f3e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779121, "uuid": "7cb83d58-a9b7-47da-ae15-1e09caaebb11", "comment": "Malware payload (Mirai)", "value": "88b16551b5b5a58309e9e7fa0ee9da93c516e3758205bd1991f5f578584f7846", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779121, "uuid": "ddfc71eb-04af-4668-bc07-fcbd2dcd2d3a", "comment": "Malware payload (Mirai)", "value": "97836d0dadaa99d30b9aa70224b60c9d812be618", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779121, "uuid": "7b07a9f5-8b5a-4633-8a6d-8da64a138927", "comment": "Malware payload (Mirai)", "value": "211718370483c70a263e6993707b5305975473669faa15d13db6c0608ad047446496def7df2d48cc5cd9743fd1fc1615", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779121, "uuid": "fb042f72-ea02-4a54-b1cd-ed670db301bc", "value": "T1F6A32946F8814A21C5D512BEFA1E318E331357BCE2DE73129E14AF2173865AB0E7B615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779121, "uuid": "1db2630f-51bc-43ee-ab7e-eae6d2a6aaeb", "value": "1536:wAnTSlO27kf5J7ZLBpqpp8GBgkQxEE3k7uaRrtOXrD0Rilp2x/F0v7Xh5GYWY6:ilRbpp8/uik7uaRgp2x/F8ThULY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779121, "uuid": "437c1e65-e998-4d2b-b39e-aab62ba35b63", "value": 99804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779121, "uuid": "c2fbccec-505f-466f-b20f-310e78619f81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779121, "uuid": "44b8ade9-030d-4cf4-852c-d8bae25a67eb", "value": "windy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4268a85a-e262-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766757209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757209, "uuid": "3ca8fca5-f50b-4b8e-bc9b-7642820a5cfb", "comment": "Malware payload (Mirai)", "value": "148b9e1f9b1ad932b6cf60de8ae2ca75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757209, "uuid": "675dedf9-4fb3-47a8-a912-3da2aeadcf83", "comment": "Malware payload (Mirai)", "value": "88b28bf06b0cbf963b64214cd941a212ed3a8b17a9558f7c8d7db6b10eb0369c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757209, "uuid": "d0e6bbf4-9318-4795-a4bf-b387c0ea142a", "comment": "Malware payload (Mirai)", "value": "815a34c444e2bdaebed60837071e4e388ee557b7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757209, "uuid": "d6879911-385e-4336-afd0-b0e5f1e49642", "comment": "Malware payload (Mirai)", "value": "77e0f1e3195ab1fe7b88c2de82955fb5d1d1102c25461b91e9111229a5a33dc6eb9b78a814ddd1bab9e586fe0dfc09c3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757209, "uuid": "1ae4e9fa-80e1-4344-8397-949814f1134a", "value": "T1B8831985B881D627CAD422BBFB6E41DC332613B8D2EF7203D915AF15778682B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757209, "uuid": "9f5e0932-c620-4ba5-93ed-dafa795dd09e", "value": "1536:QjE+UCn3/Fa2I2gfUHHqrUItDoRZAh5JjA1GvV4LBG+kQIT2bVRZ:Qjnf/irLUZAhnA8VGG+lIT2B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757209, "uuid": "05f4a0f9-cdf7-408e-bbcd-96fa4abd565b", "value": 83136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757209, "uuid": "850124d3-d90f-4cda-ad43-50184db80d3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757209, "uuid": "4a5abc0d-9301-4280-b893-3cb669a6e90e", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6153aec0-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771864, "uuid": "dc1b60d4-2460-458e-99b7-77e71459221e", "comment": "Malware payload (Mirai)", "value": "9f7795784b426ab9c0fc2017853cc5a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771864, "uuid": "4411b3cc-88e0-43c3-8c6c-78adab7e33ad", "comment": "Malware payload (Mirai)", "value": "89402e452a84d946e00bd6abac1b70ccbd54e5f11befa4b6aba25008106f23e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771864, "uuid": "5f16f339-d04d-467d-a6a2-eaedbfb618be", "comment": "Malware payload (Mirai)", "value": "02e178c8c9aeeb469b5cde6bf95e295dbc7f07bf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771864, "uuid": "2aeed276-6c1a-43a1-a4d8-723ff67ccfe0", "comment": "Malware payload (Mirai)", "value": "936118a5adfa7696eba445a3191d9d3095dd6f8b94a12e1a6442a1259305519e7314807251ca3adc3d32eb925adc93be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771864, "uuid": "bc6415cf-dc55-4855-80e0-21dae48dc8f9", "value": "T116833A85B885C623C6D422BBFA5E42CC332653B8D2EF7207DD25AF15778682B0D3B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771864, "uuid": "a4dafdd2-6b1b-498a-8951-79cfbe2255d1", "value": "1536:cM8GqKSVkmtivyZarZgNogI3KMew5C6Dj7vKiBxGbSvfT2bVR4X:cM3tbYpEKMekC6DXvK8WQfT2AX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771864, "uuid": "4480cc49-44b6-42e3-b4bd-a1b63f57b01a", "value": 84424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771864, "uuid": "f8383673-1fc5-4013-b455-5bfdd2ec8422", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771864, "uuid": "959acbcd-e861-4c09-ba9a-2a15e3c972b2", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "132f39c3-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747252, "uuid": "2c35440b-e98d-4475-a23b-cf658c526ba9", "comment": "Malware payload", "value": "40d04fe41379a2ac34e9110fc1d5aaef", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747252, "uuid": "74564be2-6c2c-4598-a272-16217a764821", "comment": "Malware payload", "value": "8a241ad7bb4810c985bcc58220c3d0b83a70460c73e74a5abd8c2f9fa270c65e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747252, "uuid": "1fb90836-ddaa-4a28-875e-b32e25f2c6d5", "comment": "Malware payload", "value": "c1b1d8d26a089e6d386e2c6ab3e06d18f083516c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747252, "uuid": "9673ac99-edbc-43a8-9435-be5a210aeb79", "comment": "Malware payload", "value": "0fd1a4629222b77fec357fb675123da5330d63b44a3bd1e5b481a06922b872ca3b0c11491d77882a1f1d944b7ebc0804", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747252, "uuid": "763fd77a-ea5f-42f9-ac35-ad83ef0561e6", "value": "T1E06309CF1D219DA104BB73ACEB152EC7002C35584FB6BF84BE562DE98A668D7C2725D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747252, "uuid": "c30a6609-e488-476f-a348-70930585a6d0", "value": "768:I8w/h62/jWs6oS+xISN0vLzmyEqsGsx5whrdkfScBYrwz2y8kTAlGB:I9l/AoSSMLze5AusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747252, "uuid": "cef9b56f-4781-4188-85b9-539d15f3ab96", "value": 69626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747252, "uuid": "d6480bb0-a1fb-4bda-8fa0-f0ae865123f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747252, "uuid": "318204d2-c47d-40f1-a5c8-f9d063bdc01b", "value": "invoice-1645080830.pdf (74).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a471f6b-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747317, "uuid": "abe002b8-8289-4ab8-8b70-7cc18a1f29b2", "comment": "Malware payload", "value": "39e5d47180f510d943a57b758cf940f8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747317, "uuid": "62ef5613-6670-4bb5-9a6a-80ef0cbf848a", "comment": "Malware payload", "value": "8a765e50cbb349bb4031d247d57cabcd7de611413be47c49c4d6d36f12cb6edd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747317, "uuid": "26803924-373b-4c5a-8c4b-b36bcf3f9fa3", "comment": "Malware payload", "value": "0a8c266f8fc118c016492d8fdab845a8f4022363", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747317, "uuid": "3c07c3ca-538b-4030-adc5-6cae92d58d3b", "comment": "Malware payload", "value": "066e52187f259c00be79d21bc38dd431aeb82f54f52889441ffb4e44eb2467d83c1990afc8ed1ddbc4ccc81c32f69da6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747317, "uuid": "5a295170-68c1-4b82-92b3-bf645f5e49ea", "value": "T1F6632879774038AA42F411BE57454E3428ABDE7A05C7A37F49C3A0C6871EE534CBE9E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747317, "uuid": "7fda7dc0-2daa-4916-a358-2654ceeb02e7", "value": "768:I8w/h62/jWs6oS+xISN0vQCtuLc0kQsdjtQ1dkfScBYrwz2y8kTAlGB:I9l/AoSSMAZusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747317, "uuid": "bff13dd8-0a06-401d-ba81-7b5c01531ed5", "value": 72513, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747317, "uuid": "9714d5c5-7a51-4a5b-848c-60bc085ebf50", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747317, "uuid": "e3d18b1f-5108-408c-8429-f288a6afc27f", "value": "invoice-1645080830.pdf (57).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "204c2f21-e1fc-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766713343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713343, "uuid": "3a3d2244-d15c-4ed5-af09-a8497703c38a", "comment": "Malware payload (Mirai)", "value": "a999a539261986ce42997c2be55c859c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713343, "uuid": "0e2dec66-6458-45c7-8d46-9da49c2dc747", "comment": "Malware payload (Mirai)", "value": "8ab401a3f76ab25f348bb26ad54cd885a18a2aa5f734b1ac49190fcc8996f5dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713343, "uuid": "483a00ce-501f-44c3-aed7-f7c584f4c472", "comment": "Malware payload (Mirai)", "value": "baac4a49f2db17d72a3496c8417476535daf4a25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713343, "uuid": "57a72bfd-c233-4028-a6e0-878808704aa9", "comment": "Malware payload (Mirai)", "value": "6473db28f9e4700530cbf8dd43b03647da601f320e103bcc7532e8976a06df7bf82357c7fd64a34374b601ac46f8a141", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713343, "uuid": "26e3dac7-5a90-4383-bcb8-646dc61832c6", "value": "T17F44D64E6E228F7DFBB8877447B39E24975923D726E1D585E1ACD2001E2024E641FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713343, "uuid": "9b968e5c-02b9-416b-8b97-b5a18c5c74b2", "value": "6144:lXR4tQuWA8V9KnBrwYve8mKdV0S/MUAlqkMQhnQBq1:R4ek59/MFAq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713343, "uuid": "62bb7f40-8787-4d50-b079-1779c9aa4b87", "value": 261084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713343, "uuid": "b2f208c7-03fa-41ee-8031-c3d31a9ddfcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713343, "uuid": "398e62ed-6eb3-4fb3-b518-5b1d91611c55", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1a7b74-e262-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766757499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757499, "uuid": "e4154bf6-c3c7-4320-ae49-bffe411625e0", "comment": "Malware payload (Mirai)", "value": "efe080b3cf83592e7ce871ae681c57cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757499, "uuid": "d1b07a67-b519-4301-8f59-ae4b84b95cf6", "comment": "Malware payload (Mirai)", "value": "8b44e2b3fa8a821297cd5c7d1e975880cddc7ca52ed631b4fd649f97260585a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757499, "uuid": "794495cb-d3ff-4405-b269-4fb17cd2ef28", "comment": "Malware payload (Mirai)", "value": "a9167c1cee0ad073531c924abe9ec49355ee4d77", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757499, "uuid": "944db552-97e8-4998-a5e7-3359a693fb4b", "comment": "Malware payload (Mirai)", "value": "f2efb8d42c1dfda09ac85c51bae7ea3a63e733e85213874fa82134f709ac3910f282229c920eb85a30ef16886c419510", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757499, "uuid": "573c8bcf-df56-4fca-a51c-1d74abfd2606", "value": "T1C0A3F84ABC819B12C5D562BEFE1E518D331357BCE3EF72029D246B25778A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757499, "uuid": "b1103890-4698-4d95-97b1-0f42296f862a", "value": "3072:LuHidZ4j3t+hm3EhjQ9OmTBleujEvv7Ex/SqT2+:LuCdZMZEhjKOmTBleuQvv7u/l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757499, "uuid": "ca55b253-6801-46d0-bd7a-9e7273afb57d", "value": 105680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757499, "uuid": "9c94abcf-8536-4619-888e-12b03c844f3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757499, "uuid": "1f786f23-c5c8-43fe-9535-eb09ccc8d909", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bcc4f8d-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779022, "uuid": "3a275990-8162-4b9f-9680-195394524771", "comment": "Malware payload (Mirai)", "value": "677fe2f635f23481bf20d1527a524963", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779022, "uuid": "54398a5f-7b91-44d1-a643-7b16c98a0073", "comment": "Malware payload (Mirai)", "value": "8b93d5966cf24f38ebdcd20bbcc50e9262f00b35b12e7fb1bded32487f161e6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779022, "uuid": "6e2dd3e8-968e-4ffa-9bdd-fea82677d841", "comment": "Malware payload (Mirai)", "value": "6ce7f2e4cce9652b0639eff8e49df62491f3ec76", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779022, "uuid": "eb35ca04-3fd2-44b2-a271-26b93766f005", "comment": "Malware payload (Mirai)", "value": "992f936003e3b5996a30a16435c7dd4ce5fd7aaae9a37359e0e576ff8709104b61a89990bb04f5b0bc732f3de755a6fd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779022, "uuid": "d00d140b-0289-4c44-b5dd-a2f3df61ee30", "value": "T1A4432B91FC9245AAC7C117BA771E978A33A26369C2CF7313DC080A5076C9B4F4E67B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779022, "uuid": "a99fa03c-b7ea-421a-9b96-e38f670f6cd8", "value": "768:yuoWsjpIE9StBkNxCU8d+bc7DdZVOIrdQKw54u8iMo2FX0nOz5kf:MBjpIE6auz8gDXcIrdQKwFfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779022, "uuid": "6f04574f-0a2a-4323-97cc-e6ccd0d8665b", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779022, "uuid": "32c21840-5b30-483a-9a42-6b7436b891df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779022, "uuid": "321fb469-1ac0-44a5-8745-203cb8d65d2b", "value": "titanjr.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cf7704e-e24c-11f0-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1766747805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747805, "uuid": "765b6002-cd25-4033-a40d-9570db0911d3", "comment": "Malware payload (OffLoader)", "value": "e9cee447eabc99be78bf482290500ce1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747805, "uuid": "8904cc29-45bd-4e88-9b71-779e3ccc6b6b", "comment": "Malware payload (OffLoader)", "value": "8bcfee677a8ec5a1fd2e020e0f9586ecee70ca1c3e7f9afba116b28223107e70", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747805, "uuid": "259785dd-9bd1-4a9d-a58d-1b53cabf9b0a", "comment": "Malware payload (OffLoader)", "value": "5db5cdd097c4620b9bd390b0946d57d07d0d31d7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747805, "uuid": "7762087a-c48e-4107-820e-3d135726a0d9", "comment": "Malware payload (OffLoader)", "value": "5088ba2afa6a1509c1b20d3d006894ca68ba2d630817a7ce80acf015ae5e7d1d9a5c3ec5fd363e89a979d7caf4a85935", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747805, "uuid": "8135a91d-78ca-411e-9b3d-37ade445731d", "value": "T179C6D0F4792AFB5ED336C5359031C7B896DE1068AA52707DF0A9FBB4923C350252DA2C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747805, "uuid": "91291ce9-63c8-40be-a05d-523a870e9e28", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747805, "uuid": "fc36db1b-5f4d-49f9-9e19-60ac24cfeb40", "value": "196608:SPTYxqCGG26uQUf7TwCdmDX3m4/0CMI1zQvLR0TMA34dG7z3om6Fbrvl+HX:SPTYEC+BVf7EpDX3Z/RMmz+9r0jom6m3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747805, "uuid": "c0745404-4da0-4c5f-ad0a-9bcf1dedf525", "value": 12587306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747805, "uuid": "a4ba0ed0-94ec-48bb-8ae9-a4aaf07c4d02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747805, "uuid": "92732529-6ed3-49f2-b73f-62d646e00cee", "value": "photo222_2025.12.23_03.46.16_SETUP.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "006c9a97-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792747, "uuid": "1473eb90-8bea-4468-8656-e083db6daf96", "comment": "Malware payload (Mirai)", "value": "c541242e81cff351150ab0f5a6451806", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792747, "uuid": "ec03812d-8a89-4ffb-a45a-0c85e9f11534", "comment": "Malware payload (Mirai)", "value": "8d0c8494bd94f8e54cf25463074fc3629b18f386c43117f34313a01f5bfe8e1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792747, "uuid": "fd87e353-7361-4e37-a120-6efc68bee8e8", "comment": "Malware payload (Mirai)", "value": "3a12457d64a24d4b448d8485474289f1ecaa5253", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792747, "uuid": "f49972d6-10dd-46a4-aac5-4e0975449fd0", "comment": "Malware payload (Mirai)", "value": "656dab25420144353ba4efdfdb9e45e7b4a0775144ac8cb0245b93a1194ead1be2ee9e7d02c763ffcfe4aebce72d026f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792747, "uuid": "95647fbd-4482-4e81-b551-eca75f2f2e7b", "value": "T13D730297B7A06AF2666A093A498F3A4C344517BCE55C3033359A123D13811E5DAEB7CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792747, "uuid": "da37cade-19ab-4ff1-a1cb-1eb3937c67ac", "value": "1536:MCWfP1mbIbirePSnaqJrQ4Rl9//E42+glw4oeBOQpYPFQzNk+8Ls:JWn1mdrtDrQ4Rl9O+9MOeYPA8Ls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792747, "uuid": "431f08e7-1e7c-4b14-9e41-80ac565feece", "value": 74548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792747, "uuid": "ccf58c82-4013-4e7b-89eb-a05180080d56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792747, "uuid": "fab00f9d-79e3-4e87-a95d-9fa4ff209261", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bc63191-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747481, "uuid": "7fe73f93-26ca-46c2-b303-f3a1a96e7469", "comment": "Malware payload", "value": "ebc6d70dd865625b6a980cf0f399dae5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747481, "uuid": "853ec234-60cf-4185-8de7-91b2de759977", "comment": "Malware payload", "value": "8d182f42e521c07293c450c63d8b8f0ccdf19b888f581d23ebc85cfaff1b60d4", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747481, "uuid": "67dd124b-cb20-44e4-a2e9-d6592bcbf60e", "comment": "Malware payload", "value": "f5283a47f4d65d72b0b50d7c8d55593caeb1469b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747481, "uuid": "0d0230e9-3789-4242-9d22-23ea35335b4e", "comment": "Malware payload", "value": "536b5331d44ac625f5ee9ad1a7682acc2e1b596acd44972a3b3356bc38579dbaa40c13c8ddb8ac0e16cc6fb84a3eace6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747481, "uuid": "bb115316-21f1-4dbe-a7f5-7d143215e762", "value": "T129633B87B1C2D9EEE9E6DF5309B763C63CC0050319D0E9ADC79BF2472E2962528356C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747481, "uuid": "490dbac9-a657-4e36-81f4-62fe7567f743", "value": "1536:I9l/AoSSMKhd2YHFXxUXqJdHtX/3D3vIOflOSDGgmTFj34kNFS/RTjhtILsFTy/Z:I9l/5MKhd2YHFXxUXqJdHtX/3D3vIOfk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747481, "uuid": "95bb81d5-9fec-4d38-b686-81316a719f9d", "value": 71522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747481, "uuid": "87fd78c6-4d05-4474-ba0f-d21bcab6fcc4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747481, "uuid": "ff3f011b-caa7-4f13-a2b8-5580b37c2a7e", "value": "invoice-1645080830.pdf (25).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e9b5e4e-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771537, "uuid": "ad6d8667-15b1-455c-b34c-02888f719e2a", "comment": "Malware payload (Mirai)", "value": "4d163ddf4aa685442b6214d7fbf2e857", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771537, "uuid": "aa8ee9a2-9f5b-4bea-9538-ea1c1b71d636", "comment": "Malware payload (Mirai)", "value": "8dbaa9d74a8f758a5faadb7b70af4a0f7f83d23ec0eb4131e23761647ba9887e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771537, "uuid": "d674bacf-adbc-4439-a88b-68e460972d09", "comment": "Malware payload (Mirai)", "value": "c1330b223f86b338b387f487af27eb4efc770736", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771537, "uuid": "be9ec577-e4dd-4da0-988c-e13fba713539", "comment": "Malware payload (Mirai)", "value": "2c1f9a061206a65d2d8dac2afe926b9fb3156c59d915e117061732cc53d8f078e5b1149030cb2cb2ad512b6a0943d2eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771537, "uuid": "b0e52e09-e420-436c-8341-86baa5ec211e", "value": "T1AE44E50AAF610EFBE8AFDE3702EA1B0124CD651721A83B757574D518F14A64F1AE3CB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771537, "uuid": "ea1ad7bc-6d62-4e1e-83cf-f2fe0d75dfc7", "value": "3072:Uwcnu9J6/dcXgtcWqMsrYueUXF5HSKiRSoer57Sv6hh15zM:UwcaJ6/dcXwcPMsrYwjHSKCuW8z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771537, "uuid": "2b312c7b-81b1-46f9-9819-b8beee75d02e", "value": 265176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771537, "uuid": "a3b44b14-6816-4ce8-9f2f-a83dbf56f5ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771537, "uuid": "6e0f3939-0659-4410-a29c-cd908ed22418", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd751b5a-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792742, "uuid": "5c3cd917-0a01-4b25-8f81-58dae772bef3", "comment": "Malware payload (Mirai)", "value": "1a6b0cc95e71638adb3e31a7133ea12d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792742, "uuid": "64272ae3-c5a0-4a1a-ba69-c5841115e0f3", "comment": "Malware payload (Mirai)", "value": "8e0e457250cca7a615f8c09fd1d40b8d9b170514830bb1911d8b8b9f31b4c2a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792742, "uuid": "70ff0d55-e0e7-486e-b20c-fe27c415b5ee", "comment": "Malware payload (Mirai)", "value": "2e296499d3f4d626477bb9af9eccd4b79e8d3f09", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792742, "uuid": "1863daed-a12c-499c-93d8-b17aaa0cc475", "comment": "Malware payload (Mirai)", "value": "a11239d6090de84c7b2364fdeff5e0703572031147fd64e26c9d48d04d57af3679172adc85573585d1dba3ee588ab571", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792742, "uuid": "ba3b6b84-37f3-4d75-b7fa-1c8bd4926603", "value": "T1A6134A43721C0A57D4A36AB0293F27E0C3FEB9A120E4B6C9651F8B5A8575E371482FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792742, "uuid": "8b48764e-37b0-4e30-9e9a-35f01a5e4daa", "value": "768:OgtFnjWrkKsrcWRSIqBvHTwLjmAq7aU6z2bWLwCQuESGUa/ry:Vokr/0HwnCaxEWGbSG3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792742, "uuid": "1a1053f8-84e9-41c5-9e94-d85c8e539d0f", "value": 45192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792742, "uuid": "18b88bd6-faca-4f33-9b31-3af4e635cff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792742, "uuid": "00757c30-6bfa-4231-8cb8-4d2ba6419575", "value": "zerppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec759638-e21d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766727859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727859, "uuid": "b4b50cb6-46b9-4a1d-9936-9d369729d8f1", "comment": "Malware payload (Mirai)", "value": "f52bc9487c8137574c46af3cb1846364", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727859, "uuid": "1faa5462-0bf4-46da-af2f-e8d50e8ce6cd", "comment": "Malware payload (Mirai)", "value": "8e99452d83767bddecc4f7927cd00590e0c56c6953a09dc71086449f4c585b8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727859, "uuid": "72dc44f2-93b4-4bb7-9e51-e1395534d518", "comment": "Malware payload (Mirai)", "value": "73a17fa5edb7d0a08100c618270e498f8c5d4e84", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727859, "uuid": "9ab08c52-bed7-40ca-8b4c-a73afe5191dc", "comment": "Malware payload (Mirai)", "value": "5b8088496a2230409e774efbd36161364246b71fd3881960ec3fbb418c430e2bab155b91745db4b2ed3eddf93bafc43d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727859, "uuid": "49cb3d16-6e0e-4a97-a874-1ac8b4ea8fd4", "value": "T11D145B02770C0947D2562EF43A3F27D183EFD9A224F4FA44654F9A8A8271E371589EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727859, "uuid": "a8d5ac9c-91f3-4b13-a517-e5a7a88c9379", "value": "3072:sLHISO7JS6AuHdPZgJxdXCx2dMQWODDIg4I46hh10H2:sLH271HuxtCx2aQ/nIgmH2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727859, "uuid": "dee659bf-1e4b-41d9-9f47-d44980967b8a", "value": 199712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727859, "uuid": "0c62e8ff-4789-4339-958a-821c5aacb515", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727859, "uuid": "d373a0be-d6c6-4bc0-9ed7-d0dcb80889d4", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ec26fb0-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774115, "uuid": "e64839bc-8ff4-4715-92cb-10d2d37c0754", "comment": "Malware payload (Mirai)", "value": "a4a33b9a4b7ddc9277281b7f6821adb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774115, "uuid": "12076ff4-0d7c-439b-af35-b28ec0aa7d5d", "comment": "Malware payload (Mirai)", "value": "8eb241d6efc65ba39cfd11bfb95d7b54001e00989e6e68f1637fc7e916ab7841", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774115, "uuid": "f9bc042d-a858-4e42-a867-e41afab4efea", "comment": "Malware payload (Mirai)", "value": "906bc7fe4f9a451cba7625e04e377188493a9254", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774115, "uuid": "6df64fff-1510-4915-b6e1-089a2e9881dc", "comment": "Malware payload (Mirai)", "value": "b456038c5a1c6e2ca52523ea2f1ea297a033ac5ced0797acc0b86a8c9cb6fe13e9f7ab862ed6207e88d5734609e2ebe1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774115, "uuid": "137d0b70-d1d3-4055-a7e5-027ed27d957c", "value": "T1E6634C31BEB61C5BC0C4257B61E34635F1B7674A61BCC62B7EB10E9CAF149903243AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774115, "uuid": "6461dceb-95ae-4429-88ae-2cbd29f56ba7", "value": "1536:tZetyNuaXWHZdqjQPJd1OgNk0m8zm7uhPc:ftvjQxWCm8zmL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774115, "uuid": "038ba541-2a03-4767-8754-336e3cae92e0", "value": 67156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774115, "uuid": "1f93e5fc-8560-4e5a-9c3b-ddf4d421c4e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774115, "uuid": "0709978c-7d4d-410e-bdc3-a4867f3a59b3", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f15c14c-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747352, "uuid": "edc22ddb-67af-4baf-8e62-4ea242505df1", "comment": "Malware payload", "value": "27aa4f8791c519acbd8a8c517f1f5808", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747352, "uuid": "683caedb-7ca8-462d-9567-2f4eeab493ea", "comment": "Malware payload", "value": "8efaa30bf50ab461dddb0bd81c51edc9af4dd4775337101cf6904889087ed854", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747352, "uuid": "f5bcfe0f-82cd-4839-9994-bb512448eca7", "comment": "Malware payload", "value": "31ecc4b62051f7a2895e9951b60d02da1e955184", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747352, "uuid": "ecc74fb0-5156-4977-9c79-b24ab16a42ff", "comment": "Malware payload", "value": "a28b7cad455cf534726e484f84864a925bf2506bdb3ee5c8f4d8cef4f373a37787a5ee32a294e9608c76260a608f6f94", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747352, "uuid": "2d65f8db-4344-4927-8761-c2f379623ba5", "value": "T1BF631BBB6C6FE927BAFF4444AD3788E9A8C57B0781D03066C52FA4125A9CFC319415EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747352, "uuid": "d03070ed-339c-477a-ad43-4fdadd9bfe4c", "value": "768:I8w/h62/jWs6oS+xISN0vGq7BoCxt1fluLBNnp3odkfScBYrwz2y8kTAlGB:I9l/AoSSMt7BoCxt1fluLBgusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747352, "uuid": "33749b64-c396-4a5f-9e4a-267fbf84b6c5", "value": 71582, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747352, "uuid": "c245c1dd-1f9c-4cbd-9653-3ef6b1c85503", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747352, "uuid": "d94d9800-8426-41ea-ab30-b31eef630246", "value": "invoice-1645080830.pdf (54).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3af8a93-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781881, "uuid": "d1604cb2-9033-4340-b795-683e5edc7110", "comment": "Malware payload (Mirai)", "value": "1d935422962d18d255c4f78bc5539af6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781881, "uuid": "38b1847b-3d25-4b7f-9140-9e11dab6868f", "comment": "Malware payload (Mirai)", "value": "8f3f3e3cf494367efc7b4b0c40af2d488dd66cc6c8bcc2e9f637e638f1d6dd4a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781881, "uuid": "4306b1f7-ca16-489f-9ce4-09adc3870b39", "comment": "Malware payload (Mirai)", "value": "4023af4e19d5d345fe95390967e8533acbd37e74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781881, "uuid": "f49aac71-460e-4850-ae07-92d70ce8b048", "comment": "Malware payload (Mirai)", "value": "6ee28e5520bcb13a2ed4209354fba2c2476fed9950a29e801bc75d6c5774cc459a0b00e6cd9004f49452d585d5ebd045", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781881, "uuid": "daed87be-c9a4-4765-bb73-b808ac163b68", "value": "T1C6534A17A580C0FDC8DEC2759BBE6366E533703D0279B12E27D8AE266E1DD211E6E710", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781881, "uuid": "b25d2dc8-55bf-48b7-949b-9673b8db7393", "value": "1536:0/GxKpd6NOnuPxPLENj6cwbsRp+LvSdF3X2RuM:TsUNNPxzENG5bsH+ODmEM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781881, "uuid": "8924f705-81a6-4132-9101-53d8592e31dd", "value": 63144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781881, "uuid": "b3db5a65-5e92-4129-8b36-cb29552dce32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781881, "uuid": "8a9da7a5-70bb-4a02-9ffe-ad0fe0c6bc69", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10268c3b-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747246, "uuid": "2f46086b-6c4f-41b2-9a53-2af7126a979b", "comment": "Malware payload", "value": "ec3f3b3ed6438eb9a832fde1cc8e3d3b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747246, "uuid": "6e699b66-a05f-483c-8dec-fc2908a9175e", "comment": "Malware payload", "value": "8fb98ac50d5fdacdc729751683100cbe2b63911bd98ca6b2fa74152a0e1de922", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747246, "uuid": "92fabc4a-ca24-427a-9e2d-41665ced7706", "comment": "Malware payload", "value": "014915f0360c0f389de86dcbaaaeea63755d75a2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747246, "uuid": "4b02d072-283e-4e11-bf29-53381741cab3", "comment": "Malware payload", "value": "58bddf5a52db5ba0480117476b3e2073b2c025e63c2f15bfc502fdde7c30fb122727031c8a974da5160fef9497debd56", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747246, "uuid": "650fdbdc-f8b9-42b0-8153-700bb452b1c4", "value": "T182632AE5AC780F67AB2A6FA525BF8644D31398E04830FA91DD31362035FD7956CCC26B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747246, "uuid": "796318db-46e8-4563-bf18-7a45863f4a1e", "value": "1536:I9l/AoSSMhvDv4vpvMvVv5vRvmvxv4vEvivtv4vMvevdvYv0vNvUvxvtvuvvvsv7:I9l/5MdLYVsBlNCtYUupYsKZ4EJktpaW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747246, "uuid": "320b7d0d-0d8e-4785-b922-bb6826df8122", "value": 68685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747246, "uuid": "7f1f5b3a-61bd-4446-9294-aabd1767f18c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747246, "uuid": "109f6de0-19e2-4e5b-b4c4-b450fcf2a83f", "value": "invoice-1645080830.pdf (73).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8658e21e-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771497, "uuid": "a11502e6-833e-4b36-92a1-ddf0d563023d", "comment": "Malware payload (Mirai)", "value": "e6e71240a2fc0dcba0569183c9f5d030", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771497, "uuid": "e2639c42-c76d-43ad-85b9-d5881f4b0223", "comment": "Malware payload (Mirai)", "value": "8fc1472ff2a8f2630f65bcc028a96eb9d16d7d978a68f082e76ecb4a78669787", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771497, "uuid": "a1559c36-d658-4693-a59a-85d650257ff7", "comment": "Malware payload (Mirai)", "value": "8bacdda61f65efe549c87609b3fabeff694fb118", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771497, "uuid": "e08c0dce-71be-4461-96cd-bf89ec481ebb", "comment": "Malware payload (Mirai)", "value": "b5753be3d2abe02756320b61d3551eda764e3c1675fe6f6f32fb1fc9ed067033b606fcff41b6a8c3e996c347e5d352f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771497, "uuid": "25f853cc-018e-4331-86d3-5f56967de023", "value": "T17073129FF9FB1D808C7E0DB87AC427B099107A769ECE81E0729598978D95346FAC2424", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771497, "uuid": "fee4a322-f436-4d12-adcb-3ce01feef742", "value": "1536:GIdaUi4ugypldPunOc27S5yEdNXI/vcsQd50DyCHoYOvWu9bn:EUxugmTPuOG53dNXIZQd0IYOeu9bn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771497, "uuid": "caf858fd-3695-4b41-8179-00e03c82bb20", "value": 80028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771497, "uuid": "ef10a8dc-9e71-4aaf-8b0d-5f880088e1fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771497, "uuid": "d9cb9417-50bb-43ca-85b2-8774ce5ce471", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92796100-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776671, "uuid": "9335365e-35df-43a5-92a0-53eacaf346fa", "comment": "Malware payload (Mirai)", "value": "eaf3d6e6cdc40b33795e2dd025a412aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776671, "uuid": "56033a86-ed35-48e5-80dd-6a6778abfa0d", "comment": "Malware payload (Mirai)", "value": "8fdd3ef744776a2aa231750392be4d948dfef03d486bb89b7fafcb260b28f4da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776671, "uuid": "2505c544-339c-42ed-bad6-e002fd3ad65c", "comment": "Malware payload (Mirai)", "value": "f43a13042e0b2219e205506da9eedb92937c1311", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776671, "uuid": "dc4f4882-03bd-4ab3-8fe2-d4d2ea765cf1", "comment": "Malware payload (Mirai)", "value": "6258a07e0e5b85d0775b8586ac736bc2315f43e5b7a663a6cb2f778dddd23d71df4c5a019b2771bbeb83eefe8cbb8716", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776671, "uuid": "f7220928-379a-4721-b179-bb447bf7c03d", "value": "T181530986F851D617C6D5627BFF5F82DD331603A8E2EE73039918AB65368B42B0E3B441", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776671, "uuid": "cc1c933b-6449-4e6d-8574-7e6b80479d3c", "value": "1536:BD5Znt1KMOE1YfS+87SnnmtjvIT2bVRU:Bzt1KMOR78+uzIT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776671, "uuid": "480f1b35-6b59-4dbc-95c6-7451192af557", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776671, "uuid": "57a348c3-d7e3-4272-ab80-b6b6ad6dd5ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776671, "uuid": "548f963a-624c-4a15-99fe-cb6a81ca648a", "value": "nabarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15b394bb-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792782, "uuid": "b74ef4f1-ef9c-464f-b62c-7607bd042d86", "comment": "Malware payload (Mirai)", "value": "a1df02d8a7e04a3132ceebe974f7e181", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792782, "uuid": "20cf645b-8b18-4000-b77c-d8f0921514b7", "comment": "Malware payload (Mirai)", "value": "8ff4a59e1f14089d26028c635652303923d7f49d3b56148f196e517bea190ccd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792782, "uuid": "8889c38d-47f8-42fa-92d4-a2a074bfe9eb", "comment": "Malware payload (Mirai)", "value": "f34a609ab77a5132c603e37066ef7b0e85487aa4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792782, "uuid": "fe26a853-5e93-4066-89cb-efb3c9da0875", "comment": "Malware payload (Mirai)", "value": "260a1ddbe93cfb504a751988049c3cc13a7a9f99c467b4cac1f3ddeb29caa01650eb72900bfde1675992461ed5df294e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792782, "uuid": "09b7b32b-2d1d-42c3-a5a9-d06f38343a30", "value": "T1C0F37DC6E783C0FAED1245711077BB365EB2D53E652FEA82D3B94631D812940C61BBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792782, "uuid": "0fc978a1-ac9b-4818-8ad2-556d0cab56c2", "value": "3072:7LtpEGQbNctZd5BqALNubNMAUugrNbO35cgivVSTFO0hGB1A/:jtyitr5BiM4gtO3+n0FO2/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792782, "uuid": "77c414c2-2ca5-4592-a80e-c44db727a104", "value": 170600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792782, "uuid": "776b0e00-21f1-405a-8f40-d1faa9782f35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792782, "uuid": "23891342-f96c-4737-a596-b148e602fcda", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8706bbb3-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771498, "uuid": "c47a825e-403e-444e-a9d1-7bf1de3076b2", "comment": "Malware payload (Mirai)", "value": "c57878ca5f7ee5e2d03f8266ec317b90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771498, "uuid": "162fb563-9e5d-499e-a00e-ca99083f0783", "comment": "Malware payload (Mirai)", "value": "909246c47f9c1162e09012393c4aaa5b38573444ebf2291a1d8eac1d56fac3e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771498, "uuid": "e936defb-5ccb-44bc-855a-d9418d3e7862", "comment": "Malware payload (Mirai)", "value": "1a2cda2bfcdc28eff19a349a8abc7d5c0e0a0582", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771498, "uuid": "a451e595-af7c-49f8-96fe-4102ed118819", "comment": "Malware payload (Mirai)", "value": "82a382055951ebe9feac8f8f9135e2163e387d671d7d7fbab9202231dfafdb682f411b82f26593248c22786f353ebcc0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771498, "uuid": "99705611-b1ec-4c61-81d4-0efaf7edfae8", "value": "T13583B51A7F719FADF72C863587B74A20A75833D632E0D685D26CF9041E6034DA82FB94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771498, "uuid": "c02f38f5-7c26-4592-850e-98c82ba06a23", "value": "1536:3wUK7DOcnlYlO6isNwKRcBOmNrVaB3iBVriBBD5STBMj7tbVXeBT2bVRmJ:gXnj6isNwkcBOmNr4PjxVeBT2o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771498, "uuid": "ebaa5999-2bc2-4d40-9d00-8cc65aea856c", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771498, "uuid": "034910ec-4431-409f-a90c-880eee453b12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771498, "uuid": "76b93ed2-cbdc-44b4-80ae-6e9fb3b86148", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f035e6e7-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747193, "uuid": "958b3e91-b984-4350-adf3-b7ea9f32531a", "comment": "Malware payload", "value": "e8a628224689e668f4d5574b23bc7a0f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747193, "uuid": "db3dd83c-9f4d-4a60-8afb-0f5acc3b03a9", "comment": "Malware payload", "value": "90969f2c366ec751ee863bd8a3b67421a2b93bb1dfb8cf51b6fa23dc8f875e2a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747193, "uuid": "b4e8efb6-636c-4673-8c0c-70405a7d8609", "comment": "Malware payload", "value": "14069e8a642135a4b2daa3e2397473c54406065b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747193, "uuid": "0bd14593-eb0d-486d-bd5e-6aed2323646d", "comment": "Malware payload", "value": "dc470729da1914b43b0f165a7186f8b4dd0784d99e7fda94fa0c3e813e2160a96805b64f0ee45db8ca3633ae2b6cc216", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747193, "uuid": "2efa0803-1e2c-4c83-9fda-79f351ff5a70", "value": "T128633BFEFE0D713F82DE4AD682F865D443CF095AA87AC1B06F566386A88474F901174E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747193, "uuid": "bdaf400c-e8f8-494b-ae7c-f4b940c6119d", "value": "768:I8w/h62/jWs6oS+xISN0v1ZbxNfOm3TdkfScBYrwz2y8kTAlGB:I9l/AoSSM1ZdwKusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747193, "uuid": "ca513fcb-3275-45f4-a717-fc6e68b7321f", "value": 71598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747193, "uuid": "4d0ec036-7d0d-4107-a172-bf9a654785af", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747193, "uuid": "7f03611d-e194-4b5e-8ca5-82c02714d9c5", "value": "invoice-1645080830.pdf (81).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b852c72-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777303, "uuid": "f0eb8b7a-d3a0-490d-a000-0463296bb472", "comment": "Malware payload (Mirai)", "value": "e666caa7a256eda85479352270398bce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777303, "uuid": "56c5b571-045b-4435-9c9b-cc87c4a28638", "comment": "Malware payload (Mirai)", "value": "9103f9b3eb29575bd66ee638686940cd2be44518e8e70c1b84a63eefb02ea9c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777303, "uuid": "a803f1a3-e61a-48cc-a24b-c64d7bdbbe80", "comment": "Malware payload (Mirai)", "value": "8420cf0d8a41c8178847b5ea10e275a28f68d33c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777303, "uuid": "af3a4478-d219-415b-8920-d17098f71da5", "comment": "Malware payload (Mirai)", "value": "ed7bda5473bde447c32517a24ab6e07b72506dad6be7a48d26587fc72d320a5b21f7d78446c11da8809fb37f364c1897", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777303, "uuid": "46f9b847-2f13-4297-8719-5d5305cef264", "value": "T1BCD32AC0F643D5F9E90A07B15136AB338632FD35602AE657CFA4EF36B871A80D61925C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777303, "uuid": "044ecea2-6582-4bbd-844f-a90afee05990", "value": "3072:0OeqzkQ+PwXFmp770tRWQCRFTKLCMnkoZ3zsviePvMBlcnsWjdbrAxlHb3s5Ixs0:6QkQ+PwXFmp770tRxCRFTKLCMnkoZ3gU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777303, "uuid": "451b4355-e20f-43c2-8596-e289daf86282", "value": 133068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777303, "uuid": "61a45664-1229-4bc6-8b4c-3f9e648b5702", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777303, "uuid": "1bac85ac-03b6-47ab-869c-b61db23913d2", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d05d0ad-e221-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766729363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729363, "uuid": "05873245-00f5-4ad3-93c2-2bf3619735be", "comment": "Malware payload", "value": "6affee9aacb35a4a1192eb487b73b143", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729363, "uuid": "e16d9be0-5bd3-4514-8673-084e51012e4f", "comment": "Malware payload", "value": "911ac65df00b90b505fa62e5949e249014ffefa3ab1d51d5a02a24a099bdf0d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729363, "uuid": "1b5327ac-6812-4e85-904e-0170f35f3dbe", "comment": "Malware payload", "value": "4568137ca0997612b9f11ef41ae8214c10db0061", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729363, "uuid": "db96d668-cbe5-4b5f-9b9c-40e325b80a25", "comment": "Malware payload", "value": "97542ae036676585d871fa4fad6e35c258172a289c10d70b855d6a2a85b28d2f98609d3572306d62a5743df90479348b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729363, "uuid": "493d3894-25d8-484e-9294-0e16c554c42d", "value": "T1D2D35B22F87E591BC5C0517751F74736E1F2638A60BC460E3D731E8CBF606A022A77AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729363, "uuid": "14b2ef48-431e-4170-87cc-dbb230f1a231", "value": "3072:iQthj9sg8r+CLXPIGkWw978m44lRjyXix131sbdNycjK6NNBNtpneuMrW:iM0ecj/V3pne3rW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729363, "uuid": "b2fb318c-590a-4544-a8ac-bf4c6ebdf778", "value": 130152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729363, "uuid": "6e399b1e-0657-418b-a03e-d056ed97f6a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729363, "uuid": "3c51b84c-e416-49ef-b98a-1ec43609b354", "value": "rondo.sparc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fd8ea9c-e29d-11f0-a129-42010a9c0007", "comment": "Malware payload (EternalRocks)", "timestamp": 1766782518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782518, "uuid": "fe4571f8-a6e8-4627-8c21-78e3f160fd0d", "comment": "Malware payload (EternalRocks)", "value": "c96a93f9a896ad29a43571bb7f4a9aa7", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#8EC11F", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782518, "uuid": "59cc1e24-de97-4b27-87c8-61430fc41693", "comment": "Malware payload (EternalRocks)", "value": "914b5f86e36a5268ab686d8b2883fee9133a66d7bc99d54d88494eda7f1bbc85", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#8EC11F", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782518, "uuid": "b2921895-fe78-4dc3-8e4e-46a9d139c366", "comment": "Malware payload (EternalRocks)", "value": "2ccfe1955afcdbc57493fc2bb12dfc04987db6ba", "object_relation": "sha1", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#8EC11F", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782518, "uuid": "642d0f34-0974-4b2e-8a32-7c62a3de7cd2", "comment": "Malware payload (EternalRocks)", "value": "020509e45e9cf089348befe99944ce20a9f8f7e284439443d89a55135c434c1de4cb40ba425fb34af7cd6e10f539f05c", "object_relation": "sha3-384", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#8EC11F", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782518, "uuid": "9b8636ba-a1ba-4b16-a9de-24bcfe13b518", "value": "T134A55B357F0B5A53059962D3DE93F168DC30D36ED36A24CCF2E9858270ACE9943C966C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782518, "uuid": "d1ab52a9-a88b-4240-af32-d3cda618b4d7", "value": "12288:OxvY1+kii3SFOBUDMahV6v32kkG7pbUTJOJo/Z6rjiR1JcAJ+D4k06HuIG9ev9x:x1+LzOBU56v326Fb+vZ66L2CiI6HLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782518, "uuid": "754cc73b-0b57-412d-96fd-0cd1a820c199", "value": 2194090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782518, "uuid": "62546feb-a4fa-4cfb-90a4-1cd4efbc7ddb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782518, "uuid": "83cfbe0b-e5fa-4440-ad76-19a38d042b87", "value": "test.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6538a017-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (GCleaner)", "timestamp": 1766713029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713029, "uuid": "cf7d3511-5088-413b-b680-f872f734ed70", "comment": "Malware payload (GCleaner)", "value": "8d788377e5b1646fd6a575aab7213c9d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713029, "uuid": "40abe01a-f435-42ba-864c-9271ccbba642", "comment": "Malware payload (GCleaner)", "value": "9159e839f527a1ddf44adf4d1256e6433331d57b4f8c9d468b35807263507e83", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713029, "uuid": "4dd041ef-975e-44f5-9902-19f33fcd22a9", "comment": "Malware payload (GCleaner)", "value": "18b84df513139253f51ac853ee85bd6e77b1437b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713029, "uuid": "07a30801-5794-4c32-b4bc-8405917fbd4b", "comment": "Malware payload (GCleaner)", "value": "e9857264f3929e5660906818303397c18de3f00d58fb618db04ae5c3aa74959803b5ee4fdd6b25423bd605ebb714aff9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713029, "uuid": "fa53313d-cfa3-4681-9a49-5823a9be46cd", "value": "T17F16D039E460987DF2376E384E164798C949AE478BAD4C0DC7BED8084B2574C6E3B1B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713029, "uuid": "c4d6a75f-c0ea-4c07-aae5-0776fe5c750b", "value": "d9602d58db63e796034d7dc7a7754fb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713029, "uuid": "060857bf-eb8c-4645-8ab7-f222245d3751", "value": "49152:pS89bkgUg7cyZRbdpfacmmfe7eg0HH3ZnfhrbM4+Aivy+oIYKeQDLBP35cZVKL1M:pS2bkgUMZbdxjacfZohvKNSBRc6e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713029, "uuid": "10cb047d-e2c4-4c1b-8144-ecb7e73af2a2", "value": 4019984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713029, "uuid": "868159be-3b4d-45d1-975a-01eb6a7d420c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713029, "uuid": "f422ef18-3cf7-485a-a234-a4a90619ec41", "value": "SecuriteInfo.com.Trojan.DownLoader49.20261.18273.25850", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e26eb154-e26a-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766760914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760914, "uuid": "448fa91c-6619-4e55-8890-aca4bf3a8c0c", "comment": "Malware payload (ValleyRAT)", "value": "44215af8e108eaa8a543916208afe800", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760914, "uuid": "a1905d90-4a49-493c-b40e-55d8435d1a49", "comment": "Malware payload (ValleyRAT)", "value": "918448e18b6fc75001634e154dabfe9d07aceac93ec997e833c592b31350b248", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760914, "uuid": "e104c56c-191d-40a6-86ad-e5ef3b50b03d", "comment": "Malware payload (ValleyRAT)", "value": "bb5737addd7207d7793a1272d97e3e9b0a9dff9d", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760914, "uuid": "8d3d85f2-0ee6-43af-a4bf-fe18f33a9b00", "comment": "Malware payload (ValleyRAT)", "value": "36ec27d04220146dbb8dec4bb94b549b3039af9234048a90944059e8ff10f02b019cdd8abf4ad9e7a6539f5a751ab759", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760914, "uuid": "9a2448d9-bbd6-4bdb-b6e1-399b82244096", "value": "T17EF733223687C53AE25F54BBA92DFB0E54367DA7073001D7E3E8BC6914748C29679AC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760914, "uuid": "358ea316-b442-4ddf-b808-8a7090cdd7c0", "value": "1572864:YuedC2QQu0IbBmnECVu9xKnEC/IrG3v1WSnIsPV/4S69sSlHeb1:QdBQd0IbBWkxFCArG3vpIs693", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766760914, "uuid": "fea765ca-4262-46b7-ae26-271a2a3ba3bb", "value": 73705984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766760914, "uuid": "b7991565-d6a6-497e-bdb4-e2ffdc0353f6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760914, "uuid": "0e7b939e-7941-44d0-b5bb-47c730cf2293", "value": "GWMeqk-itstos-2.35.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3feace31-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779109, "uuid": "4868afd2-cd80-4c1f-9567-1a4786a8f46e", "comment": "Malware payload (Mirai)", "value": "0b3482e6f849ca4832225fcb75cf4c03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779109, "uuid": "09ba5c62-7676-47d5-a433-78afa7b1f030", "comment": "Malware payload (Mirai)", "value": "919e2af40728a1ffd29deefb3646c8cdb3160ac3c851e0ad015d4f8b4f934f22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779109, "uuid": "33c271e7-d1d1-4af7-91fd-2e510dec5578", "comment": "Malware payload (Mirai)", "value": "501dd48c32c4fbc8bd212d4b4f10f3d0b343c4e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779109, "uuid": "0704bbab-e883-42a5-ae67-87582ab33e8a", "comment": "Malware payload (Mirai)", "value": "529f20bcef498ca67bb7c7af59a7cf773d76ca7dbf51e9fd79a7ae4b30977ef48607fc7e46442cd25d99e9f487b3b2db", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779109, "uuid": "09ec6752-d365-468a-9dc9-6f9acfb4c73d", "value": "T1CE834B0273580D43D1A71EF02A3F37E593EFD59121F4BA89660E9B4A81B5EF2144AFC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779109, "uuid": "f3bc52b6-2596-4750-a1c9-40273a6bf617", "value": "1536:3tC0/jeZuOJeXBNppp8O6Fy+wmC2oyntcfi5:3tC0iMrBReFom/Qi5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779109, "uuid": "073785d4-3367-44e0-9e6f-7a09949749e7", "value": 87736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779109, "uuid": "7aeded7b-1310-44e4-8f00-947e91995432", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779109, "uuid": "bf46b527-087d-4ae2-8072-a05526549a0d", "value": "windy.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b279e2d6-e1f1-11f0-a129-42010a9c0007", "comment": "Malware payload (RondoDox)", "timestamp": 1766708864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708864, "uuid": "e1c47c18-fdf5-4e1c-952a-1bd6ea06ea8b", "comment": "Malware payload (RondoDox)", "value": "c156b1348b56c5ce6205cd735266ad37", "object_relation": "md5", "Tag": [ { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708864, "uuid": "b91b6734-384c-4beb-b1af-54dc232ea417", "comment": "Malware payload (RondoDox)", "value": "91c0646895d8398081351d690f1c5af75d242c13f22a80dc82fc9ae4798a4576", "object_relation": "sha256", "Tag": [ { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708864, "uuid": "2c3f7a72-c8af-492b-898b-8a6377b55419", "comment": "Malware payload (RondoDox)", "value": "8cff1272d3e18ce658596dc9f6be684860e458cd", "object_relation": "sha1", "Tag": [ { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708864, "uuid": "97de92de-6c65-430b-aff7-125108b8e520", "comment": "Malware payload (RondoDox)", "value": "14e5367bd8ee3b68902793de785356787f28cbc96a44e0daa306136dcfef71df6b173a1a7dceb43be0d9207748902966", "object_relation": "sha3-384", "Tag": [ { "name": "RondoDox", "colour": "#4E0F4E", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708864, "uuid": "1d2962cf-6a9c-4ddd-9954-6b5460139a63", "value": "T19112D9A839D432FAA8AD6502D393A27C5DC482D17073CAB5D8F844F66A794C8B05FF71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708864, "uuid": "9568683c-68ef-4e7a-966b-3fcf8090350a", "value": "96:Ax0iRoLngD29clc5sFE6KCrdYnuQuMN7EJI+KybNwjaMyybNsDPi0MD6sO01Dkln:g0goLngucCJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708864, "uuid": "408beb0f-b963-4d4d-99c8-f8bb2ce43a5c", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708864, "uuid": "6cfa4e3e-730b-4c96-a3d3-8ea9e9e61e46", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708864, "uuid": "d9efeb8c-46e5-4786-9bf4-4694b12540dd", "value": "rondo.aqu.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e5dfc05-e21c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766727272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727272, "uuid": "58f55ab5-67e6-4e54-8ef0-58bfa1dff839", "comment": "Malware payload", "value": "8dc4d0e65a2a999e0d816c15e99b1e23", "object_relation": "md5", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727272, "uuid": "54c3df41-cbca-4f2d-b363-9a994ae9725b", "comment": "Malware payload", "value": "9216519407d7da49246c78fcf70239c69528b816129ba8fac8e9028124e77c88", "object_relation": "sha256", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727272, "uuid": "f4077f0e-e03d-49f8-8daf-34913bd98000", "comment": "Malware payload", "value": "0c53322cfbf961a88d9655ff679818a9043e6955", "object_relation": "sha1", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727272, "uuid": "3dff845f-c562-49a0-8138-08a6eb872cdd", "comment": "Malware payload", "value": "b1b6033a354a062939772850416ee5e596dbb04138cf6617195c642364333849b0692a8d07347d6ddc9c12d8a336f815", "object_relation": "sha3-384", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727272, "uuid": "bb8f3e2f-b782-48bc-bb29-65c87cac2e70", "value": "T1234301C928406BE5EE67DDD9A2F73D08CCB2A815EE3AF7C665841C09B1484774A13F4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727272, "uuid": "31f7bb97-95c1-439c-87b8-1eaa6bfc9e45", "value": "1536:x8RhzN33ApxD2kTTOLgMmX5XJAOP+mY+h+Hc89lkpAW9rmB:xu3Qn/uLg7nAOZY+hVgk+WRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727272, "uuid": "7801c5f5-0cba-4d9a-82b3-3de8661c4bda", "value": 58737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727272, "uuid": "fa232fe0-9f84-4111-a08b-171c4dd3fc1b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727272, "uuid": "a0e395ab-e8dd-4f4a-b037-2188c3dc270a", "value": "Registration_Form.zipx", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f544c90-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777122, "uuid": "17bf72ae-9623-4ea8-89c1-ded3a9924945", "comment": "Malware payload (Mirai)", "value": "88eb21912c23b6d09d6275bd4fde86b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777122, "uuid": "19a4e757-8b44-40eb-8fed-5b602514d35a", "comment": "Malware payload (Mirai)", "value": "922262a6e1f9cd95769027dacd69071b8c13b81bba8b849f361c084c23c95aaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777122, "uuid": "8cd95b1a-d9dd-49f8-afc3-0bea272fde5f", "comment": "Malware payload (Mirai)", "value": "05b9c1cb732ab77be47b613b968c01e9326154ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777122, "uuid": "378fd296-9539-4a52-8be0-dd6d9265ff4c", "comment": "Malware payload (Mirai)", "value": "9079f2297494d1cf89de6df3098de31e0dee85c2363160a0708711c495158ab4f6a48fa08a4e845095a0a05ad189c0cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777122, "uuid": "351a8624-1af3-44b8-917c-d0b710222d68", "value": "T18DF37DC6E783C0FAED5145711076BB329AB3D53E612FE982D3BD5631D816A00C61BBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777122, "uuid": "39f5ccff-7018-44bb-85a5-b31015edc6c3", "value": "3072:WKyH0iRHC2bD2u6sxHyNf2u70Pj7SZp3BWj9W4iRsXhGB1Up:WvH/icyu7AIPvo3IYlRsBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777122, "uuid": "57c837f6-a462-4b12-9c8c-c1e263e5c295", "value": 170600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777122, "uuid": "dff60855-8a98-4de6-a209-205e75f1423e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777122, "uuid": "f7c54dd1-e93b-4d91-a7f7-9c8205a6ffb1", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9cdebaf-e242-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766743639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766743639, "uuid": "e7a071e9-1306-4739-8acd-1373657d170e", "comment": "Malware payload", "value": "30254a0d3d32ad0e752e07dcdf779cf0", "object_relation": "md5", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "forsaken", "colour": "#A620BD", "exportable": true, "hide_tag": false }, { "name": "roblox", "colour": "#2C7474", "exportable": true, "hide_tag": false }, { "name": "veeronica", "colour": "#B2E074", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766743639, "uuid": "16893547-bb4d-405a-8fd2-0d363557a5a8", "comment": "Malware payload", "value": "926f170555bf85eb101c2d463eb14253bf0f4837727f506c5b3c6363381c13b0", "object_relation": "sha256", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "forsaken", "colour": "#A620BD", "exportable": true, "hide_tag": false }, { "name": "roblox", "colour": "#2C7474", "exportable": true, "hide_tag": false }, { "name": "veeronica", "colour": "#B2E074", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766743639, "uuid": "d951eb13-5dc9-4700-85c3-29b159b0d36e", "comment": "Malware payload", "value": "932841e22879882d9f1dec7cc60fbbf211eda8ff", "object_relation": "sha1", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "forsaken", "colour": "#A620BD", "exportable": true, "hide_tag": false }, { "name": "roblox", "colour": "#2C7474", "exportable": true, "hide_tag": false }, { "name": "veeronica", "colour": "#B2E074", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766743639, "uuid": "16a0cc6c-d37f-4720-85fa-24f89f230e15", "comment": "Malware payload", "value": "1994e9e9315b3546f8fbcced540b5893e9d89cf7f584f961d05b11ab44a92c58cfa7113f2153277811fab48935e5bc1e", "object_relation": "sha3-384", "Tag": [ { "name": "discord", "colour": "#27793F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "forsaken", "colour": "#A620BD", "exportable": true, "hide_tag": false }, { "name": "roblox", "colour": "#2C7474", "exportable": true, "hide_tag": false }, { "name": "veeronica", "colour": "#B2E074", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766743639, "uuid": "4767557a-4776-43a2-8e3c-2ab15c92abfd", "value": "T1F4C733D1E88224E6FCB3C533641158B0B3673CBD5721D86B5A90B2A22D635F7293F993", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766743639, "uuid": "cc3ac314-31fb-4e93-b99b-46f6b3c492a7", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766743639, "uuid": "3dcd66ec-ccb8-43dc-b913-d1b8404a19a7", "value": "786432:hr9rHYqidlnTdjcMy1wXmHZU1XhHHxXrB1Jldbld5cgzHd8j26JDIr1Gy89JgJ0E:98nTmMy1wXmmXhnBdpd5cgzO+Jvqw0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766743639, "uuid": "e1fc6bf2-f8ca-41c2-82ee-b59684a9f3c6", "value": 53852075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766743639, "uuid": "c4e86e9c-532f-4733-9b21-8ba4447a56de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766743639, "uuid": "0561cbb0-027f-4492-8d43-1bff9ea47e86", "value": "veeronica.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5e68948-e203-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766716654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716654, "uuid": "c0c00ad2-5fbb-4645-9994-3ddd9e331157", "comment": "Malware payload", "value": "176e9768d2d007b7042de08f7b42e2b0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716654, "uuid": "be0f78fe-af5a-4895-937a-bb0e0766dac0", "comment": "Malware payload", "value": "942453795973e4a7dc0d0e9e110b76af3ba63f31317f678157af39153cbcc625", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716654, "uuid": "a5fe2682-3986-45d5-aaa6-814dd3b7a1c4", "comment": "Malware payload", "value": "5df1aef8616ff914390273973dfaddb3ffe81980", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716654, "uuid": "1ad523f7-c7a7-4c60-8a7a-40bed9a760de", "comment": "Malware payload", "value": "c49d3db3f430b1e3577d4770fe369f6f1a1dc13a0c48d353a0b29d0199555e0719ed71678298268850c160630c082300", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716654, "uuid": "6d599276-640c-4f58-b25a-a94adfa8e016", "value": "T12108AF0677B611A6D173D139879FA103EB32B4071734DAD732AC83646F63AE09DBA760", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716654, "uuid": "afa3a464-c719-4bea-9453-51f8c4a311d3", "value": "9eba512b03d8cac8a6c4424e25e9f06e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716654, "uuid": "98977242-7e8a-4187-8fb0-96fbad57caf5", "value": "786432:gdBeI7LfOCDsno80dguj3/oyngPV1IyEKtiQoA4v:kBeI7yCDsW/oRyKtiQoA4v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766716654, "uuid": "095a72af-0200-4bde-ab26-05df27443db2", "value": 83702547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766716654, "uuid": "2f6187fe-fc7d-4210-9492-1d7fff175ba0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716654, "uuid": "79979571-2162-47b8-bf40-808b113e4d5f", "value": "sample.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b86b41be-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747529, "uuid": "f1be59f0-bb7b-44ff-8d02-7feaf9f5ea35", "comment": "Malware payload", "value": "8e5ba7ca01ba461194d742a09b9fbd77", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747529, "uuid": "d48f7692-f4e0-483f-b9a6-81349c7b201a", "comment": "Malware payload", "value": "944b0453cf00b6a3300ad29849ac169200180e603d2e74a9bb92c93f9512a602", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747529, "uuid": "47a4d1d8-332e-415b-9a92-e5090d7eaea7", "comment": "Malware payload", "value": "798ef26747b44899af5808371144b7c110193a06", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747529, "uuid": "0857cdee-2287-41a5-b182-82630b39e811", "comment": "Malware payload", "value": "a09e48aba9751d0db828133a269b42fd219f25009e4902684a188e6e5e6c064c2f8ace15cb9ca086421197b821802c1c", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747529, "uuid": "4d5de9f2-7bc0-4643-b29d-f281c60fc7da", "value": "T12A631BEF3E1221FA1CA9F669CE03618036FEADE89F4BD5310676FD49640B285344B6C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747529, "uuid": "0466c4ac-3d98-4996-a6e5-fa6d0accdeca", "value": "1536:I9l/AoSSMynsnBn6nTnznAnRn8n3n0ninxnlnPnynNnmn5nbn8nanDnLncnKn7nn:I9l/5MynsnBn6nTnznAnRn8n3n0ninx3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747529, "uuid": "733ab54b-5317-4bb9-a0fd-15f0ac240f27", "value": 70649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747529, "uuid": "f3b726aa-c0cb-4143-be07-bf86d96340e4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747529, "uuid": "85e9edaf-ed97-4391-ae05-500fc995f546", "value": "invoice-1645080830.pdf (17).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b901c88e-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781890, "uuid": "e9cdde79-b936-47fa-996d-2c439574f7b0", "comment": "Malware payload (Mirai)", "value": "fb8243af8ed63bcc06c79255a5f5b15e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781890, "uuid": "087a44ee-e609-40ea-b9ac-c592d9c00d0c", "comment": "Malware payload (Mirai)", "value": "94dc3d1cfc491cf313fccf87873a53c2ff104680e22a552d266319492d3766b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781890, "uuid": "3299c6c2-a2a1-4b56-8ab2-638d70bc5e07", "comment": "Malware payload (Mirai)", "value": "476381acd66ffaf8f47c0421f8cbc647b44a28da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781890, "uuid": "e37afa94-f674-48cc-a4f3-625c84db25e7", "comment": "Malware payload (Mirai)", "value": "e14729a51da4a4e6a0afb3283b5b29761713166346cc285d4d060c337db8cf888f7c9bde307cdcbf87e2eafb37828819", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781890, "uuid": "986c09b5-cfc9-4021-9538-e45fb624dd45", "value": "T147E32A46E6408B53C0D22B79BBDF424533239B28D7EB63069928BFF43F4279A4E27505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781890, "uuid": "730cef06-fc07-43ec-8bb2-a09f51f69547", "value": "3072:YBX1a2Cj0HGV2eZLObIAL5JHL/06d2EnNM/950bEmIPLWxuJf:g1a280HGV2+LO95JHL/9d2ENM/95AEmm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781890, "uuid": "b30b5d84-951d-44de-af98-2a3441a5ff51", "value": 153391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781890, "uuid": "d60a981b-a365-4e69-9bbc-ad4129e10e06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781890, "uuid": "2419d254-2ed5-49d1-966f-4b3219636763", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6ed675b-e2a5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766786154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766786154, "uuid": "9e1bcd08-64dd-447a-900a-011ffd7233aa", "comment": "Malware payload (Mirai)", "value": "578b881691818f940019e7290e63376f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766786154, "uuid": "78c86683-5041-46fd-9354-aeb8e438ec9c", "comment": "Malware payload (Mirai)", "value": "95350d364605624572e961c67591d226c44d837d4dc4aea79490c87a1c93a94f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766786154, "uuid": "ac67c3e0-c5e2-45d9-aefe-d1186cbe8323", "comment": "Malware payload (Mirai)", "value": "7c1fc506591502056cd324da3772dfe91d7b8b19", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766786154, "uuid": "116f928f-5ed9-4e62-bbb0-afac476eff8d", "comment": "Malware payload (Mirai)", "value": "7c1fef145e08ff37fe510d492ff9b7ed72368204a4d4615a92ba31a822a0e3dbab33d40fc247f3a5a5219132261722be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766786154, "uuid": "1295ee0d-3f18-41b2-b0d5-e9d7e17b148e", "value": "T1BD83088AF9819F51D5D566BAFF0F518C331347ACE3FA72029D246B25678B82B0F7A401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766786154, "uuid": "023dd6fe-1a95-4fb7-ac9b-27fde914ca8c", "value": "1536:yZnwTpqNKf+kZOhm72HjgqlgP5vWbbxqHllUBiFqibq75D/ZCYm7fTAbVR:nTINNkZwm72naP5vWbbDiq575r0nfTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766786154, "uuid": "843fb082-4328-46d8-878c-85d5ceed630b", "value": 83380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766786154, "uuid": "1c414c23-d267-40ce-a9dc-2ef14b4f12f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766786154, "uuid": "ed5a09c3-c948-4bf5-a48c-7df0085909ae", "value": "nabarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "007a4f81-e22a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733047, "uuid": "9162a4e6-10cc-434e-8f85-3680ee8bba65", "comment": "Malware payload (Mirai)", "value": "872a2c115f2f6ea6aaa763a685dfdfc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733047, "uuid": "31abf89f-ca19-4ef9-8670-5487a211bb16", "comment": "Malware payload (Mirai)", "value": "956e912ba5b65844f4557b9f9352ee9ec8749f985e9c7672c1d6107992de062a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733047, "uuid": "1cafaa8b-262a-4a86-830c-e0c889d9e8c7", "comment": "Malware payload (Mirai)", "value": "da3668edd1966f76117aba82c4d472aad2e81048", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733047, "uuid": "1affd205-6c14-4806-b3e6-f12dc71150d2", "comment": "Malware payload (Mirai)", "value": "fa6b5b94c2e59b2a1897e3fdfcf906b0238ad6082884573f3d6317319d3afb41c01a8acc65abcac4c328535de42b0b5e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733047, "uuid": "49b797f4-7a8e-4441-9579-635635f8fd14", "value": "T141D3CFB1F0196CB4DC032AB434B510381341AEB817EA0557FEAEE599507BD547AEEBB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733047, "uuid": "65f961a1-ad4e-406c-9af7-f111f1114c99", "value": "3072:qy6sAbC1r6KKgHhGIQkQGNNerx3dgZc/:qyXAbC1r6DChGohH+x3dam", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733047, "uuid": "ad2a19b2-067f-4247-850d-85ab63b0df5d", "value": 131704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733047, "uuid": "f51e5fe5-6394-453c-8364-7a6c2c716684", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733047, "uuid": "731991c5-9577-4e5b-8575-82553c8749af", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c70dc9b-e1f3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766709525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709525, "uuid": "b7a098c4-3b11-486c-ba5c-1186b598bd61", "comment": "Malware payload (Mirai)", "value": "bd1f3dc3d7b7b41ca1be2cfb364acf2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709525, "uuid": "958357bc-ed6d-4958-ad79-c3ec520165a1", "comment": "Malware payload (Mirai)", "value": "957c9204a84318ca2e4a60554d35a6d807085a4d3b81302debd4b1d5518c60c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709525, "uuid": "6f58a473-a938-4dfe-8edb-bcc2aa2c0ef2", "comment": "Malware payload (Mirai)", "value": "f046d5e46cbe18ee5932b2b033881130d3e91e41", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709525, "uuid": "6f90661b-93a7-4b91-af53-90d0718b2097", "comment": "Malware payload (Mirai)", "value": "3ac491f6145f54316008470eed712f4e45c0d5f169457fe0f3a20347a43002ab541707ea07e7d14d342a334ab70e19fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709525, "uuid": "1ec18dfd-3183-48a6-9bd5-036cd9d58a06", "value": "T18B536C41F3084943E55B1DB1793F3BD1D39EDA9022A4B386794EFB8A4272E32450BD9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709525, "uuid": "921278e5-2399-4055-929b-f4080d715fa7", "value": "768:KUvQbmxQuZBQwBP6KHAYRno+5VvzYV9KbPn8b4fqr2rz6IQT2bVRg:Ku5ZB1BP6KgYe+ru9sPn8b32r2T2bVRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709525, "uuid": "46503d31-cbd0-41e2-8a19-ec9f26c5991a", "value": 61404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709525, "uuid": "4f28a42d-bd64-4277-8bab-979b16dbc784", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709525, "uuid": "bd5203ea-aaf2-45ea-810c-ffe8bb44cfb7", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53e203c0-e223-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766730180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730180, "uuid": "429b89be-2602-4595-b5fd-c74174f733f9", "comment": "Malware payload (Mirai)", "value": "0f8f1ff717bf8e8b4f827ff124dc9530", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730180, "uuid": "614605b0-468a-4f83-9c05-0aaf3c8eaba1", "comment": "Malware payload (Mirai)", "value": "9586b2314ecb00c6d48996d5fee3fccf63b1455588a986de958e93129a50fa38", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730180, "uuid": "03d4c49c-33e3-406f-82a5-3a81443b521f", "comment": "Malware payload (Mirai)", "value": "deeb0b74ab05c2e3a244b255cb159a11a66e9739", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766730180, "uuid": "310aa9ca-532f-422f-882d-4760a804305d", "comment": "Malware payload (Mirai)", "value": "5d60576467fe1ae26094d5670817b830d02888b160538d361220e3d33eaa343d0b3c7e8858e33fbbd0266b1e8b14035e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730180, "uuid": "858b04eb-37d6-495f-bafe-13a224738e1c", "value": "T1B31302A606D9B727F657513DE3DEA7E9E22460E88F194CE809A0F8055629D13FD40CCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730180, "uuid": "6c2247ee-667e-405b-bf16-a9b9731dc31b", "value": "768:5K+Rroi/wvXSMhR6LoqSEa7MWy0KVZ65YNI2A2sVb5r1bv7fwAxu8:5K+RroAEXSMhR6LtaBq6iNI2AD72AQ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766730180, "uuid": "d82e6f21-a4b5-4877-99b4-da0119b9a1b0", "value": 44904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766730180, "uuid": "3d2b4806-1dc7-48f1-894d-2be37f063478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766730180, "uuid": "56688769-27eb-4c9d-a8c2-fc984249a840", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2d98538-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772511, "uuid": "c35f56f3-e5ef-42c9-ae9f-951f75d3405f", "comment": "Malware payload (Mirai)", "value": "17a9a124c74c675948fc08acc8d48754", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772511, "uuid": "b184ce08-5e47-4253-860d-416227b5198a", "comment": "Malware payload (Mirai)", "value": "95cdfa884c5a98a41937993a719d77809da4a294920049bf785f3730f5819529", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772511, "uuid": "6e3b1007-c516-4b61-a47f-e922dd8c8558", "comment": "Malware payload (Mirai)", "value": "fabbe645f751834fef3da7b07c06a13622da461b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772511, "uuid": "b6be4327-f732-4d13-a9a2-525a90bafa3a", "comment": "Malware payload (Mirai)", "value": "39f3d39e886f3a4b7cadf249b62e28b04b721b8a3ca206fed1d58d6364e32de1c8bcc889bd046a3163e03682266f4d30", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772511, "uuid": "72574307-c698-467e-8308-cb6bbc644e0c", "value": "T1D0933A82BD82C95EC6D023B9B66E268C335263FAC2CEB253DC155B1177C961F0D77A90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772511, "uuid": "510083b4-79f2-4b36-a829-48fbe4c6d17e", "value": "1536:yBPeipZ9ErupM96Q3eYQYaLnjZMtG2CtGVO3l3Bt0a+eA1zkK2IymQY2AUm6hh1B:EPlZ9Eq3TDCc2yZ70LT6hh1fkil", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772511, "uuid": "627b114e-f3d2-4922-98ab-b3daf8f70611", "value": 96540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772511, "uuid": "11ba0733-00f5-4147-bc6a-58c3b93dffcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772511, "uuid": "c7722bc0-67a9-4e35-88aa-59784dcf0dce", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2f89071-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773370, "uuid": "a0f590b6-cfea-4dae-ab1f-194950601b07", "comment": "Malware payload (Mirai)", "value": "39d389f7679f87c8f3c33d34cc2de84b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773370, "uuid": "39c3fc23-ab85-4b08-9403-c6bb17daec8b", "comment": "Malware payload (Mirai)", "value": "9632cbbe2623111533bb9228b0bda0225721ab8378e1e6327173ff5d1dfc4082", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773370, "uuid": "732c893c-2c5f-4a97-83f4-d465bccd71b8", "comment": "Malware payload (Mirai)", "value": "c52f97aa4f44d9a64b78d5f200346aac2c48e4f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773370, "uuid": "a20c6fef-347d-4a85-b397-d81695742c21", "comment": "Malware payload (Mirai)", "value": "51d3ad82ee8024d21de0bab905e3292e8ddb8e07c4770388e610b828809a59c6c8243b512ffa53457df3d524b22777c9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773370, "uuid": "09fa35fe-aef0-40a9-8f3e-6e68293ded04", "value": "T114734A21BE762D17C4C4647E21F30635F1B62B1A66ACCA1A7DB20E9EFF155103107ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773370, "uuid": "86bf78b9-98b3-4de6-9714-97f730ee1edf", "value": "1536:pwkS4i4+urb2qU4/lxfTqNuH5rWHUvnYoQsksMpTX4VoFHzA7uhD:uRHC1lOGdYbsvCDjHzAs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773370, "uuid": "67594835-daaf-456a-b52a-33281164cd07", "value": 79404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773370, "uuid": "71f17f45-78ad-44f7-9eac-60d310f17e44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773370, "uuid": "901ec619-a36e-4bcc-b9c9-a324edec3d50", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55eaa1cb-e262-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766757242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757242, "uuid": "c8e2eaac-1bf8-44ac-89d5-691ce7ed12f9", "comment": "Malware payload", "value": "26c38afef70baae5ba11be2c125bd46e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LibrarianGhouls", "colour": "#E40994", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757242, "uuid": "5d94a569-08bb-4da9-abc8-293e2f867a0b", "comment": "Malware payload", "value": "96c7ba19beef1a314a3575f250872dde5b61a82674abdc3508009179292b806f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LibrarianGhouls", "colour": "#E40994", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757242, "uuid": "94449cce-a285-432d-a1ae-37b538b59680", "comment": "Malware payload", "value": "c4b39d6fe1f19470f5ed9626f60f8fd7720edecf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LibrarianGhouls", "colour": "#E40994", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757242, "uuid": "6a4380da-9fdd-480c-9927-36f14c74419c", "comment": "Malware payload", "value": "50392779e1c612c548f64860de31f088c17daab283509ac2b6825e1f4270acd6eac7e4a7376bc315972e1d34b527542b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LibrarianGhouls", "colour": "#E40994", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757242, "uuid": "97628df9-1b0c-41a3-a890-f8441120cca1", "value": "T19C7633AFBC0A0C40FD37353A9892A5758EDD743092A19ED4299C778AC27E45F3D62C2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757242, "uuid": "af972a9d-6882-40da-a7b9-b744783e3f25", "value": "196608:RFQqLFt02M16VN8iNISO8OhfvENaaZV/pkynyQz:RZtVM4Xg+ZbkyyQz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757242, "uuid": "1b495959-3df6-44eb-80ee-78c9cb2aaaff", "value": 7307776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757242, "uuid": "3cf5a2ff-72f6-478d-a3b3-2bc7d5b05726", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757242, "uuid": "91427061-9f3d-4145-823c-135ab329141b", "value": "StealerProject.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1217d58-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711922, "uuid": "4e1e5359-04de-412a-87ba-811cac8892fb", "comment": "Malware payload (Mirai)", "value": "cf127d66124c390ca0f0b42c6385c3c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711922, "uuid": "74bd0033-d190-4a9e-ace7-7ba3e56a5532", "comment": "Malware payload (Mirai)", "value": "96fc528ca5e7d1c2b3add5e31b8797cb126f704976c8fbeaecdbf0aa4309ad46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711922, "uuid": "11a7cb89-ba0a-439d-9548-ca3a99f4a44a", "comment": "Malware payload (Mirai)", "value": "01e3dce00ea45829bd9f6a583004976ac63973a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711922, "uuid": "20025ee7-3ae9-4aa8-af6f-7b389e030eb5", "comment": "Malware payload (Mirai)", "value": "6ae92c4560999fbb6be69b22bd90e6ca51341320c49152651aa9e128654113cf0aa92282cc7a5a700dccec6200ecc5b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711922, "uuid": "f4f4d491-af1e-400d-9189-eb194de1d93c", "value": "T171865B47B6E318FDC19AC470472FD563BD70B8984221B97B7698AA302F67E205B1DF21", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711922, "uuid": "6fa7c811-ac1e-4050-929a-2f10e9ec422a", "value": "98304:nEmfCLfqpp1Si7ukqzX0WtP7cmNfCADtExRPERsbKP+gKTowL+TBOMV9qg2glMy2:CissbKWmTLJMmtNpfD+I/Ay+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711922, "uuid": "33525777-a929-46fe-ad24-fa845469da60", "value": 8334576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711922, "uuid": "53a87d23-b9d0-4289-9086-167215376ba6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711922, "uuid": "6cddc9b1-7d45-47f0-813a-c0dbc677dd40", "value": "xmrig", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f80ef27-e298-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766780424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780424, "uuid": "d0c429e3-f7d5-4522-9ff4-7968a37b6fcc", "comment": "Malware payload (Mirai)", "value": "19bb33b248aa449b34672353be89ed72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780424, "uuid": "2c6a9ae5-37fd-4733-bfaf-3beaf004c7e9", "comment": "Malware payload (Mirai)", "value": "970b9edc0b9b4cd2de09d10fe6cef7f38b55329ed0baa5ee19a18c6c63ca23d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780424, "uuid": "96fa94f1-2e1a-4a11-a130-75759dc93b98", "comment": "Malware payload (Mirai)", "value": "7b4f06641677015dedc0bde8dc046e2444e4dcc9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780424, "uuid": "da275f11-5ce5-4ea0-a945-b281b3e40ebb", "comment": "Malware payload (Mirai)", "value": "6123b3afcfe769cfe4ba4be4e49bed0014dbdabc4323a47fa8e12291283e20c9d9bbf46239c20fa497d15cf95ca07558", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780424, "uuid": "c1b571bc-8a5e-41d5-9112-03569c235dd0", "value": "T1D8F45B223711DF65E355D67009F3C6914AF221A21BE25096B26CC7287E20A2E6D5FFFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780424, "uuid": "c8836988-b903-4309-8773-f7b9a6506d3a", "value": "12288:gDm09Ps3NgUxJwzHUEIYBHU4W7G9RBaZE5RDR6gpLBEBEIIjkMbV2HTE:Wl9PsjxJ9SHU4W7GbBaS7D8BqhbV2HQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780424, "uuid": "ddcec8d4-40b3-47c5-b06d-7200f1a75f25", "value": 763448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780424, "uuid": "fd404f32-3afa-43d6-b451-e8956ca1d976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780424, "uuid": "7578a381-1243-451e-a977-089b3780c425", "value": "mirai.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "598883e5-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747370, "uuid": "91d03d16-04bd-4e06-90bc-c0dd46ac7ace", "comment": "Malware payload", "value": "4fc5bf6b92633ef0ca2528dd38102700", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747370, "uuid": "2b7c0577-3ffc-41f8-b2c4-40711902fbe1", "comment": "Malware payload", "value": "987ed06586d3e0785b6c07e13fe450f4b22abb7fb642cdd62309d3a46a2b2cfb", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747370, "uuid": "07df67f9-d36b-4ee8-8f5c-53facd995245", "comment": "Malware payload", "value": "0dff4fbf6c19d00b60cea7c9bdb6e3c4bfe9c398", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747370, "uuid": "5272135f-e305-4ff2-bb3b-1fb878a37591", "comment": "Malware payload", "value": "c18fd82acc4de21ebe5ba545cedd7334c406ddabc4914b6b7e727cdc51a0a441aca26e91f9d8873ec90e925d43a4900d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747370, "uuid": "415ea3f3-df48-4f6d-8019-88d624e0fd1c", "value": "T192732ABCAD45B38971D257FA7E4B88418802397C4F3B8CE53C66E151CFA98F2A4D19E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747370, "uuid": "11c8e565-7fe1-4a9c-bce2-4ecf51f7f487", "value": "768:I8w/h62/jWs6oS+xISN0vwOwMKrdkfScBYrwz2y8kTAlGB:I9l/AoSSMwtusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747370, "uuid": "b56394b8-059d-4b43-94ee-cc72984a52e9", "value": 73474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747370, "uuid": "cdce49ac-b787-4d18-b904-496ffb40c67d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747370, "uuid": "05ffacde-03c1-4ce0-9f60-ac38ad478a83", "value": "invoice-1645080830.pdf (48).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86181f21-e2b6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793401, "uuid": "ec4961d0-d170-48cf-9ff9-1c64598aa86b", "comment": "Malware payload (Mirai)", "value": "25e41730061d109df3b80a8a8ee2145a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793401, "uuid": "ef32a523-e378-4882-ad88-efdcfc2c5380", "comment": "Malware payload (Mirai)", "value": "9964f1dccc9a3803443da258bf6beea0cfcebbb1b5f665fef53a59477d5ad797", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793401, "uuid": "3d34e8ab-aa01-48b1-89cf-62be11df7bfa", "comment": "Malware payload (Mirai)", "value": "0e4d2ada2f8bee4beed7724657ff31930cdb1db2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793401, "uuid": "d4c63ebd-3c07-43aa-8b81-f42a661fa630", "comment": "Malware payload (Mirai)", "value": "c314ac1d1982679bc252ed7b6419fda76154372708014575c25dc0cfda045d76d48a83a7fa2bf30fabd7add0eefd8d0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793401, "uuid": "5c164ee1-f0d5-406b-8954-47838d3cf2ac", "value": "T104C31859B8929A62C6D356BFFE0F429D373223E8D3DB7103DD142F26368651B0A7B142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793401, "uuid": "e0a1f64b-f58a-4d95-8071-53a736657728", "value": "3072:MkxzgtdAaKZOehuJlx+x3+nzEHIVqXi3VZvQFLoFH44jhZQB0KIn53L:vBgtdAaKZOehu1+x6nVqXkZvmg3hZM0T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793401, "uuid": "8646e77b-b7c6-4afb-bc21-6fe74604ab12", "value": 128180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793401, "uuid": "3cbd9815-46e2-4c10-909f-096d772d64a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793401, "uuid": "0e39c03b-14fb-417f-a7fe-ab1d7d096653", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e886f4c-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774302, "uuid": "8a4fc194-0fd9-49c5-9a42-440f5141d024", "comment": "Malware payload (Mirai)", "value": "19bf97b1facff9963675ed3c0f98a816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774302, "uuid": "4e200920-2543-4b22-8862-79c4c7f6f53e", "comment": "Malware payload (Mirai)", "value": "999342540d8e9706d7170448fc67f8537e27f3247a27df0103206b9636de6eb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774302, "uuid": "2744a8c1-ed57-470c-bb10-ff0341d62066", "comment": "Malware payload (Mirai)", "value": "6123a163e5b6ad15fde771cdc1331b5efc1ef588", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774302, "uuid": "9c8752a4-263e-43f1-a79f-5970aa3fde29", "comment": "Malware payload (Mirai)", "value": "9fc35a307de1e2f89bb1b8b51992532a90a13e7ed2dabdb3e69cf11b2bdb8c4157f5295dc14f2de73f93f0cee4e3dc8c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774302, "uuid": "e89b109e-05a5-45e1-adca-ab1cc88a55b3", "value": "T1F124A51E6E228F6DF768873047B79E21975C23D736E1C641E1ACC6111E6039E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774302, "uuid": "d4ea3191-4516-4cf7-8717-74048c5b5d9c", "value": "3072:c936OkAgW8y4idNR6vEw5rTyrdQ4di7WhUQrMZeKxytDiQeU:c9AAgW8y4idN8Mw5rW1dQsRr3KxyteTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774302, "uuid": "bf6b0661-c665-4dd3-83be-3765c570ca7e", "value": 222396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774302, "uuid": "58a405d7-5e58-4578-9260-c7e99e8c2e09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774302, "uuid": "233ea1e6-464f-4956-9bc7-e037e86f9bd8", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dfe90ef-e228-11f0-a129-42010a9c0007", "comment": "Malware payload (njrat)", "timestamp": 1766732210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732210, "uuid": "f10ddb6f-9ecd-47c6-ab7a-2f98ab5a6c84", "comment": "Malware payload (njrat)", "value": "6ff62df2b5406b99eed3a23b0c784cf5", "object_relation": "md5", "Tag": [ { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732210, "uuid": "a1f473f0-d8e4-4821-b131-16edaf64d22f", "comment": "Malware payload (njrat)", "value": "9997b53600be30c0f8889bce7a9df275afed91777355608ee39000b3f0457bf9", "object_relation": "sha256", "Tag": [ { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732210, "uuid": "7009b22e-5b8e-4cb0-942c-5ccb7b44846d", "comment": "Malware payload (njrat)", "value": "c1a24a4878a684acc1e68d43d609dec027d79ad3", "object_relation": "sha1", "Tag": [ { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766732210, "uuid": "d9d923f3-a68a-412b-b3fe-ea2653b14697", "comment": "Malware payload (njrat)", "value": "aa6c134fd34a4e9503b51851492d468df798899782f73e8bbada1c55ecde1f987c5bbec2e31850bcbec83ccf0c4577d9", "object_relation": "sha3-384", "Tag": [ { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732210, "uuid": "5badc635-1a4b-4a6b-b947-b9cdb9dc5689", "value": "T1F8E63379C8BCA519C535D2FDB4B8F822537EE17BB206596B03789B8001197E6BD8D38C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732210, "uuid": "db8fedc0-3ab3-4af2-9d6f-4401251bdcc1", "value": "393216:hwSfrit3udu24jctm4bYdXTM64aCVmrnrn8YHSQij:mS5d54ItcM64nVUrkNj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766732210, "uuid": "d9601e1f-568b-4b52-9de4-b5d3513057a1", "value": 15027643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766732210, "uuid": "6483ce22-aa89-4672-a1ab-07fe734300a2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766732210, "uuid": "c7ebd533-bfc5-48d8-865e-63688c02d8a4", "value": "Cosmali-main.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b85f445d-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778882, "uuid": "5e8e9956-88f0-4ce3-b27b-73ad60b4b11d", "comment": "Malware payload (Mirai)", "value": "3b80fccd19fe8d07fa2e19c24b5b04b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778882, "uuid": "58fb0add-2bd3-462c-890b-155a200a0c73", "comment": "Malware payload (Mirai)", "value": "9997deaf58d72e22cf10d4d2581c5768ff37a02086310b58bcd45406e8635818", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778882, "uuid": "172ecd53-657e-4a55-98f7-402488bedaf9", "comment": "Malware payload (Mirai)", "value": "73e3564c5ad4515dfe04029960ebc83d9c961203", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778882, "uuid": "5c2a76d8-37a0-40e6-91fa-453a743afd17", "comment": "Malware payload (Mirai)", "value": "9ac57a333b0921de700a7840a60d496a754cc71dc205c95e261aa11646d4573b3e8ac414c982ce6ece069e3a6ab44a97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778882, "uuid": "45ba14c7-1143-456b-a655-870f0a6548cf", "value": "T1CCA3B44D7E318FBEFBEC823447B39A12A65927D533E1C585D2ADD2011E7024E681FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778882, "uuid": "2eae1f08-bbdf-4852-b352-5e2bf2bdceee", "value": "1536:WpaZOuT/Q30SQXa1r3J62yqPy/RWLW0edmpwjeENY0:lZzTJa1rZ62yqPy/ULWzjeENP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778882, "uuid": "65f61c7e-db50-4394-9fec-0987122df297", "value": 101188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778882, "uuid": "685c5955-673e-4443-820a-c93b372c0b1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778882, "uuid": "cfbb8073-c80b-464a-9430-b4e8406068b7", "value": "Space.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468e3508-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772678, "uuid": "413569cc-a5bc-469b-bbeb-f0df7d5e98db", "comment": "Malware payload (Mirai)", "value": "50f33aa09e2b4b2a367061a6e9959082", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772678, "uuid": "2a43e666-7e9e-4989-9d88-ead789dc64dd", "comment": "Malware payload (Mirai)", "value": "99f8d244f59e2705f900d01d707a25c8e30197c38894674eda180ea9506f1b5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772678, "uuid": "4081df4a-bab6-4c3c-93f0-b2f7ec48e940", "comment": "Malware payload (Mirai)", "value": "96d0bd0c0ccdcd9660559cee9e7bf6d39bcbf523", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772678, "uuid": "880d1dd9-d9a8-4d28-a0f1-235dd92fe303", "comment": "Malware payload (Mirai)", "value": "53a967873aa846fee52a4a8d7bbb2254148c27e3d8d1aa25e28def413882811d4f4d4336d30894ae956b2e3863365ed9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772678, "uuid": "9aec5513-4c3c-4b65-b45b-d3bfbafa702c", "value": "T128830996B9818B25C6D562BEFE1E11CD331317B8D3DF72139D146B247B8A82B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772678, "uuid": "254b2958-b68f-482c-97df-9816e4875131", "value": "1536:6Nn60yshP/pimSQV6755z0xYa3dmDs+2HBa7vb+3+4MGbOMxiF2gM7KxvH7/kYYA:0XXsjEUDB2hp362gM7KxvHDkzTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772678, "uuid": "c8427db9-f09e-4001-975b-d9240421d2b1", "value": 84748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772678, "uuid": "1a23d128-7607-4e0b-af4b-760f93ec9d25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772678, "uuid": "3f000114-abc7-4ca5-8fb3-95c795db564d", "value": "nklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de3999c4-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747592, "uuid": "34c169ca-1dbf-41ff-91fd-734b26d878d4", "comment": "Malware payload", "value": "98d551cc5557eb53cc057c89b8b123d7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747592, "uuid": "fe4090e2-7ba0-414e-b9d5-4c0ed4e13098", "comment": "Malware payload", "value": "9a0c974783df4beefb74b6f6ce7f8ebdd7c9b2e4e85da37af840cc86eb51ea3b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747592, "uuid": "eb76f62c-de89-4a14-82b8-0c2362d60c86", "comment": "Malware payload", "value": "832ceb125484429f14370d161f4234e1aad08443", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747592, "uuid": "10987f31-2f5f-4cdb-a90d-edb7d5b95b49", "comment": "Malware payload", "value": "a6566023bfb2087b208e76b3e18598c1b61237370f911462bccdcc6223e9dab46ce243a7bd84ef454de92ed2c5a09507", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747592, "uuid": "19b8f21f-b01a-4aa7-973f-a42cfe514750", "value": "T1F6733B1AA991E0A73F9873CE9A7CE4CB090121FA4452DB61D6F844970F39D8D5F9E223", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747592, "uuid": "6907af6d-7df6-4747-a6e9-d249be587e5f", "value": "1536:I9l/AoSSMKfhTyJjLJh3X4SmqYrfSqy4sKjvOGOQpJPKTWKeOLOhpnEbTkzfWS/b:I9l/5MKfhTyJjLJh3X4SmqYrfSqy4sKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747592, "uuid": "a4a12b3f-5bcf-4124-bde1-f0a5e619b63b", "value": 73473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747592, "uuid": "a0b0f5fd-120b-439d-8d62-ef1a9391df1e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747592, "uuid": "ad4b5be3-bbd2-484f-b6c4-a4588e87dfcb", "value": "invoice-1645080830.pdf .js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab67751d-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781867, "uuid": "8dba6621-1df1-431e-a21b-15106ca32e56", "comment": "Malware payload (Mirai)", "value": "d28e0caab7e9bfdb2c90186d25a94f56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781867, "uuid": "3a564339-eec4-4088-b4b7-f5dafc5c1c72", "comment": "Malware payload (Mirai)", "value": "9b3198175021e3d4bb3378e708ef4eedf06032b1455c6166e4524994ec222f0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781867, "uuid": "2e913526-ad21-4f5b-8800-9ac2c748fc86", "comment": "Malware payload (Mirai)", "value": "8afc2d91c71badc7f5213f8d3a44120d16e44dd3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781867, "uuid": "fa7552cf-7710-489d-a3f9-43cd4b76941d", "comment": "Malware payload (Mirai)", "value": "50f954a6dfd01fc914e3eed1c14b1c85fc853616dce5dc78876f5061a45e967878dee478a3ba5d583a56906acb5ce137", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781867, "uuid": "80179721-e5af-40f9-877f-eb97073d4ad8", "value": "T11E83089AFD819B11D5C156BAFE0E224E7313077CE3EE72129E249F20678796B0E3B505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781867, "uuid": "11afbfd3-c03f-4c1f-8705-f81ba4599fe7", "value": "1536:BAniSCpFkhu9dYZaUA03ux0FhMWiJMowmdfhBW87P6A5uYzISZ:XSQsmdYZafuQMowmdhBW8eAYs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781867, "uuid": "bf5aeb91-331c-4509-8a57-739fb7c7bbcd", "value": 88668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781867, "uuid": "be17faeb-fab8-4e9e-8625-ad0d4feaa1fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781867, "uuid": "6b0a9d19-2ee2-4a55-8927-71524ebdb3f8", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfeaf225-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772076, "uuid": "d3d8a5ad-9cca-473c-a97b-a71e0554ce32", "comment": "Malware payload (Mirai)", "value": "dc9ec09cb0b6c811078db4ff0357539b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772076, "uuid": "c514b44f-9e2c-4bd1-b039-b5dfd18786be", "comment": "Malware payload (Mirai)", "value": "9b8386e8c75e573c4bb5220a3f8e1d66c07e3e4c3d9362afefec12f84e13c2ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772076, "uuid": "ad49ece9-3826-4692-aab6-b212c48235fa", "comment": "Malware payload (Mirai)", "value": "b66c1d2ad3f6ae3d81d65d126a8d6dd0618cc808", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772076, "uuid": "14ff20b1-bbd8-472b-b94c-be950f91ecfd", "comment": "Malware payload (Mirai)", "value": "83db8a784cec886895a7708d17a983fdd2dd6fbedf4d33e9bd56bd413b00031adb830c5f716d1c997662ef37aef7b4da", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772076, "uuid": "e6df17b0-0a1d-47f6-8def-06d3a615f99c", "value": "T17453F846B8918B25C5D412BEFE2E118D332317B8E3DFB212DD106F25778A56B0E7B912", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772076, "uuid": "cf9e3ccb-b79a-4020-b7c2-76104152f746", "value": "1536:ygnuZ2vOvPPZsNbaOogWCsPGz3n7/LObeMJi09hoVldT:WhZC3769hoVldT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772076, "uuid": "33dc9a98-2121-4a76-ad5a-245a846cfd4c", "value": 60832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772076, "uuid": "03751703-8690-49b1-8088-0acfa90c1127", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772076, "uuid": "f7acf91d-6d00-4990-b133-8547bd5acd2b", "value": "zerarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b009d029-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781874, "uuid": "8bd62bb1-0a1e-4d48-acfa-240186bd72e2", "comment": "Malware payload (Mirai)", "value": "c058ca855d448fe7916a005396b79ebe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781874, "uuid": "dbf6b2ed-dfa8-4e94-b45a-4fe646273190", "comment": "Malware payload (Mirai)", "value": "9bdfd40095b173ed56e4fd2ef6d4ad2938b73a7b52432e7167c19362dd4a130e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781874, "uuid": "722953f3-17cb-45de-800b-f91561a33690", "comment": "Malware payload (Mirai)", "value": "64bd5a09b5c924c31a716dc3588f9aa8013d7db8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781874, "uuid": "693e14ab-fd5c-4c47-912d-aa0a0194f61f", "comment": "Malware payload (Mirai)", "value": "603edfd27e42889da27e90c0374387e65eb38ec99ad913b222f7bb949c9c871dca7b5c6640f578efdb351482c8ad0b79", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781874, "uuid": "22cfe89e-74be-489e-a486-1d28f45b1710", "value": "T188737C17E59090FDC899E2755BAE6232D933B03D1231B22E23C4ED627E6DD212F6D750", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781874, "uuid": "5baac37f-80c0-41a3-8a64-ae4f4aeda41e", "value": "1536:BZOvkXiWjUFITQwd8VJ5m2vxesldiWeK1VPy3sURu:JXiGUFhwCz5FeslIk1VPuXE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781874, "uuid": "47ba4520-e7f6-4140-849e-9d7776f2b485", "value": 77992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781874, "uuid": "76ff7af5-c8da-4c1c-b702-13f8a352f3d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781874, "uuid": "7f09c366-2015-4028-86bb-d6b0dce48bf8", "value": "dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f715ecbd-e261-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766757083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757083, "uuid": "9b57ac10-9b84-4509-b7a5-63736dedbcf3", "comment": "Malware payload (Mirai)", "value": "6acaf678e250ba969a6b3c3f17bdd7a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757083, "uuid": "92233339-30ac-4a2a-a7fe-71bbe7d9e0ae", "comment": "Malware payload (Mirai)", "value": "9bf3381efb24beb63fa4ac3381ed2d879fa16c5c5029f8636fd66aa4390a9df9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757083, "uuid": "08a163c4-f615-41e6-aa54-90cb91a01eb6", "comment": "Malware payload (Mirai)", "value": "53ae1e6cef57aa2a1fcf23e913303b11db8d4fde", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757083, "uuid": "2d3a57b2-5ece-4e9f-9896-efcf33b76467", "comment": "Malware payload (Mirai)", "value": "1a0779523e62e7918d5f81f3ef7a69552b9baae30f5655866bd27a9633c1c64cc1242896074505c5bacd4ea38e8364d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757083, "uuid": "09de3d7f-d7f2-4e47-91a5-16f97cadb1f0", "value": "T12C2491A2A41559DBCE0048BAB3AC8F7427927C70825B1F7D4C564168A28F8DFF1D6BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757083, "uuid": "fe5d1b9e-dd94-4d59-af10-2c1020d7a084", "value": "3072:EcdEMBpsujF3XVQDWb0A5KvgcgJrAWxWkCC:EceIpsGYqb0A5KYzrJx0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757083, "uuid": "fea0ab27-4f83-4722-8e57-8bae1278fa29", "value": 223664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757083, "uuid": "d4ec7839-ade9-4dd4-a6ad-0fc3269bd850", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757083, "uuid": "48ce1255-4f6c-4a13-a6c1-f5a64e99a3fa", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c9a502b-e203-11f0-a129-42010a9c0007", "comment": "Malware payload (Formbook)", "timestamp": 1766716532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716532, "uuid": "cd381cce-f5c3-479e-91e2-bb7bb8c942d2", "comment": "Malware payload (Formbook)", "value": "1d9bb59e9406d7de2b9fff89d0e6f105", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716532, "uuid": "1e05003b-1242-433f-bf9a-f24599c9546c", "comment": "Malware payload (Formbook)", "value": "9c25f0e398787875c5d4513495b884b4392df171d8ae8eecc8e32c762f81c63b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716532, "uuid": "f35d9222-4965-451a-a4fe-2d00e168c844", "comment": "Malware payload (Formbook)", "value": "1d3bddb9bfb4b4fea23137261e963e4775af51b7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766716532, "uuid": "a4d1bcdd-e5d7-404f-a6f6-1f49e6170cfb", "comment": "Malware payload (Formbook)", "value": "5cb3bd80cc4039b562a1c0119673641c1ad2fc9f8f0b37e75161f5a0031c773d55974d6bf1f5759757905ef53d0e9157", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716532, "uuid": "69b6e5fc-7625-4974-820e-de7b5d8d2df3", "value": "T162E41265A619D613C941577A4AA2F6B013BD5FD8F401E7239FE87EFF38336461E08282", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716532, "uuid": "c1e5f599-a68b-43f3-b68e-0a5e60f1c10d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716532, "uuid": "85da6f9b-d7bb-43d0-93d8-f3b76614006c", "value": "12288:LetMm7d4r6ivB/v6oOCtJP2Nh6/9iEmebZLsrwZlmHW0u4TVVt:E4r60/v3JP2Nh6oeyYQHW0ZTDt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766716532, "uuid": "71a0aec6-0d3c-41eb-91b3-edab674e6196", "value": 719872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766716532, "uuid": "3a459972-7a33-4e42-a274-c3fa8bfa9b4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766716532, "uuid": "0a8c195a-b8d2-4ae4-ab56-425208dbe6ba", "value": "CREDIT NOTE-LGPS2025112756D-MADI-EX-WORK.bat.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a639f90a-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707985, "uuid": "85a97abe-76c9-4c3e-9902-dbaf7a729a3f", "comment": "Malware payload (Mirai)", "value": "f50e82069f803eab33a430307843e3a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707985, "uuid": "f7c1fd63-ebc9-4340-bb81-7f3b449728fa", "comment": "Malware payload (Mirai)", "value": "9c3723a87aeb5a7b63d461e105fc13746808a7c89302940e341d0334ecce96e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707985, "uuid": "b2c9b297-7a04-402d-97de-0742134048ed", "comment": "Malware payload (Mirai)", "value": "1a93ddb73245e2f020ab54021ef2a9397de82550", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707985, "uuid": "14a135cd-81ee-4fc2-9ea1-f611ac3c912b", "comment": "Malware payload (Mirai)", "value": "b91734267b21112f169ccdf449973602ef182ee06447b8b18a5ba6c0fc1f10be2e4129bf172889388b13d6bf398f603e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707985, "uuid": "d61a1c7c-4ee9-423e-8c85-653dac5cfbc8", "value": "T14963E81E2E258FACF36DC73547B78A319798338A37E0C685D15CD6012EA024D645FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707985, "uuid": "eb653e7c-e49a-4e27-ba50-d7ab894a9767", "value": "1536:BR3lMs38SRneVXOiycY1zMQapHWpFwWpp8o3f0NrTs:zasMUne1OiycY1zMc3farTs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707985, "uuid": "049ebc32-6de1-4508-9055-ac7dffe4936a", "value": 68244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707985, "uuid": "6621b922-a169-4c43-a327-191ce172a4c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707985, "uuid": "6bf1a036-4a8d-4b99-ad1f-3185ddc7059a", "value": "zermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a2fa5e-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766729187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729187, "uuid": "637ce08f-61d8-4605-9af8-5b58e01d0a9d", "comment": "Malware payload (Gafgyt)", "value": "356f4c5ee499d8a3dd4ee19d6ff1425d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729187, "uuid": "a138c2c6-528c-4792-b20b-3b71a44657bb", "comment": "Malware payload (Gafgyt)", "value": "9ca6bbdab55c8dcf79dd1f8fb360e887a48f3ae889b367f3f2c71972e54b0fbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729187, "uuid": "48d5a3d2-bedf-4272-bf6b-147d33013fd0", "comment": "Malware payload (Gafgyt)", "value": "fff49cfd7a7396f0787c6853bf310a067b94022a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729187, "uuid": "a454fe12-644b-4db5-8328-214094b8a8fc", "comment": "Malware payload (Gafgyt)", "value": "43c23209b92b9f535503a587dd8bdee11964cad23b1b0976eda19583015a12b0a21c841e704c144344f4166068e8527f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729187, "uuid": "64d541de-1e74-4721-aa28-0dcfa22f416b", "value": "T17B348496AFA03EFFD85ECC338295DB0A159C994912857FB62A74E114B78B00A5DC3CDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729187, "uuid": "c40b2df7-f9d9-451e-ab48-a566729f4b58", "value": "6144:wbliRq6w66aApKRtttR329z/IcHpVOWN3ZH3grEk2U15QfXnHUlXRN:wtyyfYycN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729187, "uuid": "7f00bc8a-85a9-4b1f-8a33-d3c2365bbdfa", "value": 239932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729187, "uuid": "81596761-144a-4e30-aca6-8b57d3133e99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729187, "uuid": "9043c889-3206-4339-9422-044397ec396f", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe07fc0b-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766713286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713286, "uuid": "a142c1c2-9dd2-4ce4-87b4-241ef062a168", "comment": "Malware payload (Mirai)", "value": "729251d0b801c21555f8765fe4113c68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713286, "uuid": "0f229dce-10d2-46de-b57d-db42ace83db4", "comment": "Malware payload (Mirai)", "value": "9cb5d72d8b7b8bbca2725ca0a67e29fa4eaf960a3e26af95fe089cfe50921a59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713286, "uuid": "d21d559c-e0c0-431c-90a5-44c6f4235420", "comment": "Malware payload (Mirai)", "value": "21f31c3c08c9ffccb8b351a83022f62249ea19c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713286, "uuid": "a0213074-1cd7-487f-8ca0-380ac2e3d4a4", "comment": "Malware payload (Mirai)", "value": "d2bf29ab1a264ab272796049d9b159865fbbbeae8c4dfd5aad1d073e9c748b55f1b51d99bbf247ae7a21a2a535848a41", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713286, "uuid": "1133dfce-6f1d-4242-bd13-65e1da89a075", "value": "T12E7302FC534190FDDCE16079D9750F42EA3271DB88468E10729BE8A2647B878344AEF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713286, "uuid": "a5ff902f-59e9-4193-9c77-979c6790e29a", "value": "1536:bZvV+lOfxcKkHSmY8iTmvK5qi2p6FUWrYL++BtFaE/Wz1Qm6LSyqNWN6VJuV:bZvwlvKkyTlAEP2p6tg++BtFhej6LpYO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713286, "uuid": "2ab850ad-5d85-4df7-8953-f9a86be65e8a", "value": 77884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713286, "uuid": "d52332f9-eb1d-496e-be3b-05fd6c9a73d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713286, "uuid": "226394c0-b97f-41fe-ac2a-87463455ce1d", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181c3c42-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779043, "uuid": "c7fd15a8-edc3-4ba9-a325-634c68bb4f4f", "comment": "Malware payload (Mirai)", "value": "729c36e4421ac8ca6f316a03e6b0e2d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779043, "uuid": "b33ab1b8-e0ae-49d1-a432-7ad0ef41800c", "comment": "Malware payload (Mirai)", "value": "9cc5dcc12982e5c16bef4e9fd1cd3aecf7536ed75167289f427ba1112e625a79", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779043, "uuid": "53d1f334-5ddb-410a-ad09-2df20b47c721", "comment": "Malware payload (Mirai)", "value": "50253f22b5efbeb4ee9ef049b0e87a25763039d4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779043, "uuid": "67bb8846-28b0-48b7-a414-0a5c7e036d3a", "comment": "Malware payload (Mirai)", "value": "4ec78e256cd07e0531b63485426af766f5a84b861bdca6f03de24fe283b1fcdacd2306fe4e1e17a04e5d627ed7f82bde", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779043, "uuid": "0d385106-2382-4dda-8805-aef27ff54c50", "value": "T1ED836CC6EB43C0F0E8624972213BE7329A33E53D5029EE83D769A972FD13542D55A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779043, "uuid": "5780f586-9b62-49b3-a1f0-57ab0d39f12e", "value": "1536:saMNfheHcZS2pJClQ5CDVEfV3cxisMDJ+7s3Uk2S:saGIuS2JClQ5C+fV3cEsM96M3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779043, "uuid": "b106ad75-77b9-45ac-8213-a45ffe1ddf7e", "value": 80912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779043, "uuid": "775d093d-299a-4f0a-8700-6b458781d7b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779043, "uuid": "43efa602-16c5-4a3d-b8e3-41b38372a2d8", "value": "titanjr.x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd3b4721-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712748, "uuid": "f02f3c8c-1430-4c53-880d-6617dee10b15", "comment": "Malware payload (Mirai)", "value": "8567cbfd29a053f30fdeef1524067781", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712748, "uuid": "5ae0f634-cfbb-486e-91b5-ff5663478e95", "comment": "Malware payload (Mirai)", "value": "9e30d52ec2e72aa270cdb5150f28f5fa31187de0ffedbe9990ae7cb4a658b388", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712748, "uuid": "81d4bff9-f0b4-4dfd-98de-d323053aea27", "comment": "Malware payload (Mirai)", "value": "c167245662f2e47cf767f1a782433a0d6a8ac4d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712748, "uuid": "c16cb8de-1d38-44a6-a5ba-a13a2bbd6d01", "comment": "Malware payload (Mirai)", "value": "99b29ef62e4aa8b49015bbd9291f923194ac625c463518aea00f2cd28348244c450ed5f5eaea82a11027a47e0dded48e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712748, "uuid": "deb458f2-14c6-4664-81da-cfa5f0719773", "value": "T192F37EC5F283D4F6ED1209B111B7BF369A73E53F202BDA46D3B95A32EC11601C51A6AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712748, "uuid": "bf4d21e1-71e2-4be2-ab7a-991dfd34d9ee", "value": "3072:6Q1X7o6bL4k7adwmsjuiG/10asCvKqTohPqNv32tyUG5PiL23yRhGB1FC:6Ek6bEKadsQfGP032UTVS2CeC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712748, "uuid": "7cd425db-543f-4507-b2d4-c10c3f6b1655", "value": 162760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712748, "uuid": "bff55a1c-e81f-41a0-996f-89066988526c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712748, "uuid": "e9c30aba-0487-4362-a333-de3260c682e0", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a056aa9-e2af-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766790374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790374, "uuid": "3bd2eca4-fa03-4e4a-b6e2-c3448e604fc2", "comment": "Malware payload", "value": "f8f3f7cf3641fb96ae55fd1ea1629fcf", "object_relation": "md5", "Tag": [ { "name": "45-61-136-68", "colour": "#65FAA5", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790374, "uuid": "560ad6c2-1941-4005-90c9-91a4157942b8", "comment": "Malware payload", "value": "9e5617e883eebde1fccfe18e79a4c1e5c8aae04933e1578a9cd2ae15faa48b98", "object_relation": "sha256", "Tag": [ { "name": "45-61-136-68", "colour": "#65FAA5", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790374, "uuid": "4a2f362f-68ce-4f0e-a874-a5476dd2c9dc", "comment": "Malware payload", "value": "ce07bd7389b3200f281cf940e162e31f066ebad1", "object_relation": "sha1", "Tag": [ { "name": "45-61-136-68", "colour": "#65FAA5", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766790374, "uuid": "b7ed459a-93d3-4949-aa5e-7c791524865e", "comment": "Malware payload", "value": "0472aea447d42346515e321454cbf8badb55493934f0f0379f45322db2a55b1c13dcd004925557e2c9e36ed53f7e77a7", "object_relation": "sha3-384", "Tag": [ { "name": "45-61-136-68", "colour": "#65FAA5", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790374, "uuid": "1bf32447-4c5e-400c-beaf-6001e0271ebc", "value": "T14A566C12F3C4603BE1BB0F7A9877A244683F7A616909DC4B77A4095C4F39B807E2675B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790374, "uuid": "e5d489c0-83f2-4101-a567-882e85bf4640", "value": "a324c806b91d8fb3634e60789f536163", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790374, "uuid": "ad16a2be-3b39-478a-be33-cf377f1444b6", "value": "49152:6ekstp+iT0ExhxFS+vHhneiqi2iDA5I9FiPKtcYZSy0qtaXhR/OuDY/KYx3Wf4/q:6eCCxxqi2ivIPKthSDqyqj//S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766790374, "uuid": "c288a3a7-8d5b-4fe3-bab6-6f639123fbc5", "value": 5898752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766790374, "uuid": "438fffd1-e833-48d6-ae0a-378bb4a81f44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766790374, "uuid": "e03cc8b4-6616-44bc-9624-ea7ae7fd082a", "value": "DM2.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e59d1157-e296-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766779817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779817, "uuid": "9b27c1bb-6ba2-452e-979a-8797a2b0720b", "comment": "Malware payload", "value": "bd9b4c3a652fb3b42c001da75cec4264", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779817, "uuid": "4bad7e0f-d5c5-45fc-adc7-51dfe0f7735c", "comment": "Malware payload", "value": "9e8a2493b96409cf70dffce708f33b4c478d80de38c98451a855648b0ffcf8a4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779817, "uuid": "b260bc32-43de-44a2-a622-028448b602ed", "comment": "Malware payload", "value": "fa0dfcacf9bb56c4b1ceba40c5cb8a9ef24876e8", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779817, "uuid": "f280012a-c57c-4b1e-b25f-e5bac8e657d5", "comment": "Malware payload", "value": "e347b8ffa5a231188d970a2c9ad694a8ed0bd867fd2f022e8b1f677e0cd9df5a7f53af302f2c9c142ba1cb59d32a51d3", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779817, "uuid": "154241e2-2fcb-4aea-9476-f82776d6e937", "value": "T1A86170A5245206BA6CB5EF2732AD4614368788B63CFF3F49E5DC3DE980ACE56F440742", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779817, "uuid": "bb913ac7-230d-4f2b-a520-ba6150535d7f", "value": "24:It+Ars+Z6+iw+lcT+3ps+bu+O1OnJ+4QL+TA1L+414NIAks+Ru+3o3+6IL+si3+1:imZIhjjZIJqvLkJl130Lk5Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779817, "uuid": "2fa98a84-1eb6-4f77-b236-1d1d3510d992", "value": 3284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779817, "uuid": "6818ac71-d582-4318-aee8-254e86eea54c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779817, "uuid": "9661775c-7a5c-429c-bf33-1f4bfd079981", "value": "1.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26db1b69-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766781644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781644, "uuid": "0efbb9c1-eaa4-421e-98aa-0c7773b0fed9", "comment": "Malware payload", "value": "28d92bfccfe60c11a9d646befdf87bce", "object_relation": "md5", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781644, "uuid": "104dfbdd-8c41-4e30-b7dd-e96948ec7d5d", "comment": "Malware payload", "value": "9eeebead9faefad57945df8fd554cd9ebd1ba6ee9a7f29f1dfcc43e05bf25687", "object_relation": "sha256", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781644, "uuid": "6ddf1bd4-fa6b-4a74-a9c6-32be32d061e8", "comment": "Malware payload", "value": "9a57b72c871d0b25d7ac18eaf7b9ba20c75ccdad", "object_relation": "sha1", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781644, "uuid": "6fb58b16-5793-4a90-80ce-5761c57f9b0b", "comment": "Malware payload", "value": "3a51c00f923a0cc799a1483bd6ff65901b1f298a9da2816ef0ead953f669623da8cc6a481a4ea6832d2fb2d49f830f9e", "object_relation": "sha3-384", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781644, "uuid": "9d14390c-d88d-4de4-8c4b-0bb0bece9b2d", "value": "T15EC5910369928B76C4BC50B485DA527853363C5CAE804F9E7BCCE27434D3574BEA2BAD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781644, "uuid": "0b5c5d23-9e59-46f1-b3bb-7f84bea3ec92", "value": "a801fbe6110520f85acea78bdad39ac0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781644, "uuid": "2d1603d2-5288-4754-9938-a20992da0ba1", "value": "24576:2mXK9YW4egvcZwuRRWRjFj63KP0wCkjgLwG0osspaa:2mX+IvcecRCj63KP0wCZaossEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781644, "uuid": "298b7549-e93e-4bea-8931-0563f573a55c", "value": 2504192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781644, "uuid": "207fea9a-ef26-424f-9c6b-3950447cc875", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781644, "uuid": "3e659f09-3157-47f8-96af-15624fab77f1", "value": "WsBurn.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edb111c8-e262-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766757497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757497, "uuid": "76e265a6-85ed-4c3f-95c3-6fb56c04dc89", "comment": "Malware payload (Mirai)", "value": "6b52ebc96bab62148717f7d2c9cde5d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757497, "uuid": "3b73d214-c379-42ba-8355-47c3bc206412", "comment": "Malware payload (Mirai)", "value": "9f252d7cbfd8b9376ecbc3364b02323838bdb878135e9a116e51d32f7fa07399", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757497, "uuid": "88c37b65-a35b-4964-8deb-048ceeaa8d84", "comment": "Malware payload (Mirai)", "value": "5d7e628666ca44c41bf69088b96aee45e096269b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757497, "uuid": "9d17b092-f775-48ff-9bb9-3febd6ff20ab", "comment": "Malware payload (Mirai)", "value": "3f91ea7fcda597919cf9f47deb75852634116d263318256dcbf5c57405705b3d576ef0977b01db77a4411f29d7ce935b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757497, "uuid": "7a8a98fd-8c79-444f-82fb-1499d2300e5f", "value": "T19B535B41B3084943E95B0DF0793F3BD1D79ECAA021B4B386694EAF8D41B6E32550BE9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757497, "uuid": "02b4af9b-d2d9-4b3f-9fe3-05185b89a8c2", "value": "1536:hIoPvWbZLqgff8QdKm9gBVlXVGm3CT2bVRO:hISv9gP9WrlqT2G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757497, "uuid": "553050aa-35c6-47a3-bb5c-b2c457b55d40", "value": 62740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757497, "uuid": "99e6c74f-7d99-466d-94a2-d5e0510b95d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757497, "uuid": "6f6799cc-b626-46d1-90ee-e6d2f1d20cc0", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b706e0f3-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781886, "uuid": "2aa6c87e-4be8-4eb6-950b-0e4489685dbc", "comment": "Malware payload (Mirai)", "value": "6cde9343070aebf6e2ab5bb52ab766a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781886, "uuid": "9ae621a7-f441-48ad-9721-30651298daad", "comment": "Malware payload (Mirai)", "value": "a0a804e0739024717a1bf19ae23b69d5ef32ef5112c667586083ffcb511bace5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781886, "uuid": "9e2a1ca3-2271-46f2-a973-e0b23570fe6d", "comment": "Malware payload (Mirai)", "value": "07c672d2574f925c24dce118f9999f8f635f425e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781886, "uuid": "64da2118-fb68-4892-b466-375c164fe6c5", "comment": "Malware payload (Mirai)", "value": "8b629265d464ca97463202db9d69f208088eda54cf67070db48f04c2d722e47e117d0af221c3936f00e0b28089ee8c89", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781886, "uuid": "2ecc51c4-70ea-47a6-bae8-40d54018bd10", "value": "T1C383D64AEF610EFBDC6FDD3742A90B0135CC550722A43B367674C928F64A64B4AE3DA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781886, "uuid": "0eacad67-5e1c-43d0-bcda-bceced3373e8", "value": "1536:RhGBaJhJUBHXXVxrgpxfvHvzeCQ+uC3A4GfWfNq:dJk3XHspxfvklCzVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781886, "uuid": "21791208-bc68-4f78-9e2a-db4c0ffc794b", "value": 85068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781886, "uuid": "8f1398e4-df85-4502-8cfa-f2c7fb5ee731", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781886, "uuid": "da63fd90-a45b-4ded-8742-29d67d79b9cc", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "051a66ea-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729189, "uuid": "fea370f9-1b20-4738-b525-faa94aa22c74", "comment": "Malware payload (Mirai)", "value": "4dc8da7421cd3a67aa4509be9b7e25c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729189, "uuid": "f151b556-5f18-47e0-970e-c49a2aab4a59", "comment": "Malware payload (Mirai)", "value": "a0eae874e5215f4361d71e4859465d894bd2da47d1f662b034d22078e2cbe3b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729189, "uuid": "d40a09f1-5d61-477b-abf4-f3141bb764cd", "comment": "Malware payload (Mirai)", "value": "e504dd6246f72698a3e37b75510a9bb2d4f600a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729189, "uuid": "9042de6a-af99-4eb8-a0c7-8c22b114bbe8", "comment": "Malware payload (Mirai)", "value": "c70a40929c929f53e4371da354bb23fed8222a9d78171f68ffc179e5071b32f797774e3dfae5d47798e1f01f8374b8f9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729189, "uuid": "eb045c86-093b-40d7-bb33-f22d6182b497", "value": "T168730217822DF678D826EE3025152F94E2F1A9EF3535673F89D5739D9430682DD33190", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729189, "uuid": "9175718e-6b63-4a79-81fc-806c905b4057", "value": "1536:gV/OGeL8tFqX7j8sjQVi/o2/7pvvPUlQk3YVxC71l3LUxru:gQGkQFqX3toOQJ3YX81Gu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729189, "uuid": "61aac753-c924-4cff-9b29-a7bf36f62e47", "value": 74852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729189, "uuid": "930bc538-d8df-4f2d-9b9f-470b95e4b4d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729189, "uuid": "72998cbb-a4d2-4be7-a1ab-f6ed4aba4809", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55510558-e29d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766782581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782581, "uuid": "e5379671-ec99-493e-a8fa-1dac4cec8efc", "comment": "Malware payload", "value": "a4a1e425e2cce7a386075c6d1990ddb8", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782581, "uuid": "8f830ecf-8316-487c-868f-b65f8cbb0c32", "comment": "Malware payload", "value": "a15bdb32d9da4702dcbef609ee7a0e305f406321f6a3cf9a8d9ac3a87e67292b", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782581, "uuid": "991502d1-9789-4057-8419-a20bce15e45f", "comment": "Malware payload", "value": "df48d24c96c413926f816b8b1edae368dba28cad", "object_relation": "sha1", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766782581, "uuid": "1388b4e4-6add-45bf-85b7-763fe99d03ae", "comment": "Malware payload", "value": "c0a3fb34752c842f6ba22fda957b25fb22c4c8c07f34fc6ea02ede61ffa1897d78f8a1a233074b3a72d221c515512af3", "object_relation": "sha3-384", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#C6926A", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#1930F1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782581, "uuid": "6fa1a507-beec-43ef-93ea-69578987c8a3", "value": "T18796335B66F70B87D763BA31CAA3650DF73A92C8E0C62C721F1946C13183CB76A67509", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782581, "uuid": "dcb0075e-bd60-4f09-b3af-04aa74a97b8b", "value": "196608:slwr8UINZZmT2ExZJ8Ll5RjXdKfaUv00DKkHYcu5DWkwsaESrmXzs5:Gwr72c2EvJIl5RjXdmP0W5EI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766782581, "uuid": "1d72e0da-55ed-4fce-8a39-90b5a541b486", "value": 9356920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766782581, "uuid": "b0c2529b-059d-4ebc-bcfb-55e08b271ac5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766782581, "uuid": "93c03dd6-d984-4631-891e-840143390b64", "value": "dusgqvptxbg.dat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d26ee87b-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772483, "uuid": "9a38e781-b5e6-42c3-b788-c0035944e0d9", "comment": "Malware payload (Mirai)", "value": "911c21291421202b41d252ae12acfba0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772483, "uuid": "a7002c5b-ba9f-4b23-9bc3-5a98570971fb", "comment": "Malware payload (Mirai)", "value": "a1ee64d7e1d3061c197091c0ddec5e0a4b082441329ecfe5991dd9a21a1ec8ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772483, "uuid": "c5ab5e20-7404-4fe0-8634-f1f5aa97d0c1", "comment": "Malware payload (Mirai)", "value": "c28d7c7dacba77979ebb0ffbd65bc405c31e709a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772483, "uuid": "befac1c5-f29a-43e6-b199-20fbfe8fb713", "comment": "Malware payload (Mirai)", "value": "0f8930cdb621f9f76b9d2a6957d4c0bf7b82a6780c865e4aed8ea91adc908d1e17c482b25342064ec051a6ebb72e62e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772483, "uuid": "74bef732-f690-4035-a760-93d4b13dd830", "value": "T1FCF2E1B5269E683087B01D78B76152436B568AFFF9E7383949F34370B66A000597F80F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772483, "uuid": "8a43016b-6609-49a3-9da8-a415954ca152", "value": "768:kTY+/yNjqvLhiUxe647s9pAHLPPayysvOyb4xa0s3UozF:iYOyZqv9xHgHWyyYb48RzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772483, "uuid": "56b28150-e5cd-43b6-9c0c-f8b2d1a56616", "value": 37204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772483, "uuid": "2ffbe66f-44e1-49dd-bad4-4179afc08f8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772483, "uuid": "3be47b28-3491-4e62-82c3-172b34c8f54f", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "340aafd1-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707793, "uuid": "f3073f0d-f2ce-4be6-8b30-83b15cc19e5c", "comment": "Malware payload (Mirai)", "value": "7ddd43d07e6961bf78f82b435dcd95d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707793, "uuid": "cce8fe47-9214-440e-8640-59fd0b877867", "comment": "Malware payload (Mirai)", "value": "a234b15bce79e3cb1c8b417ea458aa6967f60c1b61840abcf408591080a279c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707793, "uuid": "a1c1e484-0632-4ca0-8c47-6a4122eabe59", "comment": "Malware payload (Mirai)", "value": "1d1699b7a8a6f80a78957e60076c65c0e2498cbc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707793, "uuid": "c1371365-8963-47c6-8c9b-6e79c2eebf7e", "comment": "Malware payload (Mirai)", "value": "40696386d048a473c63a0b18d03916c5bf30992902d887546f2a4c44d1dd8de6b719111539227e71c0c9233b3b2cda91", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707793, "uuid": "8a52068b-0bf9-4856-87e3-f876480d7596", "value": "T161734C87E001DEBCFC4AD67B94570A01F52477811E530F27E6EAFEA3697A0984D1DD82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707793, "uuid": "b88e90a1-b676-43ba-9bbf-9fe7f750bf15", "value": "1536:nK5P/PznEJQQEGqTcmDU0+cAs+Ck9PD3FH5Z6AEj8QiZOBAC9UrT4iUbqVp8oFIt:nK5f0E7Tg0+IpgPD3FH5Z6RKM6UWVp8v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707793, "uuid": "e0511265-aee3-4f2c-a1f8-86515a95d600", "value": 77700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707793, "uuid": "06c5cef0-31d0-42b8-bade-a9bf086aca06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707793, "uuid": "27fd3184-c5d8-44c6-a95d-1ff585fd9b0e", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c62675d-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778647, "uuid": "93c13821-5f0c-4860-b735-14ab2760d468", "comment": "Malware payload (Mirai)", "value": "5779a36a70e7c679f2f6c520d561c1b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778647, "uuid": "8fe45214-b405-45d2-ae38-b68a542c6ddd", "comment": "Malware payload (Mirai)", "value": "a279b3d93b8732fd3cead663a8052814299e902681691cdc4265f920cbee2673", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778647, "uuid": "31bbd3d3-7bb7-473f-9f92-5b7e231048bb", "comment": "Malware payload (Mirai)", "value": "bfb6686e9c6f8a3e90641b4f74cfefb902e15a22", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778647, "uuid": "e19af5ff-2645-49ad-89e2-0fea396ae505", "comment": "Malware payload (Mirai)", "value": "147976d79f04f8b4a1d0be3edb57b480efa4a03ee7998fb2ed56c00b45a1209ff2f98a07e708ea0baaa4d04d25af3ff8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778647, "uuid": "5b76daa2-265e-4ed7-80c5-b3497be412ea", "value": "T1297312D0F38B82A11F115066B1B3514A62BFEFBD7977AC078799C80E520A8C29DD6F17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778647, "uuid": "d3337675-081b-472b-94a9-2c2af22090ce", "value": "768:V+AWKWWOngK281Olj8OL8aQccOr9kU9cwK+5tH2lRI0SvqkRp4rKiwT7wX7TRs5x:VCW8hkltHZrou4/RmF5YcMYlGSfCLw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778647, "uuid": "a7601792-2189-4d31-84e7-ba028f21930f", "value": 77464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778647, "uuid": "cd527309-24fe-422a-80de-367b887a71e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778647, "uuid": "fe51baed-69b8-4c4b-aa1a-cb7a55b6e0cd", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350987db-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747308, "uuid": "3cea4d08-d6f8-486e-b7dd-8e9fe80f348e", "comment": "Malware payload", "value": "82ff66b9770b34fe84972cc0433e3f12", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747308, "uuid": "b2a177b0-8922-4320-bea9-d86edb8a1b27", "comment": "Malware payload", "value": "a3f43a890b9dc861a46d6c653240840d683496978a01b17c1fc3131ed93f86f0", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747308, "uuid": "7d5c9b69-a757-43f0-bd34-1e5bdd63cfd4", "comment": "Malware payload", "value": "e58eb6517966cc3cc38bbab33a81ca50816746ed", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747308, "uuid": "45b8aa26-517d-4c1c-ab07-fec3f8dfa9c3", "comment": "Malware payload", "value": "47a4109af1afefa5859b769868179e8a033e8628797b8f0afe724a99d5483e8c8af2aa3e3b7799a776052e77ac6714c6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747308, "uuid": "47b2b8fb-ac4e-41db-ba8b-f00dea5f4aed", "value": "T1F863E789B91F74EE2BE415D5FF2826E74A3B9041CC7FE41C4095C14C6874397AEABA8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747308, "uuid": "0fd3702b-dee3-48b2-a12d-7d3c47b4ad6e", "value": "1536:I9l/AoSSMaG4r/bLbXNBb2iHsDjURKSlI4xI48UXAHtdFHlHGPfHWRRclHlVyFux:I9l/5MaG4r/bLbXNBb2iHsDjURKSlI41", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747308, "uuid": "ea61e193-4335-4312-b2c0-0b44ddbfc093", "value": 70650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747308, "uuid": "fe99a9e0-95e7-4f22-a6bb-5413d62227e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747308, "uuid": "89836841-a233-48fa-8d1f-5b55bd36752f", "value": "invoice-1645080830.pdf (55).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fec6e47-e24c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747864, "uuid": "59b0378d-f777-4a20-84d5-540f8838c2c4", "comment": "Malware payload", "value": "56f9607aa1ea1cff4836873b592f9afa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747864, "uuid": "9594f27a-7b2e-4b87-baec-f6115af04c67", "comment": "Malware payload", "value": "a43d75b99fea27596fdc3b0fb11512329589d6482a2954dc4799ed737fddac50", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747864, "uuid": "9d066433-962b-4f13-8bad-24240b92a228", "comment": "Malware payload", "value": "0acc25bab4db0960f98c8e85692396da39e64295", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747864, "uuid": "da5a0968-5956-43c9-b27c-72ab7f0a90d6", "comment": "Malware payload", "value": "c57edd60d144b5751ef782ce1aff0b05d4a77212ca8bef2927782c3425d50e4d9dbbd8299ed209b4ca55472b4bcbfe74", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#5EC72B", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper:Win32/Malgent!MSR", "colour": "#5C9944", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747864, "uuid": "266d122a-64d5-484c-a96a-5d404f213c8c", "value": "T16094AD22BF81A432C55A4838EE35A759897D2C210F51E6D3A3C07EAB79335C087B5F67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747864, "uuid": "d08c9fbd-e891-4386-9737-6ad65f7c8ac2", "value": "c58a6fdd5514cc5114ad09dc07384b11", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747864, "uuid": "d318765c-1a99-4dd5-ba36-a05f6d06d632", "value": "6144:BxWD14iTIKu+OqfiBSq8NqmIqGOfmXwifg2Gs5Iv/K0l5wX4YtJNDx:SDrT2VPB4qmIEfrs5aH3lYtJNN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747864, "uuid": "cf37157c-00ab-473b-902d-49aef287b199", "value": 430668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747864, "uuid": "719f84f7-880d-4d0e-a19b-788185e8f074", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747864, "uuid": "35bc452c-e433-474e-a32e-da9a9f61ae8b", "value": "qzonehelper .exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aff5f882-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747515, "uuid": "4a5e0969-f6bb-424e-8df5-70268f2f98e1", "comment": "Malware payload", "value": "7f2956cc8be09960565f80d0c7a473b8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747515, "uuid": "9ca29d4b-a4c8-4128-b372-c128d805e99c", "comment": "Malware payload", "value": "a4f686176106dbd934ef21cd9150333107408736db110c99ea04a58381631f21", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747515, "uuid": "6314d6d9-e3ef-49b6-a54b-15cd7f5df153", "comment": "Malware payload", "value": "8384af634466ca46fc41efecfe1fef0e565d3d7b", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747515, "uuid": "db1554c7-b80f-44d7-8bab-e538841d7252", "comment": "Malware payload", "value": "6511da4c467a56e3339c76af60db8b09779544c4a3e5224e063a2482eb67bf72eb7885dd087b0a8bfc2bdc0ea6be31a2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747515, "uuid": "c28493ef-bfcd-494c-8c70-4c1be8b9d540", "value": "T105631AF88D752D12668BE8E5B9680BBA81D3D63EB4236C4378407843A97171E517E3FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747515, "uuid": "57777f10-7675-455a-98e9-a0d03226b6e7", "value": "768:I8w/h62/jWs6oS+xISN0v7brb1XqtdkfScBYrwz2y8kTAlGB:I9l/AoSSMzRKusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747515, "uuid": "11b87c75-facf-4dda-9263-a358f4f63ff0", "value": 68693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747515, "uuid": "604c1215-d947-47ab-bfa7-bbf760e04f7a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747515, "uuid": "a9df2582-8fc1-4008-8fee-a1b1c8e5ef57", "value": "invoice-1645080830.pdf (14).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20b149d4-e218-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766725370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725370, "uuid": "011c0924-c8d3-4f66-b1f1-4635916dc7e9", "comment": "Malware payload", "value": "f56501afa0eb7b3da38a76d246c2c196", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gracing", "colour": "#C52648", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Gracing.I", "colour": "#65DF52", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725370, "uuid": "2c9252b4-3d0d-4f3e-912e-c298b33480ea", "comment": "Malware payload", "value": "a59f8b25e7248e65bf5995d19fd5482ab39d02c5ff4c9b186122d6636a9feac1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gracing", "colour": "#C52648", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Gracing.I", "colour": "#65DF52", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725370, "uuid": "2baa0207-bebb-46ca-963f-0242350e7af0", "comment": "Malware payload", "value": "5e29d75c1c36177bb5becc339ccad04c83bea030", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gracing", "colour": "#C52648", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Gracing.I", "colour": "#65DF52", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725370, "uuid": "4c3b634d-3237-44cb-8f7d-981828268f8d", "comment": "Malware payload", "value": "8dcf8553f6d08a487307383af69431a4f7c67f317bdc709036117eac9c5d2255a27eb0e81bca183298a85ea74853a77f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Gracing", "colour": "#C52648", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Gracing.I", "colour": "#65DF52", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725370, "uuid": "a09a493b-be50-4d3f-ae94-270056adbc19", "value": "T1CA963365789CEA7AC5EDF03996C566C45E3C83D2B035FBDA442706CEF87390CA68811E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725370, "uuid": "7272e3e4-18d0-40cf-bfaf-ae5097b4d674", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725370, "uuid": "d212cca5-4afb-49c0-94e6-ec640cd94bb6", "value": "196608:3vHhExek0vyqg7PnNXtFhKugC2dHPvLC7ukFowuAF7L+:/OE9gNJgC2dvv2Xowuq7y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725370, "uuid": "804ef089-7495-4fd0-a956-a8620dabda93", "value": 8776192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725370, "uuid": "428368f6-d63c-42e9-9fce-b3581f4f3d77", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725370, "uuid": "65173c79-29c2-4156-8148-2cdc0296e688", "value": "\u5723\u8bde\u6811\u7ed9\u4f60\uff0c\u653e\u684c\u9762\u4e0a\u54e6^_^(1)(1).exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bbbee92-e1f2-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766709068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709068, "uuid": "fd9d2910-b469-4dd4-8664-e60e82e727b6", "comment": "Malware payload", "value": "d64bf8c0cd146107e9504eebaf265203", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709068, "uuid": "cfc0a011-4cab-4600-83dc-639012e3619b", "comment": "Malware payload", "value": "a5a73c7366ade4f69f170f89e7de0c5e07e1bdb8ff30d29084d7cc7f933e5fb8", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709068, "uuid": "807f9ed2-b4d6-406b-8843-e890b77b426f", "comment": "Malware payload", "value": "42084795d1a7678c68945a1b9e00163f478bc97f", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709068, "uuid": "5d6aba53-456e-449d-8cf7-cbf357c58213", "comment": "Malware payload", "value": "60288f4ea6e2995a9ede81ab1d5f676fbbec872a866615613ee7551e598547cc962185a888bad36a02d58f67f0fd51d0", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709068, "uuid": "5bee7bd2-527e-4f45-ac13-676a591000a8", "value": "T184D19692ADF72918740B506DCBBFB2187059A057470ACD9CFACC65B8CF0D5A85622FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709068, "uuid": "ba05bfe6-9103-481b-9399-8fda112b5e64", "value": "96:nOZJ6XI1UewyIE/CnTK8+t9yi/pe94ewZelHNfGGAvOYHLQc0PWHARG2WAJZ8UlL:OZVIE/CTK/3yiIYoHsfOBro2Tc/O6Smy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709068, "uuid": "210d46f5-3e70-40ea-ba13-c58b2ddda4d3", "value": 6656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709068, "uuid": "05d3357b-8c66-47b0-8be9-49da1ae7e83f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709068, "uuid": "b18f1c99-0ac9-46f7-8ea6-c3e151babfa7", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "052e7cfb-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779011, "uuid": "9ee6243d-c4b0-4025-95f4-24aaa8cbb7f2", "comment": "Malware payload (Mirai)", "value": "dd82fc38e55e542e008a7a21f7f2e841", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779011, "uuid": "2043d90c-e94d-4fdf-99dc-f771feb2386d", "comment": "Malware payload (Mirai)", "value": "a6606caf90525a9850ab5bb95aa0576f8df5df87b6be95617fb6232ad08d74e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779011, "uuid": "ef094781-cbf3-40e8-8771-a3045de65b03", "comment": "Malware payload (Mirai)", "value": "d29bf6bf64e33fc36a1c724247b6c9161392860e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779011, "uuid": "1d3a2960-9a11-4dc7-9fbd-73f3d0d3680c", "comment": "Malware payload (Mirai)", "value": "319d77defe973b6fea4d9d81d43b54070e119492d75ee5096b582ed3c6f074370494323a06e1712f7c925b0accc93406", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779011, "uuid": "55fdf611-d20e-40ff-812b-b43c3dde4b6b", "value": "T10AC3AEC3FA8714A1C46206F007C71BAE6F93A121CE5FE4E7AC1DB63B5A7A4DA1516381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779011, "uuid": "d40a0ba2-ecb4-40e1-b9e7-e4abe54253bb", "value": "1536:yrMjtT/2h9gFynjVXanXgPlWuoPJ0WtoeMlUAKlccxs551gRCEN/LWp:yrWT/i9boXgdn+XtoXhKlcpgDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779011, "uuid": "a9e013cf-9220-44af-b112-5a7db3fc7149", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779011, "uuid": "d6088141-ebfd-4c8d-be91-e66a0bd64bd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779011, "uuid": "636e36fb-8b73-4f1f-9f80-0cab8b84ca3f", "value": "titanjr.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10594439-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779030, "uuid": "e6e0103e-2661-4041-b336-f4d5fbad8489", "comment": "Malware payload (Mirai)", "value": "5323856907afe5aa8e6ac4f6cfef173e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779030, "uuid": "05894093-dfd6-4690-8c53-c9544f058470", "comment": "Malware payload (Mirai)", "value": "a6b72cc93eb6874745e7334c17b3158662bb61b04bcbebad8cea530fdb2feab7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779030, "uuid": "5fe3525a-5041-4610-aada-3d67985726bd", "comment": "Malware payload (Mirai)", "value": "1fc012af129273ae0d5b0b91781064a1a595b569", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779030, "uuid": "2a6db397-0b3d-4373-ba9a-b55b682e8dbb", "comment": "Malware payload (Mirai)", "value": "43dfd70b6bca9dc3c4552fee9c3e9d0241f72092eccad4fba50d5785620d40bc1c89ed20afa026741ac167d4093e1b59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779030, "uuid": "e8be01d7-6d89-4b76-b4df-1514ae6972d6", "value": "T1FBC3F909AB614FFBE86FCD3746E90B0525CC551722A83F7A3574D828F64B64B4AE3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779030, "uuid": "e4f39d9e-4c5f-41ea-9421-2fcaf838f183", "value": "1536:FtJ6cGVoxBFf+g6z3jLH514RXgMneY0+YdW0OKhZ6Qpos2Z5uxrKnr1F2IFSEhAB:XJ6cGVoJ6Tnd36Qb2C5udFBFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779030, "uuid": "a2115347-41a9-4171-b49c-03ac4c7d0066", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779030, "uuid": "a5d31a13-cc8c-4c60-8111-70bfa617bdaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779030, "uuid": "5ef59db7-8016-4c74-9017-d34aec5db809", "value": "titanjr.mipsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87262047-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777081, "uuid": "97afb7c6-e7be-4e00-9c27-6a015cef54d7", "comment": "Malware payload (Mirai)", "value": "45ff0851c4a14edfb7814b4493a5253a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777081, "uuid": "e6ceb18e-3b2b-4672-9f5c-8e05366c1aa4", "comment": "Malware payload (Mirai)", "value": "a75d6a326576493d9a8fbc640f844428e88b30c2d000c216e6b22e1e5b32fbd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777081, "uuid": "dd5f4bd1-9525-4ddc-9651-db98357bbcce", "comment": "Malware payload (Mirai)", "value": "52ef839f7916ade827d76e16270e333fb3ccdf9b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777081, "uuid": "d040b96f-7c85-4e1d-8b60-896a35b60aa9", "comment": "Malware payload (Mirai)", "value": "6cf7fe3c82892a03fcf5ec27228c03564db3ca9c677c3bb1b0fea362499fe103cc54d40c86863406268ef3adecba52df", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777081, "uuid": "4a9f071e-bebb-462f-84ef-0ed6e95a5890", "value": "T10B63027DB6D81582DFEF0D26DAEDE7DA33F04E4A276280DAA1657D322A0113F16045DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777081, "uuid": "f81d3e24-3e1a-4c7c-8231-c4794f582b21", "value": "1536:ieVl0QumwldKdaOA8KsTqEBnSrLeDGVfHJgqra7+yxcWNg4u+qgw09u:zVuQumwldo7KAwTZPa7xXg4u+qgwz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777081, "uuid": "b7efe7ff-1dbb-4f6b-8929-70603d34a37b", "value": 71672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777081, "uuid": "91f16eb7-f7fe-4054-ac8b-b0ac65f5e067", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777081, "uuid": "c570541f-98a5-4b5a-af25-66c4a929a675", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "567784b1-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766713005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713005, "uuid": "760ba7f4-1c61-4b0f-909b-941ba18eb9a3", "comment": "Malware payload (Vidar)", "value": "eee20037033445a0311435fbe80d951d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713005, "uuid": "add30672-8f79-4614-9be5-5bf6d72c5dee", "comment": "Malware payload (Vidar)", "value": "a7ccbd569505d6e4a9cad09d97312bb4c6e38d8b9bc2e6e7bfcaf3d2bd767e32", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713005, "uuid": "bac4c901-2976-4b22-aa03-49795c026d8f", "comment": "Malware payload (Vidar)", "value": "be86363519277d0e970510e465646812a6b8f953", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713005, "uuid": "5881cb36-3a13-4e8a-8c8e-301e9bb8ea33", "comment": "Malware payload (Vidar)", "value": "ce67c70dc898a2059cfe7425fcf3ef9245004126f5d611100929863270905550bee0531eb07b9ac929fb5b1e042a3076", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713005, "uuid": "ec90679a-ddca-41a3-855a-f6fc3f0738d4", "value": "T183142326E6061B9EF534D136E7303351708B7B622564B57CAEFFA2507B081720A2E5F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713005, "uuid": "c0963261-8358-4e8b-a8fe-f56d269c3ac0", "value": "31e06ec6723bcc3b75c69a4521e4b8f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713005, "uuid": "7f099e2c-9030-4a74-9cf2-77be9b699fbd", "value": "6144:ratf7gH00o7vt/9REQo8FpY/wRZ/26dX/1xz:wf7gUNx/9Rt3FeYzuyx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713005, "uuid": "6c4016b4-dec3-44c2-9a66-46a82b0d06f5", "value": 203264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713005, "uuid": "876021d7-c8bc-4a8f-9c6e-e9bc4f704539", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713005, "uuid": "a2191811-2d0a-4070-bbf7-f64f120abfc3", "value": "SecuriteInfo.com.Win64.MalwareX-gen.97198687", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "682ea430-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711316, "uuid": "1f2bbfaf-2251-457f-a392-9ae6b5432c10", "comment": "Malware payload (Mirai)", "value": "23067e2b57180d614dfbc9bf6426f4f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711316, "uuid": "7f8370df-1f1d-47c8-918c-e277eee3f3fc", "comment": "Malware payload (Mirai)", "value": "a82539cfae95824aa17d9395cf045fd6b4d9d35cc078da3dbd3a82a0f71f122d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711316, "uuid": "f33819b9-8567-4c69-a299-e989e108ad16", "comment": "Malware payload (Mirai)", "value": "2c6e28fd28fd29f2638f7b1d2e21b5fce1ece49d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711316, "uuid": "416d42fb-eebd-469b-a702-a6ab0443b8db", "comment": "Malware payload (Mirai)", "value": "35dbb67ee5ed0e468b8a49fd836ae7f9b4a8477d39f55e40082e9f0e13e02ea3a640f950e804618be1ad316c43227a92", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711316, "uuid": "a208f056-ef2e-4ca8-9923-5a62c4f2adee", "value": "T17293E996B8918B12C6D452BEFE1E51CD331317BCD2EF72539E146B247B8A42B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711316, "uuid": "97ceb2f7-d98f-4da6-947e-87f257501c8e", "value": "1536:BNnHisa609Dn0P89ZAS6aJMAsiqRKqkCTE8MW8XL2zUUwrrxnLIWO38MdihVcDuo:AjnnBsXxE7W4L+Uh5dVcDuLMxjQPrT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711316, "uuid": "215940ce-11d0-41bc-bc8c-cb5f7a193651", "value": 91660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711316, "uuid": "baf1d6df-b181-4f1a-a90e-e14ebff5af72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711316, "uuid": "238e65d4-b351-4702-8f7c-ae67e7ebae13", "value": "jklarm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "158b4e63-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779038, "uuid": "eff4fd56-68af-4c5b-8894-9f8a6d50cbd7", "comment": "Malware payload (Mirai)", "value": "a8cc126306f34c186616e9301610f80d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779038, "uuid": "199ab369-92ca-412a-841f-efa1edf8019f", "comment": "Malware payload (Mirai)", "value": "a831f56d8fdfabfa351e9afac48c22daff4268c15ec92e7be42e2be4eadf1ae0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779038, "uuid": "3fbd53c9-a8a1-4d0b-a385-14a6a950d5d5", "comment": "Malware payload (Mirai)", "value": "e157cb2dc28dc424a42c28721bb316d400c3ed0c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779038, "uuid": "9bf6f332-89ef-461e-bc46-a0027ebaaad0", "comment": "Malware payload (Mirai)", "value": "28043d91bdcc4c805c66749f618aaba93d2712a6b182492886b9ae420d46a36ea7d4151875282bf6ac869ad88ab1399f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779038, "uuid": "56a33ce7-3e21-40b9-98c0-0ac87e2f6507", "value": "T17F8328C1BA4BC0F5D90748304067F33FCB32D6394061D66EEFAA9E65EE73642522629D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779038, "uuid": "39b256e3-f89a-4ceb-b2d2-dbc8f8725dfe", "value": "1536:8l8IhK59kLMSbp37zSWAcanWCay3Txdgo2F62hpKl9:8/hU9ktbRSWnJwTxdd20l9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779038, "uuid": "d49725ae-2960-4ce0-9a0c-48afe7f37a69", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779038, "uuid": "7047a170-0807-4cf9-aff4-b639f122137f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779038, "uuid": "9dd2f415-08b5-4282-8eb9-a5f3d8817166", "value": "titanjr.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10574531-e231-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766736080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736080, "uuid": "fff54cec-ea3c-4712-8410-40a02169b439", "comment": "Malware payload", "value": "d791500facaeed072a9c59f52f64a64e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736080, "uuid": "a2e7c0a9-ac48-4d1d-900f-e75e14af936e", "comment": "Malware payload", "value": "a8530b9f73e1c8a29dec84fb3ef6286bc0087c232b49b7bd866e66c90fbc1b42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736080, "uuid": "7f41dc7b-55c3-4a45-96c5-c6b2aa64f11c", "comment": "Malware payload", "value": "28880a642f8a9ec31a716c0ca47ab0c13693aefd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766736080, "uuid": "42fda98c-0458-4bb6-8875-4e8d9b9a8574", "comment": "Malware payload", "value": "567d3825e920a3b2b799f7f70b652d79ce712522f0180ff7b727b4dbc76b50d154ea6aa3047302d25f5adbc3f1c03653", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736080, "uuid": "e1d12146-0b96-44c7-8d06-dfb3b38d620a", "value": "T153B39E61DAA96BC8E114C5F0B1F8AAB60736E04841870FFA26FEC61C5883DE8F157775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736080, "uuid": "d6a7f5d7-dbe8-4f57-a271-4c2dd69cb921", "value": "1536:AcYcSdpUKdmZN6FV/IcoPzxcLKa0nUR7uTBQf8kCRq/CHUinhyacr:IbdpEZq/I9bxcuaLRwBQf8kZGjvcr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766736080, "uuid": "86c0f9e4-ec09-41a6-adfb-bafa3dcc278e", "value": 117484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766736080, "uuid": "a5d41556-89dc-4472-af1b-147f5ad088d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766736080, "uuid": "cc2ed5c0-d7b5-4c1a-a34f-ebad2a91a8f1", "value": "rondo.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40c0f916-e218-11f0-a129-42010a9c0007", "comment": "Malware payload (TurtleLoader)", "timestamp": 1766725424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725424, "uuid": "dead619c-5b28-48e4-ad44-54fab4789344", "comment": "Malware payload (TurtleLoader)", "value": "8579ba3677900ab99b68f486f7fa4a7a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/TurtleLoader!rfn", "colour": "#29AC6B", "exportable": true, "hide_tag": false }, { "name": "TurtleLoader", "colour": "#647BEB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725424, "uuid": "2fd46266-f0f0-4af4-aaa8-821bf0e084e0", "comment": "Malware payload (TurtleLoader)", "value": "a85d9594291961d037a8aa9d4ce5529a4bdd7be97d299b984696ba36961473fe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/TurtleLoader!rfn", "colour": "#29AC6B", "exportable": true, "hide_tag": false }, { "name": "TurtleLoader", "colour": "#647BEB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725424, "uuid": "992d33fb-05cb-4ea8-ada6-72ab423404a4", "comment": "Malware payload (TurtleLoader)", "value": "3f65fe83c3c61aa10326f2c170f2484502cc2645", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/TurtleLoader!rfn", "colour": "#29AC6B", "exportable": true, "hide_tag": false }, { "name": "TurtleLoader", "colour": "#647BEB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725424, "uuid": "6a64c640-c94c-427f-a024-10f3bea5feb2", "comment": "Malware payload (TurtleLoader)", "value": "c75b43de7368921a560d7845e1bc44b366219c600a60f2b18ed86781bc3836e6d1c4eaa36bb598d1e8b5b300eaaab3db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/TurtleLoader!rfn", "colour": "#29AC6B", "exportable": true, "hide_tag": false }, { "name": "TurtleLoader", "colour": "#647BEB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725424, "uuid": "7d8d794d-4bd3-4740-b193-868284765758", "value": "T156B32F539AEC3CCBC038A3B077BB93D4D72EDD99A0A2C11E96D01295D8BD41779227D8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725424, "uuid": "3aa9f510-dc1c-4b44-bbc1-d309151368d3", "value": "e412052f152faef9c4a9df0c285ac768", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725424, "uuid": "5f08eaed-92e2-485a-ac23-4a4b3a4647a4", "value": "192:OZ9aZ5xeQYl8WyIQg5YWMp3Q5tf4chJEmGhauRY9SRXiKqiRsYuRY9SRXiKqiRsW:nZPjq80Yjp3wJ8w99Sjvb99Sjvh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725424, "uuid": "152eda81-fe56-4254-9884-de4d05bdaa9c", "value": 107520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725424, "uuid": "910e82b6-4c59-4fe9-974a-c0f68b4902a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725424, "uuid": "e356aaa6-d250-48e6-ac1a-9eba573f18ba", "value": "BypassAV.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b327deb6-e1f3-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766709724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709724, "uuid": "5cf352db-61b8-44cb-9ec6-83c160dc680c", "comment": "Malware payload", "value": "a3719a0208915eb365a3642ee017cbd3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709724, "uuid": "aabb2214-61bb-4c48-82b1-374fec9cc72a", "comment": "Malware payload", "value": "a89ac9e888240a216458ad6aad201e7d28d23ab4ba9247e88b2ecf1067dafbc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709724, "uuid": "688415fb-cf0a-4ed7-8e9b-674ebd9a4765", "comment": "Malware payload", "value": "fb0917347de8dc61cce2a0d41ae25c7e02c794b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766709724, "uuid": "91275d05-431c-4726-b5bd-06a122bf06ca", "comment": "Malware payload", "value": "19c6ceb8731040af75090e747e8872bd119fc9ae5a7369b356e2921f00cac88e20803c5a963480047fbc2b572a939e3f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709724, "uuid": "98a54b4d-6be8-4880-a004-1159b861444d", "value": "T1F2E2E15D9095BDA0C27F0EFAE9BA32746D10B8E476E81BD683015E48D51FC12B6ED0BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709724, "uuid": "d2bd2cc1-8fcb-4de2-876a-82c9b357716a", "value": "768:zDLiTHtK/LJxyIWPbZLzjRJgG9FwCnxvcBHcqnGuKWRo:zD2MVxUzZvdyG9FXnxvgHdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766709724, "uuid": "abbe7b17-ef18-4d43-bd02-575b87b9788c", "value": 33776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766709724, "uuid": "ac99885c-9b60-46e7-b229-520f15ea91cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766709724, "uuid": "f2d70792-269f-447c-a88f-fa77fb4f1182", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4a3470-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793171, "uuid": "3f9ed999-ab7f-446b-8164-0bb40254e3b8", "comment": "Malware payload (Mirai)", "value": "2e4db2c907c8f2f506e405e31487c118", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793171, "uuid": "454f9311-f635-4e35-888e-dd00cf9fb19c", "comment": "Malware payload (Mirai)", "value": "a8a793d28e2729d2f4d6fa58c0d1e6602a35f9a2c7ccc6f6f0eec11bd5e3ff7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793171, "uuid": "cabe0b38-525f-497f-b712-bd92b45ba5e3", "comment": "Malware payload (Mirai)", "value": "6a7068e308bcf9990bf29bdbbfa1e0e665ed1161", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793171, "uuid": "695ea898-90bb-4cb7-a495-19c67f2519f1", "comment": "Malware payload (Mirai)", "value": "f970ae50a683f48670661aed4c4c1ce3f7ec8423fd1514b0b4f1ed9e3a5288bb14d5149eac8e59174099d2df8bd3ccbf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793171, "uuid": "4a00cbd7-2dbc-4537-8273-1af49ffd01f3", "value": "T105733B81B8819623C6D562BBFA6E41CE331613B8D2EF3307D9219F25778782B0D7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793171, "uuid": "3b28c926-abbf-47f7-a512-e80d0676cd6d", "value": "1536:g3AI+dgSuFAmXh9S1gN8X/kanaLeOd3vtbVRr:g3AIJS1gN8X/kaaFd/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793171, "uuid": "9e16b061-317c-4dd0-a486-80faa0f248db", "value": 74944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793171, "uuid": "1858fcea-b574-4885-beeb-2128e6b05f06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793171, "uuid": "e3633dc4-0502-4745-95dd-0b82d09dca83", "value": "nklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c045c8ec-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747112, "uuid": "69cfdab5-04d9-4d97-9a09-892b9ebd94de", "comment": "Malware payload", "value": "a153985eca269eaa2d4a63057c54663d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747112, "uuid": "9878ed4c-c62c-403f-98d3-83c6ebe88c70", "comment": "Malware payload", "value": "a9038f0768d002f713cc51e2859bbb57876d17e454097e3f53c18b68f54c9c5f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747112, "uuid": "33159cb4-7072-46a7-9788-8c7e66e4ad3d", "comment": "Malware payload", "value": "0e26e23ae99d87de4277c1212213226b7f817ebf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747112, "uuid": "9382e027-3798-4812-bab4-a5380ad71afe", "comment": "Malware payload", "value": "d9638b2aeb362c229ac321056766e4a0887584e9179e7bcc73cb966a94bb363ad0f86251231e1b2c4f7bf6d2cb131191", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747112, "uuid": "5bda8b75-d53e-486c-98b7-9be0271cf73b", "value": "T19E632A4B666D7E4101B27F9A7997CF9359D803A0798DFFE09B1BEF80385BB02650206D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747112, "uuid": "bfd8284a-2c01-4d70-a8c9-918eb7326cf5", "value": "768:I8w/h62/jWs6oS+xISN0vi5C+i+dkfScBYrwz2y8kTAlGB:I9l/AoSSMWTusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747112, "uuid": "94b2e6ae-8af7-472d-afed-188947224e71", "value": 71564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747112, "uuid": "203b7861-82a6-479e-82f3-ffab9dcfc8f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747112, "uuid": "d3131054-d727-4d1c-bcf9-b0c0a1efcd96", "value": "invoice-1645080830.pdf (100).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8646af91-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747445, "uuid": "26236867-9d5f-4e79-9c1e-8fe937a4310b", "comment": "Malware payload", "value": "89ee63a9062d48a85170e1109970d258", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747445, "uuid": "621b8631-d7aa-429c-99a9-512ed274254c", "comment": "Malware payload", "value": "a919d0f128d6fce7cb7a531add16436cab920567cf7df9bc325a2877cfb412ee", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747445, "uuid": "9bb20506-254d-49f0-b629-b26c0078dffd", "comment": "Malware payload", "value": "42a9aee48b050241b081e0a45b8b13b7b2e7f2b2", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747445, "uuid": "f3c2e06e-82e8-4275-87d6-3a48b1786b7f", "comment": "Malware payload", "value": "7f1c5587ff77d9f6975f07dc4a93ae164c080e74098ae00203920956d360ebf50bce6e98413dd337e1578bd5094c4bcb", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747445, "uuid": "0cff4fa6-be19-4987-8d56-4886ee30a5bd", "value": "T11A631AC8AD951EBD2AE10FACE67B3C7A02931C1EC564663613047265406DAD3F73A4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747445, "uuid": "d463b9c8-f9c1-40a9-a185-0eba3e51410f", "value": "1536:I9l/AoSSMlJH40if+OlREp8r+F9DXrb7a41NHWQMzLahkamwYMr7Vikv8/+uhk15:I9l/5MlJH40if+OlREp8r+F9DXrb7a49", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747445, "uuid": "ef5a667c-9409-45f0-8447-4c7cb65d3a18", "value": 71568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747445, "uuid": "c081815d-7649-4ad7-bcf1-bf55abf340b5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747445, "uuid": "c476b2fd-7485-4ef0-8e7c-5ee3aa4f1569", "value": "invoice-1645080830.pdf (34).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79c7df44-e276-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766765892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766765892, "uuid": "2f50d48d-bc1a-4a88-b105-f98d690d3c8f", "comment": "Malware payload", "value": "76513a6c54761b873dd0397d62152cdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766765892, "uuid": "26faf601-38c9-4151-83df-43c7cd3a2730", "comment": "Malware payload", "value": "a9ba4523c33279d07e3463026b612cc3905fe8db14424f6dcf0de6a4fdcc0240", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766765892, "uuid": "2de9fa25-e517-40a2-84a3-cfbb560c553f", "comment": "Malware payload", "value": "296637b024c86e418f89fea49d750fffdd7d4469", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766765892, "uuid": "11bb5453-a44f-4c23-a1f0-dd011a07acb2", "comment": "Malware payload", "value": "a1eb319301925c6bd9b1905eb83185e8c42981a3c81d09fe03552d14d4164fecbe5fc6a84dc0679a30d4155d25f9c758", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766765892, "uuid": "6dec9c6a-3e20-4ecf-ae6c-87364bcc7b54", "value": "T195E3AECFB28B8991C43187F02BDBABAD7A7721158D1B94E33C1D667F26790D70822B51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766765892, "uuid": "171fce59-1bfa-414a-9b89-1ed1a4516799", "value": "3072:PwdQFicmsOMrH0+KI2MawUznmugKq2Ds:4dNcU7+BObq2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766765892, "uuid": "efcc3163-b6db-4459-97d3-531ed47a1ed7", "value": 153072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766765892, "uuid": "864114e0-c59b-498a-bdd8-5979a1162210", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766765892, "uuid": "7e28b29d-aea1-49be-87dd-b85f310bc576", "value": "rondo.arc700", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "975536bb-e217-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766725139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725139, "uuid": "4a20b6a1-e2e4-4de1-bf6f-dd893069101e", "comment": "Malware payload (Gafgyt)", "value": "7aca68683b5a393d1bf51a5c0b35cafc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725139, "uuid": "61e9e90b-00f5-499e-870b-c0814e606d85", "comment": "Malware payload (Gafgyt)", "value": "a9d3f2d841cc1f2e1cffc45d498c7d082b370079702bec3a65bc294a33a9910a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725139, "uuid": "2461128d-f904-4710-8a78-cee751bda02e", "comment": "Malware payload (Gafgyt)", "value": "a6f9725ac930f57a2ac06793d6fd3bfa3147b6ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725139, "uuid": "3541df01-86ca-435e-86f1-5ce701f0d903", "comment": "Malware payload (Gafgyt)", "value": "b022386dc91a085fa914899619e4287705e7321604ed6aba7c728980f9f4a96f688c8d3f076800d564b4bca194c4b2c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725139, "uuid": "cae2e484-3794-43ca-a6c4-67c7be3ab3eb", "value": "T14EF3B609EF710EB7E8FFDD3756AC1B02228C950722A83BB93578E628F61654709D3974", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725139, "uuid": "4c17bd7a-1928-4a1f-bab6-fdf487135d2e", "value": "1536:9qx7tJquFVOOrFc7H9QEAMn3kOH+S8auRqMc723ZWnAtMhM4Y0kcZM6t9mr1GX/9:9qxxrFc7HFHHH8a3AtMhvkcCB2Oh5cr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725139, "uuid": "4c9eaadb-e5af-4cfb-8fcd-7a94cff42347", "value": 159948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725139, "uuid": "44419c31-5aa7-4c6f-b56b-c5dc94adbf0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725139, "uuid": "d3f2e583-ba4f-47c9-a6ae-a98b810dfa90", "value": "rondo.mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5334c825-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767545, "uuid": "01e54041-58b9-4299-918d-de9d99ec6139", "comment": "Malware payload (Mirai)", "value": "deca150f652660971ce25c08436b918e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767545, "uuid": "96f4d859-1187-41d8-b512-3088b47c8283", "comment": "Malware payload (Mirai)", "value": "a9d9fe11ae0d79f0c40246c60a63c469ff507296007149865c4e0976081cc56d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767545, "uuid": "1edcbbbd-99bd-485b-ab8d-232175ccb580", "comment": "Malware payload (Mirai)", "value": "3e3327556c9e1584f5ff36c1595db6cf106ac948", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767545, "uuid": "08fad3b8-a6a4-433b-a070-96c13e51c3da", "comment": "Malware payload (Mirai)", "value": "38e8c4149743474f58136e492f0421521eb290418848637ae1c8999854911cd051270a09333cd6590b0a89b475b4be20", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767545, "uuid": "befe0612-0e02-430c-a4ee-b4efa1d1885f", "value": "T136E33B46E7404A13C4D61779BAEF42453323AB64D3EB73059928BFB43F867AE0E27605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767545, "uuid": "8c5f0386-3e19-4d5f-8695-53c05bfed99d", "value": "3072:7q3uLyBZxahqUUTiXjq01W/iR+KCde3RpNM/9P2L7:7q3PxahqUUTizql/w+bU3RLM/9Pq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767545, "uuid": "493d2f35-0a22-4ecf-986d-e37bc1ff4d4d", "value": 153188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767545, "uuid": "c77e6885-855d-43bb-ae56-fdb2f28df22d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767545, "uuid": "14465249-c74c-43a9-9e9b-0a6ee58653d9", "value": "parm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56672a2e-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767551, "uuid": "f389a47b-1e08-4de2-90e2-a909b4942c9d", "comment": "Malware payload (Mirai)", "value": "32f6895b7d5796a56ae44774efb5e082", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767551, "uuid": "9885ef77-f90e-47f8-9d8b-6ea62c6e47a9", "comment": "Malware payload (Mirai)", "value": "a9df7a2da2274bf6f7c60d17762cf85a541dc7bd752aa476f8d6df4baa347ce8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767551, "uuid": "ef907a04-a52b-4758-80ff-e2b35192c144", "comment": "Malware payload (Mirai)", "value": "e6bc9295c8af348083fd77fbc23809c28c464cdf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767551, "uuid": "ca8a0566-7f96-4675-98ca-b0c6489b7840", "comment": "Malware payload (Mirai)", "value": "18c015fb0922d40800c72fef68611942a7a634174b856d263b86b52da3f0b9f03c786e0aafd4a79eb1df0a49c0855f99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767551, "uuid": "92ee6e5c-cba5-4278-9b30-69a21c593d17", "value": "T14B93C81E6E218FBDF769833147B78A21A35C33D627E1D685E26CD6001F6124E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767551, "uuid": "401364a5-9b82-4e90-8ab2-c30c4eb5b089", "value": "1536:xvVx6jjfTBDQqVh7uUMeXNCS3e+uzSOJs/Fm:Lx6jbTBsE7uPeXYeOMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767551, "uuid": "575ac93c-2c86-44ce-996c-3f0be9232c25", "value": 93496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767551, "uuid": "ef30101d-6a32-46b1-8a52-cfc1ba02ee9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767551, "uuid": "1097edfc-81f2-4af4-804c-98d375ed887b", "value": "pmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "971bed78-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778826, "uuid": "066eb380-db82-497d-a5a4-8ca151916fc7", "comment": "Malware payload (Mirai)", "value": "1de574be716cb2835839d6cda685257c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778826, "uuid": "29645088-a5f8-4fe1-93e5-35bfda8c0ceb", "comment": "Malware payload (Mirai)", "value": "ab3a7a4f9fce0a9545fa14a706acd016ff59d1b8664965bd704e17c5a73c9ff3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778826, "uuid": "94f75270-9b3f-4610-a8d4-c6158652570a", "comment": "Malware payload (Mirai)", "value": "3d032f2ff3a1d20c268b593456f8edaa1c0387a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778826, "uuid": "e98a14a3-45a8-435c-aa3a-efbfd2c34676", "comment": "Malware payload (Mirai)", "value": "f8975a25ca021b5ad1b1dc963bbb06c772214b8e206dd4a98d6282013330d526d9b60bcda385fa88708a30e0e633ba66", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778826, "uuid": "b3a91329-5594-40b7-a6f0-0637b5b8f132", "value": "T1DB03E125B830095DEA7CD0BC0F9D0B2159B85F2194560D2E79D3E7939FE2076349AEEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778826, "uuid": "2ba072b0-f249-4308-91ee-bf7403fd26f7", "value": "768:hyI187beFSc+RX4qCw7kwGDGRfHBDgfKSdJgGlzDpbuR1Jt:hyf7beMbIqCw7jcGXCD3VJu3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778826, "uuid": "2fa36ae3-bc17-40d9-ac9b-d686149dd662", "value": 38124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778826, "uuid": "16b93ac9-af06-4d85-b6bb-9b791762f3cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778826, "uuid": "7e927fbd-cc2a-46f0-a4ac-02808ab82cfa", "value": "Space.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db2b7651-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747158, "uuid": "0157839d-bbc2-407a-ae9a-47d88fc42dee", "comment": "Malware payload", "value": "21ebd9c15feeead83c20a643f9c02f25", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747158, "uuid": "f9633e13-b33c-49f6-adb9-12601d783286", "comment": "Malware payload", "value": "acc70f83bb226f3ce6a7cc56f183406a6bb0b8c56c46d3e02f32dbee59caff8d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747158, "uuid": "5980a510-71ea-4eb7-a1da-0692bb4ce6ed", "comment": "Malware payload", "value": "32f20e2a66568c8e5bcd490e300fb91a73c1d61e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747158, "uuid": "100ca17a-8a5d-403e-9549-e6deccebe94f", "comment": "Malware payload", "value": "4ccffb3ae3cf7031a403fefbe1e796e29b153945432a6e47375aa47fd8f83f4576554129e56fe5c30105658d90264077", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747158, "uuid": "817824e8-82a3-427c-989e-253c7d076873", "value": "T10263098EC610903B1CF2A911C9E070B79FAA9E5DED77A4235CD246C65DD0AEE07041FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747158, "uuid": "14dffbf4-71ab-41ca-a419-bc31870e1577", "value": "768:I8w/h62/jWs6oS+xISN0vD/D/v/4/M/O/I/n/M/Ix/V/v/i/o/g/l/C/F/Y/IP/4:I9l/AoSSMJLusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747158, "uuid": "4c492259-c7b3-4267-8100-4ab17b9ccc12", "value": 69629, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747158, "uuid": "e5c7ac82-457d-4f1c-9740-2bbc79eb5111", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747158, "uuid": "79afdf74-f674-48fd-84b5-cb0fd1dbaa3d", "value": "invoice-1645080830.pdf (92).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "143d5022-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779036, "uuid": "479936ad-1bb5-4b82-955a-04156c9bdcc4", "comment": "Malware payload (Mirai)", "value": "853741b83c38ccbd3dc90046ef65098b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779036, "uuid": "539cdbb9-9a7e-4429-b0b4-ba62cdf26f93", "comment": "Malware payload (Mirai)", "value": "ae2a5f89f954ac884d13b2e0cefe173615bec58cf9888fa21ccf0ea6219aa101", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779036, "uuid": "42b1082e-d055-41ba-bb8b-e6c0edb7d74a", "comment": "Malware payload (Mirai)", "value": "949b3f95ad25a2456b20a15516de28a10331aa5f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779036, "uuid": "c58a0ef6-6efd-4cfa-b92b-41335698b668", "comment": "Malware payload (Mirai)", "value": "51f40ed82c2f4d6243d4f5df47c10e3bbfd3d49cb24ed020eeba6bf50308f60d05df54b7a10b25836fa99a0cb9402271", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779036, "uuid": "926e8a54-cc8d-432d-8dfd-a5b0f47e2196", "value": "T1F713F1B25A9D2FA747804535AE34C4C543EE8BF2D4A831763985DD9490B6942BFFCDC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779036, "uuid": "8b672047-79fa-41ca-ab2a-68232205843a", "value": "768:4rzD+GX7QWruIIOkByjciuY+1t67VxspJy2CT/3diCv6oLC/loNJ2ZcMpF9gl0FM:4vDZJuInojYg67V2JS/AClRUZc2FWlWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779036, "uuid": "c6cac880-a9aa-4e98-bd32-2ad80a5c57d1", "value": 44780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779036, "uuid": "8fc18019-845d-42c9-a908-f9492d4b68a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779036, "uuid": "b0f6c325-8314-41fe-b825-362f84f26d79", "value": "windy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80ee2c53-e256-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766752160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752160, "uuid": "79d849f6-3cda-4d1d-b779-c5c288a9dfb8", "comment": "Malware payload (Mirai)", "value": "cd526a70ddf5166de627867a44443c7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752160, "uuid": "9956742b-c3ba-4b26-81d4-aee24ad4c0b8", "comment": "Malware payload (Mirai)", "value": "ae93ccca73c61ec1948ec3087cba0a0a35e9ae2b0e909e78aed22f788afac676", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752160, "uuid": "6e0e5810-6800-4cda-84df-2121e38252dd", "comment": "Malware payload (Mirai)", "value": "06ef3747a00ac2bb86a74e8daaa93e1bce428038", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766752160, "uuid": "1b186f69-fac1-4156-8fb3-2c8e34a9cd19", "comment": "Malware payload (Mirai)", "value": "a0e23b5bcc4a24548f8280a0d32a569ab623ee1478e1f704cec8516e24a4a4d4b88fe29cf88ac842ff9c2572dbc79a43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752160, "uuid": "74e6dd29-fae9-41c1-90df-659cbdc3f3f0", "value": "T16C430204EB762F59D90F1CFCD9DE848367C21FE623EEDDA9B482CA07045746960A69C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752160, "uuid": "e630b783-360a-47a1-8578-1f10c5921025", "value": "1536:8idJdNvVnHuwQrOeOdFWcbSbmK4u+qgw0VuU:zdjNvBHuwM4LWtp4u+qgw2uU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766752160, "uuid": "878f6c36-71dd-474a-a7a5-726e45d0557b", "value": 57780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766752160, "uuid": "3476ddb7-8f36-4e7f-8098-0266116a7123", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766752160, "uuid": "de707ec1-0d7a-4022-a5c4-1c581e9006cf", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcf58ff3-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772071, "uuid": "59597e5f-9dee-4395-b832-415ca2a66354", "comment": "Malware payload (Mirai)", "value": "eedd1ed080bf12822b6e7e3ef5126233", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772071, "uuid": "2ced3c0b-4502-4ec5-a8d3-bef172eb15d5", "comment": "Malware payload (Mirai)", "value": "aee2bbc3d50df750a7ce3a974381c526d2121df8861ed0a79c4810dbaca7eb2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772071, "uuid": "ea046725-e2e9-4199-86ff-34a77248fcd8", "comment": "Malware payload (Mirai)", "value": "0ad567a89027ea719e46b056af94325d05cf807b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772071, "uuid": "81cf2987-4dae-4d89-a22f-9e42e5c2ab43", "comment": "Malware payload (Mirai)", "value": "514deacfe13f5d140b9e021e58b62770fdf3e7557e4e49401e494cfd10585655a07165d50bd862c97aa34b092469b7d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772071, "uuid": "37552ca0-524d-4882-a107-302ee45a4091", "value": "T13973026059EDD997E9E2AD3BF859C40272194F1952324C2B1C5A3DB42AA284B3BE19C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772071, "uuid": "0fe9d808-40f4-427f-b98a-2fbc027487a8", "value": "1536:AV4uWnO554ZguJGPscQ9/A9EZ/ZBS89QoVhqkmyDKHJze/uL/:AVvWO53uJasntA9EZ/ZB59zqkmsg4/ur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772071, "uuid": "31a1f9bf-9404-4e29-81eb-b3eed7f8a7a0", "value": 74620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772071, "uuid": "fb5b2e39-7745-4b27-8e5a-71ff6a880804", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772071, "uuid": "c8ca04ff-29fc-457b-b7ae-90a741fac698", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a02b2b0-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729842, "uuid": "a03f9c6b-ee54-496a-81e0-0184a7de9455", "comment": "Malware payload (Mirai)", "value": "7023d980b9d72b02f8e0336e63497941", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729842, "uuid": "8965b513-e8a8-4616-aaef-70cc49779dd6", "comment": "Malware payload (Mirai)", "value": "af206ad253426ae2d09399c980540ec001c3cb1391b62ce24d136e2e91993745", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729842, "uuid": "733a36c7-9a57-4dfb-97e3-136f95c2affb", "comment": "Malware payload (Mirai)", "value": "50483731c9b3292126b4599579f05887f4bed563", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729842, "uuid": "6bcdadc7-2f86-4846-be01-7391707f4b7b", "comment": "Malware payload (Mirai)", "value": "b16751055bd1756ea5b8a2bde8dcd63d9d1e3163cdec9073acb357f6abd171aac863d8beab23413910a874cf05f69a03", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729842, "uuid": "e9763d95-f3f9-43b8-8729-7deebef29440", "value": "T156242B42F9518E12C5C112FAFB5E514D33136BB9E2EE7202DD246FA0378A8EF0E7A551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729842, "uuid": "004e79a3-d810-40d8-838f-e15e0fdccaf0", "value": "6144:RrOZ+5vREHKVAbW58fyeZfKNwODuxEHK1gGk0UWpT1rXZ5xau7eCCYzO6ffK:RrTxREHKVAbW58fyifKNwODuxEHK1gCt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729842, "uuid": "b813d046-9d3a-4051-bcc5-f601a7be9028", "value": 217384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729842, "uuid": "dc622348-f16e-4a6f-a3f9-aee1b65434be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729842, "uuid": "fc29b8db-23cd-4031-8be5-3917729a4cce", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "547eb18a-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728034, "uuid": "1a2ee1c8-9b95-4315-a658-44d4e718c19f", "comment": "Malware payload (Mirai)", "value": "46a8ec4b1de8d46302d7956f6d04d558", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728034, "uuid": "5843694a-0b92-4f5f-99cc-7a43051245aa", "comment": "Malware payload (Mirai)", "value": "af37aed81b8379347bef831d8c5c6158e2ab3d9cc8f811441d180511be58655a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728034, "uuid": "ebe1bd3c-cb3c-4818-ae19-24f76522f068", "comment": "Malware payload (Mirai)", "value": "b2d5ac8203fcd1b943edec31fd0348dff42edcfc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728034, "uuid": "ebc98118-8d08-4a90-9edb-ceefb08ebc9e", "comment": "Malware payload (Mirai)", "value": "90000ff60c06faaa495c20de591a1bc7927b611bb7417a2db78c811a6819582003263ba651130e54682ddcd93d899e48", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728034, "uuid": "19b5ba9c-4ab0-4a8f-9966-d8253affe3e9", "value": "T10D3302062A891743C4D254B1D4630993E0BA941CEBC9E727DFF64E7E25C9586EC836CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728034, "uuid": "6f215bc3-0e41-409f-b9a6-d76583096e89", "value": "768:H8DCGNxI4w0Beu8E/mGh8JRFKM/pN8+1Q2vBESLgOmqw7c6dC+FFfkrtXmZyYxdC:cD7X8E+o8JR//pNt9/ktg8zot2FxNq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728034, "uuid": "06a4e4a7-0682-45d4-87c3-a6839737a1dd", "value": 52696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728034, "uuid": "f0f64ea1-005b-4923-bffc-15ac599c4e63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728034, "uuid": "7a378f31-fb87-4b3a-bbcb-ab3756a58e3a", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee592dcd-e20a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766719702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719702, "uuid": "b5f2088d-b44c-4f17-b6cb-6dd345c06ec9", "comment": "Malware payload", "value": "a9950f5bb695f57898cfae14e2da0bf1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719702, "uuid": "065d2cd1-e1e3-48ba-b4af-482b858a034f", "comment": "Malware payload", "value": "afd914a6a98131858280a35738053e3059782e50e10a9a7b9b2f96fec1ed6d70", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719702, "uuid": "6b7e14d8-8efa-434e-9314-431ca8df2e44", "comment": "Malware payload", "value": "555afd90e6f0a6c859b8aba18c909620097f08a4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766719702, "uuid": "b6216129-08e1-45dc-920d-fc87fefdd1b4", "comment": "Malware payload", "value": "abbe70b247d907b14764df0bf1134576c01db6bdafdd0d471102997af3155f0be0abd6bb94230ce799dac0ddd48c9429", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719702, "uuid": "7cae9bb9-e339-45c3-91cf-e1869e494334", "value": "T1BF374D8F70A6DF5DD6EE49B601E10C2AF8366CBF471C93A7D4E589E60D8AD025F01A34", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719702, "uuid": "f7779260-b21c-4c1f-a8e4-53b8027664a4", "value": "7a193a3eefb3365f7ade83b550268c14", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719702, "uuid": "077b98b0-7d04-4f52-955d-9923756c7ea7", "value": "196608:uy2SNApW/XVnDCQFSDz4rBusgPsPNE2H1lfmbH8nMRFQOcRPFZEBGjuZQA:CSN3/XpFez4lNPncsMhBG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766719702, "uuid": "4c226390-7d7d-4e31-8580-fdad97aacc9c", "value": 22521856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766719702, "uuid": "158609d5-3eaa-45ae-88ad-0fb954193840", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766719702, "uuid": "c65ae521-e698-4cbc-af7c-7a719eba6aa5", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dd0a9b7-e25f-11f0-a129-42010a9c0007", "comment": "Malware payload (CoinMiner)", "timestamp": 1766756074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756074, "uuid": "7b5b4954-3d06-4953-a670-d17c3be64783", "comment": "Malware payload (CoinMiner)", "value": "128b3b3a97b0196bce8feb0221f76b73", "object_relation": "md5", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756074, "uuid": "5421ba57-31d6-4db6-a61d-f5d121d54c30", "comment": "Malware payload (CoinMiner)", "value": "aff9cca1dee1cf4e46e4f5473154a828964b265ca4187d7b9bdec0a2f3f4e99c", "object_relation": "sha256", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756074, "uuid": "041ab389-ff35-4f0b-b44d-5285d148a7fb", "comment": "Malware payload (CoinMiner)", "value": "05bdae5fc00116928b97b70f24b4b275434b30e5", "object_relation": "sha1", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766756074, "uuid": "76037700-baaf-4d87-a367-37ded119e195", "comment": "Malware payload (CoinMiner)", "value": "38227fa695c5060f4564b0175cd2bae16440642daadd80036fdf02fb88652a2f132ce96ddc37eb41b3a37033e2fca0f3", "object_relation": "sha3-384", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ONE.file", "colour": "#35AF49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756074, "uuid": "0198d563-cd3a-497b-8834-46718c4c9610", "value": "T139B5230193F18567F9B2673816B18AC309327C646B71E7BF1A94856E0B33B84ED71B36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756074, "uuid": "b06c3dec-8850-457c-98eb-cc71f54a26a1", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756074, "uuid": "14110e6f-0e74-4fa2-a8b6-7a0d24e895a2", "value": "49152:C/TTZpg/Wnum57ayZsgpLZ+s0fo+X1HNz1KbBOFQ060e1U:C/c/pm57Te2Z+7f5VNDFQ0XY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766756074, "uuid": "ae26a894-49c1-4d16-8f26-992254527980", "value": 2413568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766756074, "uuid": "9b58e3d1-1d03-4399-96e6-81a1a56135b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766756074, "uuid": "f827615c-eac7-4ba6-af8a-df96f609e5e8", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ce868f-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (PureHVNC)", "timestamp": 1766777287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777287, "uuid": "44f48b89-2009-4add-a47f-04a4f0be9e2b", "comment": "Malware payload (PureHVNC)", "value": "5c873e68503e1a0e5be6be50162b4334", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777287, "uuid": "e1917d74-a9fc-4a22-93e9-e6648248f793", "comment": "Malware payload (PureHVNC)", "value": "b08c83f91138b07c2a9ec9dace60ef42fe0abd9a7d9fc5b50ab6200d71d0ac66", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777287, "uuid": "66b1f9a5-f061-48f3-92e7-21c561b62ca6", "comment": "Malware payload (PureHVNC)", "value": "8bf43d470e98d4469ad9949da78c7d341938afa0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777287, "uuid": "862ddf4f-2c14-4440-9749-de80c9a30b19", "comment": "Malware payload (PureHVNC)", "value": "53580135aef4bdddfd1a56dc002a4a1bff3a4e9c2803b2f9712735c6196d248a77be5a14f75335e998f3b58729ccfecb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "purecrypter", "colour": "#93448F", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#6FB7E5", "exportable": true, "hide_tag": false }, { "name": "windirautoupdates-top", "colour": "#5EA68C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777287, "uuid": "e1052a15-bd94-4e8b-9bd6-b97a98997721", "value": "T1DCE63320581AA4ACF51819743DE241C7BF6A14EE8B4EAC1F59113B68BD313E3C91B5BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777287, "uuid": "bddc6cef-9632-4ad4-87fe-551c5bf2088c", "value": "a56f115ee5ef2625bd949acaeec66b76", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777287, "uuid": "80b04130-e859-4108-9320-b389a491a209", "value": "393216:Oy2V7d3+TqXtFQPl0SS9fPkc3dWXOtqwqpy:OnFdFEed9fPn3dWXeqwg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777287, "uuid": "63e23c0b-c065-471c-8fe2-aac9be8e1695", "value": 15074816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777287, "uuid": "fa8696b9-1f54-4a89-9445-00ffe6de8031", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777287, "uuid": "58044a09-53a2-4b4b-b587-d7d27fa93f84", "value": "Installer_v4481_x64.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7261f8-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781868, "uuid": "ab1a8693-658e-4a71-ac25-42883f87be8d", "comment": "Malware payload (Mirai)", "value": "d837fd6842c0f7edab3e979c964a6a4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781868, "uuid": "fc450a40-b63b-42a6-a62f-fae95fda686b", "comment": "Malware payload (Mirai)", "value": "b0b8d30de6afb2719b8c36b455b306cd3d95f898d0c38aec502f583fb47147d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781868, "uuid": "2ae9bcb3-0684-4ede-804d-329e54d6b7f1", "comment": "Malware payload (Mirai)", "value": "9ff9104ec2a15047b98ace4c90c5dc10139a2018", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781868, "uuid": "74de6a9d-95b1-4180-a413-684b8667e209", "comment": "Malware payload (Mirai)", "value": "c1470c31d898b4c4f3296c8a6aae987419c945cd4ed25f4ec92c5ca0e47176e42a83a46241bc83485f8ca4c142135ac1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781868, "uuid": "6d334268-cb22-42d2-85ad-a612bad5a833", "value": "T159A3A91E6E319FBDF678873047B74B30939963D623E1D685E2ACD1141F6024E681FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781868, "uuid": "c5a5dc0d-4a5f-4ddb-9d19-7fcdf85ad241", "value": "1536:3774B8PhdWllcoUuj13yAu2HVAEmWqsOerkZpz6BRlncbfLJToEH:BP8yAbHylWqsApz6BRtcZUEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781868, "uuid": "8b52dc39-c315-4757-9149-2212d0b3be9a", "value": 105668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781868, "uuid": "e1443f3e-fa23-494d-a689-2097ebb95a6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781868, "uuid": "86f2a707-b009-42d5-8671-4f5fa9b3cb3e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c190712-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747347, "uuid": "4105a035-2565-4d6d-918b-8b4d2c127031", "comment": "Malware payload", "value": "bfeb1f2748d8ea1336a29af3a63cd555", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747347, "uuid": "4af900f7-a2e8-4e70-a8e4-064380bf353c", "comment": "Malware payload", "value": "b157dc16f77e7aa28f9c90b173da8c62602a82dab315847c7be2fd8f0be2c837", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747347, "uuid": "016ed427-b3f2-4efa-a5fd-fbddeae834ef", "comment": "Malware payload", "value": "5e7bdc0710d3ff9c25c7a104ef30eeb5f098c554", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747347, "uuid": "3546c850-0013-4d03-b464-755c2933dd76", "comment": "Malware payload", "value": "b9ee0717ffdbf9ac6c395ea7dd9fd4e62742bfa4d3a9ecab3abd7b9df227d8794704567b961ffa55a192718e43cdc5c5", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747347, "uuid": "0108adf6-9cd1-40ec-b14b-3b1418313dbc", "value": "T120735C8CEE190D5C6070184D5C5BD09E26CF2A2AC9AC978FFF7175C270AAB83855A5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747347, "uuid": "a5c99d64-f93f-4f7b-a424-339b9be3e6e3", "value": "1536:I9l/AoSSMJFhFHFLFOFgFvFYFfFxFNFXFIFyF9F3F6FNFQFZFlFPF0FmFOFQFFFE:I9l/5Mw9usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747347, "uuid": "4887fbb7-af5a-47b8-810b-d79df9dbc5d3", "value": 73505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747347, "uuid": "ecebf4dc-6399-4b42-b15f-f43ff4fe07ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747347, "uuid": "d41bcf26-cabd-4f41-aff6-4c9ebab95545", "value": "invoice-1645080830.pdf (53).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b459be-e218-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766725565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725565, "uuid": "56b30bd0-9f2a-4695-8f99-c7d92491394a", "comment": "Malware payload", "value": "c7fe8b113e33adb22fd2aa27e3f673df", "object_relation": "md5", "Tag": [ { "name": "Conteban", "colour": "#71A4D6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Conteban.A!ml", "colour": "#26A2EF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725565, "uuid": "23ad6bb1-ecc1-4c74-bc1c-09e78b2e05bd", "comment": "Malware payload", "value": "b19eda1354aeff70a9269a7096ac8e221ff0061133bc219fcb950608b207c9ee", "object_relation": "sha256", "Tag": [ { "name": "Conteban", "colour": "#71A4D6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Conteban.A!ml", "colour": "#26A2EF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725565, "uuid": "cc125d51-789f-45f7-89a9-cd83ba76fd28", "comment": "Malware payload", "value": "090d85200df5eeb8b150e617d0775512137af924", "object_relation": "sha1", "Tag": [ { "name": "Conteban", "colour": "#71A4D6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Conteban.A!ml", "colour": "#26A2EF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725565, "uuid": "12b8f9b2-1ba8-4c2f-a642-5328c2914fb5", "comment": "Malware payload", "value": "bd967fa5454eac4d8c0e8f9be4fc2d3e2ab986e51442ed834eee9d9bbc85af99dccb0898b188eb71063236f56adc7e98", "object_relation": "sha3-384", "Tag": [ { "name": "Conteban", "colour": "#71A4D6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Conteban.A!ml", "colour": "#26A2EF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725565, "uuid": "2a92511b-a5c8-4ef4-91ba-a2e7beb03b61", "value": "T1DA63F1A3D7F40844FDF6A5761ABB49623F31F257D328876A6A9038021C21778EC5CB5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725565, "uuid": "869492ca-5a13-4db3-ab8b-10e81eb43cae", "value": "1536:DBeqek3XshihdpWap7urMLzj32BTDT0bStgxUYFADB0:DBeqekIih/WcurM/j32BAbigxUHd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725565, "uuid": "965dc29c-d909-4d4a-9e75-fa81661330e0", "value": 68608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725565, "uuid": "9176b44d-b2cd-4521-9308-20b15753a645", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725565, "uuid": "986975f4-dc73-4e25-944c-32a6416aceaa", "value": "2025.12.17......\u4eba \u5458 \u540d \u5355dsfjdsfkdjsfhsd785.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e69c574-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779026, "uuid": "dd840af3-2f58-4136-9cb3-0a609b9ad4f5", "comment": "Malware payload (Mirai)", "value": "2aae05f456383e38cddfb2467150706f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779026, "uuid": "ed42ecea-ed72-431f-8510-22beb98bde8e", "comment": "Malware payload (Mirai)", "value": "b1a3cb9649e3e9c490f49d699082aa0590e66e8c6dc2849e55dbdd7be11ca90a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779026, "uuid": "0c901889-9192-429f-8ef2-f0bd68948340", "comment": "Malware payload (Mirai)", "value": "15a6cd513e18b6cb951c03059545bf1471d48b10", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779026, "uuid": "c5b65340-3a5e-46fe-97f5-9f9993deee21", "comment": "Malware payload (Mirai)", "value": "1e61290abd5a53b16e6c3547dfd1fb1c0bc6022657893936eba405209262325f5b5f21ed25973089bf3294f6d1fb934f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779026, "uuid": "436600f6-ca80-4ba0-b671-086673910027", "value": "T104935D02B70C0E43D1675DF02A3F27D1D3EEA6E121F4F688691F9A8691B2D335586EC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779026, "uuid": "a9616d45-5bad-4a19-b07d-6767007fd0ef", "value": "1536:GFsCCOHrTgbrkYkV4SKUgZ5VvHfNaoY04M1yypAzKYraZCVMuXyCT7MoER3B3u:LROHrTZYkqkGxAzFNMVCZQu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779026, "uuid": "66b03133-eea3-4002-8833-9be4c2ed1093", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779026, "uuid": "87563367-4c81-4cf9-b753-325a7681fd84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779026, "uuid": "e94b626a-305e-48d7-a953-6672e2d9f54c", "value": "titanjr.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86cc3633-e2b6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793402, "uuid": "2397c4ee-7bfd-4b94-a714-f70d0a43a82c", "comment": "Malware payload (Mirai)", "value": "373fda5092f82f085f81f32edbeb6312", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793402, "uuid": "583a8a58-8572-45ba-a9ae-58f52c00b020", "comment": "Malware payload (Mirai)", "value": "b1c46439e44b02fef7ee9356606085a9cfe6368ba192b80c8d4d40f431909152", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793402, "uuid": "223e6282-d1eb-4a7a-91eb-9847b5a53f48", "comment": "Malware payload (Mirai)", "value": "2b6c344361edfb9c221b721bae8c6f92fba41d72", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793402, "uuid": "85de6553-4b75-4a47-9be8-4f3cdb85c635", "comment": "Malware payload (Mirai)", "value": "758e90ba89bc991c98c9de458b3210f557ec9bf80ed4280eb1bc8236224c53952704aa5247d6e034eae1912763c17b31", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793402, "uuid": "e2aff1b1-f512-41b8-9f31-16b3e289354b", "value": "T12B639E77D569AD94C54C55B8A8F1DEB92713B000A2532FFB5E8AC9628043CACF64D3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793402, "uuid": "11140ad3-5d63-4683-8597-4b546a927da3", "value": "1536:gaxwtsZ9hrLu+U0DRzfmUla5o2jSSC0tQe+x9bVRj:gSn9FyclvlAo2jSSJt9+rb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793402, "uuid": "97c73097-500d-4d8e-9a0e-5d4ec41951b8", "value": 70844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793402, "uuid": "374c5687-d0bd-4827-a11f-0c8f6df8d8e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793402, "uuid": "e7910ef0-6359-4294-830f-5f3a1554bf18", "value": "jklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe98ae0f-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793173, "uuid": "a5e3f667-3f96-40d7-b55f-b15a1e7355f5", "comment": "Malware payload (Mirai)", "value": "a9a1fec2ed9a3fd8b6227e74952d19da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793173, "uuid": "088aeee5-725e-4c50-816e-f5d891a4fc2b", "comment": "Malware payload (Mirai)", "value": "b1cad7ca5ff9f1d8b145c374b931adc67e008944a77d76656963e9f0435a0f7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793173, "uuid": "76ee2e21-1c92-4990-8c8f-b0e7d1fe97a3", "comment": "Malware payload (Mirai)", "value": "17186956c23b7a66bf7c9d28d15a80f6a1c35011", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793173, "uuid": "84362079-f84a-46c8-9e2e-48d663a91e11", "comment": "Malware payload (Mirai)", "value": "e01a2874f91f4727f416ddfb29c79035797a3fa86c437af06ed6421bf20df989d7dd5c5793b303dd47776f29cdb802ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793173, "uuid": "556709f7-00d6-4821-87f3-70e5f2bb9e90", "value": "T16193F80ABB644FF7D85FDD3746BD5B04258C560A22B83B363974D828F64B25F0AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793173, "uuid": "814e2e5c-93b3-41a6-8ff3-9b8af8eabdf1", "value": "1536:oxEIC3nzR6gDq8EIKzRwoiuL64QEyO7xxPPNDa5nbP2EdbVR:o+1nzRZpOwQOGwt20", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793173, "uuid": "5ffdf52f-58f6-44b6-ab29-c6c77dba4512", "value": 92980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793173, "uuid": "9b4391fd-d8ee-4222-a44e-bbb990a1e1ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793173, "uuid": "c8c13ea1-24e6-4d0b-aa33-0a13713906e7", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbc2930f-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747588, "uuid": "182f62fd-fd35-400e-9d95-90e4742a518e", "comment": "Malware payload", "value": "c1961e2c5b2e2dc6c431723ec26ce5ba", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747588, "uuid": "195fa8dd-4b46-4819-850e-fdceede53376", "comment": "Malware payload", "value": "b23c795b986cde6f507d9c6b8cd266052c18d6f5e3f8154a68d3bb769d1dc9ba", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747588, "uuid": "e372defb-0601-45aa-b3c6-7ce73a14b99b", "comment": "Malware payload", "value": "2465ad3374a71f01e1591b9bd2efec8fc3da5ff3", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747588, "uuid": "10ab427c-8bfb-4c24-82dc-69f4f68db0d7", "comment": "Malware payload", "value": "ec80891b2bdd5bf790a4afe92c282bdcb58e0f4cfbbdee56d986abdca1e1683492190058e8270c5b8a9927621753577e", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747588, "uuid": "b407e40f-4040-4844-aaeb-b75213d867b0", "value": "T14E731AC898AE4B5BC176A526FB032057C49BA0C9D314F344E99EBC219F4D3173DADA2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747588, "uuid": "7448c737-3ef4-49b2-a437-96cba08c1771", "value": "1536:I9l/AoSSMocccsctcuccchcWcRc7cScFcVc7cEcVcEc5cJc6cncQczcPc/cecDct:I9l/5MoVlU9N4XAArQ2QtCXGEvWHeECN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747588, "uuid": "0f133163-88cd-4891-8fb6-e3440ffae75c", "value": 75351, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747588, "uuid": "6359282e-5293-401b-a93b-8ade19a6c4e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747588, "uuid": "364aa6d9-f915-4553-ac1b-564d2d272acc", "value": "invoice-1645080830.pdf (1).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5f04913-e1f6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711125, "uuid": "80627ec4-e9d4-4d13-98e0-01ff9cade2b2", "comment": "Malware payload (Mirai)", "value": "d4eea1a6bcacf2b9e086496bc6d173b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711125, "uuid": "034a7f08-cb53-49c7-8776-1375838ee37d", "comment": "Malware payload (Mirai)", "value": "b243105114d61c1ad3403606657d8afad33d35732956773afdf6e4f6d679a476", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711125, "uuid": "a87d4445-d589-47a9-9232-c347d629ce98", "comment": "Malware payload (Mirai)", "value": "26dd32479feac333de52acccf19095822c87688c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711125, "uuid": "2c908c40-47e3-47b6-804f-c1bfaf17080e", "comment": "Malware payload (Mirai)", "value": "1780e7745e13c0424e0e3094b34d51c3702595019a4e0ac2ff098a070e84bebb1c04bbc5c31de7b02259e08413330660", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711125, "uuid": "05016180-e01b-4d64-b5ff-f01409a8e54b", "value": "T17A048C73D9655E9CC724D1B5B0E0AF795B23912591836FFA69A3C2B18083ECCB9093F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711125, "uuid": "a048da71-f09f-4636-8ed3-a2c76ae6397e", "value": "3072:Y2lXChS04xg5IdguyErkUEld42SqiD7bXbICWCfreDu76hh1Rf:YG0hGguhrZEld42YD3MvCqicf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711125, "uuid": "7a9021d2-01ff-4866-b171-4c6d1afcf215", "value": 179168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711125, "uuid": "df938e51-c16c-48ef-af1f-ac9d4726136f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711125, "uuid": "4f3a5219-9ea6-437c-b658-a81e47c76cee", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3082793-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781879, "uuid": "ab4f4231-a6ae-4c48-bd5d-b8bbe067118e", "comment": "Malware payload (Mirai)", "value": "3e1457e8b5659a01f0e9ceed597abbda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781879, "uuid": "a33531b8-bae6-4f69-9df2-35ff5580a917", "comment": "Malware payload (Mirai)", "value": "b29321afad103ba0907cd40c9c0a815a82f3ec02849be18d128a6f17b0ac6033", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781879, "uuid": "f4155077-da7a-4d38-9819-3d56c57e5cae", "comment": "Malware payload (Mirai)", "value": "15175a3a4269c103174d77fe30f2d1ab5ce672fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781879, "uuid": "b8a56e49-5a20-41aa-874c-594d06ee751c", "comment": "Malware payload (Mirai)", "value": "de62660d5620bfd050a5feb79a60299d9c0a6107392da87569d37fd1288ea11b92e467d937ed6b832f511e73fa7217fb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781879, "uuid": "65ce911c-9f73-4e09-b201-ec7130851c58", "value": "T18A732AEBF820D97DF819DB3744935C09B239A3A309922E75B317296EDC3A1981437F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781879, "uuid": "41858723-5eda-46bf-9849-38cf831a6b06", "value": "1536:vfK01vgVITjd82IvoFeQyXVU15QvbSXYDzznB8DNd9gH6rhgw:vi01oVITjcokQyXVU1mb++c9g0Ow", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781879, "uuid": "14c57209-fbef-4442-9a1f-8be3a083b16a", "value": 77580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781879, "uuid": "057ee485-f6b0-4d24-9d4d-0d63db323603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781879, "uuid": "7c1fb1e5-e263-4c2d-87b7-c78e19cbb543", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05d83964-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779012, "uuid": "121edc05-e7c5-4f36-a385-3f1f5ab99b3d", "comment": "Malware payload (Mirai)", "value": "e1710c803433aa7d46a85f9749569f44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779012, "uuid": "cb8d6b12-642f-4b91-8e89-9e39687bb38f", "comment": "Malware payload (Mirai)", "value": "b29b2affb37dad39d884f4f00a4f58a25134323bb3cfcbb9974660b26499f1d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779012, "uuid": "744cc401-b660-40e6-8bea-e97ab8b6b6f6", "comment": "Malware payload (Mirai)", "value": "d9b79772b3424134288f3e4f2626f2f461f3b288", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779012, "uuid": "abfb69ca-8177-4b72-97f4-40172800f9ae", "comment": "Malware payload (Mirai)", "value": "01bc5bea51757926f0e1998bdf638689a97e211c591a7b32060971e1e6a2be1b6da3c1a9a788c2f0fbcc9386cd8032de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779012, "uuid": "e46bbfe7-6d4e-48f8-9011-0118f77ebb63", "value": "T1A2935C13B9C480FCC849C13097AFB536D963F17E1279B19B63D4FA12BE8DE511E6A680", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779012, "uuid": "c742ba56-4de7-46a8-9f9a-9694ab670bf1", "value": "1536:Ac50J45j1WS60TrxMXQn8TK+yxAwuV1h1ss6fuf55nulEJHWIh:Rf5j1W0Trx78Fyx4V1h1ss6fS5ncEIS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779012, "uuid": "0e2026aa-c6f2-46ec-8779-55ca0edc947a", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779012, "uuid": "f3644d97-1628-4673-9647-50b91f710d9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779012, "uuid": "36a165b1-7187-4cca-b09a-d689c1b41953", "value": "titanjr.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57ecce5e-e27f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766769701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769701, "uuid": "2e68f8b9-7165-48bf-a4a1-b638db015b72", "comment": "Malware payload", "value": "c8a3079585a40dd769ff5de6f693bbf0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769701, "uuid": "0078592f-34bc-427d-9034-68ab13b908a8", "comment": "Malware payload", "value": "b3ae8788aba178b5fe8b6b55e6e0d061621922ee7edfab0a4a8b52f82614da4c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769701, "uuid": "597c0490-6cca-40cc-a11b-8a647687cb69", "comment": "Malware payload", "value": "cce4ee592d976f9cd009a4d8b901efc20b377aa6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766769701, "uuid": "13c05805-359d-4a83-a017-c96b32111571", "comment": "Malware payload", "value": "78bb10c37c8ba27524d8a121d4472c42a7e5c4642fac015adb071b249dc85fa377c22d71328e2127017519b0e4528793", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769701, "uuid": "8c481622-f236-4a6d-9bf2-6c2b6e85d6f7", "value": "T17E25474F2996C2F0D3AC3BF0B732C280752A1C05B72596F429456ACB94E7DEA176631F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769701, "uuid": "a1e1fe18-b3be-474d-9b99-6d00ed7fa789", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769701, "uuid": "5e0d52e8-f4c9-4de9-8cf6-a4cc14940a11", "value": "24576:nlWj96vH41ILT1J7/5kHJ6Lbkt/Om1eqUoe4q48HG:q9aYCLT1JDWoLAAm1KF4q48HG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766769701, "uuid": "c3bb7065-24bf-4701-b268-d3f30378d345", "value": 993280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766769701, "uuid": "c448f9d5-f9da-454e-8a10-0ca395fc68c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766769701, "uuid": "1b56215a-9332-4c02-91ae-dec678602994", "value": "Chrome.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe3d8299-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766792743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792743, "uuid": "1ce22e13-9793-408a-866d-8051ffb75691", "comment": "Malware payload (Gafgyt)", "value": "c4eda01f8c57a322927faffd0dbd2e8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792743, "uuid": "297c4a25-1324-44c2-aef6-1e15eecd664a", "comment": "Malware payload (Gafgyt)", "value": "b4c00751dfd856ac22c708ad052d281815e676665467aa7009110893fc8ca7e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792743, "uuid": "04514ebe-f0f3-424f-b246-0449f1ed28c6", "comment": "Malware payload (Gafgyt)", "value": "73645e708685d09691d8415e7bb3ae9e183a7044", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792743, "uuid": "3d892335-9aef-43d0-82e5-a3b5637c2069", "comment": "Malware payload (Gafgyt)", "value": "ad395b522f3c617bcf8118e6ad8b29379b1933b4141f685637b3b2d10062a5cde2477563bb220693f6c1c2e7227623de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792743, "uuid": "83cfb1d9-ede0-4945-93db-6f9db42d4464", "value": "T151348396AFA03FFFD85ECC3342A5DB0A159C550A12847FB62A74E114B69B14E4DC3CAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792743, "uuid": "eed31285-bb69-4b18-9ee1-dbbad5eb46de", "value": "6144:eu1SR66A66iAQwRtttwb8z/YcHjI2pQTH1c1VkXmv/23pqvI7c4X6Y:eERjGkpY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792743, "uuid": "15f0f7bf-9eb5-4ab6-aeee-fa470ad11cf6", "value": 244028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792743, "uuid": "d7ce2160-09eb-4b36-81e4-930a42c01f2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792743, "uuid": "4ff75bdc-4dfa-4835-80eb-c48486e9fe44", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b0a7275-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778833, "uuid": "af014f52-cd66-4570-8709-466331fe6fa4", "comment": "Malware payload (Mirai)", "value": "8fc1b19bab73f0158e010311518a6bc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778833, "uuid": "45dc6697-daa3-4e4d-b488-1c7b240b4b86", "comment": "Malware payload (Mirai)", "value": "b53b3981eca8c237b446652d43acab0748b8e92d67e4c11d684aabe92ed0a14e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778833, "uuid": "5f96c2d7-523f-42c9-afe2-f8ba3a7fd678", "comment": "Malware payload (Mirai)", "value": "630be86711532df32579cc8ad51280a46e10a26d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778833, "uuid": "3b553e37-5bd7-4640-be20-1796ead57e31", "comment": "Malware payload (Mirai)", "value": "47c539f2a73db079b3cf3ab3acaed611567a54f6adccc4491fa70744f3c69726c907eafcfc78beb1d41278243da0e68b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778833, "uuid": "d11e1128-ac27-491a-b4e9-2f8f3d4fc5cb", "value": "T10F734B31F9390927C0D4917A61F74723B5F297CA20A8861F3E720F9DBF615403A57AB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778833, "uuid": "67aa08b9-41e7-4f72-95d2-2ec7d2117b9a", "value": "1536:U2kN6QCXbqt5guvvF7tR7SYm5BHxS1H1tTxfT:HhilL7SYOBR2xfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778833, "uuid": "bf1a40b3-9461-4bbe-b265-8dd554ca9c98", "value": 80032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778833, "uuid": "e21c6374-861b-46a5-8ae8-67147429263c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778833, "uuid": "b0c4c3fc-ca12-4450-aa15-1428eecb82cc", "value": "Space.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12f293bc-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779034, "uuid": "b83da01c-4cd6-46ac-8032-f022ad1319ff", "comment": "Malware payload (Mirai)", "value": "c84941d8ad1e59daf81ec62423e9fe5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779034, "uuid": "4aded4e9-6973-4266-b972-f6cc42133276", "comment": "Malware payload (Mirai)", "value": "b55b85e421b0984692514508133f910eb56d9272e033171d762e887282a67b94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779034, "uuid": "1312de0a-7bf2-47ae-817e-19230ed4c36e", "comment": "Malware payload (Mirai)", "value": "3e56637c585bccd4b39ed2f74951faf0d38acbd2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779034, "uuid": "518d4b79-8bb8-4d1a-8c30-b147e4263612", "comment": "Malware payload (Mirai)", "value": "2f8211f8869d7382f4375a99897087ae7e6f66a03985da57560b45fbc775874c8bdf67b9b2a58103326c1368b1ff11ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779034, "uuid": "a4546c18-7bdd-4a57-bdee-f73248a9467f", "value": "T180630265134AEA966030ECF352F45987BB3C5DACD1AE720308B52DC9F164E16E9FB482", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779034, "uuid": "84ee0b66-7fb1-4c98-ac1f-71b702fd841a", "value": "768:hJeZWmgxe4ECwrc9n97cKhdyFw4r453KT4yAUOpzv2ZHjgA+bSRbx9q3UELlKCng:iVnCwQ99bz8wjO4xzpDxNSRbkL1B9Ps", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779034, "uuid": "6e903ede-8c49-4b8b-8e9d-14122037c501", "value": 67420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779034, "uuid": "66272074-31ec-4f56-ab46-83868bf0158e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779034, "uuid": "813b49d0-4079-4771-ac48-916dc334f3b7", "value": "windy.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e37f5d6-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777120, "uuid": "9db4acff-c9d2-481c-8d19-5fda5cbcb0b5", "comment": "Malware payload (Mirai)", "value": "614314f0048962dfddd7cd482e5273b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777120, "uuid": "39b9d30f-2856-4cad-8d2e-0f4b368cf5e0", "comment": "Malware payload (Mirai)", "value": "b57b229ae6f36025bcb69915d8293ee36851999db1346b0870a8f90b21509880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777120, "uuid": "565fd52c-f838-4e0d-8789-de499e750fb7", "comment": "Malware payload (Mirai)", "value": "3164382d324e25c51335c824ca7965cf2331ccd1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777120, "uuid": "b08aac48-9282-48bb-b4e2-afbe58ef2a6f", "comment": "Malware payload (Mirai)", "value": "80212fd5663723bf40379d467352ffce04173347fdd138b95d3c82380adc427d2f636230f0c43f2785aef57c1cedece6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777120, "uuid": "c9feaf00-8274-40c7-8081-0393103d993c", "value": "T113144A02771C0947D2562EF4363F27E183EFC9A224E4FA45754F9A868271E37198AECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777120, "uuid": "29484ac6-2139-4708-a09f-7f43033749e7", "value": "3072:DaAdIhf7tDcS7vxrBXk1GbI2xZzlwi6hh1dBUJ:GOIpx7xtXk1oI0tlG2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777120, "uuid": "0f6b37ce-5cec-4544-b1ae-71fce65ed895", "value": 199712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777120, "uuid": "eacbaaf5-7015-42b4-8411-45ac18854052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777120, "uuid": "bab22522-766e-45d1-a632-b94a4cda17fd", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00defd4b-e254-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766751086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751086, "uuid": "b96ce91d-8521-418e-8653-0aaa9296be2b", "comment": "Malware payload (Mirai)", "value": "fdca48649bb51678a3bef77090f17156", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751086, "uuid": "82d2f5b5-9f49-4631-9e5c-1d96a03917c5", "comment": "Malware payload (Mirai)", "value": "b5b681880cbda082da1fb307d77c9497a16a27667008823be21f1cc7213b7ad8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751086, "uuid": "4f84d9bf-25e8-40f0-94f1-f20ba80f24b4", "comment": "Malware payload (Mirai)", "value": "83b11da0ae85d900afc141086cf15385d713da7b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766751086, "uuid": "cf1b682e-c2fb-4837-a9ec-2443b314d99d", "comment": "Malware payload (Mirai)", "value": "ba5ff3fa8789ec96e94d708d70ed41d79eb17fb1abc2f20815a86801cbbd8a0d1a5cd94e7915a697b259a30ca9fc7908", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751086, "uuid": "259e97fb-00bb-4ab8-8416-03772d6876fb", "value": "T1ACF31A41BC505F62C6E523BBFB5E428D371553A8D2EF72078D226F243BCA95B0E76242", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751086, "uuid": "0025ebe5-9a69-478a-895a-bf7f05a204ad", "value": "3072:6qu02rqIU3s2OzkSkEV4vlJpjNVIK/H4i4Gs2mHJvuf70LmQd:6qJjNTv4i4GsfHJGz0L7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766751086, "uuid": "8ade09fd-3af0-4e78-a422-85331df37897", "value": 170380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766751086, "uuid": "6e59fe56-ed12-434c-901e-2b6a5a342b11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766751086, "uuid": "7360c555-4496-4d6f-b132-96eac7bce155", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949b2455-e1f4-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710102, "uuid": "a58e2bf9-ba56-4917-834f-ff1edfe3e58e", "comment": "Malware payload (Mirai)", "value": "6bcf2877af5fc46e6e6432a80cb78336", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710102, "uuid": "caf11195-d40b-4e80-a0b5-c909891799eb", "comment": "Malware payload (Mirai)", "value": "b5f9628a530386150bf5c4b853f3733b6b86d0f7a4bc7c80e3407b54ae14aec3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710102, "uuid": "6f34a541-7a05-49eb-98f6-45cf6729fb86", "comment": "Malware payload (Mirai)", "value": "70be74ac67f14960b62c6cf98afba99499b81ae7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710102, "uuid": "9ee8b293-b47c-4b69-9afc-da281d540896", "comment": "Malware payload (Mirai)", "value": "f2e4b82e48256662635831d16fa2dcd4983a273f6653d6d278eb51ad8d8ee2e5f210296176e664ce171b9349443440a2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710102, "uuid": "d2c02491-bf3d-4d0b-8ead-b5dfd389c8f1", "value": "T178533BC86903DAB4EC155131E47AFB3A47BBF53F0029EE8FC7948562D4A3952A6123DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710102, "uuid": "c4108198-715f-4b42-84f3-12ac1beebb44", "value": "1536:8bL12abzth+V7h49Xc5uYaAyKN/uBv+lsPCHsNEvdr3myhc/CrQld7:8bL12abzth+V7h49Xc5z/uBv+lsqHsNv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710102, "uuid": "60843e8a-8529-4ac6-a3a0-cafe985fa860", "value": 62340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710102, "uuid": "ea82a755-a298-4b38-883e-689c0eaa0304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710102, "uuid": "8e3b84fa-2715-4db3-bce6-cb89d22f1c56", "value": "shadow.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d01eff8-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778836, "uuid": "30cc0566-9d13-4b71-8d4e-42af9baf0574", "comment": "Malware payload (Mirai)", "value": "261631dffedb8b8c0d7197b55ae28bb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778836, "uuid": "a275ff4b-e56a-459b-823e-89963d439d52", "comment": "Malware payload (Mirai)", "value": "b61252cfaa435d6261cb339cd57c2d1912bb0e9cbe1e2e2b3532f4458f3b2c5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778836, "uuid": "b4f4fc76-72ad-4ac7-bfe1-d944bd51ca10", "comment": "Malware payload (Mirai)", "value": "8ae2174e510615572ed951755576ef6be3525799", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778836, "uuid": "fa01a8c7-e585-4c72-825c-7472a9f38e6f", "comment": "Malware payload (Mirai)", "value": "25c038d72ef8bd1bfff9f3057540db9ee535f1f6fd4c1891560d295aa8b123c94127db286436390fe1586aacae09030d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778836, "uuid": "79e59b60-df6e-4194-a7de-ee6f901b5eaf", "value": "T1B15302D16840E5F3C31907BF65A4E847FF651BBC75DA306A26799348A092C8878E7BC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778836, "uuid": "0e74478d-aab3-4ba2-852a-1c4a8c5efb2f", "value": "1536:zVQSmwtMJXmejtbpLTM5Tfv83KJ2crl2EWN:zVywt8XZDLgTX83KHl2EWN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778836, "uuid": "b9cb1d37-83d0-4f41-b85e-86973c75e398", "value": 61844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778836, "uuid": "aebd2d64-eb9b-411b-a265-b09695b5deee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778836, "uuid": "b20b5949-f087-4469-8168-61a44093f7ca", "value": "Space.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa27b921-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775422, "uuid": "c8c626f8-6134-4680-b7eb-ff2a82e102f9", "comment": "Malware payload (Mirai)", "value": "1aed0eac21b614b174e0ad1309f1391d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775422, "uuid": "4a81da30-dd0e-4d1b-9d6a-35e9dd4ef66e", "comment": "Malware payload (Mirai)", "value": "b6993c598df37e0a3b33dd34f0e7823a78226dc7793262ae08b361b38fde5b51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775422, "uuid": "1c5ac6aa-16c0-406b-a4f6-6c59c09d11b4", "comment": "Malware payload (Mirai)", "value": "c66de07798818e3a0048a711332f29874dbad9cd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775422, "uuid": "fd3c4fe6-60ab-4832-b80e-d2474616d892", "comment": "Malware payload (Mirai)", "value": "03c1b04cd63335ce0ee0e2a601d18b332db63d4dc52fef848293baf4aaaa7364e54f15a7349f0704c2c1d3b3a1181ec0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775422, "uuid": "bcbd7940-ec4d-482f-ba85-739596b6f23a", "value": "T13704BEA3B70B18C5CC6406F80BCB5B9D6E2321135D67D6E3AC6E36396E364CE16123E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775422, "uuid": "dc0ddf29-1e78-4aab-90bd-10a20a312f3e", "value": "3072:VxK5i8NeNuJWcKD605Hv9MDGRq9Uu6S7wqfScQMp/8Lu8gUCbTA/NWub01pCq:/K/42SDd5HipUGwq6qELJCbTAQCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775422, "uuid": "5ffb52b3-14a5-4525-af30-a37bcdb96f9a", "value": 190264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775422, "uuid": "455f275a-039f-42cc-8063-1653ad3975dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775422, "uuid": "042a44b6-58fa-42bb-b55b-973e63eb069a", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23770499-e1f1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708624, "uuid": "21be94c7-f88c-4c74-9f93-079c6bdaa7df", "comment": "Malware payload (Mirai)", "value": "c79a1dba4d95cba65400ea502b3136a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708624, "uuid": "066789b0-f1c8-4df4-b599-d9aade5b730b", "comment": "Malware payload (Mirai)", "value": "b74748619291b4aa90ce98217c662909621e1be17ffc6dc4056c25edfd9093c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708624, "uuid": "8461ac5b-7517-4216-a39f-7083a2723355", "comment": "Malware payload (Mirai)", "value": "efb203ef496fc2c960e3f1c3fa3210b218e5aa73", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708624, "uuid": "ecf10152-261d-4fd3-ac21-af1075f675bc", "comment": "Malware payload (Mirai)", "value": "d86901fd0cde404f627b887ab916182cd96517d0da2e8a3eeff0dab53fcb9238d3cd982224c3e733990c156af42de902", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708624, "uuid": "e3235866-380f-438b-910a-938208a847e9", "value": "T10543F986F991DA12C6D4657BFF5F82DD331643A9D1EF73039918AB64368B82B0E3B440", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708624, "uuid": "355fe0d9-297f-45b7-a3b7-2edeb4ac1da8", "value": "1536:kOIwkxoOpQJeAxsRjg4VycJn2fvk3++5T2bVR:v7tJeAxwg4F2fs3t5T2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708624, "uuid": "dd1533b6-a956-43e3-8086-49195e12cd3e", "value": 59232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708624, "uuid": "b2cd99a0-72cc-4efd-b787-12dd6838b37c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708624, "uuid": "9baa834a-b12f-45d6-8556-9f12738365ba", "value": "nabarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16286b77-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779039, "uuid": "e53dc229-869b-470b-89fc-5f9483b3016f", "comment": "Malware payload (Mirai)", "value": "413854a52749c914c2ac55c169da0116", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779039, "uuid": "df8d73b7-c156-4b24-8389-f3faafd3ad1f", "comment": "Malware payload (Mirai)", "value": "b786ac235d86fe82ed1faa420ef61a8470c1fba32dcbe62378cc5810c37041a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779039, "uuid": "b21aa45b-9d23-47ce-aa6b-4e439d0a0efc", "comment": "Malware payload (Mirai)", "value": "9ba02a74bf72faaec517434934d382b1f9e28f82", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779039, "uuid": "cb17635d-6ddc-4e08-9633-0f83091ac87c", "comment": "Malware payload (Mirai)", "value": "902fb3b5c9a3f5568c4aba9e100a734f558ca8af526d12327f2f0a284c1024f6b821e34660984348a828ff384e4697b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779039, "uuid": "eb4679cc-8002-46da-b22b-d3d77cbe1324", "value": "T17D13E12493723D65C3F098B38E5ACB8DB69B62A9D1FFD11B527ADB7C788F10169B0440", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779039, "uuid": "b2586090-84c0-44d6-ab77-da8da31229b0", "value": "768:bC+f+A0quhSTpjZASb0VX7UJd42X8I+ulp9zMQ0KVKDs3Uozj:h8ATpjZACaX7UJm+PrKuzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779039, "uuid": "81541be0-4c2d-4f91-90b1-9e502a038d98", "value": 41628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779039, "uuid": "b40321a8-7ddc-447e-8e5d-af88082636c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779039, "uuid": "a6b3d997-565f-4a83-a362-4e4bd59eba9a", "value": "windy.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19ea4e98-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779046, "uuid": "4f9ae105-aaba-4b66-9705-cebf45b12a8d", "comment": "Malware payload (Mirai)", "value": "3b8cc538871a2fd438b24e9d9a7fb05f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779046, "uuid": "d02f9719-fd41-4ce3-8e3e-8f37fec45ffc", "comment": "Malware payload (Mirai)", "value": "b85358b80802f914a3f3c3b1d262f76aec29327cea737f5563967feaab1d572c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779046, "uuid": "b59c6f83-b0b0-4b74-b513-830fd7b37251", "comment": "Malware payload (Mirai)", "value": "3d1e3a6e812c4a3e2cb638065a259df824dcaacb", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779046, "uuid": "66001e87-c788-49fb-bc30-acf1bf178154", "comment": "Malware payload (Mirai)", "value": "63b5d7bfe956fd961288ea9c6b2bb72719a81b488993e4c187fde4054513267eb601e410052edf071b76ae19ef9e67f0", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779046, "uuid": "422f893a-6db4-4605-8e55-dd06971d94b2", "value": "T1406117DA208612B13C759F3762BD5A287183D0B618DF3F16D6ED38EC8AACD56F440B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779046, "uuid": "f0c6079c-3a82-4901-93d1-6370cfebe00a", "value": "24:ItCxEsCUvCLlCMTTCKqsCmDC7b7nJClBLCWR1LC9b9NIAksCUHCAb3Cf1LCPh3Cr:imvsbtpG3JG1L6Jf93kLGxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779046, "uuid": "a93462b1-450f-4304-982f-f4de0ad9c7a8", "value": 3284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779046, "uuid": "d0b1c877-c0e3-4e26-bee2-6d8eaee004f5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779046, "uuid": "8288a404-e00b-499b-8b77-52be6906e124", "value": "1.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e97158a3-e217-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766725277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725277, "uuid": "7742f9b9-1f0c-4660-b5e3-36f388cac37f", "comment": "Malware payload", "value": "7441132fa8c7e2a96a9d3b26a1e85e7e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725277, "uuid": "9719db61-6d3d-4fd5-a8fa-6841b7a325b7", "comment": "Malware payload", "value": "b883c01cdf40db90359f1978e83ded3cdb28bf8f6dfbe82caf810302d2d51396", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725277, "uuid": "1e7e711f-2428-4f95-ad25-36e2fd29aad2", "comment": "Malware payload", "value": "c83f214f861fb16b94e9e521fcb60d30ca640210", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766725277, "uuid": "b701deb8-0226-47c0-978e-097828588e54", "comment": "Malware payload", "value": "c97c556dc21014238e2f260951132c62d544175f24a13f27ed7b6d74d4ae3f7194dd2ab7c423e38bbef691c83124b2c0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Wacatac.C!ml", "colour": "#4F232D", "exportable": true, "hide_tag": false }, { "name": "wacatac", "colour": "#580106", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725277, "uuid": "b41118ee-4c00-4f02-9a90-c84fe1fb05e5", "value": "T19C152357F64A4CFCDC494AF44E7B5B944BAB3D8E6E0A185E1380520B9C261D1EF28DAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725277, "uuid": "c94d85e2-4141-4d89-911e-e3ee8872dd5d", "value": "1f6d6b8261119bc96407d03811834fd9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725277, "uuid": "63f1d6b9-f2c8-49dc-9fb3-dd0cb298a3d4", "value": "12288:pXp6cUFbaIP1Wt7yOK2TY0gmJb9831GCJIlINp/GPvI:pXp6cCP1Wt7yOR00RJb98Fl00/GPvI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766725277, "uuid": "51602294-40a0-4ab8-bf2c-c0a2be5cf428", "value": 910848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766725277, "uuid": "00cb2101-87ee-48d6-aea4-cf27bcdf6a42", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766725277, "uuid": "8e655042-18ec-427d-8ad7-0ed5513c13b4", "value": "12.25\u540d\u5355.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1deeba36-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767456, "uuid": "b02bf9ba-2f3f-4aaa-b758-aa59c1cbfeb6", "comment": "Malware payload (Mirai)", "value": "5a9bbd4e3791bad85089ffc4d7dc8dfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767456, "uuid": "bf6aa908-e7c7-4546-9c22-cbbb3c0fb578", "comment": "Malware payload (Mirai)", "value": "b89cc6d48fbb2087d2868c64f99a4da4e424777929e6b67500f47c2b0f8f2544", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767456, "uuid": "a21ed052-719b-4a32-81e7-5527ccf8813e", "comment": "Malware payload (Mirai)", "value": "b81a8e18c3727271ffa8edc6ac1c58c348c328ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767456, "uuid": "cbe6d34a-80af-4293-b4dd-eee8ef21014b", "comment": "Malware payload (Mirai)", "value": "4e7ae4c34e9efce9e9897a6a76725da3e42fc2ee8f39bf23554e6fff6d94f0fe8fbc337a31625aabd2220d8145a7b8d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767456, "uuid": "75fb2fea-1e91-4883-8c81-7c5e89c8d987", "value": "T1147339D6F400DD7DF80ED77B44A34A06B630A79146831F3A6797BA67FD721A40862EC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767456, "uuid": "5e69186f-93d0-4d9a-a0f2-2f0925863df2", "value": "1536:fxIPCd7VdAypsie884++Iu+IVU6uFbTqeecIMh3tjOBXyt:fxIqxrpsieykNmUnFvnh3tact", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767456, "uuid": "29fe36df-231b-412c-8468-1e405cd1bfb4", "value": 79012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767456, "uuid": "55c841e4-796c-4273-a4fb-4cd49c8a68c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767456, "uuid": "1309ce0f-372a-4868-a59a-0875a2600759", "value": "pm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f00db1d6-e292-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766778116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778116, "uuid": "1076cbc1-4354-49dc-ae05-418ad19e5f1c", "comment": "Malware payload", "value": "67717247dc33159d2f72096a0c774263", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778116, "uuid": "0424aeb6-e20c-48b2-83f0-6edbbe628921", "comment": "Malware payload", "value": "b98b2b73d96b43a2b641166782176a910a7ca8d3248ef19a6d45031b07af0d97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778116, "uuid": "5764b59d-3dd7-49d8-8c9e-5f88c1cc5abc", "comment": "Malware payload", "value": "8cc819f20e2534aabc0d91e1cfd9e1ffaed1f356", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778116, "uuid": "033fc8fd-193b-4675-9d0b-650133553c3e", "comment": "Malware payload", "value": "253cc9f39dbf2b87ad3b624eb3e0f99f783ee3470244b594865811665c5fce8c2f286e7619cd35bccd243971634f7351", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778116, "uuid": "cb0eb1d5-8f01-439d-b405-988c64dccb8f", "value": "T1ADB533D01B31996E614A793A8C438ABE041669C544CF3F7D83346A2FEE51DB22ADF077", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778116, "uuid": "c25b899d-16a4-48cc-958f-15bf644caf23", "value": "49152:x7GUmCwEMucw9dFyrSVLs8d+CQ+By+D0ckDTD+xGRnL7Ko:xtwkcwvxVBs/+BX0DLL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778116, "uuid": "af3a814e-03f9-4e68-a390-a3c69a0d157e", "value": 2297565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778116, "uuid": "f10ddc69-0179-49f0-aa3a-59b2dd37b36c", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778116, "uuid": "8c41dd69-b398-4c0b-9d68-84605333331a", "value": "bot", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd2355d5-e291-11f0-a129-42010a9c0007", "comment": "Malware payload (DCRat)", "timestamp": 1766777709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777709, "uuid": "81131589-1fc0-44c4-ae15-a5d7309a9ed7", "comment": "Malware payload (DCRat)", "value": "9bf98c7e972629ad86acf1a9ca81476f", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777709, "uuid": "1afc67c7-6daa-4192-a3dd-0a4ad382abbe", "comment": "Malware payload (DCRat)", "value": "ba904c09c28431e33637325b8fbc5119100efb93bfb7336287bb0c794116ca41", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777709, "uuid": "1b142e99-4388-4e11-a7bb-def6c8a60e1a", "comment": "Malware payload (DCRat)", "value": "a1c3e971e575bc91b5f60df6eed2864e42e6905d", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777709, "uuid": "6a02acf7-01f6-4099-87d1-dd1b4ba50fb2", "comment": "Malware payload (DCRat)", "value": "73cb845798196362f8abd58b29a2878b22f18ea4d56d18914ba18273d2216234f383c2a0d138bd2659f9c5a41e12a58e", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777709, "uuid": "d00f7d08-1164-4362-bf2d-9e2ce9cf027a", "value": "T15F4549027E44CE11F0192633D2EF45044BB4AC516AA6E72B7EBA37AE55123937D0DACF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777709, "uuid": "04639f2d-cd1e-44b1-8dc7-70d634753331", "value": "fcf1390e9ce472c7270447fc5c61a0c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777709, "uuid": "1859707f-7855-4d0b-9187-bc6b2c7c382b", "value": "24576:U2G/nvxW3Ww0tidThst/I/KZxdUhQJY2f02tO87:UbA30iNhsnwm2c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777709, "uuid": "bc491626-6f72-4338-8b0b-d2826ae2c79b", "value": 1165591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777709, "uuid": "9d6f62ef-b147-4c56-a7b9-48b4cf22f3ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777709, "uuid": "4e10026f-ce4b-4d0b-8c73-191a1eeb5070", "value": "DCRatBuild.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461117c7-e20f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766721567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766721567, "uuid": "9a33d288-a20a-459f-802e-2be6e90892a0", "comment": "Malware payload", "value": "8da5b72b02e16922074dcdc186fddee4", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766721567, "uuid": "7a9b45e8-0121-4593-a1b5-984965a9b570", "comment": "Malware payload", "value": "bb51d9cc8679f813e8ff475a6861fbbcad8b42ffcc2bbc0a82ad2a9365f368a0", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766721567, "uuid": "052a5f69-9c72-480c-beff-f954178de272", "comment": "Malware payload", "value": "a792d8f91e863d7485257217e04f14dd27e76d3b", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766721567, "uuid": "b2e9fa37-7f0d-4d3f-ae7e-999cc0ef1dec", "comment": "Malware payload", "value": "2aa2c8c4501ed134b311ded6e5ceaf2047ecc1059f3770fa3eb63dcde494a3e400e81eae7a41aff580a1b0197cbc57c7", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766721567, "uuid": "2d28e5de-d8cd-4206-a524-b39e7fc91dd0", "value": "T1D4D6224AFB1CA42FC8FBA0364DBA1261025B6C565943E7537908721CBAF76848F5EFC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766721567, "uuid": "d8625e7b-452e-4ad8-94f0-8c794801f0fd", "value": "196608:/leRKAvZsohizx8nAHeFygtKmOMXkwXiJtomc4u4NwVOIdOcg/P7CC9Iu7ZmkyR:N4ZsgizxWNFKmbXiHpjqtgF9Io8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766721567, "uuid": "623f295d-3e89-4cfc-b3a2-770940aed500", "value": 13054389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766721567, "uuid": "ae3584a4-23a0-40be-8276-612d36e928ec", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766721567, "uuid": "7239e1f0-0d00-43b6-9ac9-712976aebf77", "value": "Phone+File+Cleaner_1.0.2.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8dbf04f-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747556, "uuid": "7b6a1ea5-5a09-4911-849e-5930885dd67c", "comment": "Malware payload", "value": "d6c28afa77769afde9f87f78587a48d9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747556, "uuid": "c7bf7f42-9e69-4418-b92a-1276843a2674", "comment": "Malware payload", "value": "bb625512c1795587c91b9f35a055efb114d96e21c93b85b4a7587fe0b6cd3951", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747556, "uuid": "e8f98280-f49a-423a-93c4-b91e282ba94d", "comment": "Malware payload", "value": "7821078cdb12e5e698182afff87eeb30d2350f1f", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747556, "uuid": "ebc735ff-7921-41e2-9e8f-b2ebb0d3a7da", "comment": "Malware payload", "value": "9294111ac188728628c30bac3910a7faf3e717659fa7053245efced498c600526c29e9f160e0bc6084f6610bf654b255", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747556, "uuid": "8515b815-372d-4520-a801-e8fe35d4d1c3", "value": "T117632B024972A647627A150CB4E0B43EEFEB4B010AF0414DD5B6B4BF3466F592B6C7BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747556, "uuid": "9d502bd8-e768-4182-a2fc-bc8eb5815ee7", "value": "1536:I9l/AoSSMGvi2hlvTyznZ0MUfwUFCoQ+xx+6m0i2gK7R22G/0mF/w35hg2mn2PCm:I9l/5MGvi2hlvTyznZ0MUfwUFCoQ+xxN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747556, "uuid": "0cb97798-9519-4109-90e5-587081a79825", "value": 71538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747556, "uuid": "ca2ec09b-8b3a-48e6-bc50-5691a772b696", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747556, "uuid": "65776d13-a304-45fc-8054-22e7b6cdc81c", "value": "invoice-1645080830.pdf (12).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eceacc58-e26f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766763079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763079, "uuid": "45fa4c56-27ea-4ad3-b3d4-6ee170fe3c6f", "comment": "Malware payload (Mirai)", "value": "1c1a275e7e1a412beaf46d434bc4a60b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763079, "uuid": "e519d976-346f-4537-97cf-f6d1f4be664c", "comment": "Malware payload (Mirai)", "value": "bbaa84552024947e564f7bbfc10098a02ddc4590e9036bf3c46d74dd9b10d98e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763079, "uuid": "bf3114e2-77cc-4cf7-a0b5-66c304d90036", "comment": "Malware payload (Mirai)", "value": "bf81bbb0627257d78a9871fd68a0b09818be8083", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766763079, "uuid": "6b338841-fecb-4c6b-bd9f-c5a9f0988f91", "comment": "Malware payload (Mirai)", "value": "29a656b98bf8b7e291356b7cbd06a5f51aa7e2e51a81126fbef256e25e6421f9e6f667a7ec46d30865d454c369697bdc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763079, "uuid": "e1968fb8-2b87-419d-a1dd-8b88da12a122", "value": "T12D239F36D4BE5D64C85892B4BA318E785B13F404D3572EFB9A8584B04043EACF769BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763079, "uuid": "b6aab7e9-9ac7-4f4b-a333-dced166aec8c", "value": "768:FmauSJOyi3eHx4FbyqT0HwV5EMqIGp3gBjUZCzjoAw/sCpWTC:oauSJNHGNHTbqFZgJUZ20jsCpWTC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766763079, "uuid": "b00c925c-e777-4272-8514-4e8d83fbd816", "value": 47172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766763079, "uuid": "4663dd60-74a4-4c90-9b25-b01f2909f90a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766763079, "uuid": "7028ef18-441d-4de3-86ce-716b2883e312", "value": "zersh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d351d46b-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729965, "uuid": "8f26ef4e-711a-4602-9c25-5f3bbd7aefa1", "comment": "Malware payload (Mirai)", "value": "03b523191c470cf07a1c665cbe1f3aa3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729965, "uuid": "c6ff8ddc-5d7a-4fd8-850e-3d855775770b", "comment": "Malware payload (Mirai)", "value": "bbbce88e197180d7e852dc60a80be0aed20bd1ddd9a1a1f61ad345989440ed29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729965, "uuid": "d2fbd739-38f7-4257-b4fe-e80c5a8066c2", "comment": "Malware payload (Mirai)", "value": "cb9276d322a80f17452abc97361e1192a3538c5f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729965, "uuid": "3dd3351f-2fa5-4cc4-91aa-d072b76a54d1", "comment": "Malware payload (Mirai)", "value": "f773cacfa7637a7210bbffd869fc40c7579db8330c1dd1792c4d8840b6f268a9b63e18ff651bd5c776896cc9e67cf3c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729965, "uuid": "51413078-e667-4431-9519-59bc8e96c7a5", "value": "T12A244AC7F800DDBDF80BE6B744530919B530B7A210935A337257BD67ED3A0A94A27E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729965, "uuid": "b3b277b6-ded2-4530-b4a6-e13cf7679682", "value": "3072:NuhPjbZIgOyt0CBU5yUHdkymNyXSlkXyi5/KAZOzCVbjbilLgi2guh/FNt0:Yjbkyuv2ymEXSlEyb2Oz/LxVIt0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729965, "uuid": "83298b11-e284-4c2f-b952-28e91b64dab3", "value": 216832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729965, "uuid": "508f7386-cdac-4e87-8c23-dac48c9bf27e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729965, "uuid": "86c753bb-4ac1-4feb-ae85-45f3796c1b3b", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24201d41-e1f1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708625, "uuid": "f1bb3973-1795-4cb3-accf-cdcc5d834bcc", "comment": "Malware payload (Mirai)", "value": "f70c3c8a046aa8b18ef36058d5555e4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708625, "uuid": "2ed9cf8f-84fc-4021-8cc1-b395fa81394b", "comment": "Malware payload (Mirai)", "value": "bbcfb0a4701b045c87ba4d54a4f4178ec429119d796db92a96d0650c6dbeb3ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708625, "uuid": "7bf348cf-10cd-40ac-a93c-8fa04ed4d59b", "comment": "Malware payload (Mirai)", "value": "9de969adc8de1662fdf43adb471aa1332cea2bb3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708625, "uuid": "5b533a35-5cd6-4aac-9352-237c76dbfc0d", "comment": "Malware payload (Mirai)", "value": "45ea056f0a1070cea85d4436c5d45173717525831e47f888dd982e734fa33f54e2a5ece2c084dadb0b17a14c887128ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708625, "uuid": "34233ee5-6c03-447d-a6f0-12f3144d1efb", "value": "T1FC833C86A401DD7CFC4AD2BB84170F12F62477525F620F27B26AFDA369710998F29DC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708625, "uuid": "9a7524e9-3dcf-4960-a359-3c2fe442fa3a", "value": "1536:EZZFRLcUbMEGDgKaZLz+pMbmIXK//u9H/A8QbO6PhkXMziu22FAr0azETPB:EZZPVMEVHdyNrnuRaOxXM2u22FM0U8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708625, "uuid": "f149c054-1e76-4405-b138-3b12c3992d17", "value": 83692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708625, "uuid": "89ef4ac8-bd98-418c-9dfd-fc72ccb6185d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708625, "uuid": "e23789fe-1dcf-4862-bfde-034b026d840a", "value": "splm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b04ebf-e25b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766754232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754232, "uuid": "9ab8ecb1-42ce-468d-a15a-29660acf0d50", "comment": "Malware payload", "value": "84a254d7fe0701dff7b588a32cff344b", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754232, "uuid": "03ea6bd4-ab00-4bd0-937e-00209e4a6987", "comment": "Malware payload", "value": "bcbc71e3e09825109e11e133b94a5cf48b3289f7d868bad21975234472e30997", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754232, "uuid": "d95d4186-413a-4c6d-8bf4-cedd7fa75caa", "comment": "Malware payload", "value": "de1b3a7192ce433550f4d8fde6c6bda80ae5031e", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754232, "uuid": "3be27e46-dbf9-43b0-b4c5-d98a8108c5ae", "comment": "Malware payload", "value": "b2113a60286d8db3131a01ada9a951c4a7c899a2781ce5933037022b62449acac9267b969234eddc573136a31c51e9c8", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754232, "uuid": "5d74dcbd-e478-4fea-a0b3-7f8b1e2db114", "value": "T1CBD533281478051F8F6B606AC4FD5B68B4ECD4CE36A0EE9DA73619FB1363694BE0345C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754232, "uuid": "19122313-62a3-4d50-beaa-7e63fc76c017", "value": "49152:EOJlLMWEGWuITQTS3oX5RVe5f3zua0AYq8o/81F3AjtCkQI67zeoHobE/fHr6wrL:NlLhbITQ5XU5fD7Yi04jtCkmeoHLfHjv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754232, "uuid": "e7e9df29-d3cc-4a66-80ed-b07135a3ffe4", "value": 2750992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754232, "uuid": "edcebdc1-f973-46fa-b240-a8e4f33144c3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754232, "uuid": "33b4723b-303a-4265-8506-5204a5572fb1", "value": "FPS_BOOSTER.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3c0accc-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747575, "uuid": "e11c7576-ff5c-4ee2-9d86-4bf197112d8c", "comment": "Malware payload", "value": "594512416acb62b61d0a8a134fdb5017", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747575, "uuid": "788d419b-0f32-4bc6-b38e-6e07061b1294", "comment": "Malware payload", "value": "bce65b4e682fa8ed16448f9818a28e9bda5d34a9c60ef4ac5968cf922026a9af", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747575, "uuid": "f91c6638-bf2d-4ecc-950b-46914d5131c4", "comment": "Malware payload", "value": "07884bdfca94c3d2cf00b02e7f52c86874196008", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747575, "uuid": "e264e306-6fb4-4481-827d-9025b831976b", "comment": "Malware payload", "value": "4554b691a764b94695f4938491cc152f21657f3e44bfe5e02658445465fdd3da37cb86ef1aa2fe3e345a4e5fadc0c2f6", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747575, "uuid": "7b302287-0877-4fd3-82ee-bebb10313f00", "value": "T15F63F7CA87B0C08707BFA8D59C7F40D7625F6620B9DE4BF127DC1E922A5E9A6425C4C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747575, "uuid": "74799048-92e2-4654-95cf-567fe3e83503", "value": "768:I8w/h62/jWs6oS+xISN0vqIVmn++fLxAsldkfScBYrwz2y8kTAlGB:I9l/AoSSMlIusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747575, "uuid": "d109a3d6-0bb5-46f6-a812-f0038f6ee787", "value": 70604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747575, "uuid": "9fc1e04e-2ef6-4cee-98f4-97bbfd11cd12", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747575, "uuid": "6639a976-6aa0-48f0-9b43-29a01eb5a3af", "value": "invoice-1645080830.pdf (6).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e907c1b-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766713018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713018, "uuid": "bff14ddd-c463-4708-aab2-6d30b8ba8092", "comment": "Malware payload", "value": "9da7dc0082f168ff4d117028c809244b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713018, "uuid": "9c3acffe-3bf3-436d-a647-e7b379ff5a5a", "comment": "Malware payload", "value": "bd489f04d5a88ac115063cd7854b8c24a67ec9e2fe3a31a6b4f95c912f419d80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713018, "uuid": "17148079-d9a3-463f-a4bf-f4c15e997dca", "comment": "Malware payload", "value": "e5a94dc5c12edaf3d19f759c32141e944ab8a89c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713018, "uuid": "2162eb4e-eb45-420f-b283-72245e8c3d64", "comment": "Malware payload", "value": "3b1327d81db65acda91f801ff9c0c96a9eda87aeafa7dfb08845232da15178845e6f92502b099de650c6aac7ddc22f7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713018, "uuid": "50e570a2-aefe-400d-b274-65d8d3923cea", "value": "T1D8967D46F8D205EAC1FEE5348A9293627A717CA6873077D31F90A67B1A35BD46E3D300", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713018, "uuid": "12af301f-7958-4916-b185-3976611431b3", "value": "98304:smrWeIg7wEXsoFxWGVa5sOqH+7jh6qoG89HdQjGYhfJYetW+nJ:smrWeIqwEXsoFxWGchYH41t7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713018, "uuid": "f7b3726c-495c-4a92-8ca8-45f59ee62b05", "value": 8785108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713018, "uuid": "d3fa6980-5d32-424f-aa27-ad52a9745a2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713018, "uuid": "9f88ff41-223e-46c3-999b-2ab754c2d010", "value": "SecuriteInfo.com.Linux.DDoS.1852.5072.21260", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdf1ddc4-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793172, "uuid": "97760857-3cb6-459e-bedf-66b950dba433", "comment": "Malware payload (Mirai)", "value": "052a6b5ad433b3a4bc9a134512172919", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793172, "uuid": "d0cd9d12-faec-484c-8484-441c1c5e586d", "comment": "Malware payload (Mirai)", "value": "be181a53663e0602c3cb6785c3ff60e0ecda930cb352eaecb5f105b51b8257a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793172, "uuid": "a39a08c0-9f8a-4eae-be74-02e15e73f93f", "comment": "Malware payload (Mirai)", "value": "bc7d23c6632265a1f4574a069a95c72ee40ee34f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793172, "uuid": "6241b681-664b-41de-9b16-9bce62dde7cc", "comment": "Malware payload (Mirai)", "value": "95135da9b974d9d259a5c69c7917160b395fcba3fdad2ad763ea58e4ae92225d4449fa3748719aa4d3f60b25e601c8b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793172, "uuid": "7a53f7b3-e013-4e49-a5b5-2558c28e7726", "value": "T13C735B4273584903E5A759B0293F27E183EFAA5020E4B78AB51F9B5E8676E331047FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793172, "uuid": "083e7675-ef6c-406b-803b-f26523bff86e", "value": "1536:W/CL3WOdoZd9j/WPcJDsq+d2hbzBnZobVRG+:fLNKl7dsPuzoh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793172, "uuid": "dcfda692-496e-4dc0-bb6b-848cc349716f", "value": 75860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793172, "uuid": "34724905-61d5-4817-a077-f7191464ae53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793172, "uuid": "4ca3cb45-56bf-4ee3-9514-8ec1a9dd7256", "value": "splppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae155f80-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712722, "uuid": "c4a13155-c2e8-4eaf-989a-46cbd33774d5", "comment": "Malware payload (Mirai)", "value": "e42dcfed857fe8ced6bdff2cda1a9485", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712722, "uuid": "7f9a62d7-8061-47d6-bde1-3fe2ea9a871e", "comment": "Malware payload (Mirai)", "value": "be30407d04b69f526f71bc7d4267a54c66d4051c36cd848178b1e38e79f3b129", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712722, "uuid": "c234b38e-3e08-4b60-b078-bc0201ccc5c3", "comment": "Malware payload (Mirai)", "value": "7e020be2dce82f6bd92a123fe0ab19f4b143b6e8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712722, "uuid": "f990e270-4e71-4a00-8aa5-b106ab1b7871", "comment": "Malware payload (Mirai)", "value": "85c211982da0e5593cd26fa59a361ae42077bfd2fc54e88aa67212d45fd873619b478ceb26462c4d0932a2d242ffebc3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712722, "uuid": "cff7b85b-9f28-4ee0-be01-fb59d368940b", "value": "T1DDF2E167A08F6A72D3748C76CF7C80D34F86A1BDA1EAE2355220510125D211B5AF5EAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712722, "uuid": "f44eb56b-ded4-4623-b2e3-8772645aaa09", "value": "768:wekU3eBsGB436/p7n4QCDBpZz3e3dsxzUNlRmugk4IM6IKs3UozHH:rkUuBx/Fn4QCV7z3eCxzMl9gklSzHH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712722, "uuid": "49217f20-15b6-4588-ab51-6b0980fb7727", "value": 37276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712722, "uuid": "f0a73608-5246-4aef-92ee-21ef52fdf656", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712722, "uuid": "46d7db7a-71d5-40de-8909-3a4ee98f9b97", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17a346fe-e2aa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766788061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788061, "uuid": "8beecad4-9929-4bea-8210-306b1c421e6f", "comment": "Malware payload (Mirai)", "value": "104f104f0a9f7d8a3775699878a92e7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788061, "uuid": "7a7ee4ff-01ea-4b1b-aa46-af8fa276146a", "comment": "Malware payload (Mirai)", "value": "bf333b9e06487b1b4e13bd809dcf68e3c98fcaf2a9e24bdc8cba2fe6762fd5f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788061, "uuid": "519fb146-f03d-404d-a183-8af7fcd4a24f", "comment": "Malware payload (Mirai)", "value": "8cbb9f9da9d6a6c5db5dadbc9d48399569295d77", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788061, "uuid": "e9035a27-f8f7-4762-adf7-c33a183febe1", "comment": "Malware payload (Mirai)", "value": "81be54212c21fbc5d704f8e5de62f6802e094a9786c3cd0925f2bd27f54f034fe91fdca6d8897703c7ac13e74c5d491f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788061, "uuid": "e58a8f6a-8e56-409d-82ba-32975d040af7", "value": "T1FE731985B9818A23C6D422BBFA6F42DD332653F8D2EF330399159B14778682B0D7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788061, "uuid": "d846ef2c-2a2f-435e-9bc8-995b4a43bd14", "value": "1536:GrBoVMUK3u21gloTlAE4UTzxNHEpCB7zt0XvlpNT0VR:GrBonClAE5zx9EpCBzuXvfNT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788061, "uuid": "5775e666-3e8d-4b89-99a4-302e9225dccd", "value": 74988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788061, "uuid": "68f584d2-4aef-44b5-b4cb-9b86df1a2d9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788061, "uuid": "ebd01fca-43fc-486d-adf8-8cb00bdcd905", "value": "nklarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7536dfab-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773186, "uuid": "0c21cff7-47a0-4612-b83e-c7a54e464bf4", "comment": "Malware payload (Mirai)", "value": "aad6c05c23963d7e1138c79152890d79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773186, "uuid": "444124ad-e74a-4f6d-ab18-3de16245b7ea", "comment": "Malware payload (Mirai)", "value": "bf454a3612c87a464833f09ce172ff574e8cf6d52fe1e603d961d9958c29cde0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773186, "uuid": "884b85a4-1dcc-409b-9821-63b203187af2", "comment": "Malware payload (Mirai)", "value": "5e2cc53be325a38a1fccf35fc486568b65ee2f84", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773186, "uuid": "c9c22f33-3b07-4cb7-9aaf-3856872aad23", "comment": "Malware payload (Mirai)", "value": "c67c95b1708a7bb495350758fee03a149affff8f5ff9273cf44720fdfc4636b370625588b9bc77a4dcf3009cdf4f4050", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773186, "uuid": "a3b621ee-0753-4a85-ba64-9015b743d6cb", "value": "T12EA3E71A6F159F7DF76CC63587B78E21A75833D23AE0C645D26CE9001E6034DA81FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773186, "uuid": "ae65cf1d-0c45-43ba-822f-cc7611fe4084", "value": "1536:3pJnlip+A4kSonGiPcWXrKQ8w+D29+z8iK8yKm0yKKR6xvs8asGOthNBTfT2bVRr:3fls+qlPcWbiw+D29+zbXfGkJTfT2j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773186, "uuid": "a77e0dce-16e9-49c8-85be-2c9c9a1ae42c", "value": 105324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773186, "uuid": "ea686060-3d30-44f4-8248-57be21b13b28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773186, "uuid": "258afa8c-8cff-4fab-91b0-414e76161cb5", "value": "jklmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2852770b-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747287, "uuid": "5258651c-7261-480d-8e11-ac6918fc39c6", "comment": "Malware payload", "value": "56a7f36252478a84669dd6c02658f680", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747287, "uuid": "a57d801e-d0f3-433a-99f3-e5d2dd1d294b", "comment": "Malware payload", "value": "bf9707411fa0b89aa96a484b6896f3c05e5e0619fc7edbde1c45eaff968f1bb2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747287, "uuid": "b7a73205-83bd-4803-ad9b-59f9ae434a34", "comment": "Malware payload", "value": "17e0e168e4085a698eee0b2d2ac2740d640a733e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747287, "uuid": "528f4b37-66b6-498e-9bf4-625e27bf33b7", "comment": "Malware payload", "value": "8a9c18bb98769384dd98265d444c1423aedb5f742ef8e298ecf4307392f4eecd13f1f84ee61fbc81e805c046b5b8497d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747287, "uuid": "1636eecf-6aca-4032-9261-c713ab583408", "value": "T1EB633BC4A40255F9DADE2AD77CBD75ACCB686895F3D8032859582E422C88FE300F67D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747287, "uuid": "950f30c4-8737-46a9-916f-914a16eece24", "value": "768:I8w/h62/jWs6oS+xISN0vH4Ij5Jv3gJpU+HTFkmsyxMol3KI7sG2vO85XFS3FpWE:I9l/AoSSM8yusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747287, "uuid": "19af8cd7-692b-4018-9f11-964146232aff", "value": 72557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747287, "uuid": "610aa396-19fd-4ff0-b3b7-b567991ef166", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747287, "uuid": "af64f257-37a7-40d7-995e-ec9a2e797397", "value": "invoice-1645080830.pdf (61).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d00bfc2-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747322, "uuid": "8c019e5c-2959-4a73-ac38-c10ad9c082b3", "comment": "Malware payload", "value": "3d0d3d0e5712f95e45fd0376f9abb80f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747322, "uuid": "e775567a-295e-4a5e-8042-848284f9941b", "comment": "Malware payload", "value": "bfe1457b41f48fa34dd47f634573f1e295d1d430a15ae03de572adc40392ecf9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747322, "uuid": "3d895b71-c599-48e4-8d65-f8b8f9172a90", "comment": "Malware payload", "value": "3820fe12053acf5d76dcce95e08d5407cb91bbe7", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747322, "uuid": "e0dd2317-9750-4c00-aed4-37856c9fbdbb", "comment": "Malware payload", "value": "7785d11baf128affc1e91623dc0ce2714845d80cc30109d06d1c9e1f565a52fc2c3505f6862caf4e4a17745393349b98", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747322, "uuid": "b003f1d6-b8ea-4e66-814c-6ead065f9bdb", "value": "T1F3730A8E7E4F1DBF6B3B25998E8D3950382F4B594B9A29DFC40DA9054580CC7B4AC2C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747322, "uuid": "57fa7315-fcfe-4b69-8d6d-78a86dc12244", "value": "768:I8w/h62/jWs6oS+xISN0vIUNJ7EdkfScBYrwz2y8kTAlGB:I9l/AoSSMJMusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747322, "uuid": "d6bc97da-0ac0-4290-9278-6cbeae617fb6", "value": 73481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747322, "uuid": "2b45a568-492d-44b0-be23-5941b3ea8ded", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747322, "uuid": "8af5c7b3-c249-4522-912c-5d3ed34f86ad", "value": "invoice-1645080830.pdf (58).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f121ed81-e221-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729585, "uuid": "90b3d1c2-8793-4a1a-8553-021c715dc623", "comment": "Malware payload (Mirai)", "value": "db818b07304d485cd8486fc0c9d8085d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729585, "uuid": "351df5ab-c09f-474c-b861-bce16d80f1be", "comment": "Malware payload (Mirai)", "value": "c047c8faa1e4a6ae2398e78f2ea09fcfc50ca161df14b848857816ddeaacdb5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729585, "uuid": "b792ab89-3863-489d-9663-9b74b9bbd951", "comment": "Malware payload (Mirai)", "value": "604554dd286eb09be2af8b4c1c78c803310c4ae3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729585, "uuid": "31c2c24b-9cd5-4d52-89a2-995c9ddd6185", "comment": "Malware payload (Mirai)", "value": "dadee8152561879635c8d8bd16c56d09c00560f427541ba1e6e0ba954add0117896a90d5417e67aeaad8d9f1ace61615", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729585, "uuid": "476571d3-742a-4c4a-83c1-861c4543da0b", "value": "T135048B73C8655E98C624D5B8B0F5EF791B63911291836FFA69A7C2B18087E8CF1093F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729585, "uuid": "ee850630-9cda-48e9-aaa3-3702c9b1cd91", "value": "3072:lTo4e+hsRhJomXi2ugBpxKSL/Eme1VLW0T+Uw+6hh1Rb:lPhQqmXi2lpxNIfa0lwnb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729585, "uuid": "e63efc43-5fc9-40c0-8e87-8501b27992a1", "value": 179168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729585, "uuid": "391cdccf-de71-432e-950b-1380766a548b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729585, "uuid": "d2f7a223-a43b-496f-b4a9-d96fbcf1ed54", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e70c8e-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733611, "uuid": "3d611ed7-0280-4370-a175-de3c2c813dac", "comment": "Malware payload (Mirai)", "value": "f52ccec1185bf1e20b7cbe8e5d2ed4b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733611, "uuid": "e2401147-4cf2-4cf0-91ed-7897c5c1561c", "comment": "Malware payload (Mirai)", "value": "c05ee431ce3abe70afdbf9710b0ab3864ecdd8de9f8697c077f956a39bdf8217", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733611, "uuid": "7190db5d-a75e-4af9-829c-7e8abd4b173b", "comment": "Malware payload (Mirai)", "value": "0b37a3c595596d0e04c87406e9258bc9159d51d6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733611, "uuid": "b3cf8ff0-4d35-4d8e-9a7a-75cdbf41e55c", "comment": "Malware payload (Mirai)", "value": "83c2e4712fc004da2bdf232d731a0ab7a6a3c472dea999605f399ce7a8cf7e82a78b5267f54fe49abd11b33cfb3922ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733611, "uuid": "8a0a7584-fa57-402a-a5f9-74dc3de71deb", "value": "T1AD343B45FA418A13C4D117BAF9AF414A3332A7A4D3DB730699246FB43B877AF0D67602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733611, "uuid": "4ffeb4f0-c906-43be-9810-0c894f98fb84", "value": "6144:K2zW6KNpXxPbxa8QMTi/mCRrJvxXbWmM/9yejZMBv8:KHZX5bxa8QMTi/j5zCH/IejZMB0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733611, "uuid": "885d5244-0824-4f3d-9902-63b69a13c76d", "value": 233566, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733611, "uuid": "6367c9ae-a92e-4ff1-ab14-6eb928eeb178", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733611, "uuid": "37303610-6e3c-4ba8-830f-55f9ee569109", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5326bc91-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728032, "uuid": "9427c756-4859-4b80-9e95-3b26d7831f29", "comment": "Malware payload (Mirai)", "value": "fb953fbf4ff11c7733d69458eeed1870", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728032, "uuid": "bae9cc9e-e08e-4fd0-99cf-81e82497bd4e", "comment": "Malware payload (Mirai)", "value": "c0b687f52c31dd54841f3aa0f210fe62c19f2d7c93021389702770eb25176982", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728032, "uuid": "c6951646-ccdf-4d03-8df6-8b6339158141", "comment": "Malware payload (Mirai)", "value": "943cf9dd9d394d7e98047376089f69b9d9ad9394", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728032, "uuid": "7601c441-b0d5-42d4-8dde-59b17a2ed84c", "comment": "Malware payload (Mirai)", "value": "0486e8b7d827b26b99b6391a9e0961a9651d79cc99b68cfdaf7ce4c29ec3992db5d35e4319fac58a690f437fc04c236b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728032, "uuid": "6c696133-c76c-4a20-9116-d841b0d43c77", "value": "T104935A23A57C2A1AC1F09073127743A3B1E6265E04A0D79FBDB60E8FFF662D41D2A574", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728032, "uuid": "9b8ec07b-8efc-4a10-a548-f7ad257b3d96", "value": "1536:n54n1h2vZdIXLVVTUPFhLKdPi/++dppW0uTCBLOWIymQY2AUYci5hh1B7:54n3sYJa++Xp8C3qhh1B7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728032, "uuid": "b66f1aa5-d35e-4f23-a612-6cbdefb8c18f", "value": 92764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728032, "uuid": "7e041c88-91b1-4fed-8d6c-e43a47e6d1ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728032, "uuid": "ee05e4d7-8b5f-4d0c-93dc-1313571ff1a3", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0be4bf62-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747239, "uuid": "64a032e1-e08b-4890-85b7-6bad73998902", "comment": "Malware payload", "value": "0f4b7e1380f5cb9b360405af1195f88e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747239, "uuid": "19bb15df-defc-410e-aec0-9c3dcaa2471a", "comment": "Malware payload", "value": "c135d706f53931c3e4a0186b06fc8f91e5d5191e7f4f0855d49bd809f8a643af", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747239, "uuid": "22df1579-73ec-4d7c-a63d-b5b92b7d5b55", "comment": "Malware payload", "value": "ad2c12d62dfbeb3e8f46e2f2ad467631b5cd1071", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747239, "uuid": "64cd3f04-ab52-470b-9b78-ae1abebd204f", "comment": "Malware payload", "value": "7623dd60e285bc65917807b56d90e249f60dfcad0faa355ba67ed22162970de86d052b6eb20e0c96a51c47311cbaad9f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747239, "uuid": "c9f45ce2-1699-43d2-8468-e285ae839e7d", "value": "T16D634C9BF2CB5DF74EA6B4E97F68066C6A804CD36C88612D34D7F41562643063E24CBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747239, "uuid": "e2a47a0e-5a92-4217-ac69-a30cf6e420e6", "value": "1536:I9l/AoSSMRZxEdZxElZxEEZxEuZxEzZxEGZxEyZxEAZxE1ZxEQZxE7ZxELZxEbZs:I9l/5MDCfCXCMCeCVCmCyCoCnC4CNCdx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747239, "uuid": "2af0319b-e3c4-4ecd-90fd-61863b51421b", "value": 72470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747239, "uuid": "4b39ea61-25cb-48d9-b274-c4c726c98934", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747239, "uuid": "92aa0628-9332-4ddb-9d71-ff8862e5bff4", "value": "invoice-1645080830.pdf (72).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bb23260-e2a9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766787639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787639, "uuid": "96092e31-135b-4f0d-9eaf-5bdb0497892f", "comment": "Malware payload (Mirai)", "value": "7e512012ab913f49f03da2cccda64dcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787639, "uuid": "170d6ecf-440b-446b-9a5b-ae75fa25da42", "comment": "Malware payload (Mirai)", "value": "c16137f86d8c26a5eaef1a01f7a231e4124177401b2f4b9687f2082265097b98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787639, "uuid": "886fc966-8b52-482a-b4c3-99351249edf1", "comment": "Malware payload (Mirai)", "value": "601a0f97df73eda2243917c3ceca0f99cab0d496", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787639, "uuid": "d6044b76-d3b6-4568-a5ad-06cbc1a5f358", "comment": "Malware payload (Mirai)", "value": "38c4344be4285cbb7d77b4cac2ded994d9698fc6c5d4d76dab29c15aaf0958cd77a62bbda4add2dee8ca75a9d80d398d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787639, "uuid": "bc7ea796-5271-4264-bccf-16c5c01cb156", "value": "T1037312F6E46F5931CCB01B30FB9401AB11B533A5E309B467469EE94C2697E1AE453BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787639, "uuid": "7dcc3e4f-083b-40ef-8736-d7bd49b203ab", "value": "1536:AfomCPaO+Vt4abJmvsBTsYgTYkF/lyDLJB1Yu3y/uywAFD2GL+:uomCPHcthYvsBTsY4YkDyvJBn34FdFaP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766787639, "uuid": "f2354853-b3e5-4315-892c-37b106ed0609", "value": 77504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766787639, "uuid": "b6f4f2f2-1619-418b-baff-7d1f172e7c77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787639, "uuid": "27b13207-3479-492f-a630-c7c8cd55e134", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b75ba00-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747427, "uuid": "6dbbda04-30de-4267-8fcd-8f8b402cb8be", "comment": "Malware payload", "value": "ee7e3aaa488f1bf9fff267431c1e7d44", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747427, "uuid": "08171ae2-493a-470f-814b-5bc7f73c4245", "comment": "Malware payload", "value": "c1934c0b11a22e2f857b4818571ce2351a9af1497f28e0be5c025e98fa2b1383", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747427, "uuid": "b8d9c62f-9114-4662-9b16-346e993f3cce", "comment": "Malware payload", "value": "1f70bbebc3e044905e08f174250943b49ab6f4e5", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747427, "uuid": "79315ccb-858d-4c08-b387-2a88baf5d1b9", "comment": "Malware payload", "value": "bd5fddd98757f2389a55500a837d0ea66046f4ce438b8a14218e80e56c9f0d03d325b58248caf1725d31cd3a678b1bc8", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747427, "uuid": "906893f3-4818-4dd3-857c-ee1f6b52be81", "value": "T14C734AFF23D167CE28AA3C1DFD12904ABC245C191A8204D1E0ADDD54A4D9FB659E3AFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747427, "uuid": "d83e44a6-042e-4473-a19c-d9e8c4383105", "value": "1536:I9l/AoSSMZg4/xFFhVVBk9i/IcDZuABxuyaUFJ2fxdjujpgDv5wo5duT42AMl8AL:I9l/5M3ousriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747427, "uuid": "b1b74c71-293b-47b0-9891-aeba007592f8", "value": 73497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747427, "uuid": "cdc2e4a5-ac33-4779-bc82-f5764f1d261d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747427, "uuid": "20bbd668-6b90-48a5-b4b8-47e07a58f27d", "value": "invoice-1645080830.pdf (30).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "814e6612-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711788, "uuid": "dfbc67fe-e008-41fe-a916-3abb708f4020", "comment": "Malware payload (Mirai)", "value": "5dabfd49a6c685d7b6cb20b27bd6802f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711788, "uuid": "f87839ab-8601-43e6-b372-1b3f24489ac0", "comment": "Malware payload (Mirai)", "value": "c1a7536f588ad3a1b51e7411e552d9df38419e8e624a6b835aecee8de9e39a62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711788, "uuid": "94fd663a-800c-4515-be69-02529a2b3a2d", "comment": "Malware payload (Mirai)", "value": "b7f5d7ce5589d8b48bf38f6092d3e7659471a4d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711788, "uuid": "056ec962-8f77-4dca-a6a9-4d3e8b2859cc", "comment": "Malware payload (Mirai)", "value": "55466442ee3fb337f3db69e54f1d22651b6b786ae4c30ab1b1279c69060daa6ea691f493b54896850fd93bfe033120e4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711788, "uuid": "e9f0c862-6dfc-4436-b07d-c2a5d1b935f1", "value": "T10444F70AAF610EFBE8AFDD3702EA1B4124CD651721A83B757674D518F10A64F1AE3CB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711788, "uuid": "f86dcf66-ef5a-4624-8d1d-1c69492654f4", "value": "3072:tcTfud69KdnkfSMKJlBqc7HFbk9le/Zb3K9in1FUgNLE6hh15ch:tGud6Idnk6M8lBqc7k2Zb3KchlFc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711788, "uuid": "83c4d18b-d97c-40e3-9800-53c4842e082a", "value": 265564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711788, "uuid": "2e5ba99c-829d-4919-afcd-0651f2895a41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711788, "uuid": "93dfae2c-e06e-49b2-a80e-02dd7687efce", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf0139ee-e282-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771162, "uuid": "05e515f6-4c2a-4512-8fbe-938373f1528d", "comment": "Malware payload (Mirai)", "value": "81aa4aac36e84c4e860fc7d4a2291fe2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771162, "uuid": "ef65b6ce-ff55-46a6-aaff-bf27e740a568", "comment": "Malware payload (Mirai)", "value": "c1ad020d445ae2036f0f937d89c9d4de4dc4ac6090940756017995a1acd45909", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771162, "uuid": "833ea68f-19b7-403c-97f8-99956169c60b", "comment": "Malware payload (Mirai)", "value": "e86e38e6f0dfd8f89e7e4e61117dd16eb8f0508a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771162, "uuid": "7a4c4d63-4daa-4e8c-a276-3f420e71bba7", "comment": "Malware payload (Mirai)", "value": "c4f030ed5d4d4ff8de04ad575b9b8b23bd3934baa1ca5bd42dcf0c4ab660e5c2b834fca431a98b965f90a6b8097dcd9e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771162, "uuid": "ec9b6672-526c-4bc0-ad1d-8e26d082318c", "value": "T178144CE7FC01DDBEF80EE77684134809B230B76114525B3663A7BA6B9C3A0595933F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771162, "uuid": "45b1aa5b-4493-405b-9db3-fa1f1e11e247", "value": "3072:/OvlD4k5DH13qH6zTJNfRSAVxyglkJpJl3ezJdUoawlDVwjbiALYu+vCk8iW:UxlH16H63sGyglCpJl3eIhwlMLN88iW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771162, "uuid": "6ac4d32e-2377-46d0-ba48-6742d59b89b2", "value": 191756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771162, "uuid": "e06fbf60-3f41-4833-bb3a-f6b622991cd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771162, "uuid": "4cc03d53-8c2a-49b2-b2c5-ba4b9e9bee81", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4b75af8-e29a-11f0-a129-42010a9c0007", "comment": "Malware payload (ACRStealer)", "timestamp": 1766781560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781560, "uuid": "79388eaa-3b09-41a0-b6d4-2904969dc346", "comment": "Malware payload (ACRStealer)", "value": "b3ad1a78e5ccde1feb319ca5569af563", "object_relation": "md5", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781560, "uuid": "4fd2e37a-8772-492d-89c1-15f9707d5f7c", "comment": "Malware payload (ACRStealer)", "value": "c2176162d731f949d67cce2325c2053836f36aafdab3613f75dd84627758f44f", "object_relation": "sha256", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781560, "uuid": "1b2fc80c-3f7b-418e-ad3b-3f2a648bee1e", "comment": "Malware payload (ACRStealer)", "value": "d6de26b74919d96d33619529689f0054de70f2ae", "object_relation": "sha1", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781560, "uuid": "fbebb778-4021-4f4a-aba2-27977718e6de", "comment": "Malware payload (ACRStealer)", "value": "ca97f627bcf6019e8b919a7a8daa7b440cf9b31a5df4d3a537b8b3346e47b28e9663cc1811a1949e8ada7b703e3cc30c", "object_relation": "sha3-384", "Tag": [ { "name": "94-103-80-193", "colour": "#7EBA49", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781560, "uuid": "7c644141-b8d3-4b97-8fbf-c47925762176", "value": "T11EF5331645E1E3D885535D388E2CEBF6618E15F356A20221393FA783CD9FA09DF63887", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781560, "uuid": "89403432-f7c1-4634-b5da-7f977e877832", "value": "98304:hh9DufnMvG4ZIqJVXSe+TTKV0tiWeRItj:h7c0GuCTKVGJtj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781560, "uuid": "34c4fa78-ce9d-4c06-97da-43f9763c7f3f", "value": 3387101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781560, "uuid": "8a5abe26-74e9-496d-a638-c4b5502718a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781560, "uuid": "b6e3c23d-6d17-48c3-b78a-7edfd5e2a004", "value": "renpyloader-3.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f56f722d-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772112, "uuid": "3aebb740-b74b-4665-add4-4318ce053b5a", "comment": "Malware payload (Mirai)", "value": "25cb86d27b40c08a8394494312014d1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772112, "uuid": "aa892676-5f60-49d6-a91d-e26e53ebdaba", "comment": "Malware payload (Mirai)", "value": "c22e8dc5f0bf162a5a82afff4232463f3318e2577c244bf1aca6bd6bd75f142d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772112, "uuid": "630f5568-957a-4ae6-be17-940dd8557b74", "comment": "Malware payload (Mirai)", "value": "ea0eec632ecc991fb1fd7c152a21004162ff48f4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772112, "uuid": "bbdf2af3-e0ac-43ed-9690-b4125702a253", "comment": "Malware payload (Mirai)", "value": "df0038f08e7406d29283bd0117610255a710875269f185935fad13dfd392df853900ab1f9d603e8b1e5944f4fde86266", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772112, "uuid": "57481c14-f8d4-4327-8438-442b7c21b0c0", "value": "T1F0142946ED418E11D4D622FAFAAF414833536BB9E3FA7102DE205F6023C6A9F0F76552", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772112, "uuid": "83b94a41-cba7-4316-aee2-4627607650bc", "value": "3072:vkBItnehMnWpREHKVAbW58fyit7fKNwODuxEHK1gAeVRoYAXwqMs2bdkTJoRa/FE:vkBIGMWpREHKVAbW58fye7fKNwODuxEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772112, "uuid": "64f8b943-2206-4b8e-b009-ca0fc0c6b1d0", "value": 191140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772112, "uuid": "818e92b6-544d-4daa-acb4-99692c7ca0c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772112, "uuid": "b7f12b84-f851-4a07-a93f-2ad2be1a1e64", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfb3fce1-e297-11f0-a129-42010a9c0007", "comment": "Malware payload (GoProxy)", "timestamp": 1766780210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780210, "uuid": "1e9663ad-20a2-4640-89c6-9b5b394485b2", "comment": "Malware payload (GoProxy)", "value": "0f68d4a623a9e1be05c0cf009c28dcd3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780210, "uuid": "8585f598-ed24-4bd7-86fb-2f14bcc75d5b", "comment": "Malware payload (GoProxy)", "value": "c26d93a8aeb82e8ec28170a111c0b16136049f5e5d1f5658c9a73c938403ed15", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780210, "uuid": "5a6359ab-cdc0-4e27-a728-7f394e14dcce", "comment": "Malware payload (GoProxy)", "value": "f26d26b69aa13c940fe6cf75ec0bdd0f02a2ceca", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766780210, "uuid": "c8937208-a7b5-4aba-8819-4fe8d8ab502c", "comment": "Malware payload (GoProxy)", "value": "aaa03e5f189418c084f30e8eee8d3f0e0e71e32761ae5beaed6536ac5886c1f124ae1b03ee610384aede38deccdd4dfe", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780210, "uuid": "05d4d201-a8c7-4177-b3ff-b2ad4587781a", "value": "T1D6664A07ECA155E9C0ADE2318A639152BBB17C485B3163D32B90F7386F72BD0AE79750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780210, "uuid": "6257ae45-50f9-4646-8a9c-820224a76a95", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780210, "uuid": "fd469804-a840-4391-b32d-4aeeac201e45", "value": "49152:76E6DcCqeKQvQgWvLZGm1YiNsfGV95WViQF9d0c9whky90VFjXUjN5WBfKiK9Kvp:76DipDIcB51QFAc3cXJwbOE1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766780210, "uuid": "d17e2506-41f4-4229-b90d-6ff35b53e25f", "value": 6574328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766780210, "uuid": "4716fa64-d5ba-4ce5-b195-61283f873436", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766780210, "uuid": "ea97bd43-e92c-47da-bde8-fd779032f72d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87b7135a-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771499, "uuid": "5457c7d5-e782-47cb-8de6-9077188d8921", "comment": "Malware payload (Mirai)", "value": "604ae57fbb312b058e1419f1a42b55fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771499, "uuid": "dcc3e2eb-5c38-4362-871a-cb3b9e5ef876", "comment": "Malware payload (Mirai)", "value": "c2dbb6c830dafe87776d622f821125541116824ddfc6bd5d6c682f603fdda253", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771499, "uuid": "595973ac-4a0d-48bb-8f2c-ddfb77350d13", "comment": "Malware payload (Mirai)", "value": "692708ccac0751a6ba547a5bcda96c3ab4121638", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771499, "uuid": "6b2f6844-eab5-4c00-ab95-1bdf6fc5ef4e", "comment": "Malware payload (Mirai)", "value": "a20e90419fe0c11a803fc20fcfe2cce935bbb32d344a94448342c2e55b43f68e7a3aed05f1f37fcf5bfb629787257052", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771499, "uuid": "5f84d8a0-a3b5-4554-8d74-ebc6430c89ff", "value": "T13CC32902F88580FCC08AC130177FA93B9936F2DD5238B6EB77D4AF127D4AE515A1DA94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771499, "uuid": "b7ca9afd-6914-45ec-9433-f341310f6ae2", "value": "3072:ZkDAonCNu8NeNEQuBSObv9z6a9IBHGjTOqs1iwapdxWCFf+:ZgAonCNu8NeNEQuBpbv9z6a9I9GeXEzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771499, "uuid": "7bc565b4-7f3b-4fae-bda4-f652aef3fdb0", "value": 120816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771499, "uuid": "17f146b3-c87b-4632-970a-8fba11ef35ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771499, "uuid": "d47c6d6c-8b6b-43d2-8a47-b918005d7dab", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c31e9ba0-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747547, "uuid": "aaef0025-91be-41d7-b62d-0ec55ce774f7", "comment": "Malware payload", "value": "66dd7963a488c73d8ffc6c5b31160d87", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747547, "uuid": "f7aa6703-1205-4d83-857f-41d52e231da4", "comment": "Malware payload", "value": "c3287066bf1e2c7ccbf84c410dbd52f45813da973c63bc4492d6cf6395370c05", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747547, "uuid": "08ed0e1a-96d1-43b4-a6ba-9fa94af7179f", "comment": "Malware payload", "value": "1a90d0fa6e4bc0d64e1d29a84c911d64d174bf89", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747547, "uuid": "da43701f-2327-46d2-bd16-177943ff6e3e", "comment": "Malware payload", "value": "e6bb6e9b948ca3de40d3775074c08e86b55f975d147bc8c1f25c1e9a2f39507233bc97e5a52b5a72c04193057f0897ef", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747547, "uuid": "cb9ac9c3-ab1c-49a7-8d0f-2da4627708e7", "value": "T17E634B555C17625E2CACFF8B1F8EE1F11057A0E85CDD3BB90636BB08D82D2E9CA57068", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747547, "uuid": "b1befa7e-21a5-444b-95e4-73386b71e1c8", "value": "768:I8w/h62/jWs6oS+xISN0vOf2FTw2wdkfScBYrwz2y8kTAlGB:I9l/AoSSMusUusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747547, "uuid": "c064c1da-3397-4f57-9ce8-0292789a7523", "value": 70575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747547, "uuid": "add38e84-6773-4072-95a9-3a9abb4ba426", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747547, "uuid": "54848e51-b5e2-4364-a439-08ae9b57c2cf", "value": "invoice-1645080830.pdf (10).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaa706b8-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781865, "uuid": "2ab7f3ce-7132-4125-b4c9-11425d4b1296", "comment": "Malware payload (Mirai)", "value": "82fed02c26b22e787e519887e9c05f5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781865, "uuid": "1dc9c1ca-f058-430d-ad6b-e8ce3aad336f", "comment": "Malware payload (Mirai)", "value": "c3c76a4b5c29e41897014168095530bfa26b96550da5a1a289ab0a83b1b50657", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781865, "uuid": "8d1fc4bd-284a-43fb-803f-ae4903b846c2", "comment": "Malware payload (Mirai)", "value": "264afb19b5b6cdc504854f0e597f4be2ae0ae304", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781865, "uuid": "0706405b-aadf-4afc-8af6-86700457f0a0", "comment": "Malware payload (Mirai)", "value": "449481905b11a826b4cca86afc4b26d890f15257caac41c62e62c6cef85961996bc9085ea731d3f3e455dcdab0f45dc7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781865, "uuid": "4b5720c3-1b77-4d70-8adf-17488e0a9875", "value": "T18E731895FD409A52CAC216BBFB1E428D772B4368D3FE320399299F21378785B0E3B545", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781865, "uuid": "560bdf63-22dd-4bb2-8c20-31b9067d9fe8", "value": "1536:ckIDrxcR3CAeOf3+5W+O4RG9u555555555555555GCuI0CAqNoAkKk5yX:9IXK5CAe0O5t5X0ESG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781865, "uuid": "c1a57569-e655-4966-9b29-393bdb5d87ba", "value": 79200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781865, "uuid": "487e0c87-60be-4e4f-83f6-a822380f9937", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781865, "uuid": "534cee5a-5188-4608-8ff4-8f8093e1096c", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f919e7-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747342, "uuid": "89224504-f965-4fdd-8a84-31d928025679", "comment": "Malware payload", "value": "76decb57fc7ca3c7078a787234e8a392", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747342, "uuid": "4efaa79d-7a4f-4371-8603-e48d58a7f98e", "comment": "Malware payload", "value": "c419921d904714c353498ca40d6d1366d8c8102272c95c71c3942158119bcc15", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747342, "uuid": "9dea11d0-5055-4932-b20b-84bce7ff1285", "comment": "Malware payload", "value": "1868ca60354e71eb2c2011c18d61d93cefc549ba", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747342, "uuid": "bf3d5833-d8f8-4ae9-99ad-307cf9da5af2", "comment": "Malware payload", "value": "f21f67fa158d018a56f169174f39db2c9169f65be21f9d1982034610cbe792e0725c0d8de5e363cc20e26a3597fc8318", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747342, "uuid": "7c93c966-1845-40b4-aacb-ae36c9ace776", "value": "T181632C331FFBF4B015E6B4D16A7BD7461A376DF4388D703904AEF4A28A61A3216066CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747342, "uuid": "617771e4-ca85-43b5-b083-22d375fa8f9b", "value": "1536:I9l/AoSSM8yPyRynyIydy5ydyKyLyxykySy/ynyfydyVyAyCy0yDyWycy2yjyiyA:I9l/5MeNusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747342, "uuid": "395be3fd-cec7-4184-8bc5-df229e86fcf8", "value": 70633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747342, "uuid": "568b9baf-25b2-48cd-9c7c-2c8f2b500b59", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747342, "uuid": "13b6aa78-0bff-4844-acd6-0ac2f71eef5b", "value": "invoice-1645080830.pdf (52).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2161b1a9-e1f5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710339, "uuid": "16cfe8ee-2263-4384-9590-4e0a77057faa", "comment": "Malware payload (Mirai)", "value": "1de03278df8911edcb883ff9d95e0c21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710339, "uuid": "54dfff8b-5a1e-4698-a272-d5194c3c9cc8", "comment": "Malware payload (Mirai)", "value": "c430559cb9a72b9d534d8cd353fb3c4d132b8af37424943a300bd125ba905861", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710339, "uuid": "c298ebbe-f411-4d5d-8797-13c0ac5f37df", "comment": "Malware payload (Mirai)", "value": "cafa8dd594c8594d826452d917fcfae529cfd8e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710339, "uuid": "8aee2531-a980-45da-98e9-a49cfb633629", "comment": "Malware payload (Mirai)", "value": "5e11278c505b447c608d9c75d2a5906b3ac1efc997bc3a488dc4ce58b69664f9d7c04ea3ff9820fd5a7641cd850759ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710339, "uuid": "52837edc-42af-48d7-9ccf-9736ef8fc792", "value": "T1ED935B82BD92895ECAD013BAB66E268C3353A3FAC2CEB213DC154B1577C551F0D77A90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710339, "uuid": "6e576854-505b-4ac3-a2a5-ff3ac9461fb2", "value": "1536:En6TQelqmsaMlU2xxiuI9MzTjVG8rVxN4f73eAZJ36FOdcu2IymQY2AUm6hh1n3f:EnyQenHcBG8FGje8wMms6hh1n3gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710339, "uuid": "487c64f2-ce2b-4ce4-b457-7b858df746df", "value": 96620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710339, "uuid": "c40feff2-c4ee-4896-9310-59ecfe497cf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710339, "uuid": "f683bd08-e9dd-45f2-9f6f-5552b6900ad7", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "141edf05-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792780, "uuid": "2485bc43-38dd-4ee9-a8b8-2de3a3416064", "comment": "Malware payload (Mirai)", "value": "c5cfb63670250a2bf921ddba4a42f9c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792780, "uuid": "5c350298-cc87-4e12-b2b9-d107f751732f", "comment": "Malware payload (Mirai)", "value": "c4919b58b5aa69b669e3a5f5afbedc0829c5ba27514d15ba306fce8b7e592145", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792780, "uuid": "00b50c3d-c9ac-4987-a7c8-e485b57c9d27", "comment": "Malware payload (Mirai)", "value": "ff5a08b53148ce059263446276926d27572eade2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792780, "uuid": "823d263f-efa5-4450-950f-94a317dc8de5", "comment": "Malware payload (Mirai)", "value": "f8fa67cd6fea88eef223163222a26b25af08713265e0fea2f11acbb3e2ca880084597887e28257d7a158d32c251f5890", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792780, "uuid": "084f02e1-6c71-40ba-9398-0dedfd0f141b", "value": "T1D744B64E6E228F7DFBA8877447B79E24965933D726E1C584E1ACD2001E6024E741FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792780, "uuid": "12a0059c-818c-4905-b649-ac5d9d341201", "value": "6144:UHxYpEBm14ds/Jc1oJyRXV5r4CE/zXzaM41x/gELk:ub5vtQ/cVk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792780, "uuid": "d9a3108c-a0dc-4d3e-ad9b-f85db6e17d71", "value": 261072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792780, "uuid": "7b15e2d9-fa9d-46f6-ad2d-879ec547465b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792780, "uuid": "ced6e31c-ae1a-4fbf-8c38-9b2055b67d4c", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "297af329-e22c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766733975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733975, "uuid": "8b9d9ea1-81db-4979-b370-60a1273cad33", "comment": "Malware payload", "value": "9f377d6fa5451d9f8597578d9fea5226", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733975, "uuid": "0f9c1696-1252-4eaf-a338-02fcf40d5c91", "comment": "Malware payload", "value": "c5f844a960655d709970898cb4f8dc8ddc7ddc517f6308eca09b34faffea7316", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733975, "uuid": "35c023aa-f693-4cda-bf61-959580f33d58", "comment": "Malware payload", "value": "cbff59d314eb68d4e2b0001594569321672b26a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733975, "uuid": "ce042e52-b19f-420c-a0da-741e907e12d7", "comment": "Malware payload", "value": "324cc9bb136834b5ca48c18159b0ebbc134904e09a5fce8a8ed22376cfb46ccf02607b02cca9e678dcf53d9a49470264", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733975, "uuid": "60c976e4-c082-42b3-a37b-d04e589cf8eb", "value": "T10994D016F3207A93E159D135588147006B94AE7572E29302FFA3B2BE712F5B5CF243AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733975, "uuid": "6ec9a883-ab7c-4742-a0c4-f27b29c1991d", "value": "12288:BK4uT00y53NRXGsynET4yDPcqGSy8l2QuzaC3O:orO53T2syFol2buC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733975, "uuid": "7e3a0030-0e2a-422e-bb3b-2d5f0d1530e3", "value": 426976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733975, "uuid": "00c7a380-98df-4c51-b72b-2b1de02f5358", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733975, "uuid": "3302110d-e812-47d1-a64f-e0e23f66f1de", "value": "rondo.armebhf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4313426a-e262-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766757210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757210, "uuid": "42ae964b-13f7-4333-b16a-4eaba068121b", "comment": "Malware payload", "value": "54bc023e616c2d54ffe87a0d089d4b42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757210, "uuid": "5a9ff3dc-5c5d-4872-ad8b-ebbefbd826e4", "comment": "Malware payload", "value": "c6d001dfa9966e00bac3d2d0c5da03543403082af27cc9ae20a773ded063637b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757210, "uuid": "345f58aa-17f0-4978-b13c-c63c852cd4bc", "comment": "Malware payload", "value": "26fdda55905dba22914edd7c7f6d8bdd9a21b1fe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766757210, "uuid": "df031b6d-1be2-405d-ab47-e11537b7939d", "comment": "Malware payload", "value": "c848aa45192e3650fa8e35411e4ced7751f6069ccc0ef939daff9fad09adc1e9a05c765b70662bbb8c60191b1a77c61b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757210, "uuid": "2750e471-e555-4f14-8831-5571b0d28d1e", "value": "T1EE730217831EF678D827EA3025152F94E1B1AAEF3535973F89D5739D9430682ED33190", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757210, "uuid": "46ce341a-e051-46f5-899f-ae1f68fc521a", "value": "1536:gV/O9eL8tFqX7j8sjQVi/o2/7pvvPUlQk3YVxC71l3LUxru:gQ9kQFqX3toOQJ3YX81Gu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766757210, "uuid": "21c5309c-730d-4654-8279-6fcc4d754f0a", "value": 74852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766757210, "uuid": "2442423b-43e9-4bcb-936c-970d145b5117", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766757210, "uuid": "fb600652-0a3f-41dd-a715-edbff1531b56", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca42ae73-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707616, "uuid": "3fb19f7e-c758-426d-8665-f1b599fa8fa9", "comment": "Malware payload (Mirai)", "value": "cca487f4a22b8c85703e512319a1b3a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707616, "uuid": "63daa17c-55c7-448a-b347-556549006737", "comment": "Malware payload (Mirai)", "value": "c723e0669c2505c7d7c71f9e1d83d8d03cfce9122822fae3d553c05209f013de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707616, "uuid": "6a0108fe-a161-4d1a-9ecf-f2da6134ad93", "comment": "Malware payload (Mirai)", "value": "dee49bdfa309f4834c48370c077edb20079711f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707616, "uuid": "07a7e19e-c51e-463c-9c09-0818621b0270", "comment": "Malware payload (Mirai)", "value": "0c51b27935d06b7fc3151ab0ae8005481fc7055a934c9c8e4293d391f58c824afbcda98215c49cf0a280cada72c44f2f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707616, "uuid": "69846917-b94c-4043-b1f6-2aff4cced9f5", "value": "T12E935B31B97A2E1BC1C4A57E21F30734F1B7274A25ACCA1E7DB20D9DBF256502113AB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707616, "uuid": "71064f72-fc28-4c49-ae19-b6a565ec81b8", "value": "1536:IrClWMSlilRHqwM9Hrx9fQGtZeUEyVWVvHRb2loQ/d8KQ/xdLcTPT8zm7uhG:4WWpkqHHQGffD9bip/xpC8zmR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707616, "uuid": "2a266d8c-368d-49e8-9339-c056286bc06d", "value": 91340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707616, "uuid": "478360ba-cb49-4fcb-a932-6cafba3aefd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707616, "uuid": "a4cb319a-4ae0-4951-a863-54b4b26c7e27", "value": "splspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfeac610-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778895, "uuid": "7a2a8929-3472-4e2b-99ea-687117a024b4", "comment": "Malware payload (Mirai)", "value": "4c8fb3a38e76c304764cb5be7ff587b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778895, "uuid": "4fc9bf56-20e1-4791-84b0-a7873b096b7d", "comment": "Malware payload (Mirai)", "value": "c7a7868bf7c3b0785d6c3465015e878236e56f2e0a798ea3e3cf30247f4793b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778895, "uuid": "d891e2de-a868-48de-9260-83ca52e8eadb", "comment": "Malware payload (Mirai)", "value": "732d7426222e14ae0b87e6afa2ce7419458eb86e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778895, "uuid": "db3e7a42-d226-4967-ac0a-fb01e8b778ca", "comment": "Malware payload (Mirai)", "value": "1930b9e03883f0132401b67b80812193cb88ccb9aab1f875109ed06428c9554f5251dce904d64bb8e7f336d1da84d0e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778895, "uuid": "b55ed881-b1d1-4d4f-b4e8-0cac5636a379", "value": "T158634BCAF983D5B6F8970930107AEF639DB3D6BE21A8DA43C3A455369D12502F412E6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778895, "uuid": "dd9a6ab3-61e6-45ec-8811-bd193c13103d", "value": "1536:TtWvgqAcQQsTb6vF7lOvZOWsIyq3XkZSQd:TtDqAasn6NJOvwfIyq8d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778895, "uuid": "47c0ad26-02da-467a-9e28-46250d482f75", "value": 70740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778895, "uuid": "2385d04b-4ee8-4650-9610-d97f616ee021", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778895, "uuid": "f79a27dc-d6d9-4ace-ad1b-f3e81fed035d", "value": "Space.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d48cee74-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774634, "uuid": "0b1a84dd-fc4d-4ca8-8ee7-2b61c1b4ea02", "comment": "Malware payload (Mirai)", "value": "c931f547c41a74f92b1a0f0cd9f75bd1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774634, "uuid": "a6e98298-b4e9-4f11-a636-8e200fc68a95", "comment": "Malware payload (Mirai)", "value": "c7b3f0804a8c861de9be2056aa9f232293c1b947f59afb15a628ec2bc89d6e0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774634, "uuid": "f8940fdf-d2e5-4de3-be84-ecd3d975f1c9", "comment": "Malware payload (Mirai)", "value": "f52af9ee529b431af21a33c93f58851afbad935f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774634, "uuid": "0d533d35-1f90-4c1b-a492-c0eb43a443b4", "comment": "Malware payload (Mirai)", "value": "42142f1375fa0b6b510b9f7a685c621466ce562669ffd5aaf2a52436a8d2e5fe0d63b07a1a3c7880dfb4da6d46e11b2c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774634, "uuid": "027b9329-1195-48da-a607-f93db47e36c8", "value": "T174A3F78AFC819B15C5D522BEFE1E518D331357BCE3EE72029D246B25778A82B0E7B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774634, "uuid": "66ea7176-e492-4f16-9186-ab30f265deaa", "value": "3072:LFsRoA0Ij7K1+Hjn4mTBleupsvF7ExBSqT2e:LFYoAjjHz4mTBleuWvF7uB1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774634, "uuid": "5eb9fa24-0a08-4025-9a23-bfdc64f8d379", "value": 104976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774634, "uuid": "3c1fe012-80f6-49e6-93c8-e3e2e9085014", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774634, "uuid": "c8513103-6d5a-4743-991d-cd9869da704e", "value": "splarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b2bd2d-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781884, "uuid": "339c8fc5-5f69-4894-bebc-0c28e9d6b607", "comment": "Malware payload (Mirai)", "value": "9921168f2e84f6518de88334574eee6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781884, "uuid": "84e8f69e-2858-4fc0-b999-8ce80d65e302", "comment": "Malware payload (Mirai)", "value": "c8ac6f287e43d5c742b143d33a3752e0781f5f0ac97d3f8ba88353fe9b3bf2a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781884, "uuid": "10a5a6c8-1260-475d-b573-07fc10aa7fef", "comment": "Malware payload (Mirai)", "value": "2aade46610ac7dfa7e7f332595aecc331b203ab3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781884, "uuid": "7c669f15-e6b3-41f1-9e08-4ddf0703f0b7", "comment": "Malware payload (Mirai)", "value": "920eb61c9f4034c1aac73bebd1203fd6df3c854d98277c0a5584f3947866a2351d6327be03b0450971c96e55caa05fd7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781884, "uuid": "9f12d059-5696-447f-8e08-27067bc65d75", "value": "T1CD636D85FA53E0F2E9631172113FA7679A32E63A4025CA87D76C6F32DC67401DA2736C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781884, "uuid": "1602e0b6-b1ea-4391-a38d-67e050175084", "value": "1536:x71SzkGuerW7M7CAM/pdMelw7phzEzdeljm6FjFgP+TZgh:XVG/sRiplEzFc2yWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781884, "uuid": "63b1a2a5-750b-464d-b59f-9c5e0302282c", "value": 70820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781884, "uuid": "0f8538bb-7604-430f-a8d8-06994444ed89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781884, "uuid": "d5621628-4de7-448c-96d7-425d8aee44ec", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a4ef0d-e2b4-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766792331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792331, "uuid": "1b2c0d70-3acb-4d8c-83f1-9eceeb20ed76", "comment": "Malware payload", "value": "ae45d928c283453013804e3e58a4d05f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792331, "uuid": "c57c75b9-89c9-44cc-811a-fa5b6b71600a", "comment": "Malware payload", "value": "c95ad08b09972ec1cf74aecb56d203f63bf50742d2390416df4b3a4deeb619bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792331, "uuid": "442ca1c1-6258-40de-8d18-b606696b7e51", "comment": "Malware payload", "value": "3eda4e805c67eac9c2f6fecb78c441f71b93ac79", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792331, "uuid": "79f7ec2a-6a9b-40ae-a4c5-d05c9d483216", "comment": "Malware payload", "value": "aec417398048ba895eac52ba4bbac020434cdad54914dbe549a96a18a8768d9e114166b1caba0de9bb89b0a212d67a88", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792331, "uuid": "10ad3fcf-ffcb-42e2-9cc8-55b1b6bfbd4d", "value": "T1C6732B82BC91D622C6D562BBFB6E41CD331653A8D2EF3203DD219F15378682B0E7B651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792331, "uuid": "d4c6bce8-f809-474b-b0de-2eb91ed55fb7", "value": "1536:M5awv7dFkfS6TtWiXgHdRxuf5ZPweY5TyPkHbVR:M5awvCthXgHdRxO5lNwTycH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792331, "uuid": "d0e5e3f3-45f3-4c73-ab38-d8cbafd9cf4e", "value": 77216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792331, "uuid": "b9c564b5-8776-4e53-a443-5a865ca19976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792331, "uuid": "d3d02156-1cc5-44d3-bcc8-6d1c55bb8279", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc99a278-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793170, "uuid": "0c82a2c3-0f31-4142-b671-475ec61132af", "comment": "Malware payload (Mirai)", "value": "b32cdb70dc9fa50ed12bd26db902b158", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793170, "uuid": "8b66ec04-5a65-4258-ad26-afa7259d166b", "comment": "Malware payload (Mirai)", "value": "c99f2a4c32793f4b2558b99140c1e953155fdf2f9b5ef0101a5b7f383f27aaa1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793170, "uuid": "297d839b-0a56-4466-a68b-2d4dd3ea84c7", "comment": "Malware payload (Mirai)", "value": "948d040d891a7051849e93be2128dab8239087db", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793170, "uuid": "58eb5079-1835-44bf-8219-b2e58391d4c2", "comment": "Malware payload (Mirai)", "value": "fba91fe082d89e91545bad42f34ad6b3992857f576b0bccdbf5c639abcdda49d6aa118578283efbb744d772766dfa708", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793170, "uuid": "21266338-ef80-46c4-8c6f-90f2d77b74b3", "value": "T1A9735B4273584903E5A759B0293F27E183EFAA5020E4B78AB51F9B5E8676E331047FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793170, "uuid": "75a8417a-b2c9-4ec8-bb0e-f003f5c4f40c", "value": "1536:W/CL3WOdoZ19/LWPcJDsq+d2hbzBnZobVRG+:fLNK5/dsPuzoh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793170, "uuid": "160aee96-a119-4ed9-a2a4-fe2fc987ed66", "value": 75860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793170, "uuid": "e25f1639-04b8-471c-a4b2-ee20cb706ee8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793170, "uuid": "7fa3cdf0-de74-4b4b-92aa-53df1dde0280", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c55b81a-e2a9-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766787640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787640, "uuid": "df675055-f83e-41b7-a164-8e00e43c7d2f", "comment": "Malware payload", "value": "581b131e053fb3a4b962b7de8580fb3c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787640, "uuid": "dc37026d-bc60-4702-80d9-a7c6817f87c4", "comment": "Malware payload", "value": "c9a24af41f90ad639856a76b66c833f2ed8e43e44a4a306a205ab4161f107066", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787640, "uuid": "325290f6-29c5-47a5-bb41-ab17666e5141", "comment": "Malware payload", "value": "31e94bdfbf467bc55ce1354039f08a1672895d56", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787640, "uuid": "e8fdf7d8-30a4-4f04-a3f6-542fbfa1444d", "comment": "Malware payload", "value": "63fad56edcbc3d15dd910704cd87327d3dce43b112e47cbd183138a6e0aec166c3d98b8c6c2baab060600dd8f72da3d9", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787640, "uuid": "4d11516c-daee-470d-be66-b280a0001a8c", "value": "T1D8319CC9128144B1ADE6DD2671A5C884B080B0977CCA6E0AD8E83DF9C89DF08B861B53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787640, "uuid": "0c212ddb-8b8d-4d50-a1a4-7b1cb0c803bc", "value": "48:vpAIRpPARp/OeRpiUpRpB8RpYfGRpHcRp7URpWyRp/ce:vr4/Hi1AcDb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766787640, "uuid": "f669b9e2-864f-474f-9d61-dd8d9484c2f4", "value": 1783, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766787640, "uuid": "2e00a1fc-a63e-45e6-8cb9-2fea104d19bd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787640, "uuid": "a44166f6-d3e0-48f7-8f94-276c48310a10", "value": "kla.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ea28b0-e293-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778472, "uuid": "7931e2ef-d575-49ea-b0bd-33f97130552f", "comment": "Malware payload (Mirai)", "value": "d0953ac1aacf804f1df4ab746bb0500e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778472, "uuid": "4787c542-b2e4-4c5f-9193-921466e81d90", "comment": "Malware payload (Mirai)", "value": "cc4ce9c1a68dcb23689b6cbbd0d0f4fc6f0d6f847f5da585bc9e6ef1e6d62465", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778472, "uuid": "0cd84ba6-aba1-4e79-bb72-e49c5e4c04ec", "comment": "Malware payload (Mirai)", "value": "c0ac2841f0095f8b61ca3b2d164bca8c2252dd29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778472, "uuid": "9488950f-0377-4c5b-839b-de77df1c80c7", "comment": "Malware payload (Mirai)", "value": "992612e3bad28390990e7eeef2c1d16b1cd7c4a6a902aa810fa9475cd01a92b8b9dc3f67d99e0b6c12595be027189a15", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778472, "uuid": "31816dab-04b3-4fc6-b002-22d35c98c5f7", "value": "T13A337C66DC6A6EA8C55C6AB1A431CF7B4B139040A7872FF78056DA658003D8CF68D7FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778472, "uuid": "2953108d-6ebf-479b-af0b-3774f0ea80e5", "value": "1536:aPGoG73J6FDXWUj+5fRHWCB5iCJT2bVR:eSWD3j0fRHWMcIT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778472, "uuid": "00663b26-551e-4226-b527-e893ce999fb3", "value": 54908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778472, "uuid": "6ab78d65-eab9-4d5b-bca6-8b5070eaa23f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778472, "uuid": "16efaf5c-5e55-4773-8f1e-0bc8281b6c4b", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80f0d576-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747436, "uuid": "0bde8c71-8168-4794-9160-4bbcfb624485", "comment": "Malware payload", "value": "ede21b81909e7718e8368301d774fc24", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747436, "uuid": "5ebb48d7-c7bc-4fb2-a5bb-d06add194d85", "comment": "Malware payload", "value": "cc59841bcae5d84cd069e73aa2ff6717f74f2d1afa145a2b83aff82fea4e1156", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747436, "uuid": "1bfbeb16-1c67-40f7-be6f-b0ff66b60c45", "comment": "Malware payload", "value": "e537e68e5a8fd92745eed783389e8ef58cd541fb", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747436, "uuid": "d93e2e6d-49d8-42b7-953e-4545c4aa7248", "comment": "Malware payload", "value": "32e07a00749ad73e49beb3371f59fa2f8a30fad5cd1e0a3da36d4b295260c7f68a7a7f7260b558474886f2d93211fdd2", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747436, "uuid": "c60e1e1c-69cd-4660-88d0-7c63e31c6706", "value": "T11C733C73A7207CFA37E5E31DCD3F5B10A6B5225A612669D2DF0E6F1321227C022967E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747436, "uuid": "5c4bcdc2-2ae1-4e7c-8d72-0a2b594510a5", "value": "768:I8w/h62/jWs6oS+xISN0vObJtdx16roj5dkfScBYrwz2y8kTAlGB:I9l/AoSSMWf16ry5usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747436, "uuid": "55504fa2-33c0-4ecc-a022-f23f7377da69", "value": 76322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747436, "uuid": "b79f6f9a-0871-4025-8123-ff258dfd96f9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747436, "uuid": "1827022c-5edd-465c-9517-f054f161e410", "value": "invoice-1645080830.pdf (32).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06813108-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779013, "uuid": "fca419c1-5189-4084-9af1-f06ccdc608f8", "comment": "Malware payload (Mirai)", "value": "d4647558c9de11c7d94d194c4d5e0894", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779013, "uuid": "9ac7eca3-27bb-4676-8a71-99c5bef078b6", "comment": "Malware payload (Mirai)", "value": "cc96524087cdeef7c5bdc6add8fcfbf194c191d0452e59672d7d7a868d5a7034", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779013, "uuid": "cd3f48d8-292d-4c46-b30d-4b876a34b763", "comment": "Malware payload (Mirai)", "value": "9e20795cd941429ae21bdb9be801e0121f991dd4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779013, "uuid": "24f3c11d-76d9-4cbd-bee0-0b02ac025160", "comment": "Malware payload (Mirai)", "value": "b5be7bb41702ed558b6b78fa36bb423a5d26ea21d4c584073e4cc4d2b9012d06ee65add6cf333631302ab42d83e28314", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779013, "uuid": "ccd904dc-870b-40f9-926e-212c648e5a50", "value": "T1FF933A52FD818662C6C126BBFB5E028D376623A9E2EE3203EC155F2137C795B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779013, "uuid": "340c83ee-e720-458f-bf22-33235c1d8e1a", "value": "1536:qxjBYbtjnobcAtov7PXfsEqwD/dBTg9qBnb8A+/f4rWZJeeSy+kb:qxjBYZjnobi7nDdB88Bb8iqZJv1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779013, "uuid": "7f6e4419-c79b-417a-8a9c-ab82d353b7fd", "value": 89744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779013, "uuid": "42539f78-6a56-4630-9618-3609ec7f05e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779013, "uuid": "0f749919-dbdb-4ca0-b50b-5ef1b65db752", "value": "titanjr.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f065d41-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776504, "uuid": "900ec887-9e01-4a8e-9391-cdbd67ee3920", "comment": "Malware payload (Mirai)", "value": "eaf85186a81dbfc812b78d9a3bcc0336", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776504, "uuid": "bd6291bb-8bc2-4f12-a07c-c87cbf081f78", "comment": "Malware payload (Mirai)", "value": "cd4a30e43b906c33c6d46ec5f4a8bd13ece64fcccd9a39bd568f328bb45441ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776504, "uuid": "6d9949fc-5024-4ff0-8731-56b7612d86a9", "comment": "Malware payload (Mirai)", "value": "0d89cc72d2800a61e0a8d3493f1a3dd10c8205a8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776504, "uuid": "5bb122a2-115c-4d72-b961-ba0ed9533ff8", "comment": "Malware payload (Mirai)", "value": "cb6c1e0a0f6747e143a96f12dc4ea5c5f0523ac9b6b272775eec0aed7057031fe1c2084c4952a087f76d96607027e5fb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776504, "uuid": "9c631759-5985-4e23-b67a-ad0b40a70317", "value": "T14B73029DF7F171D3C5BE1C3718D806896E18BA15260BCFE85293C8CE666897FB48A074", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776504, "uuid": "efea00a1-757e-4949-a713-721186eba232", "value": "1536:HpWVowdV7CTnmaSspozKA50iN8HIqrtStDA64UeEv4nVQnwUBgKJO:JWldV7CTmY+/5zYIqrtS9aUSQnwmvO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776504, "uuid": "b2404986-5255-47b7-bd36-b39fbc0d129f", "value": 80136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776504, "uuid": "47b1acbb-4af7-4e5c-a387-aeefc6eac432", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776504, "uuid": "c344e403-099e-462c-bcb4-945b40525396", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a972b107-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775421, "uuid": "a9132fdb-edd1-4594-a27f-9a022c3988f3", "comment": "Malware payload (Mirai)", "value": "6f0caa299d8c331cfd98fb97fbd0dc67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775421, "uuid": "18069cba-26c2-4f97-a024-6916622d4231", "comment": "Malware payload (Mirai)", "value": "cd9b27224d3ea364c758052063fedd1ba23dcda5cbb1a6ac8617b3a3d6c0e586", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775421, "uuid": "d041e922-b28a-4029-9820-12125bdd1471", "comment": "Malware payload (Mirai)", "value": "178f89d15a4ece7647781480da0bc3545b6731ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775421, "uuid": "abb0cf40-db06-4fed-bdf4-4e09314c2d49", "comment": "Malware payload (Mirai)", "value": "9f87b048f4e60a7db68626386b6f6972f7e03d93ab09005f874177c54f229a19a2f801f9ab83a807464c911e5d312bc4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775421, "uuid": "92477ac8-6e20-402c-8cd4-45e0d6de5fff", "value": "T1CE73026FF7FF8B32D4F2AAB6080C155171F736092B5385366DB4123F59A26062A83F90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775421, "uuid": "9c54d74e-cbc9-4227-b386-2503a6f23ae8", "value": "1536:xPa0WtJuZywkdlzmfNbL6S2pHOdtfkLzVClYuTwrWjz/nG40IM:xS7nuxWlkNLFm2e9WtEa/nDJM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775421, "uuid": "6a5b2122-3074-4bc2-8193-9ab66ce94642", "value": 74812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775421, "uuid": "7475c616-d5dd-4048-8a72-cb45ef6679cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775421, "uuid": "1e79745c-c9ef-479c-bc31-7d0192f3f81d", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "278c0c08-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767472, "uuid": "5e7fb7b6-7233-43dc-bc50-05368e644761", "comment": "Malware payload (Mirai)", "value": "212312b15841a19751d064f4898d20f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767472, "uuid": "ed5937de-5bd9-4551-81da-32ad47c0abc3", "comment": "Malware payload (Mirai)", "value": "ce1cb65560f957547e742f8f5961ca064fb08c6d6034aac3b03b0efd6103ec5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767472, "uuid": "700b435f-ae53-4cc4-8bc8-3b78dc187225", "comment": "Malware payload (Mirai)", "value": "1ed8877677d17e0e0a2e96399ec25cb419960d39", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767472, "uuid": "752b332c-d965-4ef0-a857-eb0c18097b72", "comment": "Malware payload (Mirai)", "value": "012bd2231775cc7b81080bd83287e0e16f348c0edba92a0c0a9065282e31a24eac1ffb0d3562e51f086a959a473c55d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767472, "uuid": "30a9cd1b-fa17-4844-a409-0b325327dc1f", "value": "T175F2D07812005986CE9B84B7459A17811D4A0FF1EE03D98679B6A3DFCBC709A75833F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767472, "uuid": "fa3632cc-914a-4989-aadc-6dfef632a630", "value": "768:O/QW8IHKLQM8E3KjFh+hE1dYpyfJUIRFFEJgGlzDpbuR1Jd:O/lHKLQM8djaSdYpyfaE8VJur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767472, "uuid": "046ad2ca-7a0d-4fbd-b6f9-58d558221885", "value": 35852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767472, "uuid": "36f21a20-413a-48cb-8bcd-4057a63ef3f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767472, "uuid": "2398f601-53b7-49cb-aed9-659b693ee366", "value": "pmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1102e5bd-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779031, "uuid": "0ba47f40-a787-4377-80d6-c7fc37476308", "comment": "Malware payload (Mirai)", "value": "3a3f74ef36be6915adf2782e7998e307", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779031, "uuid": "ebfbc52e-26b9-4677-9940-68eb7dfc08ab", "comment": "Malware payload (Mirai)", "value": "ce873d725617a45e3c00ee8442153f7466fb55cc060f938575c8a684209b9aaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779031, "uuid": "916d9327-fe88-4bed-9f63-295fd3dc146e", "comment": "Malware payload (Mirai)", "value": "1b0cc5f0196a3e04ff036ab439a441fb934d9d27", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779031, "uuid": "74493e50-518d-49fe-8ecc-cbb2e561555d", "comment": "Malware payload (Mirai)", "value": "d43e185fbe4af0371a9d97125f24f9cadc9355ff47fc8ca7a85715660c5ce6873c91fc949af6b6799e7e11a2916f8f9c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779031, "uuid": "efd27633-b273-4046-9cc9-c55dbf20f50a", "value": "T16E13F14EE7B975AFCD3E5D3DD26D05794718F2A2308EC68D3B4347C029EB80BA505829", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779031, "uuid": "2a32bfd4-1087-4ea0-a9c2-f9c20a597f25", "value": "768:2x4mYFF++yYR7GkHOKv3BhUrRXkbA96qVZNzHT/9zcAMsw6X/O4UzB+AiJOMWH9:2xhYLDyS7OK/UabY6qrNzHpzcAFlTUXJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779031, "uuid": "37b54ce3-9e33-461d-a387-8b9ccf5973bb", "value": 44532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779031, "uuid": "aea85ec5-d92e-4a40-8d55-7fe3124f95cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779031, "uuid": "b968148e-6da3-4624-ae32-e88d04015353", "value": "windy.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "413e73d9-e28b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774817, "uuid": "875dc89c-0a40-474b-9f63-547603d687e3", "comment": "Malware payload (Mirai)", "value": "e7a045086942917964c7f38c3e7fd4a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774817, "uuid": "10bbc24e-99e1-43fe-91b4-164bdd1eb235", "comment": "Malware payload (Mirai)", "value": "ced44b08b63b7b0946e4f1ba0c65c3d30fb270d4b60aecebd8519f4453140cf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774817, "uuid": "373aafc2-190b-46d9-b373-a105af40827c", "comment": "Malware payload (Mirai)", "value": "3181aaf372dfeaef5333c9270d15cc3ca5f2ed7c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774817, "uuid": "eeed369e-093a-4362-8e09-0d40e920d294", "comment": "Malware payload (Mirai)", "value": "e78611f9f8b612232455e57ea4a7ad88e7a3af688925a5d011c74142f4d2cbaca712e5091a4af7b1072885d25f1035ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774817, "uuid": "cded8e46-1881-4c9f-bd7b-4cff6dbb6631", "value": "T117831985B881CA26C6D8227BFA5E42DC332253B8D2EF7207DD15AF15778682F0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774817, "uuid": "d7f4f369-683e-4648-8505-b1473bf48139", "value": "1536:gcnV+luwjl+fj/kp5QNyWBjC1fAh5wjqkuQit1cqBHchYT2bVR:gcI0n36fAhKqTt6qBqYT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774817, "uuid": "4ae7831b-de6a-410b-acd3-ce9828ba7e6a", "value": 81540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774817, "uuid": "e5630a76-a63f-4554-adf3-400caf5d7b93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774817, "uuid": "875effd6-1fb3-4f16-9547-18863595d52f", "value": "splarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c589ee7-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778835, "uuid": "0c3ffcb0-cb77-44ca-8358-35bef8ed0012", "comment": "Malware payload (Mirai)", "value": "85771da3b2ff83260ebece418d8bcb62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778835, "uuid": "c343d033-a509-4967-b971-958996ce0551", "comment": "Malware payload (Mirai)", "value": "cf1bafc5d49488a28551a0f89bfeed48765e0955e7a8448e50003c25ac4de0a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778835, "uuid": "ce3921bc-16d7-4044-97e5-18f647657246", "comment": "Malware payload (Mirai)", "value": "be6995779e8afdf5fa63bf2acb540bb4da214adf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778835, "uuid": "f137476c-d7a0-4ce1-80bc-c31f27fc7b05", "comment": "Malware payload (Mirai)", "value": "25fd88a408ac9f9884ae099cd1de665c487bda4e79884cb7f5895ff0a225b9fb0f7f22b0fbaa170d2a11aead0896172e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778835, "uuid": "4afd8845-a027-488e-9067-9ae08949fb77", "value": "T14C639E16D82109A9C28685B471ECCE3A1B13E5C063837EF71A7AC375A067D9CF849FB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778835, "uuid": "cc5017eb-1a78-41d2-b93d-302a77d6ee92", "value": "1536:daT/uMkOtg9iYv2ZKsT5Z7BPxznCI0sCp8ud4:dWVkwgAYugsz9xznsxrd4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778835, "uuid": "0987960c-1e60-46e6-b55d-f2c5e689a535", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778835, "uuid": "febc3ba2-7b40-473d-a281-638acb580405", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778835, "uuid": "07037ea8-7b70-4ac7-92e7-bca831f05eed", "value": "Space.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7edc8bd-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772868, "uuid": "b633481d-c35a-4bdf-aa39-2147e7a6508c", "comment": "Malware payload (Mirai)", "value": "798eae346538ad6a58146aa4f8f167c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772868, "uuid": "087a6443-6e9c-4d92-a430-add413083de7", "comment": "Malware payload (Mirai)", "value": "cf772ae456c41fe0acca78520f85ab51e922d29cc22e3b53addf515347615497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772868, "uuid": "aedc29b5-efc9-4b4b-ac67-1c73e8990875", "comment": "Malware payload (Mirai)", "value": "81a522eadbfa13cfe363c4d635ec65fffe096cf7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772868, "uuid": "2e7e0815-2a24-4b9d-a4e9-b107c53b660e", "comment": "Malware payload (Mirai)", "value": "f5cd6eaf4fcff85d8509da465fffd6beebd32e68c72afd84abac109e7b8af93bccd6da28ebed03b9aaff2b2e88a48ffd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772868, "uuid": "9ef14cdf-216d-421a-81c5-8d8e554d7544", "value": "T181142B42BD418F13C6C622F6FBAE018C37167BA9D6EA7103DD256F9137868DB0D3A251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772868, "uuid": "69cee221-b7f1-4b9a-8255-bec1bd2f4a52", "value": "3072:ViqKSEvU+evlkowlzCSkKo4dPfc5PpA4YTjphUfu6hh1RAQW:ViqKSaDG7w9H/o4dfc5PC1jphUfrAQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772868, "uuid": "76339559-b264-4bff-afa5-6f48a01e55ec", "value": 204932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772868, "uuid": "c86015f8-cce6-43f4-8e44-931001e5024b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772868, "uuid": "a09c8f05-1062-4b9a-915e-f43858fbbcaa", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "801df6cb-e294-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766778788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778788, "uuid": "ac58f06d-1cd3-4721-9ebb-fece4597a535", "comment": "Malware payload", "value": "a3acc70856791de592becc27694b803c", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778788, "uuid": "319cacff-e1c6-44ae-aeff-2141420b1f08", "comment": "Malware payload", "value": "d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778788, "uuid": "3bcb2375-c27a-4bd7-b7dd-9efdf9cad0f0", "comment": "Malware payload", "value": "22ad4011b31e80930ca6db927ddda78090bda72d", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778788, "uuid": "875a1367-9207-479e-bf6f-b3d251e845eb", "comment": "Malware payload", "value": "956e4e84cfd496a54569cca11b2067ed9191e036b2fc1ade15a6533c9c452f174110e2a4e3f54add3566a0f2006e3a88", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "RenPy", "colour": "#40F6C2", "exportable": true, "hide_tag": false }, { "name": "RenPyLoader", "colour": "#CB1557", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778788, "uuid": "dab5eec5-d9d2-471f-b5a2-cbca965b675a", "value": "T11D87333D964C54C3FB0785B5EA76C14E48E61DE021A398A6FF24B6024CAF7D06736B87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778788, "uuid": "da523aea-7c88-4641-a79e-064ff84a6ebd", "value": "786432:Po6f0q7abvkH/GbAmzt1n7IxbGo7u2f5CVGXP7pXhQOsYseq7goNy3EpAUnizYu/:Po6FWbAmx1ncxttYeQ7Y6VEErna/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778788, "uuid": "bcaeb6fb-5580-4bcb-92f9-687ebdf7ef1d", "value": 38193767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778788, "uuid": "d0da646d-0af7-47eb-b8dd-24a66ded6e7c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778788, "uuid": "467a4c7f-9025-4870-b6e6-eef2af180264", "value": "1 Free Download Files.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "571cf0b7-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1766713006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713006, "uuid": "be4904c6-b302-4899-9a34-ff635b625926", "comment": "Malware payload (QuasarRAT)", "value": "65ebc9e71092cda7427d984d72fd1100", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713006, "uuid": "feae1b1a-c21d-41f8-b3e3-eac9d7847ad0", "comment": "Malware payload (QuasarRAT)", "value": "d11adee9f85e064f3e06428ad2a02758fde890bb6ec7ad37b261a3e57d5dd98e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713006, "uuid": "20273430-9150-407a-8650-f04e010735c2", "comment": "Malware payload (QuasarRAT)", "value": "76e4fafd7f36253041668a8395690cd90c952fcf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713006, "uuid": "8290b957-0db4-48fc-be15-9b44e1eba0d1", "comment": "Malware payload (QuasarRAT)", "value": "ee327871913cc9252c527a4de83876c39574540695486a9fd05733faacd6d112166ad9c6c11f4c480a1f34af36325adc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713006, "uuid": "b52b856e-ab04-4ddb-ad90-884c148f521f", "value": "T1D8747B1377A4D63BD1FE173AA03206155BF0D806B716E38B5A6865FD6C223868D81BF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713006, "uuid": "b6581128-fa3d-49a0-8258-389b7886376f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713006, "uuid": "75f11414-6919-4b4a-a0f4-f7fd40e8320f", "value": "6144:T7NHXf500MvlxHjEUKacEQaFFbM5lUWSXfI0vl9tdK:fd50TxHjwICdSXfI0v3tdK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713006, "uuid": "68edfe4f-d2f9-48c8-898e-f4d6dffef7fd", "value": 356352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713006, "uuid": "7268fc15-b9cf-447d-98c8-94bcf45faf91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713006, "uuid": "6ce89d9f-86f5-42fd-827a-a27e33c67d73", "value": "SecuriteInfo.com.Trojan.DownLoader27.59888.494.19129", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34afe74b-e1ef-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707794, "uuid": "5715b421-5961-4c0f-a5d3-169fedabb045", "comment": "Malware payload (Mirai)", "value": "6775927fc83ea802f4b5601b0cbc4cde", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707794, "uuid": "23a553d9-bc75-4493-8ca1-7ff1f73795bd", "comment": "Malware payload (Mirai)", "value": "d12b869e44fb5b9cd69aeb53bca543e6da3f5811583093889a0e32a026b88af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707794, "uuid": "c8623e7c-7ac1-4304-917b-5fc9c6611d31", "comment": "Malware payload (Mirai)", "value": "28b77b0439306f30427ba81c0112d1ca42f1ceaa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707794, "uuid": "8f5e4e5c-0252-4d6e-abc2-c7de929639e6", "comment": "Malware payload (Mirai)", "value": "f7e4dacd6bec1c36784e71545f5078b62d24889b596e845dfb42f1c394df19715afc48b0e797cc043342843062a872bc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707794, "uuid": "644fe756-99c2-45a9-87fc-c481ea99d51d", "value": "T1F7735B21BE762D2BC4C8747E21F34735F1B61B5A25ACCA1A7EB20D9DBF155103103ABA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707794, "uuid": "320eb419-5d30-43d0-b752-d48e13866f81", "value": "1536:JHcSBPYnJcO3TrSHx/fvMAGVWXvGHVTPoQ0v09ZmgZZOrzA7uh3:RZyJcCTq0LoIbEmQbrzAo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707794, "uuid": "94ca6e49-d8d9-4a30-8046-4412a5ce3f5f", "value": 79484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707794, "uuid": "a752eeb9-4565-4c4b-a8d9-dd071a17004b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707794, "uuid": "fee4f964-c168-41ee-8e7a-e69e96a4d1b8", "value": "nklspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdfdd558-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747216, "uuid": "43292745-5cc0-4b09-9f21-ebe5aab5c00b", "comment": "Malware payload", "value": "9b2046137b18a4e430b88046287406f7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747216, "uuid": "da5119f8-507c-4554-9c2b-b40cddd9895f", "comment": "Malware payload", "value": "d21060a5a3cbc93ef787db3c6ee97e884fd8f9635b7e36a94aa9777d100c304e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747216, "uuid": "b4167fba-25ba-4ab2-8ecb-e4755216649b", "comment": "Malware payload", "value": "346b45d383673c900bff89e9aafef5e4da651c7a", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747216, "uuid": "3b5266ab-e1c6-4e37-8282-e78c25b8c291", "comment": "Malware payload", "value": "48a65a737d1ab4d6dea68b28e38f226e6776c666f9ab289a8ddc8c312675d6a0003d3687c3d5c088956dd78fdc11d099", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747216, "uuid": "8efb1068-0224-4faa-866d-ed7da49657e8", "value": "T183634AE46C383B5D7016E2EFA84A9FE53005A9AD56CF7EE06E1CA330668D5731F914B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747216, "uuid": "3194f085-317a-4fd1-ab0f-62d7aa689fd0", "value": "768:I8w/h62/jWs6oS+xISN0vqq7+BadkfScBYrwz2y8kTAlGB:I9l/AoSSMf9usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747216, "uuid": "0ee9b82c-cb02-4e6e-aeeb-15e1771b0605", "value": 71526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747216, "uuid": "6eca9683-38de-43f1-a98b-cd20edf29669", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747216, "uuid": "8c5d69c0-ea0e-41f8-98e9-a06fc8d715e9", "value": "invoice-1645080830.pdf (78).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "139a8c7e-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779035, "uuid": "113157a2-98e8-4862-9c70-f1f9c3dd2847", "comment": "Malware payload (Mirai)", "value": "ba24e5191b00064f5fce29ec04969058", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779035, "uuid": "02dbfe35-772d-4631-b9d9-ae82a18bc668", "comment": "Malware payload (Mirai)", "value": "d2850debd2ce7e8d46571317f2afe7f8bdba47d53a8d8534c7c94fc3726de1a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779035, "uuid": "9a7cfaee-063f-4dcb-be22-e4c8448d36e1", "comment": "Malware payload (Mirai)", "value": "eea420adafe87cfc973a1cffb03b0121f20b5e0a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779035, "uuid": "568b91c0-bb70-42fa-9211-8501ec47bb0c", "comment": "Malware payload (Mirai)", "value": "1ddd2a31cdccec45fbbcc1a92ceec17c833f2679dcd56ef163c3465fd732c60a9d7c3c4251c6adc6330a271d598852f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779035, "uuid": "cbbf2064-35ec-4512-a292-566a641defd8", "value": "T1D183AC33C93A0E68D84845B4B0B18FB65763E11580972EF7495AC67AD083EDCF98A3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779035, "uuid": "172b35c1-827a-4a9d-a726-4970b69fce89", "value": "1536:Ngynxf8zTGxxM4ARfRUKpPL6hCeRCaF2HzHyR:Nxnx3xGZRbpuCeRzqS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779035, "uuid": "fcba6a14-9d03-443b-a6b5-34f314a0e21d", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779035, "uuid": "9e03206b-9518-46fa-842c-32f1c31b9e05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779035, "uuid": "12442f26-0872-41d7-b5bd-4c092a5c8742", "value": "titanjr.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97c8cb19-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778827, "uuid": "ecad996a-1570-4602-8d5b-99cc92d3d6b2", "comment": "Malware payload (Mirai)", "value": "72aca74c21050854c924765413177dec", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778827, "uuid": "381a5230-8b16-4ca3-9c6a-9a69fd64234f", "comment": "Malware payload (Mirai)", "value": "d36f0bc22c7bd42ac4bfd449d1163dbe7b21e709e2d4f49febcb151c963a6ca2", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778827, "uuid": "687c6ccb-581d-4aae-8333-74e732c46b87", "comment": "Malware payload (Mirai)", "value": "43978306f0f235eab2ffd1bb7611fd1831c26c0e", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778827, "uuid": "63bf1553-a0c5-4a3b-8bbb-538991533b25", "comment": "Malware payload (Mirai)", "value": "843b88b03f7d86c2a5534ed239586e3528cc5aebf95472043b86f254cc8832e8ac313636d2a1e11e4f1567addd322e4c", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778827, "uuid": "923f6077-9339-4929-a769-9fadae1d9d20", "value": "T150511B879251567138E7BA27FDF98F1CB1C1A29128923F16EBDC28E5528ED883046F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778827, "uuid": "7c19e056-bcb6-418c-89bc-599933ed4be1", "value": "48:iKxhmlKHnElKSCXlKWePlKa7azvZlKadaFvjlK9NV9z4gelKLjclKCSvlKj7jzqg:iWmlKElwXlAPlj2zvZljsFvjlUxz4ZlJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778827, "uuid": "7753618d-46e2-493d-9d6c-a47e3c4b3e57", "value": 2959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778827, "uuid": "54dca851-8b13-48ff-9a8c-7bdc69ab1753", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778827, "uuid": "b0e5eb96-5d14-4459-97e9-b1b2bc40b6d3", "value": "1.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65a01c49-e222-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766729781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729781, "uuid": "ecf10a3a-17c8-4b2d-aa15-c0c1b013036d", "comment": "Malware payload (Mirai)", "value": "ee6ed007e6cdd72e0828425fe6f76dd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729781, "uuid": "a3d3e429-d4b5-4932-9c17-127aadcb4431", "comment": "Malware payload (Mirai)", "value": "d3c715834ba5521d3afa07383697d25f81cb97794131fb89b85bc5bab7efecc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729781, "uuid": "b03bcc13-3826-4486-bf95-3be4f9257096", "comment": "Malware payload (Mirai)", "value": "5711d1aee8d5b31fbb19c612a188bbb307f21445", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766729781, "uuid": "de468ecb-3f3f-46ce-ad9d-91e62ec2f8a8", "comment": "Malware payload (Mirai)", "value": "ffaad3c619fa28ddd42cb448a7b030a3c0eef58576d99f5de3e25023c339e79d0c62f4711d081ac837a93e6e25caadca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729781, "uuid": "477c2003-1628-4d34-8d6c-7d7a16ca4926", "value": "T1207302C9B4E3680AC9BFF43FE8CB23A41C94B476D21DD66E36510458E13E4DBA9C84B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729781, "uuid": "6efd41b7-4f4d-456a-a074-4c594eb82422", "value": "1536:L01Z9yCiakfmjyMw+57Bj1it2wFiTJDW0:LKEaRG+5Z1it6TJDW0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766729781, "uuid": "bfc3c291-15d4-412c-9a3c-2d3947502201", "value": 80168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766729781, "uuid": "5b2e8b2d-9771-4c61-ae26-6fc7e2ba5213", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766729781, "uuid": "eef319c4-0396-452a-818e-7926cf3bf250", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf4cb23b-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711919, "uuid": "c8cd80dd-6e77-47d5-b60d-9e9611a4f6bd", "comment": "Malware payload (Mirai)", "value": "ea24477ed03885d1c2b88a7b7f731b7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711919, "uuid": "5c9c3d27-14b4-4c18-8e69-e0bfc57cc0c8", "comment": "Malware payload (Mirai)", "value": "d466c0e128de1364822d42238970c725f730bf2e9d13c482a83dbed8633a2f43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711919, "uuid": "0f25756c-9b75-45db-b48f-4dafbe15d5dd", "comment": "Malware payload (Mirai)", "value": "876d7f1ad69f63d0b436baa55ce12be1316b705b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711919, "uuid": "6dc0ccb3-d43b-471c-8b94-c936bd6c05d0", "comment": "Malware payload (Mirai)", "value": "1fe4e09f3ec3eb0768c42c4f86ec4ca76072016236a3d3ca9d4a3f72616061ea0b9c9d6e22d3193ccaa0869902010d9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711919, "uuid": "404ad64a-f5ca-49a5-b0c3-cfca17c9e276", "value": "T1EB633BC5AB53D4F6FC1909341077E736AA36F8353169FA93E794E5227C12B03A60B29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711919, "uuid": "f721d87f-d4c0-4c85-96f0-75481b67bbb8", "value": "1536:ExxN1FP+TcUMU1QMzauFvwozWjWL9Gxlyr63pCOxxTK3PRR7:EDN2TcJUyQjzWjUoxlyGZCy4T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711919, "uuid": "9d0af10c-d9bb-4354-b1ee-bad481154a26", "value": 68048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711919, "uuid": "c9513e94-036c-474a-89c1-4aac452fc123", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711919, "uuid": "eb2d203a-8bcd-4f50-9929-0e75643ff2a4", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a8a6032-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766775289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775289, "uuid": "1934d120-e572-4cee-b188-d6d9de007add", "comment": "Malware payload", "value": "539a432f76e0c56383b7bd112bc37aa3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775289, "uuid": "779531ed-8c01-470a-89ba-34316416e902", "comment": "Malware payload", "value": "d469435613d1c49e14cbbbe5e8b390941d007a032cad836f34954abe61b9c715", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775289, "uuid": "0d6be8ce-dfcf-4392-96cf-cdff0b6a4cb7", "comment": "Malware payload", "value": "2942575bcd9f8d4ee857fca1d729cc0b93c2c168", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775289, "uuid": "980dc452-f37b-4e65-b8c3-fabc2545b661", "comment": "Malware payload", "value": "23874fb326a80857243ec2d313f2f4910a30584bbaee35dfa0231c80924a076be6751063c14693e7f9ea1184dc90b92c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775289, "uuid": "4ae1b58c-1f6c-4780-87ad-17727717867d", "value": "T1DDF73376D73C41D1F8985EF9A2B20A1EBF43C7B72D1A2C2D58EC06B72155B6021C9AC7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775289, "uuid": "ad1bcf5c-e066-4f70-9542-91feaa67072e", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775289, "uuid": "7be9f906-0026-499f-a29a-ea4dd26d95b5", "value": "1572864:U4gRRhDX64HEoGJx3qNFQMB+8nDOubcdN/DK/jF54BaiR+2vF7:U48RFX64zGJx3s+8D5cPajckk57", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775289, "uuid": "d1534f11-9541-4be1-83aa-eb438a624ffb", "value": 70347991, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775289, "uuid": "b0d9ba1a-ad42-438d-bd92-8d364dd68e1d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775289, "uuid": "a152e222-953e-476b-8ceb-345e4d07dfb9", "value": "vampirebattleInstaller.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "876cbb4a-e2b6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793403, "uuid": "ba3a9ce9-7a51-4459-b91f-82a599ba1db7", "comment": "Malware payload (Mirai)", "value": "94d23e41153ef3e3c30797bf43fa3368", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793403, "uuid": "2829eba3-05fd-4b04-881f-c5d5fccc322d", "comment": "Malware payload (Mirai)", "value": "d482769a4860f4dc2a1e4d497a193940a04fda352c54036e3be1d9c10a1eed32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793403, "uuid": "e32d8d45-c3dd-4688-8be1-a0fe9afa088f", "comment": "Malware payload (Mirai)", "value": "50b2f65458e3a3a1372880e5c97fe517d2fab10e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793403, "uuid": "52126c03-c663-499b-82f6-eb65f62cddb9", "comment": "Malware payload (Mirai)", "value": "446be7733c650ceef1decdbf30e0493cae7972ba449ae70310c955df7852cb2410254f04a1ed7e9956ab6963ec750848", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793403, "uuid": "f5b44f4e-3c25-416b-a106-555a9316b113", "value": "T109A3D61A6E619F6DF768C33647B78E21A74833D237E1C582E26CE9015E6034D681FF98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793403, "uuid": "abbba198-8cd7-4da0-926f-a932741dcfb6", "value": "1536:Hp/wqpa+aUc2GjCPaaGLIKtuzJi+gy+e8y++6P9ARZMscoVOMrdlbVR5BT:JwsahItGQz8SJc7odl/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793403, "uuid": "09130eae-20f1-45d0-bd64-086f809449b7", "value": 101208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793403, "uuid": "0a52d57f-0e9b-4233-8495-0e17741441c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793403, "uuid": "5b0ddc18-dff7-461e-a574-9e148b98cb65", "value": "splmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9e77d8-e1f6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766710894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710894, "uuid": "fa51d1ee-88c6-4746-8de3-428a5a418cc6", "comment": "Malware payload (Mirai)", "value": "7ad9ce359572c6bdb53d0203543fddc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710894, "uuid": "d3d833d3-c3bb-4c34-9109-7693a725de9a", "comment": "Malware payload (Mirai)", "value": "d497406a08ee6ba9b6484c8a4800697b2b650522484d3d41e71ab43e06854093", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710894, "uuid": "650b7ef0-ab8b-4042-97c9-9a6fea84c36b", "comment": "Malware payload (Mirai)", "value": "1d800ee83b5f3552d001da38bddbd512ee5e4733", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766710894, "uuid": "3c166e54-ae48-4516-8008-eaeb50244c50", "comment": "Malware payload (Mirai)", "value": "33454f491affca98b9e4ffe0a862118cca80792086f1eed8b54803c8496e7adc66dcbbe1dd69a60dcd50c98a2d19a53f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710894, "uuid": "a845c9cc-810f-4237-9484-8927eb2e4cc4", "value": "T1CD635C21BE762C5BC0C4617A61E34A36F1B7574A647CCA2B7DB20EDC7F246503203AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710894, "uuid": "09b9e821-7682-4491-92bb-655753ab2cf6", "value": "1536:P/SZeMMbVVWEM4HVgtjb5MmjmzN/o9VAT8zm7uhUo:HSbQrgjVfAdT8zmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766710894, "uuid": "5c96c05b-aa2f-4810-8562-b851ba601bcf", "value": 67236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766710894, "uuid": "e18df580-d84b-4389-a28b-970aa134a927", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766710894, "uuid": "b8318391-8347-4fd2-b3bf-519e283bca67", "value": "nabspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dc4addd-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779025, "uuid": "9e95c909-376c-4d34-a43c-417fd880ac8e", "comment": "Malware payload (Mirai)", "value": "3398667ecff4399cc95ef7d81e771c05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779025, "uuid": "1d9c560f-3b6d-4d6b-92da-4c140492d1ce", "comment": "Malware payload (Mirai)", "value": "d4d594aede211b92ee76bd0314c717d12805103532db2c4470364bfb5c1e01eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779025, "uuid": "6ce3c6a6-0414-4ab5-bd77-a3ff1cf1afc3", "comment": "Malware payload (Mirai)", "value": "4844c8198e8da4fb0cb70f6059866988c57e1061", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779025, "uuid": "d196d774-f9de-4aeb-bd40-8e292cb22bc8", "comment": "Malware payload (Mirai)", "value": "ee1d1290aed5ada11c5bb93d4408fe00a2dd13bc18bc7fc4ae42690aec4b3d7f8e7d283413e4e551f0e05014586474c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779025, "uuid": "f43dabe7-a11d-473d-ac96-b22f3ea423d4", "value": "T167935A22B539093BC5E4953722F35326F2F6438A14AC8B2E7E710E8EBF156D026477B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779025, "uuid": "043f4cb8-9d0f-4840-9119-e63950259242", "value": "1536:zCTLJ0Jld13m/EqBtgaIvStPhYm5roASoAtem5:GiLuWpa5hYOc4m5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779025, "uuid": "0cfc7ac3-0040-44b5-818e-5ccbd62fc22a", "value": 91976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779025, "uuid": "c19f0a0d-bc71-4fa1-8d8b-f0f1be1e6a83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779025, "uuid": "4bc01119-21fa-4597-9abb-bc0616456744", "value": "windy.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8865bdd-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775419, "uuid": "94f0cfba-a1d3-4076-9444-305df4062b0e", "comment": "Malware payload (Mirai)", "value": "0b7c3e9a66a933922e77c6e289a98e07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775419, "uuid": "c0305ca7-c3de-4ad1-94f7-60a9e5e172d4", "comment": "Malware payload (Mirai)", "value": "d555ef42d0772908af6800ebbcc3ee16eee184ea276421b688158b8faa691fdc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775419, "uuid": "384a57d3-15c9-4a71-b87f-5172934c19c5", "comment": "Malware payload (Mirai)", "value": "854ab6bed8b37c084e10d0e065c65519c0ed69c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775419, "uuid": "07960f6a-2d48-4dc5-b906-2d2762363656", "comment": "Malware payload (Mirai)", "value": "5d8a1b27978e8a039d7753a7b5cae63e53ef8a4ece35523f6036134fb5ac366d495f8db275814871e823eb3572eda4ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775419, "uuid": "a5c55d52-421f-4b2a-a2ac-6f3ace26f1e3", "value": "T1FC43F25275CBF825C2F05577EAAEAFC5F02B9FE3A95E3520A1150F113110AAFAEF0485", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775419, "uuid": "4e748821-5b6a-4e1d-ae62-ddf8db825a24", "value": "1536:rNt9aZwDxO3ZtXUmVOU09MRm7Q4VPdaJXfgPnvt:rNaQKZtXtOU0om7Q4jaFInvt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775419, "uuid": "2fdc1926-37af-499e-be67-90abd3a237c5", "value": 59496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775419, "uuid": "51dc6c57-d82d-4f06-8a7b-fe0015d169c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775419, "uuid": "81311088-af8a-4c29-a4a9-89946775b0cb", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2003a8f1-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767459, "uuid": "0b23cff0-3525-4a88-a20e-e95c0cbe2a38", "comment": "Malware payload (Mirai)", "value": "6b2b45b5210458e1c69f34d24bc8d8fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767459, "uuid": "cb9fdd9e-576c-4cfa-965b-d2a0df3bdcfe", "comment": "Malware payload (Mirai)", "value": "d5767927fc974514fb875c55a0a5ec7f1b3bc69801f6b2f5e59295762fd14cbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767459, "uuid": "35200596-8ff5-4d5a-b615-e8ba4d5adce0", "comment": "Malware payload (Mirai)", "value": "f3463234622590c145750a36e353ee540bc96b72", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767459, "uuid": "73519695-1fcd-40cf-af1a-1f0238aa5ffa", "comment": "Malware payload (Mirai)", "value": "b0890f31236910a873bf534bb3b28cc504ce75ab43400a0184f4cc3ee0d7d0d582e1ba982a999b4c82542e5bfe200eeb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767459, "uuid": "e5f1d77c-0628-4b54-b0e1-73995576cbb5", "value": "T104A31806BF210FF7C86FDC3706FA0B01298CA91B15B63B757634E858B64A5DB19E3924", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767459, "uuid": "fadf0898-c0a7-40e5-928d-d55fa0da301c", "value": "1536:DP+mE2skxZTO0Ck5Yg6PbssqF0//o5/Qhptrl61d6O:DWmLq1Dsb86Yr4X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767459, "uuid": "183a1b31-1717-4e99-89b7-4afc4d8c8ed4", "value": 104528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767459, "uuid": "61b26ba2-2967-4835-9bc1-6e5d5cd21b92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767459, "uuid": "f2417ac2-97eb-417c-a673-3c33fda2259a", "value": "debug.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef4013b-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747379, "uuid": "5ea95dae-73b7-476a-ac9f-322b74bea94a", "comment": "Malware payload", "value": "8554092d15a9b2b6f96273e061c5081c", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747379, "uuid": "3e744115-2fdb-4ea1-a1ca-45cc99ae07c2", "comment": "Malware payload", "value": "d5a1b68939677254984010c3f3e29d34ee8a64eeb7a54cfa2c839b122eef79b7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747379, "uuid": "8533cbba-70aa-4ab7-9c74-8573f7d60ecd", "comment": "Malware payload", "value": "cb7f880d1ed2065004b28fb075946a5f0b5156dc", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747379, "uuid": "dfe8bc85-fb54-44d9-9b00-745c441fffaf", "comment": "Malware payload", "value": "a5156214294da8ff21cbab06ef3ce561fbc1e43bded0b0c1bd40bb1a4b147b5775ba4b795e8e6aedc94452bd5cff0753", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747379, "uuid": "1f82af2e-c520-4eb6-b0b7-f0bd95887ccf", "value": "T169734C17BB428D9D382747F3A068D58076FFD62EACB987F4270B7C0992CC88B44E5959", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747379, "uuid": "c60d4072-eb64-4e9c-b000-52fee405b6cc", "value": "768:I8w/h62/jWs6oS+xISN0vZdHAHfHPHhdHHHaHyHJdHeHxHxHaHqHEHuHNHvHBH2n:I9l/AoSSMZGbohzXNusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747379, "uuid": "991941b7-adfc-4aff-bbcc-f239d1394332", "value": 73491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747379, "uuid": "7a5cdbf5-43dc-4919-9a50-2bfd14627618", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747379, "uuid": "f1f33726-dcbc-4106-aec6-75436bb6beaf", "value": "invoice-1645080830.pdf (40).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "552f3c0c-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767549, "uuid": "4c3db783-1abe-43c7-b267-035abdcc282f", "comment": "Malware payload (Mirai)", "value": "25c22c59259f62130667e33853e00b06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767549, "uuid": "7415c32f-c2d6-454d-922a-f9904890d98e", "comment": "Malware payload (Mirai)", "value": "d73eb75b1bdae347939adf14138571f4c419e18867e33726deb6dae2a6b606d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767549, "uuid": "3c5cd172-db21-4a54-b5ad-fbe71fdfc934", "comment": "Malware payload (Mirai)", "value": "56733b050c29c8a48cfb8f4b71469197b448e3fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767549, "uuid": "4e50c9c4-f496-445f-81e9-efe4e88a0142", "comment": "Malware payload (Mirai)", "value": "dc0bb47adf0757531c3804559bd7670f49725275d1718084f201329aa1da81a57a364cbb91fee443f1f40c54dd02cff5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767549, "uuid": "94672e05-1f77-4c31-bdb6-cbafb1c365ee", "value": "T1A393F706BB650FFBDCAFCD3706A9170525CC551A52B93B3A3674C92CF64B21B0AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767549, "uuid": "02cbc096-2ff3-4e52-bf6c-9f863783177e", "value": "1536:EDxcuHjuPawlXkcAJLUIIz6TQUW1YM7AZGmvi4N9z0zkV/xoQs/xgT:E9cGGawlXIJGj1YmAVNgIo/2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767549, "uuid": "1d729919-3015-45c3-a62a-1b9644ad81d9", "value": 93496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767549, "uuid": "6ee66186-fe66-4e70-b3e5-f9e6b717aa70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767549, "uuid": "018575ed-47f5-4a49-8cc3-ff49dfcdbdce", "value": "pmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c59c665e-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766772032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772032, "uuid": "e4d33d70-55ec-417b-b213-cb209198bb1b", "comment": "Malware payload (Stealc)", "value": "18a5ac918c8adaefb3ae6c93d802cb19", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772032, "uuid": "84abd927-5c1d-4360-8cc9-505598a31a85", "comment": "Malware payload (Stealc)", "value": "d74ae7334478a9adb119a68fc56d43b3d314a63d4ebdd3308e4ea5c91c333fb1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772032, "uuid": "cf9305f4-eec5-43ea-9095-a6c27c869479", "comment": "Malware payload (Stealc)", "value": "66223509d0083fbd05b5156f19f5ef85689187b9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772032, "uuid": "f89ecab1-1692-4117-b3af-9a35c8feaecf", "comment": "Malware payload (Stealc)", "value": "cc75de0aa65ba0afecbc8272ed57c2c81afd786216380f016a3867d93086a289c4adf82147abf9cb1ac880b48c216800", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772032, "uuid": "b7e49119-d99f-4df1-90de-f88582461b97", "value": "T12C073337F268913FD5AA0B3209B39150993BBE606A098C9F03FC394DCF765611E3B55A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772032, "uuid": "2a21a972-8615-4d7b-9685-34010beabc1a", "value": "ad8c67341e87ae242bae94df127c88fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772032, "uuid": "62d4ce1a-6f04-402c-a54d-f4f51b15aaca", "value": "196608:n8jd3I7FpsVOFroRCZpHo+fRz0Uef0V9/gdvzf5VsswAUzvHBv64Alde63AACc:U3I7gVOFrHtNyMV9/SzhoAyBC4aDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772032, "uuid": "e0930381-f20d-4d2a-a037-0bde7d4128a0", "value": 16787892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772032, "uuid": "f71924e0-c059-441c-869d-5a51387dc875", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772032, "uuid": "a4f7299e-580e-49f5-93da-f15b82ecc8bd", "value": "18a5ac918c8adaefb3ae6c93d802cb19.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24dd61df-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767468, "uuid": "523056fe-84ee-44fa-9cb3-4a707dc2b935", "comment": "Malware payload (Mirai)", "value": "572cdf0dcb04d08b0f5214b696fd12f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767468, "uuid": "8efa033a-bf27-423e-8fde-aed0a201af42", "comment": "Malware payload (Mirai)", "value": "d7db84c019b57a494fd51b3cb62d8a4b5d2c0710548dc2c4ac8775620c8849d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767468, "uuid": "c98b6ed6-b508-4d32-a791-6b544f262845", "comment": "Malware payload (Mirai)", "value": "383a771b5eb9e2e36b91c8383650997fe9e59141", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767468, "uuid": "7c826ff9-75ad-4e94-9434-df48a53ee476", "comment": "Malware payload (Mirai)", "value": "0be3d6e26be20604ec0b24fa63b78c3fe6fca490d96423b755d0d193d2a778260e97411665717c4d1a2ef6d1eea15d6a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767468, "uuid": "8071b97b-35d8-4037-88a6-78b879001ce7", "value": "T15443027965908902DA61DEB89C9F0042EE574FF0FCD403A3624DCC98E7829CF13AA61B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767468, "uuid": "f4a31bfc-5237-44de-b650-7ef02ce9c19f", "value": "1536:jtrP365ynDlnFILNq6hzyTVlzt0rrGHIrL+QrEJU:jg5WnFII6Vyvzt0WHiL4U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767468, "uuid": "009d6919-f274-4e2f-bae6-e742505d2038", "value": 58860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767468, "uuid": "a6885646-c53e-4752-a6c5-3bfa944eef9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767468, "uuid": "82bbfcc6-ad0e-4507-8d5f-877d2b9d2dfc", "value": "parm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "140c00df-e2ab-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766788485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788485, "uuid": "316925ce-6010-4c78-9169-7527746243f0", "comment": "Malware payload (Mirai)", "value": "af02d019834ef0159c7de2e029071a3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788485, "uuid": "28f7d226-be83-4015-b24a-82a98b71a603", "comment": "Malware payload (Mirai)", "value": "d809ef37fa6cffe8c6971fd4b5fec21cd72a5df5a3a62ba327555854eaabd706", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788485, "uuid": "7056e6f9-32c7-4ae4-99a9-f9914b0c9a8d", "comment": "Malware payload (Mirai)", "value": "e18b6f3fed73e6cf5a4d74adbb1da8bb7cdf5bfd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788485, "uuid": "d61fcab3-09d4-48a0-9add-e64c062920ea", "comment": "Malware payload (Mirai)", "value": "6845c12c14ad2d0422c011cc6fb5838b9afaaa2a91dcbbd6fe8c324e16cf8cc5e3910aec4cdc669f846810a592241ee6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788485, "uuid": "e82b9297-b371-47ce-89e2-0e9d070a8ee1", "value": "T124A3E7067B650EF7D85FCC3B4AB95B45288D960B22E83B763974D818F24B25F09E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788485, "uuid": "c247b174-8095-43b8-84f0-502245081329", "value": "1536:9TEwfivtS4C8IGbcmv0nFI0O0sP/CwoiK9mN4ozFHlZ15GT0VR92:9ofvtJC8rvAu0/0118Tu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788485, "uuid": "154203ec-2437-4815-b384-7a00ca9f9a13", "value": 106168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788485, "uuid": "81f94cd2-c0eb-4f11-829f-c5d8d1197ae6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788485, "uuid": "f54d8b68-bc25-4cf4-b38f-9b6cfbdff16f", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce8922e-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747107, "uuid": "f5047e3c-f1c5-430d-b24c-378f1da8d636", "comment": "Malware payload", "value": "86ab1956618568a27213b2b0bee6aae5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747107, "uuid": "04463e16-17e1-4d33-a5bc-9e96fba7aea9", "comment": "Malware payload", "value": "d8e736fd89d95f93be0d37978350b0eeced70e6e333fa6900e3dde225e8c4fa7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747107, "uuid": "72ddeb45-eca6-4365-92c8-2fc5de3b3539", "comment": "Malware payload", "value": "f623ff5ab281b9da9fd41c70489d929316865a83", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747107, "uuid": "175c3249-0ec1-4939-bd70-80e4b563f459", "comment": "Malware payload", "value": "6c0759ac9cd1e2932623aac25aa428bb62e4f41f8c05cd59998b01d053f991b5db5cf46a776bf80e47ff66f4520a803f", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747107, "uuid": "ac6e609a-4686-493a-82e4-d2473716a72d", "value": "T1AF73093099FA34B95CF28934EA550ED1C1FF3B65FE02B47894DA7612EE60F076529E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747107, "uuid": "e4753095-c453-494f-add5-dea072346aaf", "value": "1536:I9l/AoSSMdSjTyP9fd/tdMffE1OfeXXWzaeZ0RJIlkPV8/TYkE50E4mj/ujlYeF+:I9l/5MxIusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747107, "uuid": "3dfe5ef3-d9b7-4c29-a603-ef335b9b3e5a", "value": 75370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747107, "uuid": "a2b641ce-3575-487b-bb3f-38ade176e725", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747107, "uuid": "8b08cf9b-9661-49e9-b76d-baa99d9d8dcc", "value": "invoice-1645080830.pdf (99).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f52f0dc8-e290-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777266, "uuid": "b0fdc662-6153-491d-b456-cd5c40f3e664", "comment": "Malware payload (Mirai)", "value": "d30a035752056fafff3d773fea5a4731", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777266, "uuid": "bafbde85-8b01-427c-953e-b9a07a119bdc", "comment": "Malware payload (Mirai)", "value": "d8e98e4dd365b3dbbe322504c3ce1ce69930dbba8572167d2ad1531594079c27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777266, "uuid": "0f683f81-964e-4372-89a0-c67bc8adcbbe", "comment": "Malware payload (Mirai)", "value": "35b37c644dabf6428ce5ef71ccc9d571dee96510", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777266, "uuid": "58c11092-423a-45c3-93eb-a7a8516c5cea", "comment": "Malware payload (Mirai)", "value": "457947a14d51faf3f3b6ace942d975a93c8bc0ab9ad8c8bc2bc50940380399df5969eec5acd728f4919026d6095d4ff3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777266, "uuid": "d81fae3e-fdfa-4673-b510-a7e6ac77a88f", "value": "T1C6739E36C46E5E94C4586674A4B1CB756B03B000A7A32EFB6989CAB54003DFCF68D7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777266, "uuid": "caa5c121-3d84-4fde-94a9-8b45ffff2f9b", "value": "1536:pMaUSJ8HwoSzbXo2Jk1qcUbf5ClhvyCVRUD9T2bVR:pMlHHUH0QbhClhvyISpT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777266, "uuid": "80c95db6-7426-4904-afe7-62f01c19727d", "value": 73664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777266, "uuid": "dc5b815d-5c0a-4134-9fa8-fbb7ba0ffb5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777266, "uuid": "3c277292-28bc-43df-933b-a809c215880d", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a566200a-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772837, "uuid": "689feb16-3731-4085-9ba2-6c5f26c30226", "comment": "Malware payload (Mirai)", "value": "e542b79b5d7bc5880aff6ab58547232a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772837, "uuid": "730f5101-ad97-4a4b-af92-eea9687f96cc", "comment": "Malware payload (Mirai)", "value": "d940b6bfe454a230367949669441ed34b0a932b7a5a5e797316c8efe5a11b7c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772837, "uuid": "4cae9e10-ec49-4f68-8405-95d48b1f3bcc", "comment": "Malware payload (Mirai)", "value": "2e768a5eb470a124fcdcd15a9bf3543ef9388886", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772837, "uuid": "e2175c68-fdde-424f-8eb8-6370d5128fa3", "comment": "Malware payload (Mirai)", "value": "9d6dc7d2f7203913cbed4226562254f48768b25428a35c32e00d1817292097552a50018601b2f1c920905be3305cc56d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772837, "uuid": "78efa6bb-241f-4dbd-8750-4e8af9543d21", "value": "T191630150041A6E26C1E0ABB6CC25448D7FF715ADC4F8BEBE0A3973E581E546C3576EB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772837, "uuid": "6c9aa37d-17a4-4e04-b922-8d1888da3bad", "value": "1536:2I8n4faSCSzlvr3VsTQF25y5Vai19hr4UX2/CHLcWOpKj8ijcAYzU:hxaSB2QFMyjdDqWOp48igAY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772837, "uuid": "831031e7-c5eb-4570-90aa-c9fb1166073c", "value": 72332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772837, "uuid": "0e5fdd5b-d426-4226-bc09-af88eac49ee5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772837, "uuid": "a76710bf-65b4-41cf-bd38-7c3ebaf83d73", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dd9a49-e21b-11f0-a129-42010a9c0007", "comment": "Malware payload (GCleaner)", "timestamp": 1766726769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766726769, "uuid": "dc5cecb4-ac14-4315-b206-4fc0cd9ab181", "comment": "Malware payload (GCleaner)", "value": "76d65ac53796a7f66108081018447ffc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766726769, "uuid": "7f11bc7a-dc26-40cf-87f5-4aeb75424092", "comment": "Malware payload (GCleaner)", "value": "d955d46ec08ca93f77e12023d637bdddb55799a20b494054dbbf6236d808dafc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766726769, "uuid": "02fdf3c4-53f3-43a5-b819-bedeee1e89eb", "comment": "Malware payload (GCleaner)", "value": "820ef436cc5a56b6e7190664796aaf19cb097f06", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766726769, "uuid": "fefb8e19-46e5-4b8b-9634-96264f08ac18", "comment": "Malware payload (GCleaner)", "value": "0103c9991fe56cfd7c29a22640bffb70ec8d685f9a7377efb4e0af0129ff1f51eba5423a9e5c727b950605ef9d9f7d21", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766726769, "uuid": "219357ec-ffb1-4d33-85b0-e423c708ad28", "value": "T1E046E067DFBD802BC5B3C2756C7E46629C1F3A41F594482F4B875BBD262828610732FA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766726769, "uuid": "fbf1a3ab-dfb3-4c1f-9284-e0ee07f89a82", "value": "d9602d58db63e796034d7dc7a7754fb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766726769, "uuid": "b2a1573c-6694-4903-92a4-0135fd9bcb79", "value": "49152:wS89bJYLXiT7xBQPTwnnJCwCDBXriN9p2+zBZ+vGgivtMHK98hIEhD/sI:wS2bqG06IiR2agivSH+8tLZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766726769, "uuid": "da65cbb0-d515-42e7-9230-a90dcfd9e872", "value": 5560080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766726769, "uuid": "768cd0a0-ece8-4911-8379-92176409d75c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766726769, "uuid": "cbc1c42d-6709-4dda-8ae5-000bddacb44a", "value": "SecuriteInfo.com.Trojan.DownLoader49.20261.16528.9036", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "964a0cda-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747472, "uuid": "f28b04ae-8fc6-4728-81d5-8aa0cafeb194", "comment": "Malware payload", "value": "26b058ccb84d325649752afda231a3b0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747472, "uuid": "eaf96630-f53b-4884-aeb8-b2a5e1a61301", "comment": "Malware payload", "value": "d966f47f15f78174bf5667df0230b55d21af0258ff9a06f22c3c3a912a4d85dd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747472, "uuid": "67aa9694-c6fb-4a35-b1de-81ebb6d12977", "comment": "Malware payload", "value": "33c23d8ef0c35e4aadbb8d26b4301c158c5e4fc1", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747472, "uuid": "cdfdba8e-2262-45bd-8d73-7d298e528c18", "comment": "Malware payload", "value": "396bc9a607b5c2abcd7edb83989313211ab69fd73ffe66df777d0597cf60d1be84d0e8b6e64939a058d8c6a4b4018f29", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747472, "uuid": "95535a86-82ef-400a-8bc1-ced6b06beb7c", "value": "T1A9632B4D776E48CC2C97E2D6892045C926740E137BCF7884BA2EE130637974A7B7B5C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747472, "uuid": "56a1460e-b55d-4590-ad5e-c6aecf3dd704", "value": "768:I8w/h62/jWs6oS+xISN0vkxLNfX6dkfScBYrwz2y8kTAlGB:I9l/AoSSMkdAusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747472, "uuid": "e3b7e950-d86e-48e9-9eef-0f62ea5b4463", "value": 72549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747472, "uuid": "d34dada6-6824-4373-a807-093d82f97da4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747472, "uuid": "baaabbd0-6d3b-4e24-b6fa-6bb9668d5218", "value": "invoice-1645080830.pdf (23).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d90bd295-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747584, "uuid": "898805cd-dddb-44ea-a7b5-ab9c6b750d1d", "comment": "Malware payload", "value": "b883d374ba3f9859d44d30a58fb0ee63", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747584, "uuid": "1da9d8e5-04d5-429b-be02-6f7015a868c7", "comment": "Malware payload", "value": "d9aa771b18226f3f741933359def2119e33687b50c3e5b6cb26829169ee502ea", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747584, "uuid": "4aaf5e84-8b91-4aa7-a331-d05da67b28bd", "comment": "Malware payload", "value": "fd7e3e59ef64a74cc7da8b26e631da9772d1ff74", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747584, "uuid": "5ceb27b1-446f-4607-bb04-c5bbcb5eda86", "comment": "Malware payload", "value": "16a9326674013fa31ac1911a8a5eb92d5cdb804cf036868a0992ffbf0f6fb8f278c69d428ea82053e6904c4e1be31a73", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747584, "uuid": "90066285-3e2a-4147-be30-ce951f0be2cf", "value": "T18A633B5E2A3BBCEA75DB160CDF7F8999711B0B483E00BA05F4ECF5915D839221DA124E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747584, "uuid": "a4c1f7eb-2ea9-4df3-814f-df41ce0149a8", "value": "1536:I9l/AoSSMxWAZ4ElCLG9xW6ZDN1uVgDirXQEkFk7xUhMSh9fTVP0tX0xLG7wMrux:I9l/5MxWAZ4ElCLG9xW6ZDN1uVgDirXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747584, "uuid": "fd2b48d5-55bd-4031-89a0-b541e3fa597d", "value": 70587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747584, "uuid": "6aca74fd-6d7c-47f8-9784-076775fd2c3c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747584, "uuid": "60d30c4d-cba6-4ccc-b478-da0351b9b8fd", "value": "invoice-1645080830.pdf (2).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1837762e-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771312, "uuid": "3fc8a3af-3216-47f5-9731-9c2c55209ccf", "comment": "Malware payload (Mirai)", "value": "38e4d252a09198ff841ec5ae39d261a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771312, "uuid": "c34da4f1-1dcf-4184-8084-13c8482c69b0", "comment": "Malware payload (Mirai)", "value": "d9b54f6915bdab784d9f18c57177ac5413f9d64ac3c66fd14a85698ccc90aa48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771312, "uuid": "de8338f7-c854-43f1-8562-d5d50ab08656", "comment": "Malware payload (Mirai)", "value": "b8a94028ac376541640079eca12356c260069602", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771312, "uuid": "868ef199-6c77-459e-b608-bb4511860b6f", "comment": "Malware payload (Mirai)", "value": "8eccc8ae970270f1f34d4a2219a13f67563168e1e604c2bc3576327deab5606702790bfab1fbee514813e9309ead9f08", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771312, "uuid": "b34ca8e2-f7f9-4ec3-8cf6-8b04b0adb129", "value": "T19573027546259401C9209F90ECB8C647A9B01F7823B890494DAACF58A7DB81B3BDE7A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771312, "uuid": "1078bd77-fcc7-48a6-a70b-3a51bcb2360d", "value": "1536:aPp//xNcbpgOIB4MoKJDYpNHBRBje9KxtnDL+:ahLcOOQ4MooDYpTDjAKDL+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771312, "uuid": "e9d5d2a2-8dc6-437d-8624-594bd1fe3794", "value": 77384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771312, "uuid": "4b92db5f-14e1-41fc-ae23-b3509f716be8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771312, "uuid": "3b796745-673b-44a7-950b-8683538e4ac9", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1899d5a-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747490, "uuid": "f363428e-2917-4681-b352-45c3e7ff2523", "comment": "Malware payload", "value": "3514a3b86b5a73c9dfd67756d8c4d465", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747490, "uuid": "ebca6471-55cb-46e7-b46e-76e3b9222d47", "comment": "Malware payload", "value": "d9cc5d93b5283b74f093872343bb0ad326649f281a67c8138ed1fa1886f752fa", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747490, "uuid": "b9af313b-3cd8-49fa-9882-28ac406162ad", "comment": "Malware payload", "value": "de163dda0a3c4b0891778d11d70f88d0828214ac", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747490, "uuid": "ce79a97f-9d11-4b6d-bc3f-c63d30e45473", "comment": "Malware payload", "value": "e6c35994b184fc128072f1a168c159d05913b80233d74a0e89fe849b2587010bc89a9d4f9ed7c5379f0bd6758b29d5e7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747490, "uuid": "c82a3837-9031-4732-842f-36b076d10c50", "value": "T10B733BBB275118DBE5FF232708703B553BDFAC219103289AD269F6F2216111D5DA9BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747490, "uuid": "c28bbd9b-6fde-41f7-a020-6465e446b6ea", "value": "768:I8w/h62/jWs6oS+xISN0vdpIYTyRT0Uyuaxgj/o342MWOLtOq4nKZ48ig0EWBI9X:I9l/AoSSM4MusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747490, "uuid": "763d7407-2bbd-4228-aec7-7baf8eca9257", "value": 73464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747490, "uuid": "42295300-72c7-47fa-b036-3c9c996609ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747490, "uuid": "0df309f2-6274-4e94-b77c-40a8fda068c3", "value": "invoice-1645080830.pdf (19).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "177ebc66-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711181, "uuid": "456f4d01-603e-477a-8e11-3f592b12d128", "comment": "Malware payload (Mirai)", "value": "377b3a6e9daebe0b2f71b7bc80fcbbaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711181, "uuid": "ed2cf11d-bc77-473e-b519-62063c983b4c", "comment": "Malware payload (Mirai)", "value": "db6c8b53333c342dc213b56f8768038d4063c44105d95160e99df9430a40752d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711181, "uuid": "df11f65d-57b8-4aef-8d7d-96deca6cc045", "comment": "Malware payload (Mirai)", "value": "fffc657c25cde6b226261bf99d8cf5824b72fe30", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711181, "uuid": "377d6b0a-95b4-40c2-9059-98e6d2cac01e", "comment": "Malware payload (Mirai)", "value": "6ae8678c12c80fae8d37b37461975bff94cef315d9a207a2d6fb714788291851a07598e7691f5158040c8f8c5d57fdd9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711181, "uuid": "c0306d86-ec03-491b-97c7-630579b703a8", "value": "T10BF38DC6E683C4F6ED5145711076BB325AB3D53F612FEA82D3BD5631E802A40C61BBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711181, "uuid": "98aedcf3-cc6a-4ef5-8afa-0126491f2240", "value": "3072:foDRjxn+OSJQ12YdJR3oakP1vFSbk37bur/mxlphGB1LxdG:oF+zJwRdz0PlT3PAexlOdG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711181, "uuid": "25a548d9-d1e0-4d30-9eb0-0a9e2a46c83d", "value": 170600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711181, "uuid": "ae1a1ac7-f561-413c-9046-acf1d42de563", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711181, "uuid": "d3c75926-1f75-4b68-8832-8c450f453647", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df446713-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772075, "uuid": "f88c0611-87d3-4ec3-abc0-fe24e39c80fc", "comment": "Malware payload (Mirai)", "value": "31de61b6e5983f6f926af891bb23f77f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772075, "uuid": "a9d00f77-7dce-43e0-9285-08910df9a684", "comment": "Malware payload (Mirai)", "value": "db84a4e83d47270600c79ebffa480fac65e7cf7b95ce2018fcfe09fbe5ebf437", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772075, "uuid": "fd48be31-0893-4d1f-809b-291a0808d13f", "comment": "Malware payload (Mirai)", "value": "144a8d67ff4a71f1f68e92d99cf1f34fe96d444b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772075, "uuid": "2bb261ad-1eb8-4525-aa9c-1638af924ad2", "comment": "Malware payload (Mirai)", "value": "76a33d37cd51066c2b234650a1146390464ec0890a2ccdf0f3ae7cdcab179f461f5b92fb87173be3b1d00ab00a30bad7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772075, "uuid": "c46d3f56-f0f1-41fe-808a-ffaceb7b4552", "value": "T17AB3E74A7B650FFBD85FCD374AB85B45258D960722E82B7A3934D818F24B24F09E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772075, "uuid": "3172db9c-bcb6-4b06-b524-bbcb40aad972", "value": "1536:xwqw4NhchRKdZEdBF9tn1qwb2NeHi0LjFFWZxmOz+tYIB9XTcT2bVRw:xilhkdZgLqO2JpGjXYT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772075, "uuid": "8d7493ce-dd91-4fa0-ad18-d724fdea1ec3", "value": 109420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772075, "uuid": "2deb6832-8932-4983-9664-7288ac5d4c4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772075, "uuid": "14e7e796-642a-49c9-b4ff-a426e62dbb50", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14e2eb28-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779037, "uuid": "ac40f420-d9d0-4a26-a40d-8b39d30c37b8", "comment": "Malware payload (Mirai)", "value": "903ba63c1470c1ac94349192a0256de2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779037, "uuid": "6721702a-2285-4bee-b6f9-ffe381d29b4f", "comment": "Malware payload (Mirai)", "value": "dc00760c5173caf89a7144cb5794c66ad6dd93e9c5b5fe4c01c6373aaa2d0af7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779037, "uuid": "23fdd4dd-a76c-481a-894a-090114d3d8d8", "comment": "Malware payload (Mirai)", "value": "4b6ef1eca4c9a0d8f4c50ffd53252b52aa11c3e2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779037, "uuid": "005bc88a-1512-4222-ad62-28bb51ea8722", "comment": "Malware payload (Mirai)", "value": "7b6550b6fae3789df066cf2168bb2d92c7e65e7e2c259276e990f4fe8199ffd523f57122afd942615b100356795e31fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779037, "uuid": "d66126d0-9fb5-4b0c-b9f9-287c39774948", "value": "T174C3BE97F78B24A1C86246F007C76B8E3E6362119E6BE9E76C1E753B19790DF19023C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779037, "uuid": "51bad489-4fd6-4f5d-a749-9b53384a0c20", "value": "1536:3C189r2mIHgqH8IdfBB45+LaLWqEICjCotZ0eVCUxZJmGg9n/LWA:y1ur2nj7Pq5+LetUCokeVC9Gg9nq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779037, "uuid": "6d871666-20f5-4f89-a368-04b157cdafa7", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779037, "uuid": "0c2b913f-8f53-4da3-a6ed-4a302775b2e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779037, "uuid": "9093ab4f-3281-476d-bf95-e13ab2ed726a", "value": "windy.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51b9e755-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747357, "uuid": "7aa92b79-c58a-47c1-b120-0c120502ae0e", "comment": "Malware payload", "value": "a471429a625c985ab3cab556f54d960e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747357, "uuid": "a5a043d3-46f5-4c11-aba9-79553db6a694", "comment": "Malware payload", "value": "dc4cebccd65678bc541191f9a7ba3f1bc36c9cd93c5c4fed174c37421aa0762e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747357, "uuid": "adfb2785-eb36-4013-8af8-77d2e7bdeb60", "comment": "Malware payload", "value": "34121763e2a7b2ea7ea494005bf52e6ca6b5278c", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747357, "uuid": "7296ff68-06c0-495d-b361-199d39eecfd1", "comment": "Malware payload", "value": "d3e54df451df70c30cdb4d4c78872903309755c2659e861bb3b231cac0925d7dfcbc92d5c64488555abe39cb2937c2dd", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747357, "uuid": "d5aaa11d-5e8a-4cf4-93c2-c98a91161505", "value": "T1DD633BF4D676FA86051A0E6BC08D24014ADBAA998C4361733FFAF650605BCDBF46343E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747357, "uuid": "1dfe0259-44cc-4b32-ae63-d907b6a7a590", "value": "1536:I9l/AoSSMjKNOfWW96UxkJwUdWVsXnMiULPuNUnpbZBpFPGVkb1E1b1tpRXNOLkI:I9l/5MjKNOfWW96UxkJwUdWVsXnMiUL3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747357, "uuid": "904d2461-0452-404c-b0cd-ed1ff1f0dd82", "value": 72563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747357, "uuid": "ed48f3b2-20f9-4c39-9397-b4f68793edb8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747357, "uuid": "03b377be-7dd6-4e47-8b8d-b8e33ae48da5", "value": "invoice-1645080830.pdf (45).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0640defc-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747230, "uuid": "ba9ba0c0-2d5b-4697-bfce-e78d498bdda4", "comment": "Malware payload", "value": "e26f6a5ff2ebb73b2ee9ef8595e3db3e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747230, "uuid": "60364309-8db6-470c-9908-f766505787be", "comment": "Malware payload", "value": "dc5573f04224c76337e1e9f09753ce2d2f4df796620d3b4c8989cdcd7a84ff6b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747230, "uuid": "4f9a7fc2-80a6-41d1-97c3-5039ec685e52", "comment": "Malware payload", "value": "818cacda896be43c3f4d7834f6f00fcb6b22d734", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747230, "uuid": "651286f4-fd61-430d-8965-84e235fa5501", "comment": "Malware payload", "value": "7c4974ed784f086252818168bd06d76f77dd1510b23279f31d6f03fb3554c8af7a905086e479c0bd757a4470de17d396", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747230, "uuid": "9ae645af-89c6-473f-b9f5-e903f740e7ed", "value": "T19763E91BFF1B8C0CD731E95AC5652F691C2834B8AC6C955CF7B1374A302A58B5B8A8DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747230, "uuid": "ec04f1d9-1b00-4402-a85d-42a1b3772b3b", "value": "1536:I9l/AoSSMkeAeYeDeBefe8ezeleyeeecezeQe1etekeNereMeGeleUeZeQece3ej:I9l/5MkXXi+Ubkm1Bfk5+8VycbzCTy/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747230, "uuid": "a443fd3b-efe8-4e49-841f-3f6036b6b48f", "value": 70653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747230, "uuid": "95586255-f797-427e-9365-5490f607f012", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747230, "uuid": "f1f9e158-0247-49b3-bfe8-68e53735ad91", "value": "invoice-1645080830.pdf (70).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4274172-e1f6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711122, "uuid": "89a96451-ba1f-4d82-ada1-17ed5c03ddec", "comment": "Malware payload (Mirai)", "value": "9b2051f6228fef9c289430453eb730a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711122, "uuid": "8476b2ef-9a44-4825-9fb1-b82124ebf48f", "comment": "Malware payload (Mirai)", "value": "dd3e9405046603aa747639f42312317dfa310c753cdf5dad9645fda53968dd33", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711122, "uuid": "5b01cd88-da75-453c-a74c-329b5d78411d", "comment": "Malware payload (Mirai)", "value": "ae80a8a9ede97cb27d633760d175f7fabf573402", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711122, "uuid": "34a1f490-5fae-404f-bcd5-427e6a4fabf2", "comment": "Malware payload (Mirai)", "value": "d0575b285cd647cc8f6e8480b37f27f73b959b40e1c2e243374cf465368ddf1988e779881025e0ceaaf8f3a723ce0a4b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711122, "uuid": "b0530aa6-c961-4271-877c-fecf8d963953", "value": "T15B63029DCED78B54E93460342C9F6A4D08765884F058A0B7FFDCA03E4EB3AC51564ABE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711122, "uuid": "54c0d441-00b0-4ffd-b756-12caddd9bed8", "value": "1536:yfYvxC9L/pdtgY/ykLp81uxAcFRlymgS8n35QF9Enouy8Gy+:yfYvx6rpdtg0t81u1RMlHa0out6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711122, "uuid": "5dd91f46-1637-48fb-b958-334d7170e129", "value": 68028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711122, "uuid": "e9502776-9c21-4573-8668-598f36512537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711122, "uuid": "6f65f7e1-776f-46d9-994f-87d345e513c2", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff41aa07-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793174, "uuid": "ae6d08ea-5587-4819-b3ed-644afa9af696", "comment": "Malware payload (Mirai)", "value": "f0efd597eaa2bd7a7727470b30ea4647", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793174, "uuid": "131f9cfe-3b25-4439-881c-011a9b9270a9", "comment": "Malware payload (Mirai)", "value": "dda2f2b885ddb535fa44db5afe258c876007725c1c820561ab56b2f1a51cecf3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793174, "uuid": "2eac8480-5df4-4726-b546-04aa4e777ab1", "comment": "Malware payload (Mirai)", "value": "ac68680b7c6407389dbfce69bdacd57c28495ba1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793174, "uuid": "108b0be6-e554-4bb5-999d-64173c78f030", "comment": "Malware payload (Mirai)", "value": "788df0b8d7c6ee213f5a43833efaaf1fc1a8cdbcff3c7b1430678a6d4b529fe6dc9330ebcc87f5fc7cc9194f55173153", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793174, "uuid": "33689994-8a96-4323-886b-d1149ef18173", "value": "T1DC4302E6844294B1C5F419B382B857103B1E4D72BADE3B162A6E62C1B2D3D17F0FC50B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793174, "uuid": "1ecf38e3-cf68-44e5-b74b-c14b344de3ab", "value": "768:pXNgvGXUjf303VxNA9FeNqsjvvz2XmSI02Qhv168MdlANH70wWPoTUghq3UWy:pXNaGEjsl9EsL6hNFMP2I/ggy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793174, "uuid": "46671021-351b-45fd-97e8-9ff6289b8bf6", "value": 57900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793174, "uuid": "4d19c873-164d-4d6d-aa1c-1f1447921e45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793174, "uuid": "26bdf3b6-20de-4d2d-a478-f70ea51aeecf", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "620c7da1-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747384, "uuid": "68f98f3f-731a-4e7b-a410-209f29a8d584", "comment": "Malware payload", "value": "3671dac89d731e60d94a3092710996a7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747384, "uuid": "d0ecca2e-4773-4316-bf04-63c4b80cca28", "comment": "Malware payload", "value": "ddf987afc8316afebb9885a9fd5c00b1f129d591b13385361b1099702847f56d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747384, "uuid": "c1b67f45-2ff2-4dd6-b8d9-8545821eb539", "comment": "Malware payload", "value": "1a06006c835f356864f1a8aaf4077ad82fc5b5ec", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747384, "uuid": "e2786a5d-5486-46c4-a2de-fa53af40863c", "comment": "Malware payload", "value": "72f445103440a72d7cdf32ec8d386bfb082a92987a87dd3f6391dc33d8fed81022299dcb42a5dcd2866afadacf5ee25d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747384, "uuid": "7cee4ba0-0eec-417d-bc12-1adec0da951f", "value": "T1D0632B06DD11168C1238D66090FF86B1CA6F7865D4AF1BC11E42EE2863BF8E531E79CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747384, "uuid": "6d58e03c-9f29-4b8c-85f1-d50b926bc3f8", "value": "1536:I9l/AoSSMgsXelqdP8ksOstQJfEwjLupPneVlPWqWo256m2afAaOoABR5Qo2jBzv:I9l/5MF5usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747384, "uuid": "7cbdd037-3749-4b20-826f-2e7884caae35", "value": 72482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747384, "uuid": "376c17ec-9d36-47c1-8342-3de080d7d742", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747384, "uuid": "d0664cdf-e45a-4ce5-b28a-accf14d9ae12", "value": "invoice-1645080830.pdf (41).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed431866-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747188, "uuid": "6eddd326-7c70-45e8-b46e-6ad45d3cb87f", "comment": "Malware payload", "value": "d17499ff2a85b728117bc181a3b257b8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747188, "uuid": "dbde1fed-5c3d-43dc-a7b7-5f43b7a5b374", "comment": "Malware payload", "value": "de29aa559ba636f620bdcf3c15a76cdab179ab19e6dc2d22e76fb4a4e336d5e5", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747188, "uuid": "9edd6590-63ce-49b6-b2bc-82d8e9b70e2b", "comment": "Malware payload", "value": "0cd3f78f7ab827b4502b5dbb53bb58a25fa6c044", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747188, "uuid": "96da0997-6609-4856-a619-2ac59a46b62b", "comment": "Malware payload", "value": "3755c7d61acbfb7f3e499ffe442227cbdce5b13fc20e049dd96339138349d40c65b31d23f391e594644720ef1fcd6446", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747188, "uuid": "c13d0c20-194d-4a98-8dab-379ed1e15032", "value": "T12C632956B9769AC96D2AB1D39870700F961C35E21AC6A6874D4FFC2C0DCD38721C8BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747188, "uuid": "b1d550a2-abd0-4720-a1b3-6fba3d73d173", "value": "1536:I9l/AoSSMlj5I+GI9UfmCB0cJjCWtD45v4kyZoyCxsoTaH+cgYzj2oKQGEusrdkB:I9l/5Mlj5I+GI9UfmCB0cJjCWtD45v4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747188, "uuid": "29c99e52-3155-4a99-a669-bc7ab5f9f141", "value": 66819, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747188, "uuid": "6a14f0ed-e24d-44b2-b924-a58cd2cd8658", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747188, "uuid": "b549c20b-4af9-4138-a9bd-9e22c50f1174", "value": "invoice-1645080830.pdf (80).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd64ceb8-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778890, "uuid": "4e66f80e-d2e6-4375-9c5c-78580f957053", "comment": "Malware payload (Mirai)", "value": "21d94de06552172ce9842555ef96a987", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778890, "uuid": "3e604c10-3762-4c97-a45e-bd67bd0c55d7", "comment": "Malware payload (Mirai)", "value": "de6fc0f3ad42ebb6d9fe9882ae2fbcd34b0ca5c92661a2bf41c5d1b67b5b10ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778890, "uuid": "b902aa2b-ca8b-4a8e-a6eb-b8de391e394c", "comment": "Malware payload (Mirai)", "value": "626c3ef2dfba7ef9c8170e5f6f30454b277dc046", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778890, "uuid": "0a9289da-0492-4380-a1de-777d0f5c24fe", "comment": "Malware payload (Mirai)", "value": "b6452f3e4e4be7dd79973c2bc795877acafd46c42352606b91743275c0443380d8a1a0192831e79dc0852ef793905926", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778890, "uuid": "7ef84146-4a53-4135-8853-daf6acbb4979", "value": "T1EF83185AF8814B21D5C512BAFA1E164E331307FCE3DE72239E24AF7137CA51B0E6A855", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778890, "uuid": "32272ad1-db26-4308-b740-b513c8244d85", "value": "1536:GpnQQmY6CpD2sAKv7isPtBBREZEfSHYMac6f3cIIhniT4Bi9gn7O45zYtX:4m0D2ym4EZCSHYMactW4Bi9gnS4V0X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778890, "uuid": "0831463c-220e-4ccb-9554-8411cb264022", "value": 87348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778890, "uuid": "2f455925-5793-47c8-8cfb-11b255aae6be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778890, "uuid": "ea0b16b4-b313-424a-845e-f8812f920b82", "value": "Space.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5404931a-e21c-11f0-a129-42010a9c0007", "comment": "Malware payload (PythonStealer)", "timestamp": 1766727174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727174, "uuid": "13e39d5a-cd25-4d08-98d4-867665763099", "comment": "Malware payload (PythonStealer)", "value": "51b6300980982a20e1464831c21988d3", "object_relation": "md5", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727174, "uuid": "debba11e-2685-490f-bd8c-1c04cf1a67ef", "comment": "Malware payload (PythonStealer)", "value": "deb241a46da181c8c1f68a43745fcbf8a6927e4344c2fc96ef4cf31c828576c8", "object_relation": "sha256", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727174, "uuid": "d567fdff-2b44-4f96-a636-c5ff5a010884", "comment": "Malware payload (PythonStealer)", "value": "23f4766c011d193f076dfc735dc460e2a41ead79", "object_relation": "sha1", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727174, "uuid": "578d31c5-f6d6-4477-a914-71b774e15cf3", "comment": "Malware payload (PythonStealer)", "value": "2157628dde8d74d31603a7d8dc13939f7e3b42e5970bb560c413f1e65e9af5bc042af43c84bd9dfe677b87f45d60e2b2", "object_relation": "sha3-384", "Tag": [ { "name": "apt", "colour": "#BB716D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PythonStealer", "colour": "#F1BDD0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727174, "uuid": "e4698424-0fc7-44ca-9830-d426113265f9", "value": "T1045633ED52C282BCC74797B0ADF926630BF2EC5A462283FB545132D90D238E55E2B7C5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727174, "uuid": "5fd7dbb7-b15e-4cbb-9b0c-192991ca7698", "value": "aaaa97ae38376e73b9cc256f241c9f8f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727174, "uuid": "00ed0d14-5774-4c09-8b93-32c3a3950e75", "value": "98304:bZJYcN5HcovPYWzGwVsi0DHmp80tiV2aprcl0+eXxkOk0oR8LAMpa2AcwxEg:dCC5hvPfzGwVsxDHM80tY2M3XxkxHae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727174, "uuid": "6c385fa1-cfd3-447a-bbe4-50f6a2e22ed9", "value": 6371328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727174, "uuid": "b36c9564-389b-4e56-b4da-5204a109f2d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727174, "uuid": "2c0a1182-c796-4d40-b2c0-7706ec7f72ef", "value": "DAVOS_Pakistan_Business_Summit.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c0904dd-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1766713014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713014, "uuid": "e3feddce-d62f-476a-bfe9-749b729768e0", "comment": "Malware payload (Adware.Neoreklami)", "value": "44b7b6c69b64f24d60ed38697a900eb2", "object_relation": "md5", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713014, "uuid": "5779cdba-4d2e-4b9c-84f3-3155e1872b36", "comment": "Malware payload (Adware.Neoreklami)", "value": "dfc748baa5a6b3a140f835f37c492fddc2dbdd1cb43be3cd83c3be9ab1ed6ed3", "object_relation": "sha256", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713014, "uuid": "74bebdd9-e806-4582-b838-3369b024f280", "comment": "Malware payload (Adware.Neoreklami)", "value": "ad14d40b5af6ecfcff61f0e480354aad6de440e7", "object_relation": "sha1", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713014, "uuid": "ac7f1a22-7c41-47b1-90b9-0eedf5121d4e", "comment": "Malware payload (Adware.Neoreklami)", "value": "52b50ceac2497470940583e258655b32468a887022799130167ee0b3228cc30897beda1c1e2f939a1dec9ca7ed7b6a72", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713014, "uuid": "aa1e694f-07bb-4ff3-b93d-9534e4ad05e3", "value": "T14A7633337FDBC679D2B506B2ACA4DFEEE1B8D35E1601888353A98011673D085C67A379", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713014, "uuid": "c19efd25-5fe4-449f-bb02-c032c29ec8af", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713014, "uuid": "43af65ed-4241-41c9-835d-5b418016b372", "value": "196608:P1OW5w5OTe3rhMX3mZCrdZJaeOloVgcBsch/BLUkllBcr:tOpezWwp3MuKcBsCi2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713014, "uuid": "0467bc9c-8dee-4c09-b3b4-11e8cfe5eaeb", "value": 7527732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713014, "uuid": "a5cc2971-dc79-4313-9e9c-6ffc546e2351", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713014, "uuid": "f3bc00da-3822-4ae9-8aaa-6471d660961f", "value": "SecuriteInfo.com.Trojan.BPlug.3951.11656.16426", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aae3928e-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775423, "uuid": "b3c775a5-bd0a-40e4-961a-592797e52e43", "comment": "Malware payload (Mirai)", "value": "8928fac64dfdc7e47cc3d9e2f864dae1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775423, "uuid": "7f8e3d86-724d-41ec-a9ec-e9af3d6f4611", "comment": "Malware payload (Mirai)", "value": "dfd97fdb21ccd353c6176e1c7a23d97b26b759ce5bbd45a8d3026a0c4f3d8475", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775423, "uuid": "43671db7-69c9-4c09-8643-1c42f732e6bf", "comment": "Malware payload (Mirai)", "value": "cf4649f9d14a28031b1e7d06862752246e886448", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775423, "uuid": "6d304a1e-f43b-43cc-816f-be10cbade90f", "comment": "Malware payload (Mirai)", "value": "9f21d965f7035cd17431388f4f67bfe7fd49acf72c0cca0558f78640fe14b4b47b14bb65bc8a46bba66f019982293377", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775423, "uuid": "92bacb0a-a146-43ad-adeb-befdcc4ce057", "value": "T164536B41B3084A43E55B1DB1393F3BD1D7AFDA9022A4B386794EEBC98172E32450BD9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775423, "uuid": "c5d747be-f0cf-4d25-8785-8496d57bc738", "value": "1536:WWFfGBSXRadxWnTm98vW8THWbWT2bVRRE:WgqweZ9k1nT2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775423, "uuid": "82ff1466-0ef0-438c-a836-b00161d826e8", "value": 61396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775423, "uuid": "8a2a60d0-f02a-4680-89a6-e004b8411fb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775423, "uuid": "94552fb4-2ac4-444b-9008-0e0aa9a16a59", "value": "nabppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad774d8a-e1f0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708426, "uuid": "117df1ee-3c66-4dd3-bf35-7788177fea76", "comment": "Malware payload (Mirai)", "value": "bc758ab5a97619dc215489a23c2d322d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708426, "uuid": "149a42c8-db02-4178-b354-2c2552ae8c30", "comment": "Malware payload (Mirai)", "value": "dfde0690034bab9f9f8737b7a19e705633f8f89f84a4d823fb0f57cc6b163d48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708426, "uuid": "03e0c5b5-dd2c-4a5c-a955-11e778d47786", "comment": "Malware payload (Mirai)", "value": "f5d63da5c72eefe4f36f33be36ec2cf4181cd953", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708426, "uuid": "67e63236-5689-457d-acee-94b9c32835d0", "comment": "Malware payload (Mirai)", "value": "2b9c4d42d2c005a95a9e5202d937b8b268fa755e5258316666659f10ca6703c29508970c2c21f6ed2d399c91a02e7acb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708426, "uuid": "1e18f570-8d81-46f2-887b-1015c41a665e", "value": "T15483B61E7F629FADF76CC63187B74A30A74423D622F0C685D26CE9045E6034D682FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708426, "uuid": "25defd79-3325-4a71-901f-effcdb8d0e01", "value": "1536:hwUKP/OkO33lKvPA4Np6o3BOyGXVaB3iBVriBBDUmUB4IBjlYb+T2bVRk:+rOQvPA4NYo3BOyGXtIIYb+T2s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708426, "uuid": "af6cf5ac-385c-494e-b978-cf6d2e66c9cd", "value": 80740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708426, "uuid": "12483d35-46b9-41fa-a2fc-2bfdf0a05eda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708426, "uuid": "e2cdde4f-e1dc-4071-8882-27b8b14d3408", "value": "nabmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5547f509-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728035, "uuid": "4db5171d-6a8a-4c96-89f6-e76963124379", "comment": "Malware payload (Mirai)", "value": "cadc6b00374e0171f97fb53fe5cf2151", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728035, "uuid": "b3c23adb-24d9-4965-b89a-5e42a29104ca", "comment": "Malware payload (Mirai)", "value": "e02db5d2fb4b0a5577ff1f31068b267420b85711de0ced9f82648badc8e60449", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728035, "uuid": "965a7c42-84e4-46a0-9fae-e2472e21cb6f", "comment": "Malware payload (Mirai)", "value": "346f3f8c55d19a069678a395614f30043662612e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728035, "uuid": "a8f67e21-ec99-4046-bc47-ea38e19202da", "comment": "Malware payload (Mirai)", "value": "8a703d22f43ded4985da357bd42cb8241060a72029d772e90b812b99417a4fb4e5d69047a4fa3baf10feed78bc51407f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728035, "uuid": "da303257-e600-420f-9805-ada508cce736", "value": "T10C839EC17251BABEE4986D7F8403DD6AEE25DFB45D431F15B2A5B8D08A3C3903293E81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728035, "uuid": "2f55bfa2-087d-4598-9fed-bd05bb43f8b5", "value": "1536:Xgw7PYH7ypH94EetzYaTr5lOlyrJce8rf1:P7PYHsKFzJUyrxUf1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728035, "uuid": "e67e0c12-755e-41fd-82f9-1965f9afd49b", "value": 82396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728035, "uuid": "2f0cdb6a-571b-4c40-9afc-10d1c71bea21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728035, "uuid": "140b05d3-634c-4d03-9504-54ece6bc7897", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05f8a27f-e28a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774288, "uuid": "a2ead5a6-c0fe-40a9-b8c7-2fc1552bc029", "comment": "Malware payload (Mirai)", "value": "83871ce76d2256cab4cd1f94db8d32ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774288, "uuid": "6550035a-74c9-4bac-85f4-4d697f2e5b2b", "comment": "Malware payload (Mirai)", "value": "e0489a1cab6b8cba5cf2e856514f1e3ecc2bad8ac429785364362dca1dde2815", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774288, "uuid": "bc914318-7dd3-46fa-a3b6-ab6c51b94519", "comment": "Malware payload (Mirai)", "value": "41354a28d997b361015be1014d0eee5cdb63ad7f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774288, "uuid": "3e7e7db3-8abe-4c58-b9ed-1c509d55bfe4", "comment": "Malware payload (Mirai)", "value": "2fef75d859b609f7f2db0bd4f9faca4cf22f9630b2bf4c9d1a3472e4168b6b46794c4c81b63303b7cf9361aa60224a9d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774288, "uuid": "c6863beb-00ff-4b30-a256-ef876430565e", "value": "T1AD53F1DB860946F7ED8DC97723B01BA0B7AD0FA3B382E88515D4F8848DC1136715AE96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774288, "uuid": "53e9df75-0aac-4f33-b83e-d272f6e98923", "value": "1536:oAsBrjR64E5v4vYc6n+l4rA/corLws7maraVSP:KBrjR6fqPla6X75aV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774288, "uuid": "a5b7eab9-c92c-481a-ab1e-edcf732b093c", "value": 63448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774288, "uuid": "4292e813-0721-4e99-9b5c-b337784fb517", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774288, "uuid": "57a19267-dc37-4c30-b956-c01deca1329e", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "525553d8-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733614, "uuid": "21c68f28-f3bc-4ada-8a83-773b6b5ca432", "comment": "Malware payload (Mirai)", "value": "0ba3d79032eab499570d8da07effbf36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733614, "uuid": "36182995-1741-45f3-8255-66301f17ee77", "comment": "Malware payload (Mirai)", "value": "e0844b0cdf611d8a7521ff37ca40ab691a2c2c3e28a4b9571ff9456d5b5a2b77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733614, "uuid": "f7b6d543-8573-4fb4-8414-78f1d555e7b4", "comment": "Malware payload (Mirai)", "value": "b1d9d701e1a6114683470772b396de16f21916b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733614, "uuid": "75bb7264-b897-4b10-b35d-23e68d9f4e34", "comment": "Malware payload (Mirai)", "value": "b30df1ede88266b974b43a066718b97ffc774bf61ca01c23ef319e0571ae8a20606ac7c3bf41ac56fd23381766335563", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733614, "uuid": "c91cff4f-6313-4fcf-bb51-d8e71ce72c05", "value": "T1CFD33885B9829A27C6E523BBFA6E028D332663E4D2DF71178C215F2177C680F0D77A45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733614, "uuid": "e933a6b4-8c9f-48b5-9e13-d6478e44df51", "value": "3072:xix0gUXFhREYMyQ7cZZeo/IEbGFTnHWA:xixeRZE7cZZeCzGdHWA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733614, "uuid": "889d03fa-10c2-45d5-be4f-c1c556eb9f07", "value": 141080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733614, "uuid": "7960663d-ac62-441a-8d61-c9807d073baf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733614, "uuid": "0ce22eb6-ed54-4d2f-8fbe-19ce16baf1ae", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78a280de-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777916, "uuid": "e54990f3-f9c1-4aa7-a42a-32366b822fac", "comment": "Malware payload (Mirai)", "value": "112113afbae767a258eace056f0dc1f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777916, "uuid": "5560c9a0-82dd-45b6-8e28-386e8b83d771", "comment": "Malware payload (Mirai)", "value": "e1972aac4dbde38ef3fd2fcd343dfb4014cc097f888bc476f54488b1b33e2f26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777916, "uuid": "ae0488b8-fd4f-473d-81f9-8425cbbdb580", "comment": "Malware payload (Mirai)", "value": "487fc6ee8064ea67195902e0440ef35dd2e3c61e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777916, "uuid": "3707e70a-4a5d-4cdf-9ba2-801d67a41405", "comment": "Malware payload (Mirai)", "value": "24a4c700be44aec0632b6f3865585c1fc657399a19ac9f7fe8c1c006b473426945edb21d99c51b94dc42ee960e1875ec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777916, "uuid": "90b7ba2d-248a-4f26-904c-4e8c8af0ef35", "value": "T1ACB349D0E247E4F5ED1641302277EB3B9A32E575123ADE87E3A89B327C52B41D84639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777916, "uuid": "8f153799-559f-4c39-8014-f9fce8a045ef", "value": "3072:NTXB4tkBfnjDukFols2YzJ0r3PiIY0SwLxV0Lv842OEyA39tC:Z2C9njCkFolsXzJ0r3Pthns9E3tC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777916, "uuid": "70f514bb-0623-4999-bfa4-8ad4f8726e11", "value": 111892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777916, "uuid": "2ae2ba18-b6f4-4970-92ed-73b13f3746ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777916, "uuid": "a442e2d0-f4d2-4745-873a-8bf1c8639bf2", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02eb1c20-e25c-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766754526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754526, "uuid": "ca344096-254b-40d7-b351-60d107ae1dda", "comment": "Malware payload (Vidar)", "value": "4b9666ef63de547b8be15dcf10270769", "object_relation": "md5", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754526, "uuid": "ebf08486-894c-4214-81fe-3e6398cbbf62", "comment": "Malware payload (Vidar)", "value": "e1cde5a00dd5338d5ae93822a3ac1e95f4a55aab1320838a8a8bf3dda7e5582b", "object_relation": "sha256", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754526, "uuid": "3f651691-371f-4f28-851b-6efb6a28f751", "comment": "Malware payload (Vidar)", "value": "c7b19dbc9dd0e3d8b163b1132cf33825ee4d87fd", "object_relation": "sha1", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754526, "uuid": "52a2eaf5-9dd3-40cd-8a9f-06305552d050", "comment": "Malware payload (Vidar)", "value": "8cc4ae3a7c04c1ab5e3cb1e5a03417e73e1f84a31ee4a1b8f7fa760ff203f2b6fdf7270cba38b72fb15bc064d46acaaf", "object_relation": "sha3-384", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754526, "uuid": "dd6d3447-cb1a-46dc-8b93-9ceb6cf8142c", "value": "T1A6964BD2FE445355C69FD276E4B022952330B448033526E77BA51BA94C2BBC81B7FF2A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754526, "uuid": "17b6b699-ce70-444f-b0de-94a9f0d2041e", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754526, "uuid": "b95e8309-647e-4486-aa54-462b2450f5c1", "value": "49152:mNOVjSTrb/TivO90dL3BmAFd4A64nsfJlVMlVxX9QBrK+aR/urIauEmsXsZt80xb:mNjzVQ6r0Zt80xNrpH4mIA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754526, "uuid": "f0d87b32-a9b0-4332-a37a-93a2dafe1ef2", "value": 8686208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754526, "uuid": "92e09a85-3d17-49c2-bf0b-de7eebc5ef3e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754526, "uuid": "1936691b-4f0c-40bb-81c9-8cb7d4fb6604", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f002261c-e21b-11f0-a129-42010a9c0007", "comment": "Malware payload (BlackNET)", "timestamp": 1766727006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727006, "uuid": "72ea9757-3639-457e-a4dd-0ed4c5b60850", "comment": "Malware payload (BlackNET)", "value": "eb47233c3a0a0f166ee07e55e5498254", "object_relation": "md5", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727006, "uuid": "963cef31-a1f9-4368-805e-1a1793ed5e0d", "comment": "Malware payload (BlackNET)", "value": "e1db8c13858ec08213858d9a8348519cc94a71d05fa4b893d93aa4ccf1927af3", "object_relation": "sha256", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727006, "uuid": "a6555fd2-dd75-4d60-ad32-085ee112c878", "comment": "Malware payload (BlackNET)", "value": "e5cac74b439bbccd4bd93d9198ff920fa69319fd", "object_relation": "sha1", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766727006, "uuid": "7ff537a4-8f67-4cc6-965a-2122fe6567f2", "comment": "Malware payload (BlackNET)", "value": "0f5ef7d3c371e4236a1ba4069b802cb1ae63aea7daae136507b1c168b580b33ffa3a8c3a240e0ab938973bcc213010ce", "object_relation": "sha3-384", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727006, "uuid": "c174f3f2-aa2f-4f74-b999-7041d327cf32", "value": "T1EAA3D61377ED5C69E0BDDAB4AB725280C7B5FC264922C76C0DC520AD1AB6742BD01BE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727006, "uuid": "c63a4cb8-487a-44bf-b3e2-4c266ad4e3b5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727006, "uuid": "099043d9-fc5f-43c0-90f1-2d1343e1069d", "value": "3072:PYkNWNo5HCdkVTYB+eztx3be/EKyPFnay:we9Hd5YB+eztlboz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766727006, "uuid": "ec01aecb-597f-46d6-84a8-3106d5929b6f", "value": 101888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766727006, "uuid": "1c1ea0bf-4e9d-461a-86b2-0ca914160782", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766727006, "uuid": "834f5d34-a470-4e69-94ec-d81793a6e0c6", "value": "EB47233C3A0A0F166EE07E55E5498254.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee82f71-e1f0-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766708429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708429, "uuid": "4a035507-5239-401c-8af3-093d0f13ee22", "comment": "Malware payload (Mirai)", "value": "36d1b55629a6bd41edfd0aacc7e825db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708429, "uuid": "5c6b0392-aaf2-4440-aee4-e2cacf4dc344", "comment": "Malware payload (Mirai)", "value": "e2d21960d92baee6355859cbf8556858fb50ddf0f485bf2f91cca2458bc8c268", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708429, "uuid": "3fa8a00d-272b-4e89-bd0d-63f8d60a4cfe", "comment": "Malware payload (Mirai)", "value": "3835d360babfcf18472e505cf50e948c4f3517f0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766708429, "uuid": "8f84b0bd-8f16-44b6-8e6e-26fd60fb0168", "comment": "Malware payload (Mirai)", "value": "dc58fbbcddc963e208ef808d08b7fd75a00b6d35a726abf3a9c1cf011115be1bee5cbbf0994ce7fa1d0b6b124d07b18a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708429, "uuid": "af8fc892-db5c-4fa2-94d5-7118a0331962", "value": "T15973AE36C8695E94DD985270B8B0CF355B03B000A6932EF799CED9A54043E9CF68E7F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708429, "uuid": "a86c240a-d325-452f-955c-df09aba9eb44", "value": "1536:OaOSJjkBuZ4LaeRrJW29QUHz5vXIEVx1CaCYDMT2bVR:OYkc+2wB/HlvXIEVx1XxIT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766708429, "uuid": "941f29bb-7f5a-4786-81b9-2652463a4c44", "value": 73600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766708429, "uuid": "078794f2-89c8-4cba-a851-3c67b84c75c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766708429, "uuid": "da8bdc32-f775-4a83-b756-1a422e7e3f60", "value": "jklsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6145e2a4-e252-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766750389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750389, "uuid": "e7594a49-6412-4fcf-a957-ca91a915e013", "comment": "Malware payload (Mirai)", "value": "2e7f85f7928d9048c9ffee90b3afecf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750389, "uuid": "23fa0d85-7709-4bda-9791-f8542e510842", "comment": "Malware payload (Mirai)", "value": "e376b8a3af155f4d9c2408fea4d4266ba9cf165317cf06d42a048b37e549186f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750389, "uuid": "54cf0f82-b58b-4f13-8674-0240fb26b6f8", "comment": "Malware payload (Mirai)", "value": "2e4b2b7eda0227e274a62b63112ef6a9bf3c7228", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766750389, "uuid": "4ba34776-5d74-4957-b4ca-12e3ea176554", "comment": "Malware payload (Mirai)", "value": "8b34beb1108bf8fb310b8de0957afa454753b5c9dcf495361dd999fa83c4e71acc8007badfa01e80f0118a232b299b93", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750389, "uuid": "ea7682b5-023f-4bbe-8ef3-6ffa96130ecf", "value": "T14EC329AAFD818552CAC306B7FA5D5289372703E8D3EF310B8E294F65279785B0A7B411", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750389, "uuid": "87dc04b1-46ff-4331-841e-b10cbc977087", "value": "3072:TVbvkobQsEl0lLlqlLlSUl/lQldVlwlAlul2lDlkflIKlrJl1lrlH+l8lBlpldlf:pbvkobREapAlUUBuPV6iIExyfaKBJPdL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766750389, "uuid": "8da086c9-b997-48e9-8665-1f5121b9ed98", "value": 121164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766750389, "uuid": "7e548cde-19f4-4cdb-b471-265493952313", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766750389, "uuid": "93132217-0f2f-4a73-be48-d2663946213f", "value": "rondo.armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cff86193-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711920, "uuid": "98cff27c-8b2e-49c1-8cc0-3e201bb6d2a3", "comment": "Malware payload (Mirai)", "value": "e2713dfcfb9ed9361a7f5f89a2c661a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711920, "uuid": "ab624ff4-b650-4d1f-aa0b-375cbde015ff", "comment": "Malware payload (Mirai)", "value": "e37cb6da5126be8ac906d59408ec03b56edf78ce5f5d8afcfd1b5d6f2b4315af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711920, "uuid": "1e2d6ba2-ffc2-4a02-aa91-25fe3bb08b8e", "comment": "Malware payload (Mirai)", "value": "9df3f2ff21862ebffd529acab910f94e240d3e67", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711920, "uuid": "53c43f1f-f50f-4a36-8447-7cc347ce48c4", "comment": "Malware payload (Mirai)", "value": "ffb395b55ae6e2203a6799763998eec7545449d9777352e2368541badb444b774c0dd92bfd8c0a05470015baa2ca6c48", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711920, "uuid": "af55c7dd-4b50-40aa-b699-c83914f1875d", "value": "T12E630264673E1CC1A423CD27ACDCCDC66B1B8629689AFF91374826357CDC907AD18D8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711920, "uuid": "2d35e6a8-a19f-493f-ace7-8a8ff3396503", "value": "1536:CbuEN8M47II7Bn5jTgC2Jfc7BWRzi9kczZevXZ+7bkCnUh6KmMvXMzk:pEyMqNBn5jPVW5i9kcze+7bk0XZMfMo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711920, "uuid": "2a2e9777-3c2b-4cb3-98f0-1d27c428e884", "value": 72520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711920, "uuid": "b6edeafe-a86f-42c7-b403-bc93666dd9e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711920, "uuid": "5fd21d41-59a1-4f2a-9f5f-6577fb5bb4f6", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed4e8bb5-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778112, "uuid": "389d548f-03b2-4245-bd2c-96d3b5092b4a", "comment": "Malware payload (Mirai)", "value": "edfc7fa7cb3059a567f36a599cc61aad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778112, "uuid": "c8d7bd7a-32c4-4421-9489-9b69fd292410", "comment": "Malware payload (Mirai)", "value": "e4033c00bdb75f65e78c5053d55d3e2bda8e91ac383cc351c850f6ddacb6b75e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778112, "uuid": "68f75b81-49c2-4f95-b114-cbeff81d48a3", "comment": "Malware payload (Mirai)", "value": "3ee1384e76a4a3cd4ed1df48f4bef67f34cd2b28", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778112, "uuid": "f3e0667d-662a-4a21-996f-b1a71147b7c3", "comment": "Malware payload (Mirai)", "value": "ad00c64345aa766f07d12454ab1c8018fcab69c3b326f16fc5bb11ceeb5c32a5f80aef16a1040914dda928bb5b3f82cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778112, "uuid": "1651979d-4aa7-4009-aca3-5d6d65356d50", "value": "T112735BC59B53ECF1EC66057141B6FB779A72F13A1169EA83F394B933BC12201A50A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778112, "uuid": "142d77d3-261f-43c3-b1aa-e2272c01d133", "value": "1536:lDcl+P6kUq2FXYwFzVFMbfXI/w/AkLWkG5qxf+1VXRR:lIl+CkX2FXYw5Mcw/lLtaWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778112, "uuid": "7dd00988-d779-4051-9b54-b2178ef94799", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778112, "uuid": "2e65a806-5ff7-4c78-a575-3314122f95e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778112, "uuid": "6f0bcb89-28e8-4242-a618-7f152ce96ac3", "value": "splx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d50d872-e2b6-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793198, "uuid": "68efa5e6-eb17-45d8-b227-04a782a4b6ee", "comment": "Malware payload (Mirai)", "value": "2ecf78dfff510e408a6758dbbc1eb839", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793198, "uuid": "fee6123a-1f34-419a-85fb-d08eb8dba391", "comment": "Malware payload (Mirai)", "value": "e47626ceed2635ac759404695e05e92cd6c02ca6e44fa717f5ca604e9f2969fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793198, "uuid": "20b48489-b4fc-474a-acc0-c589ebe2ce16", "comment": "Malware payload (Mirai)", "value": "4ce3442da9e3d38f50429a7ebe03615ed2317092", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793198, "uuid": "fbc5ca25-47d5-4b0f-a9ed-cac314e629d9", "comment": "Malware payload (Mirai)", "value": "c627f794ef79a3f8b299eaf68df292fb4612ebc681a4b2acdcf5f3d620a735e9b68de723b2f6eaeab8668336ab44b588", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793198, "uuid": "08e66a7b-1dd6-4287-a026-dfa471ef0bd0", "value": "T1DFF32951BC505B62C5E633BBFB5E428D372513A8D2EF72078D226F243BC695B0E76242", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793198, "uuid": "14a44843-d568-44e9-befd-fcc651ed7fad", "value": "3072:yP8tFoguOvS+ot2ToJXQNB3jpZCUT5JX3/klP4LYx9phy4LgA068:yP0rTTjnclP4LYfphvEA0f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793198, "uuid": "fbf06831-fe6d-422f-ab5f-cf2534e2c56f", "value": 170668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793198, "uuid": "87fff9d1-80de-4528-a523-5d5dde9420ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793198, "uuid": "265732e8-2be9-4cab-b373-b963928c7648", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2586ba42-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767469, "uuid": "37d1ee09-9a24-434b-834d-331220bc3d7e", "comment": "Malware payload (Mirai)", "value": "047131249a7ac31481394951e8cc7ccc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767469, "uuid": "7f71aaff-8456-42a8-8248-96891980491e", "comment": "Malware payload (Mirai)", "value": "e482c9ab1cd0aee1ed3738839a126daf714ee0f489a115f612f4cdeccebe29e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767469, "uuid": "b31a0d18-6f3a-4533-863e-fe12ba9e4f6d", "comment": "Malware payload (Mirai)", "value": "3f2ed39a4dae350d07815e4d23f44ac9e8584e66", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767469, "uuid": "e1c51c45-b036-4946-b93b-0384256eeedd", "comment": "Malware payload (Mirai)", "value": "a354e7e84b8a2485d31161efd051ac0180441f719bba08803e4fd5dcf7bee51de1a32e5dd09704c4bb36e4caa3687202", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767469, "uuid": "ef5576ac-7c15-427a-9ade-46877653b4ac", "value": "T189932C96F801DEBEF44BD6BA44A3091AB530B7520D530B66B267FDD7AD320D47812F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767469, "uuid": "bc615317-9864-4619-90f0-3a92e46c4c46", "value": "1536:OaEvVPfL6/8ptVunLan8Iwhvjs8y/WCj/DXNpTFAYdPJ11Rs5CI:OaE9P7VunLaQhryOCzpAYdT1K5CI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767469, "uuid": "3b8f7dee-a83b-4833-be13-6bb481021ab2", "value": 89324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767469, "uuid": "0d5b3fd1-9425-43ea-b680-54f92857e7e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767469, "uuid": "16c263bb-cde6-44df-a2ae-3604d4e03e0a", "value": "debug.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa7b6dcc-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747505, "uuid": "6a192b08-28c6-498d-994c-a969541f99fa", "comment": "Malware payload", "value": "d9695a263d58a405ca878b3c96b40543", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747505, "uuid": "90047250-ea0d-4df0-b02c-e96108e978be", "comment": "Malware payload", "value": "e4c8e904b91bb193c33bc3f38a16cc68c0b165d21a523be747e176a1a77bc267", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747505, "uuid": "6dc9e807-96f1-4f61-aba6-130bce4b79ee", "comment": "Malware payload", "value": "6df0f457f5321610a0b21d3fe81e4fe0c248d234", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747505, "uuid": "47b92b02-f692-43bb-a623-8785d412d3fc", "comment": "Malware payload", "value": "42c4b36c9a7fe27fcd233025441d710d7bfd34be622d9ebfecc9663316bdbabc2f6032925d97f792239f0c8c3dc6a3ec", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747505, "uuid": "bbee9ec6-2fbb-495c-951a-292236a7abd5", "value": "T128633CD4DAF1BD3F6EEB6B68BE3C2B399D9B1720B7A7912545483C306E19061C17102B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747505, "uuid": "3e556584-0055-453c-adfc-3e2111c11b3d", "value": "768:I8w/h62/jWs6oS+xISN0v472aaDdkfScBYrwz2y8kTAlGB:I9l/AoSSM4EusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747505, "uuid": "c501cd04-340c-4d04-884e-99a0f3a5eb37", "value": 70562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747505, "uuid": "756d2090-b9db-450b-908c-2b7d276348d0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747505, "uuid": "ecf7f603-527f-4d81-bbd8-8a26de101234", "value": "invoice-1645080830.pdf (22).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1aaf7b6-e285-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766772536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772536, "uuid": "7165b661-861c-4c9d-99ce-55931cc7e7eb", "comment": "Malware payload", "value": "01025d42e5b80b997ca7817c5faf811b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772536, "uuid": "6171ab53-3443-4aba-94b6-420cf33c135c", "comment": "Malware payload", "value": "e5537c0e7601d0a3c553c24098ed42b63f15bf2dd7d24b809f792f628abdfc51", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772536, "uuid": "8ab574e2-2e92-4203-af74-45ca4e14e45e", "comment": "Malware payload", "value": "dfb9007ce2efbd2f245447ae368ac25e3eea3847", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772536, "uuid": "ea06ae3c-b038-4a9f-b781-f940abe71ac8", "comment": "Malware payload", "value": "4c6095d6f01731aa5c46b677e69280489869342b75637d1b45f6a8642e3823eaf19385ec5d93e42ccbf7245fbba0262c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772536, "uuid": "87e63ff5-80f2-4480-a5bd-2afd77da1eec", "value": "T1AB086B4262EA05C4F9F7DA759AF65617C673BC122F3095CF220C17291F336E09A76B22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772536, "uuid": "4d492cdb-7777-4d40-b64a-17337ef771fb", "value": "e05e31a5063c852520cc6950fe83ad1a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772536, "uuid": "e3a19040-c05b-45ef-b424-e5a47ef3f4c6", "value": "393216:3IFqKb+iUHdZQKPAg9hAJLPU689cN0DshEQu58EASEhoIaE2lShUcBs4DJ7G15PW:3ndQmQJhnVn0vSa5rs3wb2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772536, "uuid": "f9f82b5f-95a9-41de-b435-07f9a416219e", "value": 82326899, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772536, "uuid": "de73592b-93ea-4cd1-a272-62fbadec1e24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772536, "uuid": "931065cc-1b3f-49a4-be7a-9c0aa3070004", "value": "Game.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e402946-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747297, "uuid": "6014deb7-ef6f-4c6f-9f31-50c3274996e2", "comment": "Malware payload", "value": "eef8daabd90db15319d2e42d401df36b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747297, "uuid": "497486d6-1e40-4bca-a079-60d883c10b08", "comment": "Malware payload", "value": "e56c1e9f0b139d13af332c6a8c333dd70d6223c8edd879365c30249a90734d11", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747297, "uuid": "15b155a0-453f-46ef-bc98-bf2577922e9f", "comment": "Malware payload", "value": "7bb154e7116b50985547e7015175fe162ea82d77", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747297, "uuid": "79e18175-3b18-41b4-9c47-d504c0e6cbc5", "comment": "Malware payload", "value": "1a3698af8492e25c9d1e5ca0e87d1dae18c50b1fccbfa7e5d55e807888bc72feaf02b3b6a80e64cb687791c2d51d6b77", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747297, "uuid": "7c86484f-7e13-4189-8cb8-a3444e5083e8", "value": "T116631AF9EAEDF47AEA61AEB4F8BBC040D0028FD58581FB41D6C979345D1A8C1B7105E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747297, "uuid": "f12f7d92-7e01-4393-b16d-e0e55edf65d7", "value": "768:I8w/h62/jWs6oS+xISN0vIWRy5bgHggYATFqfyOVtgJRRUErFsFTqOj4WNdxLK26:I9l/AoSSMLUusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747297, "uuid": "800f8b1d-89c4-4c98-90e9-dbc2df158532", "value": 70640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747297, "uuid": "3cc00abc-4b40-4f10-8ccc-0c4a8cb9b1ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747297, "uuid": "96e00da0-7316-4bc2-8c5c-f65c1b36cf3c", "value": "invoice-1645080830.pdf (63).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0926c9b7-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779018, "uuid": "4c3e8ba2-b53c-4609-a78c-b0804b49a2d4", "comment": "Malware payload (Mirai)", "value": "3122d4517c98eeb6548f519f3401bf4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779018, "uuid": "19b3b9b0-6663-437e-9508-96f02da2402f", "comment": "Malware payload (Mirai)", "value": "e5d1ffde81a9e3aa4872a52a5a955e283e7426a6b6b0d92f65acd8210b050e46", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779018, "uuid": "21c8452e-7c1b-4e26-8aa3-4eb16f8ec31a", "comment": "Malware payload (Mirai)", "value": "bcc11416a9479d65469cb2b8e42193b48b29597f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779018, "uuid": "d42136a3-3354-4135-8336-4a1469695197", "comment": "Malware payload (Mirai)", "value": "21a41c364e8db16607695de2d8c4541223bb4d30b9f37970f234477629294c54e4505a00ffc1d40e9476477ecc873636", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779018, "uuid": "a02d1920-bd69-40cb-8e2f-eafed3c52ad8", "value": "T1E8932952FD818622C6C116B7FB6E428E376713A8E2EE32039D255F2137CB95B0E7B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779018, "uuid": "5e1b567f-d3db-419a-9e0f-62af20f970a5", "value": "1536:C5tzkgizvarz1ISR05Tk9E4hgl9cS0zjb/yH/bvQlZtDWvma3s:C5tzkgEarz1lo4hUS9zjbojv4kJs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779018, "uuid": "5e1895e2-267c-4032-8c7e-1292a8c61829", "value": 93256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779018, "uuid": "9be0075b-0925-46aa-b8ad-6b57b45ebaea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779018, "uuid": "6e03af62-3751-471e-a43b-28eadd350ad2", "value": "titanjr.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b72e2a57-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778880, "uuid": "86b7f323-1378-4377-9b6d-1b26403408ff", "comment": "Malware payload (Mirai)", "value": "555743ae9c364ac767271121f4a2240d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778880, "uuid": "85b1456a-4077-4c21-ab7c-ae432771bc7c", "comment": "Malware payload (Mirai)", "value": "e5f954552e4650dcc1834c1973aa6c6b987ea79918f5ec23368db9a1aa8484e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778880, "uuid": "5644759f-c311-4483-9882-7fa487d04e37", "comment": "Malware payload (Mirai)", "value": "1c1f4d8b03b1ff623f83434890c941c912eb654a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778880, "uuid": "9ae19b28-02e3-4aa0-aa4a-f45c51a8b6f5", "comment": "Malware payload (Mirai)", "value": "3f3e7981365963aae92ce34c2d2f87cb998100b85f900b8b3d269f858daec2e884e36371c9626ca6307968b60999f494", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778880, "uuid": "e59d72ef-c9d4-4093-8033-7b63e0e78ec7", "value": "T1B2733B56FC814A23C6C1127BF76E468D3B2653E8E2EA72039E259F3133C751B0D6B895", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778880, "uuid": "dadc997e-aa12-4c03-8427-40f560be4a33", "value": "1536:uB/VU93ilj19ZBpCO72Rbu1U+qhxp8f8vNM:uB/VBBpCO72RDRZNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778880, "uuid": "5af351a6-f103-4e7b-8a5a-3b85d23cede6", "value": 79168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778880, "uuid": "ab63202c-163f-417c-aa5b-8ace64973792", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778880, "uuid": "2c7916a9-fe5f-4903-8dbe-57ad6948d226", "value": "Space.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ed51b26-e28f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766776531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776531, "uuid": "087a5a2f-451b-4bce-9ad6-ee5d1359a72f", "comment": "Malware payload (Mirai)", "value": "729a68fb1e63cd8d5b7a383bbeeb4844", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776531, "uuid": "97898be4-83ab-4992-8952-7a314c5cc64c", "comment": "Malware payload (Mirai)", "value": "e629a219aca6766f3ea198f905e6587c7b06d8563187e33ed8e805b7dcf52549", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776531, "uuid": "533aa93d-b502-4d8b-ae1e-8daa126c2591", "comment": "Malware payload (Mirai)", "value": "d78e7df1a2169487eaee5165f6405c5beed8562d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766776531, "uuid": "584f76e6-97ce-4261-b7d4-f676db45b2f1", "comment": "Malware payload (Mirai)", "value": "fe22e6b9cfe4ce5c5a4e9576ddd4551c435b8be3dfa11813b19e37adb8d00ef325ff3e3b160672f4ac517b981d742261", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776531, "uuid": "69401ece-3f64-4720-bf5a-06ac34944e18", "value": "T19A44F50AAF610EFBE8AFDE3706EA1B0124CD651721A83B757574D518F10A64F1AE3CB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776531, "uuid": "65a0fd93-72a1-4a24-bf19-2c2a2d1477e6", "value": "3072:0VgO+J6gd83AecWoSIyKPOsS+ai4DS4gQ8rZnIGXl6hh15j4A:0V6J6gd83jcZS1KPp34DS4Kquyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766776531, "uuid": "d1bb3e8e-479c-4721-b18a-85a61df33801", "value": 265208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766776531, "uuid": "7b29c214-f6f8-46b2-9f2b-9ac289fc24d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766776531, "uuid": "7d273d29-fd94-4756-8b15-feb410a16876", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fa383c6-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747326, "uuid": "f3f340e6-c19f-4d64-b1c7-93008d76ad88", "comment": "Malware payload", "value": "9add90ca17bbc8eb0101b05772e9db56", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747326, "uuid": "c2efdeae-40a1-4488-bc6c-dd20ac6a9878", "comment": "Malware payload", "value": "e69f6ce92ac48f697ae515f6a4f47ab79559cf1d0d70e6113852bbeed7386cd6", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747326, "uuid": "2c9845a8-7afa-4e86-b343-c087cf32c9e0", "comment": "Malware payload", "value": "48a85cd3bc050e0d367edc8506c066df29ef75cf", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747326, "uuid": "b1a50a6e-e50f-4272-b9a7-77db5933c211", "comment": "Malware payload", "value": "fb7c5ebb1e47967af3f5d1c5639516638e617f99fbda5771c69f6293489bd9c1f11e28e0c668c68a37c4eb3cb817017d", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747326, "uuid": "99a5482a-d848-4995-84b9-837202e829ef", "value": "T1A5631A87964740973F89332903CE665AE7CFA1437A4E10829F9AE3D324DEA146250F7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747326, "uuid": "b668e0f1-cd2d-4a8b-a867-114c35e9d5fb", "value": "1536:I9l/AoSSMrMEz4RTFLLeTXvUm9xLxxE4GYsW6LF6mI8HX5bG8bDz3EI7SQzvuOBm:I9l/5M4JusriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747326, "uuid": "25b93ff9-e69e-4ac0-9b79-6c19d8903bd0", "value": 71512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747326, "uuid": "8a6aae59-e041-4d52-be9d-beba50a80000", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747326, "uuid": "e6ee96d9-4554-41db-b529-9733f5876f12", "value": "invoice-1645080830.pdf (59).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32a9dbaf-e2a9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766787677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787677, "uuid": "23baab26-b793-407b-a7a5-764151d67b5a", "comment": "Malware payload (Mirai)", "value": "21e0d233fc1e424e0eba1ad913b02fd3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787677, "uuid": "953bffce-46ba-4f62-9152-e0d98db5299d", "comment": "Malware payload (Mirai)", "value": "e6a517a88360b932cc631d99663d7d237be8be446639336c0b79be5c1bda0c3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787677, "uuid": "edf13f11-b0ae-4255-9bb8-0269d7deab3e", "comment": "Malware payload (Mirai)", "value": "563ffae5fc97b7873f3766d6daad416e6df6239c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787677, "uuid": "be7a7cca-1bf2-4d85-a8ab-afae5d4109b8", "comment": "Malware payload (Mirai)", "value": "40d5126f6511720be55eaae5cc0d160e0d7e17778c501c22fa9be89ba3877e0ebb76fbb8dee1d0b7e2ea21cb29c9dd05", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787677, "uuid": "fcf49c8d-e687-47ab-949a-ef4e3b358c79", "value": "T1F7241A42F9518E12C5C112FAFB5E514D37136BB9E2EE7202DD246FA0378A8EF0E7A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787677, "uuid": "a9f427c2-33d2-48b5-8d72-ae647c7c8e87", "value": "6144:h2t7jKaREHKVAbW58fyejfKNwODuxEHK1gghNOzXvCna4k0BL4Tl69Gr:h2VrREHKVAbW58fyQfKNwODuxEHK1ggh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766787677, "uuid": "d0fec52e-9286-47da-b5d2-1ff3231a0abc", "value": 217368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766787677, "uuid": "e50bbf23-11c9-495e-ae65-6d6fa4322091", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787677, "uuid": "ac99818f-9ab5-435f-8800-861297bb2b37", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ee07066-e25c-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766754653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754653, "uuid": "5e32bb83-c8fa-4044-9ad5-2cb791fc5a16", "comment": "Malware payload (Gafgyt)", "value": "cbc0db96d5f4749b2166d2426ba164e2", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754653, "uuid": "61d4372d-bc34-4dad-84ad-e5a2df35abfd", "comment": "Malware payload (Gafgyt)", "value": "e757f9cca122d5fc5a9f6fa40c3a61addc5c641193ba7e24085d208fc6c82ec6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754653, "uuid": "dd2add67-8da3-47b9-b14b-c07a29fe9839", "comment": "Malware payload (Gafgyt)", "value": "2a8075a4d3fa48842e986563baf4cec6d625907d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766754653, "uuid": "137356fa-330e-4659-9347-058a406f94fe", "comment": "Malware payload (Gafgyt)", "value": "a480713d3295ab25f71dd97fbcc762bae1d84181be6ac12bb7e4139e844aee28d09084944d1e129dc08a724d1ca2672b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754653, "uuid": "8b2ba0b2-f622-47b8-89e5-a6cbd62b3a56", "value": "T19412B28C71C013F66EE5B8C7539382BC8D46A1E1E57B89B6D8488AF65EF044CA06D773", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754653, "uuid": "abce3429-5f32-4862-b6ba-a247547e6cde", "value": "96:Ax0iRoLngDHPC5hCwCXCyCFCICjCuCsYCvCuC9CLCeC5CwRCqiCo+FCz:g0goLng+kC32", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766754653, "uuid": "7237165f-6c24-4912-99c6-7dff709ca0e0", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766754653, "uuid": "2c798007-09ff-450a-b591-ef69efe50619", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766754653, "uuid": "19b4c69f-6093-4cfb-828d-08c74b8bba09", "value": "rondo.aqu.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "712c7d89-e237-11f0-a129-42010a9c0007", "comment": "Malware payload (PureLogsStealer)", "timestamp": 1766738819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738819, "uuid": "4f41149e-9acf-4088-ae67-1929a8f7eb8b", "comment": "Malware payload (PureLogsStealer)", "value": "5db64e50fb4a6210878295fe2af38cd6", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738819, "uuid": "8c6cfc50-df69-440b-8197-4dd7a88d6f51", "comment": "Malware payload (PureLogsStealer)", "value": "e76101bb40d7bc6e8cd3b014fd4e03b584c21a9be66100671af829aeafcde8ae", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738819, "uuid": "837a36e8-0270-4638-9e53-0348b7f9044c", "comment": "Malware payload (PureLogsStealer)", "value": "eb50e4ae692a5a2cc51dcc0dfae9f88c1600cb5d", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766738819, "uuid": "a2fd1f9e-e57e-440f-94f7-ec8d64b7f653", "comment": "Malware payload (PureLogsStealer)", "value": "902e5cbcddb935dfe599b76b5434c69d44b61c5cdd58fdae626e547cd03a6c4cf8b837a711bf19baec53a3ef58e1814d", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#7DC8B0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738819, "uuid": "f75ae448-c469-4bcd-8879-0743c294e9b2", "value": "T13764F20879E51F6DCFF44E887CB53C1A566192C6113269CFEF65CC02EEDAA46097E0AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738819, "uuid": "9098e521-0945-478b-b7db-5a9035e33659", "value": "6144:KPoGlndKGZjn9ClSiUXMA29djHBMCd2S4gvS7vv2wuPbhtcdfTuo6eHXo+JCD6SU:AndKGZL9GUXMhHBMibtCv2wuPbhm7h4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766738819, "uuid": "82a3aa91-b16f-4320-b1be-136391f5eda9", "value": 326924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766738819, "uuid": "75706b72-bcae-4076-9ba8-18e26c2b8aad", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766738819, "uuid": "63307891-a1f6-45d8-8f6a-e41ec823e0f8", "value": "Branding.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6d5e19a-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772840, "uuid": "5458d170-7cf0-4a3a-8bf8-cb7bba00404c", "comment": "Malware payload (Mirai)", "value": "3c79558a17b5d7d0f9d62f957b5cd572", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772840, "uuid": "b4ebf6e8-4cb8-4bc9-bfd7-5b2d1ea36c94", "comment": "Malware payload (Mirai)", "value": "e76d453b748c5bbb7cfa31a44087cf7f57d624f9d96cd1bbc1652545ddff1d85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772840, "uuid": "2382525c-529f-40af-9772-f0a00142c0b0", "comment": "Malware payload (Mirai)", "value": "299ada7f5eff969df676a60db3e591f5bbc7c81a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772840, "uuid": "97442398-542b-46a0-b40e-a16157d94a46", "comment": "Malware payload (Mirai)", "value": "4e756ffe48d707624aff8b7209d54ed659954254bb79cf2f1d3bb1ca159bd7401f98afdde80faab3601ccfa0f51b0829", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772840, "uuid": "454f0393-68c1-4ecf-90b2-f92de0a16f95", "value": "T1DB733B97E400EDBCFE0EA6BB84570F05B535A7412F920F27A666FDD3BD72084491AD82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772840, "uuid": "f39c51e1-d61c-4501-9c8e-03b6c82f3c99", "value": "1536:0dz81RGvOQUwEAF8ESPqcEZdl1NL+8Q5ZOs9RiWgUPCn3sTlWWTPG:0dz86hEAKnyp1haMHWbPCn3shWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772840, "uuid": "2abc4718-d600-4004-ba6f-edbae85b83cb", "value": 77960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772840, "uuid": "c1ebc30e-f3ac-4d07-8ead-843d0e8fb4f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772840, "uuid": "1526098c-a329-48f9-bbba-6df9a83f3f58", "value": "nklm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9134f59-e286-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772870, "uuid": "5f77cf03-b4b4-41b6-ba66-e076da88becd", "comment": "Malware payload (Mirai)", "value": "ab0f0e2e06ebf33a9485bf8a99f11874", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772870, "uuid": "84b72a6f-4d6e-484f-bbf0-475c5ce748ab", "comment": "Malware payload (Mirai)", "value": "e7b11802696e078ae2c318d6383844f2e23b921e92d333617f4a4f7b619cc01d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772870, "uuid": "389b8ba5-357d-4c43-87ca-ac0476fb11e4", "comment": "Malware payload (Mirai)", "value": "22ec07eef7748dd509e099a58024cea204bd6011", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772870, "uuid": "c54efb36-3ffc-4149-b97c-fceab5303ca7", "comment": "Malware payload (Mirai)", "value": "991437f39f1d025b8e0f44f30c2cd2aa900c2bb36e48ceeb6242330477f80ff4656050eec0cfcb2878f7c9eb276c07bf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772870, "uuid": "cd450951-7ed3-44e4-a609-03a56355a31c", "value": "T1DAF37DC5E283D0F6ED1209B111B7BB36DB73E53F202EDA42D7B95631EC52601C61A6AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772870, "uuid": "4354cc7d-fa52-42d6-9be9-85355e7ddd0c", "value": "3072:zSERh94s73wv0X+rbuEj7NuT4yJzy3IVcgelQplpp7RhGB1Vf:ZRhWi3omyj7NuS3Ecfl6lpRmf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772870, "uuid": "80ed06da-da30-4f16-a2b1-ee5f5ddd2bee", "value": 162536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772870, "uuid": "90eb5a3e-1e94-441d-9485-41a0f956ab79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772870, "uuid": "c35723f5-be8c-4f2c-b9f9-ea4832813769", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bad1e4a4-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778886, "uuid": "e369e71d-de7b-44ba-b17b-809d698ac4e8", "comment": "Malware payload (Mirai)", "value": "7b09115ef2c533fb4c387f108a27dc91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778886, "uuid": "5e6abada-fa7d-4d09-9e0c-bce632a36061", "comment": "Malware payload (Mirai)", "value": "e94948fcc18f259f6bc50276766809a49f3a1fd2a833f905078ca2a607840eb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778886, "uuid": "85163dbd-0454-4628-8cef-395c01c622ce", "comment": "Malware payload (Mirai)", "value": "5ca9defe2135a0ed9da9bc3307b6b9f9bd00877c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778886, "uuid": "0c2cdd34-95e7-4292-adcf-2c93fe019aab", "comment": "Malware payload (Mirai)", "value": "0814d986102c8c93e461ddff071224ad54860cf69068d95f7d530e9ecf706750f31516442d16df76de8653daf0f96d1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778886, "uuid": "ce03750a-0859-4175-82db-d42ed5a5bfa2", "value": "T117A3C509BF510EBBD8AFCC3709AD1B4228CD655722B93B797634C528B64B24F29D3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778886, "uuid": "0788d42f-c6ff-4182-8dc2-654ea7d555de", "value": "1536:JxODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7qZr:J0DOpPRWu8ERZ+0u8vjhhqZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778886, "uuid": "97f8e986-be64-435b-a01e-e34951f748dd", "value": 101188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778886, "uuid": "1a499247-5e0e-46fb-8576-354ad22009aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778886, "uuid": "ad57285a-ef67-4dc9-82f4-efabf9551ec5", "value": "Space.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f08acb42-e283-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771675, "uuid": "f2658f98-5dfa-4471-9066-eabaf0d20448", "comment": "Malware payload (Mirai)", "value": "aa7864d4b8834a680930e2bddd2465d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771675, "uuid": "825bd489-1765-4fdc-821b-e263c0786d74", "comment": "Malware payload (Mirai)", "value": "e97f07a33daa3ca2cfbb972f78a99e44e78b78ef3e0825c268b730c4b0c3f396", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771675, "uuid": "5764abce-4bad-4fb0-936e-d1f1b5dac052", "comment": "Malware payload (Mirai)", "value": "3f656e6d8cfeb46d14da51ee28c1dfa6eab130ae", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771675, "uuid": "86bcadba-03d1-4de8-8a05-14d68f123d89", "comment": "Malware payload (Mirai)", "value": "7963f9e267ee2edd1a2778d38b23f8b977424fbc95d399ed147d3b277a93a57f81f21759288e9b141f8d34a77c075925", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771675, "uuid": "64a9ccef-3c62-4adf-83fa-9afc9dd6900c", "value": "T101630273D7852AD0CEDBA4625C64D7E037619F0CFB129DD642C58B616286C42FD82FC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771675, "uuid": "05ecb625-100c-438e-9e4b-39d8a885f128", "value": "1536:HwG+YQr2AV3yxbsffORRe5f2pTMBCwmLxzUEf/8sfEKnv0R4u+qgw09K:HwJrZYQff+S2pUCwmLqDEnMR4u+qgwH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771675, "uuid": "2a37fcef-37b1-4e3e-ad6f-0a85e360949f", "value": 71608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771675, "uuid": "e0f46760-2e86-411f-8974-db337d53fd42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771675, "uuid": "aff91d3d-9ea5-4cf2-bbb8-9886ffa29211", "value": "powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ceda3b2-e1f8-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711727, "uuid": "614ebf23-78e0-4753-99a1-2d86cd78bc10", "comment": "Malware payload (Mirai)", "value": "1be7a531e077e46e51f4a3dbca358126", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711727, "uuid": "9a17b3e7-828c-4db3-a290-8d5e8c94bf0a", "comment": "Malware payload (Mirai)", "value": "e9c734fcd45d28c129ba7dc4e2bfd99b0c65497bdab88ab3af525ab540dd6bd1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711727, "uuid": "c6f00e81-7787-457e-8c9f-e989dbbb339f", "comment": "Malware payload (Mirai)", "value": "efa4654fbf40236c0466ccca025d617396092698", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711727, "uuid": "4f651285-26f0-4710-b23a-d0601267f357", "comment": "Malware payload (Mirai)", "value": "52ee1dc1f8f9c4c4837ae6436dcd51b815db45bdb9757aff0de13fa50815afe78d88ba8693b6ca425f84f6a09e44f370", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711727, "uuid": "9ce4de9b-df2d-4e62-b3bc-8f230e60171e", "value": "T11773020EA1C13D4BCCA32CBD329224B9A994EAC4354F59C8C3279C85BFADD1D790D236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711727, "uuid": "44a1af52-952c-4de3-8580-dcb84fa7c178", "value": "1536:rMUzctAn7MmC6wzicDHScbeoNXj898XM/txPPnCXZ/S4w00:oUzctn6wND/eoN48XEPvwA4w00", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711727, "uuid": "70fb0c7b-05f9-4a7d-9a63-6a3e2ac8cd51", "value": 80204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711727, "uuid": "4fba20e8-33d0-4e2f-ab62-4308e9627b8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711727, "uuid": "cec438e7-db34-4ae0-99af-83d0e4dda7ea", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e8f5518-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Vidar)", "timestamp": 1766713045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713045, "uuid": "43e1f6ba-1d5e-4823-b863-79c5f89dcffa", "comment": "Malware payload (Vidar)", "value": "258d7f88c552eba92472550f7d9c1010", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713045, "uuid": "32507beb-8a77-48df-942c-92c3cb88cf2a", "comment": "Malware payload (Vidar)", "value": "ea39169890d533ab869620cf6b425a19d3cbf10f1221c6b1a4065b427f50cf95", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713045, "uuid": "c9d85461-5377-4d66-8e7d-be3a46da2e82", "comment": "Malware payload (Vidar)", "value": "a25fa59ad94fa09d80e1422b374da5d83cd73e33", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713045, "uuid": "13d09be0-5380-4824-afd3-f952e09ae40e", "comment": "Malware payload (Vidar)", "value": "4005ee1c48c410b3b3ce2e2a9c9195fec0b67f296a45d59984ab6cb65c33ae201faefd1f465571297c8af65a60b840f8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713045, "uuid": "2c15b7a1-3c23-4127-9905-567b4d604c22", "value": "T1B9C41A7DAC60F362F608D0BEE185D3529E2178110236AAD319BE932412459B3DF5B7FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713045, "uuid": "ec2b0fae-9533-491c-85a5-dd947dada391", "value": "ec4a3e507f2cadcaf4f3ba70774863e5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713045, "uuid": "6dcbb58f-165c-430a-b54f-d028f54e83f4", "value": "6144:Xiy/0WhBGtUK8z88VeLQiI8MvCobILNkJnDCikykXhCgp/1JsUzvE4w6JOOunamb:NcDv87KkkykT/sUAgsdBiBNlin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713045, "uuid": "f4a291b7-e8c2-492b-ae4d-a9bdf18a62b2", "value": 580096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713045, "uuid": "34be218b-b193-4845-bbb9-aa26b94e5e41", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713045, "uuid": "07de24bd-fd45-420e-ac05-cc1c2601745b", "value": "SecuriteInfo.com.Win64.MalwareX-gen.97198687", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb2b50cd-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747211, "uuid": "accd51b4-253b-4e9a-8fe2-d9aabc738830", "comment": "Malware payload", "value": "068ac879d2f2ef7f55e18f2268f74962", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747211, "uuid": "8a31188d-49ad-47ba-8fe8-87cbcb366aa0", "comment": "Malware payload", "value": "eb01888a925ab40f28e87749cb35cd0feb6fbb8381a21719f97f47a560f8ddaf", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747211, "uuid": "f40bbae1-cc85-4e25-97f7-55ca14fdf245", "comment": "Malware payload", "value": "6a4928fa1589ec4767d819501c5909aa7d5c4922", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747211, "uuid": "053d956e-d639-451a-91fe-f84081d49845", "comment": "Malware payload", "value": "97c8c18df1737c4a96f277ea747188b7c457818b24471c564e703767f748910bab9daa70b8e6016434b078c7af0b5bf7", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747211, "uuid": "e9e7c914-d8c9-4ff3-8a24-71cb39b5da21", "value": "T19A633BE179FC78F4A8508131A90A6EDB5D6B4C691BCCD31B19EC263E1DC3E99093B478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747211, "uuid": "e7dd817a-ce00-4158-8ec3-66616565b5c1", "value": "1536:I9l/AoSSMof2NXxz/x1MbgUhjvb/tw6ip9ib5+kVRQETlEQ+JiJu2du2pV/whHOm:I9l/5Mh2usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747211, "uuid": "9151d0ed-6970-47f6-8d74-3e5c2a0145b7", "value": 71563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747211, "uuid": "443be1db-2c71-46c7-a919-85fff3a68ec1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747211, "uuid": "9785a890-0e40-4b2e-9a38-a4d4c4b3bdb0", "value": "invoice-1645080830.pdf (77).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bb4a272-e282-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766770996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770996, "uuid": "2bdaf5e4-695b-42a0-bffd-a4fe9bf1e064", "comment": "Malware payload (Mirai)", "value": "15b1888d364de5fa86e38bccbc19a94a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770996, "uuid": "2eae34a6-f970-4785-9e93-2c5b77e9f9dd", "comment": "Malware payload (Mirai)", "value": "eb0c5cd019d68c18944c125d4aefd181acc4b5688fd8e8fea1766be4888a86d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770996, "uuid": "9ccea04d-0ebb-4d1d-9a8f-5fd2dbaab1af", "comment": "Malware payload (Mirai)", "value": "3645294d1e1ba74dcfc9f1d1e7eeedff4f612604", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766770996, "uuid": "424e1d1f-5498-422d-bd2a-a06da635ede2", "comment": "Malware payload (Mirai)", "value": "3b7ae7e65517797d40627631b1e9d0a236190b5fd53c6c6b5146f9f7e1ec3d645df442ce2738feb5ef00420685b71d57", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770996, "uuid": "ba0b9d63-17e4-4092-b0d4-b9f4e7dc324b", "value": "T173F37DC6E783D4FAED1245711077BB365AB3E53E613BEA82D3B95631D801600C61BBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770996, "uuid": "f29774d3-bd44-4db3-a69f-2f85b57ac907", "value": "3072:Crhjt7Qw4LrA//HibcMMAk3dxVpTgrd+U3OkDUFNGp5U6hGB1s82w:sD8XE//tDTiV3Doy5U082w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766770996, "uuid": "7200a412-9c52-4451-a06d-1f6a8a9804d5", "value": 170600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766770996, "uuid": "1bed8357-07e5-4cc3-9fe6-de4b6faa71d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766770996, "uuid": "ec82b2ca-76c7-4a77-9d7f-352c29a9147c", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2a1fbf7-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747519, "uuid": "11023706-7224-4667-8c77-e475f814d59d", "comment": "Malware payload", "value": "81758c074f1ce67a2e848823cf52689d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747519, "uuid": "43c2c9e9-6e37-4a9e-9cac-1ee4615cfa06", "comment": "Malware payload", "value": "ebd28503d4c326ae2bba7e1070fd06b44813413fff7a6c67828bfcbac915279a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747519, "uuid": "6965fe55-8f6e-4611-a859-4d8e9a65af1d", "comment": "Malware payload", "value": "54ebbdd1960025660d520d894e79b59b3d05f0fd", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747519, "uuid": "ab14184c-4c52-4fc7-9296-b06c22a64301", "comment": "Malware payload", "value": "b4560126d48c86fc428614550f9a5d20ab04b1b06c0db1072df2669986cf5e35e4f58026ab4b106bb03af741c69086a3", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747519, "uuid": "6391684f-4761-415a-ae2d-5658085fe336", "value": "T106630BC8694234EA907F30B4AADA945B37259E2FDB10C0F02D647ED52324644ED3BBE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747519, "uuid": "00473de9-c3d4-4629-b8a9-7ee599de9b47", "value": "768:I8w/h62/jWs6oS+xISN0vsNs9V1Z8onQHInbdkfScBYrwz2y8kTAlGB:I9l/AoSSMq6usrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747519, "uuid": "333709ea-a77e-4c13-b387-5f460a522bfb", "value": 67719, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747519, "uuid": "9d36fc63-74b1-4e7e-aa9b-d5883772ce6c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747519, "uuid": "893fc8bc-e351-44f2-b1f4-13d8a742c295", "value": "invoice-1645080830.pdf (15).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee97db25-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778114, "uuid": "599fc6eb-6356-4fbe-bbdd-558518fb961a", "comment": "Malware payload (Mirai)", "value": "6a43dfddd2d228e5866f88968269204f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778114, "uuid": "62ef5aa5-0a5d-4b32-a63d-9d5ab17e5ad8", "comment": "Malware payload (Mirai)", "value": "ec2b170e8c8ddfad0b29c2d3926189f5111d37e4e5471b6035cbb9e4eb66ab78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778114, "uuid": "686dd750-5483-43ff-bb95-30cd8b1c39d8", "comment": "Malware payload (Mirai)", "value": "5c650ca82fa63e943954506d81377bc9f62a0830", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778114, "uuid": "9aa958d8-b20d-45ae-8591-1acca21e28d9", "comment": "Malware payload (Mirai)", "value": "87df525e958312001d1d1f03c1703fa18a9d17c13aad6cb4ba6a88c398eec66d73586343a9325107f42c2d3eea7c7620", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778114, "uuid": "9e99cf5a-2ee5-47b2-bd4e-aa3f20cbf94f", "value": "T1D3633CC59753E4F6FC19457410BAFB32AA71F4362179FA93F394D922B852302E60B29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778114, "uuid": "c300ed56-1df6-47ae-8dbd-b12cca6a0ee1", "value": "1536:QTU7XEpeUMUvhzPfs4wfD/jm6XniOxRz53PRR:GcX2eJUv9sVD733iyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778114, "uuid": "45eec993-6c05-45e2-88a2-06b6a2208d25", "value": 68016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778114, "uuid": "1b5a16aa-452d-4455-9b6b-b86f30e24921", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778114, "uuid": "c3c759e8-b76c-4957-a93a-40e1e1c6b7af", "value": "nklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4739581-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747173, "uuid": "983c2ee2-85ce-4223-878b-eff6d73086a8", "comment": "Malware payload", "value": "0c9ace0afc872b24ef2ee58f600f911b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747173, "uuid": "d8f55b88-73bd-41ff-896a-8d22f4c0e6e2", "comment": "Malware payload", "value": "ec4019d95f9f0e13abfb3f8f279c76d17704f28373e7cfed92ad9f48c93aba20", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747173, "uuid": "3b453986-c2a5-4b2c-8931-cef2efe09396", "comment": "Malware payload", "value": "5c97d8e07ee4461376e0b96d521042e7dfcff603", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747173, "uuid": "1fe6a873-0198-4f6b-a114-6e59b8986ba1", "comment": "Malware payload", "value": "bb288bb61a33959b34212cf583b5d6c9b8ff5a196dd06ab833ce73891d02c775c56ea221df0a6bb6c030a4bb614846d0", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747173, "uuid": "9f3b52bd-8eda-426a-9c7f-e620458e5008", "value": "T135632A595D796DAB3433A3EF0C97211AA97C700E4C5AE9DFC9BB8BC41290B3DBE15042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747173, "uuid": "4f430a58-0054-4522-b724-f0b50a8285aa", "value": "1536:I9l/AoSSMJ5DjAEJHW6tXQQ5V+E8JiUistmBbUARD1v7pfdP0JPTfx5rc7pdn7Bm:I9l/5Mg6usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747173, "uuid": "d1be1aa3-2016-4e16-8b8b-7cb7044c2184", "value": 71537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747173, "uuid": "3888e9e2-5966-410f-ad26-5e5cdee52622", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747173, "uuid": "b597891c-741c-44bb-bd94-56dd52de62ad", "value": "invoice-1645080830.pdf (86).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2635abcb-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767470, "uuid": "cdeafd89-4c80-44d5-a4a0-553aca9fd15e", "comment": "Malware payload (Mirai)", "value": "6df0f54194f2562faa201c69158de97f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767470, "uuid": "6b7912f9-14ad-4dec-a832-382d25e4acfd", "comment": "Malware payload (Mirai)", "value": "ec6f25de3cd6fc92efd96836f8fe2b0e30d2b1b2ee4db921943f869639376006", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767470, "uuid": "b16e79d9-7741-4451-b95e-d2aaf785b5ec", "comment": "Malware payload (Mirai)", "value": "052085b92172f1ca7e0a16bad180956ad733be74", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767470, "uuid": "c860c1e3-1093-4c78-be1a-90a47e233191", "comment": "Malware payload (Mirai)", "value": "cefacdcafde1882a1d1b1dc49c4df4d6c004bbac831329ae597e012c999686a870c0e0979a5676b997995b4f55d72add", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767470, "uuid": "2e705864-58fa-48b0-bea8-4cca67341042", "value": "T1DA833A92BD819F13C1D221FAFBAE014C3715ABA8D1EB3253DD21BF90378689A1D67711", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767470, "uuid": "d068f64b-138a-43a0-9e61-a9c929e8ea8b", "value": "1536:UulphbwEBu0P4xcNqftQQVyjRjBcHy/oPrTodl61d6fAP:UuDhf4xtnyVj2woTu4mAP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767470, "uuid": "5a888723-06e9-4823-829b-fac6651fcea6", "value": 84228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767470, "uuid": "85b6a7ae-bd57-4358-bfa0-c3c188206bc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767470, "uuid": "3a35dd45-ff1a-49a8-9577-cc583ed7b7be", "value": "debug.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a131040a-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774119, "uuid": "8dba6f6e-5102-456c-90a4-6dff06d7a8e5", "comment": "Malware payload (Mirai)", "value": "8f2655bd98af1f47fb6a750e8c1507c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774119, "uuid": "223136f0-fe3e-41ec-b281-4a6246f9f9d5", "comment": "Malware payload (Mirai)", "value": "ecea663c4f2ffa4282adb99c5bd3bc61f7616fbd8ce81a37611ab076a9e9235a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774119, "uuid": "4a9d2510-127e-41af-bbc5-972b9b5589c0", "comment": "Malware payload (Mirai)", "value": "bd5d222cc26618593479be7c2f80e56c9e51ead2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774119, "uuid": "4ddb3ab0-053f-4665-a201-856b25b930eb", "comment": "Malware payload (Mirai)", "value": "dd6997cb582bca804f1873bfa157c5daea8055b0dc5a47b0af920c4e7a639738980806281daeb4611593491422d96d94", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774119, "uuid": "125db7ca-86db-4c9a-b444-1ff24202891e", "value": "T1DCC36C0677180F07D5A356B02A3E5BE083FEE5D121F0BA48691F976A8676D3B1486FCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774119, "uuid": "7a588c5e-59d7-4d42-bfec-d6d8f8466988", "value": "1536:93zEelmDjNJu90RIOWzOrNho9AHqz3J0T+eEPvnAtDFZw8Y13E8I+4SPQlPHrhE9:93VOo9UqDJW+FPvnA1ApC8ITSMWdL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774119, "uuid": "5448b958-68e5-43db-9912-b613fc29915d", "value": 128552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774119, "uuid": "6a8aabad-c20f-4a6e-a9b7-54a4164090f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774119, "uuid": "22e71dd4-9184-4f14-9fa1-81e8aea52682", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a8d4468-e2aa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766788281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788281, "uuid": "8a9d132c-e279-4329-9d7e-d16997774813", "comment": "Malware payload (Mirai)", "value": "d5f181a704c1cd58d28a365b60c69e07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788281, "uuid": "f61f4f70-1c52-462c-8a4e-fdad54e23656", "comment": "Malware payload (Mirai)", "value": "ecea9b8bc1e0a777f5e6f3ed99dcb08ab2b91ff2dfcba7ca15c7ef234bd16eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788281, "uuid": "52fdf5e8-6f61-4252-bfcb-b6c84bc733a4", "comment": "Malware payload (Mirai)", "value": "cd38b617df5a1480bee732721f64bc46e4552bab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766788281, "uuid": "363c60c1-d423-4722-b1b2-bfe2b1e407ee", "comment": "Malware payload (Mirai)", "value": "c4d03382c6eeaf5c3be4824b21d8a0e68e3d7679b124df12b08cc4db7ec300723726050c4a18d8742d8ca8b9f999c1cc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788281, "uuid": "d46bd334-c6fe-4123-94f4-4ef35c2a163e", "value": "T166E30759F8819F21C5D726BEFA4F519D332317F8E3EE7213ED181B24368691B0A7A502", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788281, "uuid": "27c7127a-c15b-439f-b0b3-371e5517b03d", "value": "3072:Y75XxtgXTErbbnG1oV0KdEsNeLhIe79239Ha5uPQmWh4jthYSc3bln53S:YlXxtgXQrbbn0oV0KOMiZhu9Ha5uPQmv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766788281, "uuid": "27b2b228-6308-4aa3-8c1b-f3efb587ce63", "value": 144884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766788281, "uuid": "70ffa7b7-a556-494c-9ed3-87978eb20225", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766788281, "uuid": "c1643614-c8e5-4bb2-bcfd-c7338889f8f3", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "218db709-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747276, "uuid": "4c80a36c-9c5d-4d26-8ad7-3ee3801c6386", "comment": "Malware payload", "value": "4c28658bd7a6977e17803a26842b72f2", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747276, "uuid": "4d62ff1c-0dd3-4a91-b8bb-a940878307d4", "comment": "Malware payload", "value": "ed2cdf81671aaa070abd502be83a88a584b78c12ba4df772cfe429506967d0ab", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747276, "uuid": "13978335-b8b2-4939-8b48-3b92c14e44ad", "comment": "Malware payload", "value": "245a71177f0799e3d48a1b175bcd82eb71684120", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747276, "uuid": "0c48236a-5eca-4d92-9a1d-fc11cf56b1ad", "comment": "Malware payload", "value": "56900bc92b822a660e628cd7c30eea5b95c8d38ee2624bb304cf2ac2cdc9a222fca56e670b1a122ee4df4316d240286b", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747276, "uuid": "77ad7b52-cbec-4715-b16e-6d70a6387c84", "value": "T161633A857462C034CD5A2E6D6262460AC837FE0F7E2632B8B3D37A21BCF8937559457B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747276, "uuid": "4962840e-1175-488d-93e5-e0c2b7aa2ab7", "value": "1536:I9l/AoSSMLrkAIKn90r5HRsjPTV8hER3OdEO6jTJzslMeGizgodWA12f2YJeDgyq:I9l/5MLrkAIKn90r5HRsjPTV8hER3OdW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747276, "uuid": "3699b672-2e8f-4168-84e5-03ea54df9479", "value": 72500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747276, "uuid": "b3fe6adc-69da-4986-9622-806709343353", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747276, "uuid": "9d068559-6f7b-4d91-900f-0b6689928a4e", "value": "invoice-1645080830.pdf (69).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77f43734-e292-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766777915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777915, "uuid": "6898eca8-ebb9-4c31-a6f1-06b5d55166ff", "comment": "Malware payload (Mirai)", "value": "473c2c5721910b3f63260bec9cd578af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777915, "uuid": "1e255bf7-e4f2-4122-a4d5-8238cefccc7f", "comment": "Malware payload (Mirai)", "value": "ed57335c12d0310cd17f3a04a91da77fbaf3d5a97d5d0b9b7413a247d390c124", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777915, "uuid": "6dba7345-44cb-4d22-a5d0-bd27337b1235", "comment": "Malware payload (Mirai)", "value": "f7e06f03dcc3a8c02abb5594c5e8f28f8f97c5e6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777915, "uuid": "f36e5f33-dba1-49b9-9069-1b6521f879b8", "comment": "Malware payload (Mirai)", "value": "d5cbb6f945b09d584445eed893d8c1c5eb11686a9183e3d50accb86b76609b307fab49a394a245d9855f4f003f38bb7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777915, "uuid": "3086a4ce-b827-45a2-be35-9f3bdb06934d", "value": "T1EF936B23653C2A1AD5F0A073123753A3B1E6264E0454D79EFD720E8FFF662D41E2A6B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777915, "uuid": "f705e99c-3c88-4a18-a20f-8a86d9bcc333", "value": "1536:czqrVGbdpoLbtp5n1SFR4mjMwM3vt+K4vShateMr+wWIymQY2AUYci5hh1VcO:Yq+0hA7M3vIK4vrteNqhh1+O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777915, "uuid": "1bb46ee2-549b-4bf9-be96-d9bba28606d7", "value": 92700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777915, "uuid": "0396b66f-439d-4b49-8913-90687b81217c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777915, "uuid": "6d09ba5d-a3ab-40d2-8654-7326169dbaf3", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8848e5c-e28c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775446, "uuid": "de82e69b-0b44-442e-a586-66ef6b9ebfd5", "comment": "Malware payload (Mirai)", "value": "b518070fef15cbe188c4a435e26116ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775446, "uuid": "d31677ba-95ce-48d8-b14d-d20fb5e7be92", "comment": "Malware payload (Mirai)", "value": "ee3aed0615c79bcb11324201d45694bf0dd76872c528def32b43b71204e74e27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775446, "uuid": "34bbd364-7a74-4c26-b4a0-bcec6d50234a", "comment": "Malware payload (Mirai)", "value": "00b1085049dffc9e8ca0d27eb1b420b6170302e9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775446, "uuid": "418b706c-a8d4-4ae9-8246-49fc25a8c920", "comment": "Malware payload (Mirai)", "value": "577c7fb9c7b5533cd9eb6f7551a3fc3c4247c100ed970f044e59451641a13c6ec9c3810a324a5b47a104764cfd5bc82a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775446, "uuid": "72cf495a-05da-4afa-bfd9-007259da717f", "value": "T1E8042A91BC516F62C5E623BBFB5E428D371513A8D2EF72078D226F203BC695B0E76241", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775446, "uuid": "af56f805-3426-4b61-bf76-1dcb25555c68", "value": "3072:DqM4WMvGy7Dkq41LrVxoLSBwo67SF/Flnub4fK+1yXHrEbC2:DqEA7Sxub4fKwyXLoC2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775446, "uuid": "0d12e05a-18fd-4f8c-8b0b-456de654e228", "value": 174476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775446, "uuid": "b628a015-aa05-4c60-abab-556eb5093b9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775446, "uuid": "351b9afb-4ea3-4621-bdb7-676f74c601c5", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3bf3650-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767680, "uuid": "297dfcb1-c26b-4d15-8ffe-4ef649e5e773", "comment": "Malware payload (Mirai)", "value": "fe527581bd4bd102aef66168578782ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767680, "uuid": "4b4be3c8-5258-42b4-ad87-5429c84c5dd5", "comment": "Malware payload (Mirai)", "value": "eeac6196f5ff6f57de6e1e226593311a59e2adec79ac4d50b3a2dbdb1d1e60e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767680, "uuid": "ba0c171e-db3d-4e1d-88d4-1c8e6fd980ee", "comment": "Malware payload (Mirai)", "value": "12d76401c4dc09483536956c5231eb6c8742f1c5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767680, "uuid": "bf69d1ab-84bf-41aa-88de-f77987e070fb", "comment": "Malware payload (Mirai)", "value": "07003b0e74cde12a39bc98d21d5e8bee44a8514b6afacdf4c311a6b0f748c9ed9877bcc7207dc0a8f0333b766afcbc5b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767680, "uuid": "1b17f0a8-4644-429a-98e5-05f3666847aa", "value": "T19A834B237E361E27C0D274BA11F34B31F1B16B6B28A8865ABD712DC9AF255D032437B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767680, "uuid": "7b86c139-a78b-49bc-bdee-75153fcb7ba0", "value": "1536:pJuA45nSyD+Cb9BDeb6OH3h7A9Dt2yYM529XizIDet3ifo9VNNSB:fuGHEzclABMyY8JRiuCB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767680, "uuid": "d04eb031-b336-46e4-8385-33d227b2946d", "value": 88184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767680, "uuid": "ef3bae5a-8bbe-4682-b175-24ae5bebeedd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767680, "uuid": "3988b9bb-186e-40c0-8d2f-f06c008de435", "value": "debug.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5a3e81-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767458, "uuid": "39fbe24e-0c30-4485-8196-bb68ac20299f", "comment": "Malware payload (Mirai)", "value": "a1be6a43433b3b54c6f17e18916cf013", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767458, "uuid": "4d6e5491-4715-43f7-ba70-abe3a9ba7ece", "comment": "Malware payload (Mirai)", "value": "ef8327d24301c306961c16eb8e076f13b9909e84cd95d2c355abc84fc60e7866", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767458, "uuid": "9c3e2101-2785-4daf-8f5b-977c8666126c", "comment": "Malware payload (Mirai)", "value": "582faf8fe24bdcaa9811f2fc25ab61a7fd620707", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767458, "uuid": "2cb1a71f-989a-4019-9170-ede290b3463d", "comment": "Malware payload (Mirai)", "value": "9ab46ee4d6718486230689396a9e4969bf896c6adfbbce08416ae9be3685c24033491f293f36f4b53dabee50d9062df8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767458, "uuid": "36c997d2-251a-4bc3-b692-11e813518543", "value": "T140538C7BC9796E44D25881B1B8B08E742B63F08091472FFF1A99C67A9087DACF6053F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767458, "uuid": "faf2eb99-8678-47fa-9566-41ad25cf0f64", "value": "1536:XlaMwtZivFfWRKmvCK03BjpdVGa5NiC+eiyKgBs/F:VPXv5WRfvl07JNisHTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767458, "uuid": "66a26d0b-36b7-42d6-97c9-b8aeb771bb7b", "value": 63100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767458, "uuid": "0093e067-11bc-4601-8758-d136f14f0b9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767458, "uuid": "b8d5f825-cfc8-4d36-8f0e-f892a94e7b09", "value": "psh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f30a1b00-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1766779410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779410, "uuid": "43aacc72-bf4e-43fd-a1c6-91a8371d6b7c", "comment": "Malware payload (Stealc)", "value": "5bba49a7d080c163e4b483dc674c8d24", "object_relation": "md5", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779410, "uuid": "59315206-5873-46aa-a6ac-2bbae9c81f99", "comment": "Malware payload (Stealc)", "value": "ef8629e6817f6cea3efdfb9cc3d0faaa47db625f0cfa2d894ff3f760b08d354b", "object_relation": "sha256", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779410, "uuid": "d8e49897-7a4d-43fd-a029-6ba77b41016d", "comment": "Malware payload (Stealc)", "value": "3d6cf739cdc30431dd06b13c6219e8b56db541c5", "object_relation": "sha1", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779410, "uuid": "a6c2c679-ccfd-464a-aeba-e0478f540bd2", "comment": "Malware payload (Stealc)", "value": "f0bd937cb395e08f04977a38a007a54cea4d7bb45d98e81977a4ff39827e54f120942c8c99d145d83371d5c64a4f22d6", "object_relation": "sha3-384", "Tag": [ { "name": "89-110-110-198", "colour": "#CBB656", "exportable": true, "hide_tag": false }, { "name": "dropped-by-RenPyLoader", "colour": "#C14D39", "exportable": true, "hide_tag": false }, { "name": "HIjackLoader", "colour": "#19300F", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#936922", "exportable": true, "hide_tag": false }, { "name": "rezipped", "colour": "#AE75FA", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779410, "uuid": "dd70c659-539e-40e3-bb6d-b2120d066ece", "value": "T1759633E44BF6C857C8124CFB5EA1881AE4AB41473DB3D6E8E5D83820BFA71C7015A56F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779410, "uuid": "a9eff9c5-1996-4a1a-a0ad-bb8b8cb5aa58", "value": "196608:tiYGvYSxnFlwdepfg5X1bwrOiA/FDj4ez5F9WSNr97dqaRoruuZuTsPKauoFrYaA:tD+HYdepfgV1bwrOv54ez5/XB5qaRe5G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779410, "uuid": "d534effb-5321-403d-a7db-2a0ec60b8c03", "value": 9165526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779410, "uuid": "91d4bd68-dcbe-4cb7-b9a3-c423df61ca74", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779410, "uuid": "0dff2678-46e2-4bbc-9182-257edb51c0bb", "value": "renpyloader-1.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c625a7f9-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747122, "uuid": "5403f45b-7b06-40e6-9c8f-55c0e7abb695", "comment": "Malware payload", "value": "8c0abec84c50f5362b7d60328080af5d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747122, "uuid": "2a3fe07e-39b6-4292-a0e9-119db57379fa", "comment": "Malware payload", "value": "eff0528cdfd105d87c232a00b319f18be96e3642e898a6edb4fb19a6fae99bf8", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747122, "uuid": "ee27e418-9ce9-4774-9f90-de1214157ef9", "comment": "Malware payload", "value": "645db74cb100263aabf0361c1bb43e2bd3fa6d2d", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747122, "uuid": "bebccf1c-9517-4fb2-a9d7-cf8cba8f64e1", "comment": "Malware payload", "value": "3007d94746e3d1387344d5f1b32d9e0957b9b611cc67f9e1ece61f731a9f9c9bf5ae8898876cc83e66ab7ba32630d952", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747122, "uuid": "b316c690-fefb-4943-bca4-bf015296d375", "value": "T120631BC79CD52DE605375E67A221728B2119182FF9D428787354B20B0F9EFC512EE4EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747122, "uuid": "7064a0ff-3ec9-419f-9677-b07c7ae4feda", "value": "768:I8w/h62/jWs6oS+xISN0vcrLtmy8A53Wzxmly3loFifZbkwbHdw2d7THmd17EAmB:I9l/AoSSMOFusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747122, "uuid": "75a11464-cc16-4c39-995f-e69304d9de95", "value": 71587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747122, "uuid": "7104b4bb-33a5-42cf-a260-5eb1465eb040", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747122, "uuid": "b629c275-f593-4db5-8b92-a0bd63d2e303", "value": "invoice-1645080830.pdf (94).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a20d400c-e289-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766774120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774120, "uuid": "812ccf37-691f-4657-8693-6a8f338d28ea", "comment": "Malware payload (Mirai)", "value": "fdd9394ee6acae0725b1f4c9cbfbba93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774120, "uuid": "bd2ced30-fbf0-49b6-ad60-7eff14bf97a6", "comment": "Malware payload (Mirai)", "value": "eff3933a33fcf3c597897959fa3f63f0cee84e679794f286e440444d7a7ac95f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774120, "uuid": "98b75858-dd1b-4b59-8000-b9685f003be4", "comment": "Malware payload (Mirai)", "value": "55ba91f612858be37d2ef9994eca743b53bbc220", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766774120, "uuid": "bc178f29-a68b-45a9-8301-0890abbe980b", "comment": "Malware payload (Mirai)", "value": "2e32b2458fa32417a15d233f7986f7a79f3b84ea39c0db8679fb94a83c2b72c83601d9971bcac11b6d76290b70df66e0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774120, "uuid": "7811908a-a861-40dc-a2e1-1030c267986e", "value": "T1E7530269D9D632DCC8BEAEFD406E2452DB1C94DE3169CF9116A19C08C1F4B2E21CF51D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774120, "uuid": "1f7b9b8e-1489-43e8-b68d-1c4c7dd90525", "value": "1536:jiowAT5wEB+r0BO7fKOLLGmCZwt2tNBUa6eiWLNJBiqIebmg:jEAT5wE20WdCZFtNBiBWLhUhg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766774120, "uuid": "1fddf1af-5ef0-48aa-9968-3b0df1332708", "value": 65700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766774120, "uuid": "ab2d6cf8-bc1a-4555-ba96-8b99aa03d327", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766774120, "uuid": "0c0345d3-a89b-4e2f-8b88-be4c850c6721", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03c532ac-e292-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766777720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777720, "uuid": "058d9af5-a93e-4394-83e6-30d0f9e25938", "comment": "Malware payload", "value": "1d4809f8d57d3482a7d0e2858668871f", "object_relation": "md5", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777720, "uuid": "921ea16d-8b23-482b-a69b-5235f5d3624f", "comment": "Malware payload", "value": "f061edb8652b316f8a4366efab35355aa0afdc23039cb68805992dbff1a95d96", "object_relation": "sha256", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777720, "uuid": "3cc73081-023a-4610-a339-b9e731003bd0", "comment": "Malware payload", "value": "6d12c7aae92d251fe778ae26afe6569c96061374", "object_relation": "sha1", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766777720, "uuid": "9d34186f-4c63-4541-b268-4755925db665", "comment": "Malware payload", "value": "47ac24ab8b8aa74dfbc9e62e7d51f5ca6fe541abdb8618ad4659ad9554571f558e5721692c1d14b7b00f577daec33d59", "object_relation": "sha3-384", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777720, "uuid": "13921024-1324-417a-a093-4b2b0e17ac73", "value": "T1BA7623C2DBAA5C08D517B33574EA2152FFA6E2C715E9630F7D0002E12CA6EE2C65F785", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777720, "uuid": "4aefecc9-2f0a-4d6b-8f47-670fce1d435b", "value": "196608:mMyR/avd9TyznG3dvNPkfRCfAYCtBIzvl9cZ:mMyAvzGznAv5kf0uIvcZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766777720, "uuid": "e9e4c2c4-b6d8-47ab-83dd-11330db8bd7f", "value": 7286459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766777720, "uuid": "f204476d-14db-406a-a4be-39567cb3dbb8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766777720, "uuid": "1b0f6dd7-f469-4318-9f02-0493f8b7a752", "value": "SETUP.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8203e87e-e28d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766775784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775784, "uuid": "9c6c9039-3fa2-4637-b940-5b055226b35f", "comment": "Malware payload (Mirai)", "value": "41eb30af7366ef74321d1a1b13f3ee3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775784, "uuid": "f571a8d1-4b05-45f0-82f7-5919a0b1ac26", "comment": "Malware payload (Mirai)", "value": "f0dfa5b647fecdf05925ad181fda1052b0647bd776c39502c7956d58bdcaf1d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775784, "uuid": "ff3b957f-5cb5-48d6-8cd3-97e3e648942c", "comment": "Malware payload (Mirai)", "value": "bd9d9c82c4827ac99d69a0a7dfd7d0e5aabf817d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766775784, "uuid": "3441b6bf-9092-421a-a10c-097c07532906", "comment": "Malware payload (Mirai)", "value": "ef857e9799b9a10b0b1e76c363cad69d368fec05baa69255d3c93c3d5ed4b71a42573887ff5d0c2869450ea44ee60e7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775784, "uuid": "791f95df-d188-43de-9944-b5a8ce8e0a5e", "value": "T147C35C45F347D1F0E94205B0119BFB379A3269722134DD6FDBE4FBB36CA16529806A2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775784, "uuid": "b5ad4f2b-77b4-4d00-8143-b3bf3a190f00", "value": "1536:Z9Q+EP+mgFNV4ulBjNQPExfcaBZnQflyYUuiybNGm4v5da3wo7ujCUUUR310CIoq:L3VzuCtZklO6NjQmZifakMs84c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766775784, "uuid": "74233529-ef84-42fe-b9fa-b7be8f32ce5d", "value": 129520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766775784, "uuid": "2ae83ff2-1bd9-446c-bb83-be7e1d6519bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766775784, "uuid": "1650551c-c670-4593-a084-56ec1e060420", "value": "i4_x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d338c310-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772485, "uuid": "9d512714-86c4-475b-99fe-079a53bdd4b7", "comment": "Malware payload (Mirai)", "value": "81b7590379b0bfb48804e24047295f80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772485, "uuid": "4a76a7fb-74c5-4ad6-977f-23086c2bf79e", "comment": "Malware payload (Mirai)", "value": "f178c2dc15e111ea42f93ee311a52c7f7c31e830472d3e0ffb4a356fcc1e04ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772485, "uuid": "8aa6fd2c-01e8-45b4-a930-43723ad11ae3", "comment": "Malware payload (Mirai)", "value": "2a51d2ba683580326314a88b52b10eabe6c1327e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772485, "uuid": "6ad128ba-6208-48b7-af4c-46b98596f3c8", "comment": "Malware payload (Mirai)", "value": "19f2dd5279f817a73ba62039aeb14f67d6b63b22b41018f52af4d158c94366c732257c4ac8eabfa88071ed8f13a9c355", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772485, "uuid": "88ad0e94-b9e5-40d3-ae06-d6a4a8891919", "value": "T18853F797E400EDBDF809EB37C6570F01B174B6564A520B23F727BD97AE75088482EE86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772485, "uuid": "5bb5ec9a-2d83-4eaf-992f-aa10e70f3c05", "value": "1536:RE9eM/CHVeFhTbUIgl8Q6gyvt87zI9d29/93h/ETPU:RE95K6JbR6l789d29F3Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772485, "uuid": "1b7c81bc-c680-4a35-91e0-490d556592e2", "value": 65260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772485, "uuid": "ed43e81f-bd1b-4696-8747-19f7dc03bb60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772485, "uuid": "93be7a1c-4c90-4fec-a29e-b34322364219", "value": "nabm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ff3e7c-e227-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766731920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731920, "uuid": "13c3beb5-2e9f-4952-b3b5-1d0a169d2c4f", "comment": "Malware payload (Mirai)", "value": "f28c01c17fbf58feb258d74fda003c19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731920, "uuid": "8062e7f7-fc7f-4cc8-83e1-6db4df7d2ea0", "comment": "Malware payload (Mirai)", "value": "f187420c86097fe2f566971fc7331ef5bacf63b7d0a795f3c027ea173b07b4c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731920, "uuid": "418b3834-d4e4-493d-b2ef-9510f5c86b9a", "comment": "Malware payload (Mirai)", "value": "0e0ae393917287d42c5620957d2152446f444d91", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731920, "uuid": "48204b5e-ace3-4b95-a7ae-c463786c8cb0", "comment": "Malware payload (Mirai)", "value": "514ecb1d515b710f2c4a25da2d31ae4c54fee7cb63f3418c75a280947965f6c8fb9b5e8daec0cc078b7c3d32f58d01aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731920, "uuid": "3c9f9b59-ee69-4a02-955f-0edf25d5e6c8", "value": "T14B63025054FE7C96C0E3A774417D33BD4B2CDF6B1E0C08909CBAB1379E98499352B68A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731920, "uuid": "70f631d5-1df0-4a32-a0c0-469efc06654e", "value": "1536:5tchhtI6hWhDjhvZitxb7IsxX0I3wOZXDAClanouy8GyL:whtIpf6xXprAOnCout3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766731920, "uuid": "7377e628-20e9-4067-b120-aca485b3a94e", "value": 67928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766731920, "uuid": "6c8fe02c-7cbe-44e4-92b3-a660eea59a98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731920, "uuid": "16ce0250-cbd5-46f2-ad19-4a23942fbe94", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f899ba9-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707383, "uuid": "e30dc19f-fe46-4d9d-8a56-2ba568f0c69e", "comment": "Malware payload (Mirai)", "value": "752e1b523f29ab79a2dee8b704a0a1f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707383, "uuid": "72e74e92-6dbb-460d-8c28-abfafacf8826", "comment": "Malware payload (Mirai)", "value": "f1c0894c9aaefbe54fabf744157d299698a247cd98b572c90d82ceb5616ff9a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707383, "uuid": "7ed65f27-20bf-4207-a7b6-ac91508684aa", "comment": "Malware payload (Mirai)", "value": "0f59e0956309954aac0a9e41729a8b0b70a1d6ea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707383, "uuid": "723881c1-5b94-4a9c-8f6c-e8434e16ccfb", "comment": "Malware payload (Mirai)", "value": "1ea4fae5276a95816230f9cf605c811328689e329ae00e59ad63262f30af26c766fbde067249538ef6ce86fff58ddd9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707383, "uuid": "8492cc32-ee8b-46e3-9951-04c8751ef7d3", "value": "T174338DA6CC6A6E28C55C6AB0F5318F7B1B13900096963FF78556DA658003E8CF68D7FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707383, "uuid": "744148d4-dba3-4a98-abf1-1e9c1c65614b", "value": "1536:YTeWtmv8JJgRcs0MUoZ5pnKTCIqid7T2bVRC:y3+WobpnKTd3pT2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707383, "uuid": "42e4f3ae-6cb4-47b2-9c7c-c325756647c7", "value": 54876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707383, "uuid": "81961782-780a-4baa-905b-bf907c2316a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707383, "uuid": "643060e7-5fb3-4847-862c-4fd8e287bf4c", "value": "nabsh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8520eb4-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781888, "uuid": "5b7aa538-a26c-4b0d-8635-a4b8871e881b", "comment": "Malware payload (Mirai)", "value": "82a766f6ece94827c7a3a484bf0cdf49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781888, "uuid": "9ebf97bc-b8b5-4aa4-8eff-fac151c3862d", "comment": "Malware payload (Mirai)", "value": "f271296e8bc49b4471960e07930ce0e1c4e78b4af4e89d03b83e129db6f36e28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781888, "uuid": "fce454e8-4aa6-410f-90ff-f74ff745b8b5", "comment": "Malware payload (Mirai)", "value": "123bbbf67fafceb4c0561ed448d60f5f71c2a5fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781888, "uuid": "a7748b25-33d5-4958-8e98-638408224536", "comment": "Malware payload (Mirai)", "value": "0e62fa1d50c37c70d42522b02680b7afadcf013a8dc9a26934fc9cc5695d913db9396c786b071faf58f7fd0aede98c2c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781888, "uuid": "353c0a8f-1d1d-48cb-a931-2eea2e4dbc84", "value": "T1F7436BA3CA652E5CD05AA4B0B0309F795BA3D165C1472FFA2562C7798083ECDF6067F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781888, "uuid": "847cd62e-3918-47e9-95fe-d1d5fdc8295c", "value": "768:m44WYyBu2oSC+jWYK8/gnxaE1omhmBx1C7WkPVgf9gJYfOtS3a1s+vP/AIGD:m44qBNK8/gnc5mQBzC7WJbL3a9Y5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781888, "uuid": "09edc35a-bce2-4395-98f6-80b44f261dbe", "value": 55728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781888, "uuid": "783fc47c-9eb5-416e-bf01-465404ab0d89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781888, "uuid": "18f4a851-bdaa-44ac-84c5-fc60ba5c00bc", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fe689dd-e2a9-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766787860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787860, "uuid": "9db6919e-a5c0-4851-9fe7-d5be04fde027", "comment": "Malware payload (Mirai)", "value": "15321d78b52bcd8fb9ecc4830bb9f904", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787860, "uuid": "22e0a9b4-2cb0-4720-be23-dc8276a7072b", "comment": "Malware payload (Mirai)", "value": "f32540b4b59644fe895135669b8f444232e955ec8fc96fe102274ccb0a80c47c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787860, "uuid": "aef369db-e647-4ebd-9967-d9a5312830ae", "comment": "Malware payload (Mirai)", "value": "bd72970d86125365ae239dc0a792ac0791a76a44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787860, "uuid": "3143c4ac-0aff-448d-a357-6bc4c68aadd7", "comment": "Malware payload (Mirai)", "value": "cf86f639df131ad3d164255222080fcf9d7566d797ad1d1ea0b626581badbb72de9ed37296d3aa1908f2919ac3624fa0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787860, "uuid": "c4da4a6d-5d13-49b3-b3c1-31b8fa2b4e13", "value": "T1EB332A99E401AD7EF84AE7BFC4130A09F631771161430F3666AAFDD36E722D48C66D82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787860, "uuid": "5ff915e7-121c-44ea-99ca-a5e95ccc7c2b", "value": "1536:6vUKzCKKWKEXwvhk/d8unZqN5T/V+qaml:/KzC7EXehCPwDV/rl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766787860, "uuid": "60ceb09d-5543-422d-9d33-896949624dcc", "value": 52048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766787860, "uuid": "8c38c3f7-b11e-44e5-a1ff-1ef6415f6ecd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787860, "uuid": "fb9321f3-6f22-43c4-a5c1-a9f5d771ae2c", "value": "zerm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f82dfcc0-e24a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747206, "uuid": "335fc05d-0357-4725-a1b4-0976cfa1b752", "comment": "Malware payload", "value": "d3cee50ee67d0a5ff9fa9de18cca62ec", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747206, "uuid": "6b70f669-057a-40b5-82d2-0bd424af659b", "comment": "Malware payload", "value": "f37d254e30e2850229127378f0bd9ae1810de48fd4cb14ba121301f0e54bf799", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747206, "uuid": "27aba22a-d451-4944-a2e3-ae97b7d8f10e", "comment": "Malware payload", "value": "5346ad4cecfdf7d35506d97b15f4c16b4fca23d4", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747206, "uuid": "2e4ba80b-b692-4877-b611-37833110635e", "comment": "Malware payload", "value": "a7e32661304365618f7fc3d3655806c04e251fe415083c94f561a5fc44d98bf5a90119c745070bff3924adf1cced3576", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747206, "uuid": "3057d3c5-2372-41bc-94a0-1945dbdadc8a", "value": "T1D063290AEE20B8F9B35D2E64AF8632194FC83B37CC52F4CB755324A05A1F7219E98D55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747206, "uuid": "fc910035-ffc0-4f99-95a6-2605b76bc851", "value": "1536:I9l/AoSSMPord0BM7JdYZHJxKa9IhPDHQppyQp6a77K9XRf9XOAlMsV6p8E/tppu:I9l/5MPord0BM7JdYZHJxKa9IhPDHQvG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747206, "uuid": "8dae23e7-dfcd-413b-8cd4-133787233212", "value": 72534, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747206, "uuid": "61cca8ff-d1e1-4168-8a01-17f150f8241c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747206, "uuid": "42feff67-530e-4fb6-a7ab-e05ddd63decf", "value": "invoice-1645080830.pdf (76).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50a0df9a-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767541, "uuid": "55f148cc-efdf-4d6a-986f-1e154618a077", "comment": "Malware payload (Mirai)", "value": "fada1c3a4a52038dac243618dcad4f27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767541, "uuid": "b01bd2e4-9fea-4ff3-94b6-679ed3c4fc47", "comment": "Malware payload (Mirai)", "value": "f38032d467fef059c6b498c937d641f9312ca6bba06e4e17d61166f2f32e4485", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767541, "uuid": "047f2865-1ce2-4d9b-9ee9-26c96b6a85da", "comment": "Malware payload (Mirai)", "value": "cdff097017bbccc2af6399c55aa2aafd14eae6b2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767541, "uuid": "fb11e28e-29b5-48c3-9690-1a2a32e20a67", "comment": "Malware payload (Mirai)", "value": "5db0ef84ae3bb805bb64f3b051b7d56323ab27bf04759f0bc62957eaa8c336a0537842bf5e41c87c23ba329ba5051596", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767541, "uuid": "6d9a7009-8c81-4491-95ac-0147d182019c", "value": "T10E634B02B31C0947D1675DB02A3F27E193BEA9D121F8FA89651FDB869271E321186FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767541, "uuid": "4f628b13-4d4f-44ee-9bd4-5896890f9398", "value": "1536:v7AFs5xxqicS8EWbS1yMUmdnIYWrdIBctCfhGs/Bb:v8mCIrFlnIvr9gb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767541, "uuid": "4b77b2ff-145e-496d-853f-57b069a1d3b0", "value": 71396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767541, "uuid": "76882a53-6b54-4c09-8fd3-87fb3b84a994", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767541, "uuid": "cd226be3-7a03-4e1a-877a-70edef6c09b0", "value": "pppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e94190c1-e26c-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1766761784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761784, "uuid": "47f4be2b-17fb-4951-a476-6e441ea916eb", "comment": "Malware payload (AsyncRAT)", "value": "37aedc51004daf622ab370fb43a2b778", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761784, "uuid": "15deba06-dc65-48ef-83a7-8cac0f422676", "comment": "Malware payload (AsyncRAT)", "value": "f39921e7781804b7862fe7e4fcede70ba52ab5c206adbf0d6e119948f39b61e5", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761784, "uuid": "dfc09335-61d8-49e0-867e-f6a32cfec2f9", "comment": "Malware payload (AsyncRAT)", "value": "7865562afb2e45d412e4051a6ad226798d3ceb61", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766761784, "uuid": "663048b1-795a-4b0b-bee5-342e920f3404", "comment": "Malware payload (AsyncRAT)", "value": "13ff0db4521996058f27394dd6f7f6837c23419c092090942c7a395a478550ddcf69f0221c49cf1c47c665b5d84008b5", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0DE97F", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#D61A10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761784, "uuid": "ac44eaf0-8f50-4f7b-882b-5ed29975f73d", "value": "T145231A003BE9812BF2BE4F78A9F26145467AB2633603D54E1CC4419B5713FC69A53AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761784, "uuid": "56d62f0a-49c6-4727-b606-33ec0ec93d64", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761784, "uuid": "2af7f358-2a79-4b88-9db9-ba05a8f5f1d6", "value": "768:TuICdTYEXlTWU/+qhmo2qbqDrLNztvYnP5ZPIuzjbkgX3iAUWcBDZtO:TuICdTYUN2ZxxmRWu3brXSNLdtO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766761784, "uuid": "297dc500-dbda-42dd-a7ae-7d750499a5ff", "value": 46592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766761784, "uuid": "e395ee7a-9690-4eaa-bbe1-50a50f7a2123", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766761784, "uuid": "a5c4e9c8-90bd-4e11-8fc9-ba58c9a6d579", "value": "GoogleUpdate.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d4afeda-e26a-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766760610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760610, "uuid": "74c26fc7-f6a4-40a4-b1ff-b653885d28d9", "comment": "Malware payload (ValleyRAT)", "value": "1964602022ade8d0dd15f8089d127558", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760610, "uuid": "f33c0f15-a23a-4065-a2b8-9697f95f6eb1", "comment": "Malware payload (ValleyRAT)", "value": "f3f00bc2a726eb73702a96f215c5cf47ef45e4416e4f36b4e04e94167a0c33e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760610, "uuid": "c8f111bb-2404-4c8a-a609-dc72df64a329", "comment": "Malware payload (ValleyRAT)", "value": "db73dc0d334b618ea4a49a200e92567a04c4799a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766760610, "uuid": "38782827-6a2e-4199-8d3f-e4366d5a54ce", "comment": "Malware payload (ValleyRAT)", "value": "937b894a123f977057a3e213e918ab4e0bdb7bda1044d1b1c93bfa43e55f06431035305c05dac71f8fc044b7511d7c20", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760610, "uuid": "bdb5596e-bfab-4a8e-b78d-401adf73690c", "value": "T1ADA3DE417854A38EC82E72750C8FF73C6A02FCD75879990A546EAEF13D6118B5E8C6B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760610, "uuid": "7a814b79-10dc-44c5-9935-a8a7ddb652f5", "value": "71bc27ecfe22083f6c0d032311b8d4f0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760610, "uuid": "b768220a-e8c0-4eaa-857d-770155d54544", "value": "384:FXbdWaQEh2Lbl1y1PytMMAe2oSUBXDWVFDqsgoVEAQeSH9bpu64kgW:Xt98yMGE2pQD4FDtgoEB9bpuDkgW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766760610, "uuid": "8d7bc10f-0c95-4e4b-9065-222282cdc02f", "value": 104960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766760610, "uuid": "882e19be-15a7-4362-9c6f-3820f70f7843", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766760610, "uuid": "eee00c2f-232c-4323-8d29-f2dfe1ada4c4", "value": "1964602022ADE8D0DD15F8089D127558.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a7b30b6-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779020, "uuid": "9d1daea2-aded-40c1-8826-4a972de3eb7d", "comment": "Malware payload (Mirai)", "value": "57de2d2703fcd3599ad7bd1edb5ed1b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779020, "uuid": "04304b71-bb9c-4cd1-95a9-42fa57f77175", "comment": "Malware payload (Mirai)", "value": "f51c443964ce86412c2834145686d91c9c733e1361d110553c27b0390963c467", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779020, "uuid": "132e456a-49cc-4115-ba95-f25874d3193d", "comment": "Malware payload (Mirai)", "value": "c0f3ac18259b0283401fb58478d7d4f6db250bcb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779020, "uuid": "4832171b-528c-4a1a-afd4-3693ce17ccd7", "comment": "Malware payload (Mirai)", "value": "aa7f123d8cb041ff91d85048e6464c5d7614b6da349e6d0b6411afafb5f0b2765f04506683a0ae9d9fd5e5171fa8f9ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779020, "uuid": "2c68f956-6d79-42ea-b465-f8dfcaa2c7a5", "value": "T1A2C3C74E6F218F7DF368873047B38B21A75923D626E1D685E2ACD6045F7034E241FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779020, "uuid": "1614746e-9bf6-4287-adaf-1178e8edc291", "value": "1536:o8cT1Lkgwe4eSZjkaF6Ijj/Cr0ubgpa5PP41LDR8suWXea7q69tp7So:o31LPwvJk+Pe141LDZuWx9f5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779020, "uuid": "347f9807-854a-46b8-91af-6c0f0357dc51", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779020, "uuid": "25bcf583-5675-42d8-aa80-2ac583f84654", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779020, "uuid": "a50add19-df59-4523-9ca7-2fa227cd6c3a", "value": "titanjr.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb5e0ab-e227-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766731940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731940, "uuid": "022caccd-1c67-4e3e-8807-a76bfbd149d6", "comment": "Malware payload (Mirai)", "value": "9246a5e79c69ab82b7e82adbceba2f66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731940, "uuid": "3abc3992-9ebf-4ec8-a615-26e648e6ed52", "comment": "Malware payload (Mirai)", "value": "f5cb2f8fccc3394be42788d47a9213ecc446405774128ebecfa9dd455522bcc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731940, "uuid": "d06bb632-1b58-43f9-a349-bbb73504348a", "comment": "Malware payload (Mirai)", "value": "574b3cbfe16b882e11e703a93ef46df38af3b618", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766731940, "uuid": "7b5a4858-62db-4dab-abc0-cc3e9b126959", "comment": "Malware payload (Mirai)", "value": "d9bbf9ae3e0a7a48d1af80e569d4fd94cb7b6f45fcea4da7c081a60bf0dc12cdbd4f34a28e3ecc368c54121faba0ebcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731940, "uuid": "b779daef-15c8-4a62-a82b-83636c1f9559", "value": "T129F37DC6E683C4F6ED5245711076BB329BB3E53E613BEA82D3BD4631D811A40C61B7AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731940, "uuid": "bb26bbe2-3c77-4e2e-8c53-22f431009a84", "value": "3072:7aSTtjQhALXth8zuMmAqcn7mI5k3KsLKobLVMhGB1eX:mK0hO9hDc7k3r+ILVoX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766731940, "uuid": "21bfad2d-873c-4724-819c-180b265cb33f", "value": 170600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766731940, "uuid": "07783d95-29f9-4a73-b98c-918a411c8dda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766731940, "uuid": "ce3f720d-f4f7-4e9b-aa03-74f5c6427277", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e24c88bb-e287-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766773369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773369, "uuid": "8e899a0d-24c0-4dcc-8782-cfad6cd87a07", "comment": "Malware payload (Mirai)", "value": "06f87ec88f0296a3bb8d2669165c0e59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773369, "uuid": "63521d8b-fe4b-4bfc-9fcb-4436f8384f86", "comment": "Malware payload (Mirai)", "value": "f602961b69ff4be169735423d69bf956d034c24adf45fe63091e55ec0a7b9d95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773369, "uuid": "02bfdc9f-651e-441b-96c3-d2081d1d1e7b", "comment": "Malware payload (Mirai)", "value": "735c519cd2b71adb53281ed32cb5a92ad6701333", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766773369, "uuid": "f57027ec-cd5d-4755-ae69-1913cf17921b", "comment": "Malware payload (Mirai)", "value": "d17fcf48f8251da2adb5ae7230fab3781a642f0e1313b700411ee0d6e524af20efd8178fc012a7d88891461b1a74211b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773369, "uuid": "4675dda4-f60e-460b-803a-0cab32814f26", "value": "T1CF048C73C8295E58C720D1B4B0F0AF7927638126A5876FFA69A3C6B54047EDCF50A3B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773369, "uuid": "20d12661-0e0c-4bd3-ad17-0a96f31e61d9", "value": "3072:xDyYFclM/kT2SVVZarc09gLQp9xxRoWSrU71QEGR6hh1U9:x8lPSSVLarcag2fxSr9EGP9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766773369, "uuid": "2001f8a4-14bb-4a11-aed2-0d2d9e78d286", "value": 179168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766773369, "uuid": "4ba53e1b-5096-4eab-8bc1-12c8d0246d0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766773369, "uuid": "95b940cb-b139-41df-b177-06f7b7b45762", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c088b5ae-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747542, "uuid": "feb01b23-2ea1-4209-9a68-30c13879f0e8", "comment": "Malware payload", "value": "a3b607b9cfd245e4e21faf56b31c348d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747542, "uuid": "ced83b26-2c3c-4a4c-a95e-a0b2f8e46d46", "comment": "Malware payload", "value": "f635a6fea7ec01f118c1a0e979c4be59ad0abeecacda09e01c4f70da71d7149d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747542, "uuid": "e15df691-2b39-4585-b2a9-330c2f307915", "comment": "Malware payload", "value": "cbee5556ab6f1d59eb03a29b2f0d689584e5f934", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747542, "uuid": "fc13605a-be7e-4995-a863-097b41638322", "comment": "Malware payload", "value": "7dcfdb0715ad9af5d003a6a2d6d0f8ef810dbea5015a854047eae964552b4f2be59ddeded4821e5692bcfdfe29eff4b1", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747542, "uuid": "a95aae22-c7a5-4c92-b758-7f7bd172a3b1", "value": "T10F6309B24C57B7A413D4B9D082CCD3C9CE6FA75E85B222FD3CB4B916A5BC5C24027299", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747542, "uuid": "b4441e0c-8a81-4aee-a99d-66f1de3f444b", "value": "768:I8w/h62/jWs6oS+xISN0vp0b/BfdkfScBYrwz2y8kTAlGB:I9l/AoSSMypusrdkTS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747542, "uuid": "caa85deb-777a-436f-a00e-cd388801a84f", "value": 70624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747542, "uuid": "8c7751f7-e711-46b8-8759-6a29a6107a2a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747542, "uuid": "c8690e31-c01c-42d5-9437-8a646879801f", "value": "invoice-1645080830.pdf (9).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b03a230-e2a9-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766787637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787637, "uuid": "a69b8e36-d1e0-4962-b2a2-74d0550bada0", "comment": "Malware payload", "value": "d444e7a2597082301cea027f9a1c6c94", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787637, "uuid": "2461415b-c072-4abf-9808-b71f783b9804", "comment": "Malware payload", "value": "f6ca4791f32e862451b294da6300cd72ed2375b176b16e42e2f914e7201c0691", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787637, "uuid": "db0d03e2-73fd-42e6-8133-2908adac8bba", "comment": "Malware payload", "value": "73356b6d8535e2cb42fa5f977c5475133d05814d", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766787637, "uuid": "353b3778-6454-4386-96c0-123477946e30", "comment": "Malware payload", "value": "4a77ce6ee14ee25a861824e5c17b257c595d857a48254d3a421f5e772e014f82a75ed36e8816b9bc0112ed3242a27dd3", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787637, "uuid": "94474611-50e6-4088-8126-4eea6776af00", "value": "T1076147FE349A6F32369CCDC0B2B1A558B88FA9D426A00D749F9A14E6C8F99057B04735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787637, "uuid": "d02a6884-9935-4009-88c8-d00619050b86", "value": "48:z56jhL8QoqziViu5/TwCayHYHPiQsyS+YwliQHdiaM:F6jhnf05/TwdsyVPM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766787637, "uuid": "7a4ada62-a932-4032-bd94-31d08702c67d", "value": 3394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766787637, "uuid": "003c853c-35af-4f1c-8a04-351a19401746", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766787637, "uuid": "87f2ccd6-a9e3-42c5-a7fc-e4c24c0b86f3", "value": "m", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c4cd79-e22b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766733616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733616, "uuid": "4074d11a-0be0-499f-8657-a6995b7e2ab7", "comment": "Malware payload (Mirai)", "value": "cffa9f48211182ad72b88508a9200249", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733616, "uuid": "d932ec79-2eaa-4ff0-8194-8cf27419f49d", "comment": "Malware payload (Mirai)", "value": "f6fbf730c614f55b266174036c98d1827bc602c3c830ccff25454272c694b91f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733616, "uuid": "f61f8364-74d4-4e7c-a5a8-bc3b0911a005", "comment": "Malware payload (Mirai)", "value": "b5ea68995c86b9a3ae69a57e9e1212fdff71ad54", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766733616, "uuid": "5562388c-dc2b-48ce-93b2-c1fb7cadd61e", "comment": "Malware payload (Mirai)", "value": "554f747da480209f04611923296260e877c07e9fe37c1aec54fe9f485a6746ec1a684db12d19188c83e5e574776541d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733616, "uuid": "4297181a-e3fd-40ff-8b19-c32d7dc804b6", "value": "T1ECD33881BD829A27C5D623BAFA6E028D332563E8D2DF72178C215F2177C680F0D77A45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733616, "uuid": "42e8af9e-f0d0-4f24-90b7-779a1469749c", "value": "3072:cKehIuP42LCARS9MwWv374oBn6JKYseA0TI:cKez3CywWv374YsKL/0TI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766733616, "uuid": "6d1a85b6-8d5f-42cc-8177-a8d09ab2e41a", "value": 137632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766733616, "uuid": "033e6902-e784-4ae2-bca9-198ec9217daf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766733616, "uuid": "c6488d7e-e555-41b8-864e-f4b6650e02f0", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53d2860c-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728033, "uuid": "3bc2a6b5-142b-43eb-be68-8b6f06cde09a", "comment": "Malware payload (Mirai)", "value": "3247eedfece73f3b217d31d8c26e2640", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728033, "uuid": "183aa643-9036-4ff0-9bb8-6a7e5e0c260b", "comment": "Malware payload (Mirai)", "value": "f748ede8b3bd8f7ce479fefa90b0d93a45776f574bdf0ad9cc8a014182f70922", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728033, "uuid": "f68b8ee3-680f-4ef6-9c6b-a48724f6a307", "comment": "Malware payload (Mirai)", "value": "321863621a41cc818205b094204957c611fd4b51", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728033, "uuid": "bcac0bb6-dbdf-49c1-bdd5-5bc2e9d12f8c", "comment": "Malware payload (Mirai)", "value": "229d10a1d77c5633bf2460e3d80963300d646fe001012970c2b092baa62a4db0c3f2de37cba68f8abd7cda691de2ee17", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728033, "uuid": "353f7fe2-22bf-48ce-800d-94e71f3eb0c4", "value": "T19F04AEA3B70B18C1CC6406F90BCB9B9D6E2321139D67D6E3AC6E36396E364DE15113E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728033, "uuid": "bd05d521-5a0d-48bc-bdb2-a68fb44986d6", "value": "3072:Ugto1HsB1SkQZPNbKYaYfKTHXqGwK/Yeed4cELcUx/EaTr/gUCo+wAy5Jub01xFy:UgtoCHMzbxYFwK/Ywcyh8ItCodAIfq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728033, "uuid": "25aebd59-a6fb-4ec1-bbfc-f5323bf39ede", "value": 190264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728033, "uuid": "3840369f-7cb7-4523-bd2a-238d758d119e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728033, "uuid": "2eb3eb9a-ced8-4d89-b9d1-1dccb06d3fd4", "value": "arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7af6dd8-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781887, "uuid": "857f1ccb-7f13-4f0c-8f87-0e2110c46223", "comment": "Malware payload (Mirai)", "value": "a85ace6f613a94de9f26b93820bf6c1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781887, "uuid": "19bd8ae3-00f5-4941-9ff3-f3426c8e47b4", "comment": "Malware payload (Mirai)", "value": "f76596dd41fba26bab3ea99d0aada03b62eaf9b33115fc714d34db002cb2c6a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781887, "uuid": "3d77bf85-1dd4-404d-9ed9-4b59b56938d4", "comment": "Malware payload (Mirai)", "value": "a4deac4aa03d9b9ad1d5337747f25747f6343d86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781887, "uuid": "5348398c-6ec3-448f-9706-46871efca9c9", "comment": "Malware payload (Mirai)", "value": "60a699c06f2f0aaca24951af0039b2d7fa48a4e49dac756b6a97080f13aff87ae021e8c1e9e0dd8d266ac5dab1c2a2e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781887, "uuid": "fc598045-85fb-4352-9710-574da095b842", "value": "T13B833B26BD72482BC4C4657A62F30735F2FB878724BC8A1A3E610D9CBF656503217BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781887, "uuid": "ed497d69-cb2d-4310-b77a-982d93fcf680", "value": "768:9+z+7xRjxEtga0fvIO+l95VkeLQwX6t8I9Jx//Cgq1tyJBS457n1DY/ZIkACg:+sxEtF0Sl959AJx3CrtKs/ZLy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781887, "uuid": "95ecf66d-805b-4747-aea7-eb6f35f62787", "value": 87400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781887, "uuid": "5700553d-c47d-4d52-91b9-5a428f181145", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781887, "uuid": "6e73d580-1fe3-4e11-b326-096f179e8646", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18c0316c-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779044, "uuid": "4c4f41b5-a54e-482c-9771-787e40b35151", "comment": "Malware payload (Mirai)", "value": "eb51559381a5d23c5876de38b2e1e61a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779044, "uuid": "461062e7-8132-4c04-b38e-2b36fc74e2d4", "comment": "Malware payload (Mirai)", "value": "f7af4118ea65040336702508edcdd20ab146b6f47f96ba144633f89376cee63f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779044, "uuid": "c6279c6f-77d5-4442-ac20-4866e6bf1cc1", "comment": "Malware payload (Mirai)", "value": "932dccfe743b82102ba8389833f99c3eeded9824", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779044, "uuid": "52d66b23-5d80-4248-9461-d4a77254db09", "comment": "Malware payload (Mirai)", "value": "4ce982651fa7ad99f82b4a7ff0aec217720d6e4dd2be25c575ea80cdcbcb66315736a1bd1cf27d1cf5e9f4b1af70bc9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779044, "uuid": "8f25a18f-6f73-4cc2-b851-1c111fa7efe7", "value": "T10903F1895959D700D23611350CB7E60F54A0EB1F15444AEBAB80B7B67CBBF316DA81CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779044, "uuid": "1f5ab434-a750-4527-8a98-0db0eebdeeee", "value": "768:SAW+GkX7xgBSxKLgTcSw7SWEsVpA2v5RzSviVPDNrlcabOT9FnbcuyD7UHQRjj:S9sGBSxKcTc3eWd95Rx1NO/nouy8HyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779044, "uuid": "0f278117-d1a0-4d67-8534-03a3bda5f0c3", "value": 39676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779044, "uuid": "f1ee513d-5cba-4f85-a737-72a55e88e000", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779044, "uuid": "aefa079d-c8c5-460d-8e87-bed4b39e5da5", "value": "windy.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "177654b6-e295-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766779042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779042, "uuid": "52c003f4-04db-457c-bca1-d34cdf11bf5d", "comment": "Malware payload (Mirai)", "value": "0fd09bdcfe1971f6245d449161b8d99a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779042, "uuid": "6503ad35-05b8-458e-9201-db594e080533", "comment": "Malware payload (Mirai)", "value": "f7f17ddc4348d867b7633c430b53fc3922a01fea4d7f43b6a31b04e6624da80e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779042, "uuid": "d54eac97-67f6-4196-a493-b5f47c0ab629", "comment": "Malware payload (Mirai)", "value": "22e9bcc658a7682461adafa8d564e091dc1a41cb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766779042, "uuid": "71355b4d-5f4c-4d28-8279-6e9deff30c6f", "comment": "Malware payload (Mirai)", "value": "0a9542d5950c029627f15d98e1623975099846f1d80f4a375c82d7cdf9a005693f0361c70a426ae2041640b9f9e61dfc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779042, "uuid": "b1e50cb9-8c07-4adb-926b-7e69de498daa", "value": "T16DA349D7F401DDBDF84ACB7B4453490AB171E3620A831F3663ABB967E9351980827F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779042, "uuid": "817900fd-34cc-415c-9d78-b8e9ff2307ce", "value": "1536:bhzQ1QMfdLBr5VZnvdWEkpYur4n/I8c4g6L8n3OH6RCGJ3d8xy6KT7QdeWwN07wh:bmLZ5rnvdt0+/I846pq3duyZywN07mB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766779042, "uuid": "cbb0f6d9-4790-4108-a3ba-bf26cd87e2cc", "value": 99768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766779042, "uuid": "a8af1e4e-0b1f-4650-8f95-f24726b1e939", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766779042, "uuid": "783be137-f508-4fb0-bc32-0fd91ad149de", "value": "titanjr.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986c56cc-e294-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766778828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778828, "uuid": "8a32668c-3045-408e-bcc7-8047b9150af5", "comment": "Malware payload (Mirai)", "value": "99541eb5085bb0b587495ec228e4e319", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778828, "uuid": "f31c2897-41d4-440d-bfae-02d5c1dc0f47", "comment": "Malware payload (Mirai)", "value": "f9c786be9378b45248330d42a89ba3d7193f994b229793bc35ab9974e042e700", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778828, "uuid": "11ae27f8-ca4a-42d6-b07c-d841e11a205f", "comment": "Malware payload (Mirai)", "value": "82634fe8c8be5d9dcad4521c590ee34c8c02eb9d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766778828, "uuid": "c617970c-2b30-41a1-95d4-266ead6764f9", "comment": "Malware payload (Mirai)", "value": "7e70980575248f7de7271a68c65c7f25ce03cdbecf9f7fe01a961502df4ff6933542b73ecea22cbbb41763dfb88b4672", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778828, "uuid": "023b09f7-9c81-46b9-ba2c-6eaac83c7f2a", "value": "T1D292CF6E646450C1E161883BE5F9CAC7B3B70BFDE3E8307117A95A2CF26668037A501B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778828, "uuid": "e920ec26-c89f-450e-9e16-216a8be6b12b", "value": "384:y3CFDQy54M7zLnmZFiPThj6r8CKozfdchYC+Gyx2QSHWWdwa7UihymdGUop5htb:qCmyqM7zLnmZQLh+IWfdzFG/QP0gis3t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766778828, "uuid": "26a0aadb-83bc-4c73-84da-1e273a48dce2", "value": 20524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766778828, "uuid": "e8a7a2fa-5aad-4ebb-9e6a-8f5198e6735a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766778828, "uuid": "6af520e1-2953-4719-9bd0-be3afb1433dc", "value": "Space.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d662cddb-e24b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766747579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747579, "uuid": "8e033268-5c13-4a65-ab1a-3f1abc7ba028", "comment": "Malware payload", "value": "9d8033eec53ad9d5e7a0b71b10ad6537", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747579, "uuid": "f9674928-de8e-45e7-9995-ea8c2dc2a1ac", "comment": "Malware payload", "value": "fa43a1a05c63ba0fb4773cc4bf21560dde372ceda6008c1b9dea5e87cc6a5aed", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747579, "uuid": "9cfdd865-df32-46f5-a31c-0313e9c7e1e3", "comment": "Malware payload", "value": "c3f8862531c30c801a68e39e5a9938d1217a6929", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766747579, "uuid": "01b6fbcd-a2c3-498a-9c3b-6a694b6ac516", "comment": "Malware payload", "value": "d02525ff4d696aa3dc7ec9f6aee6280a2ae1d3b4e4eef2d4482947bb4def4861b842cfe06a38802e71dd574e0ba9c8db", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747579, "uuid": "c8896ef3-f169-4cd4-bb3c-504bb2568695", "value": "T181632C238283B8593CE4323E9F066EAED49B27364DDE0E9D95767D39C911A614C33C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747579, "uuid": "6571f7d4-f5eb-468d-9cd8-5e784ca39a47", "value": "1536:I9l/AoSSMgoRctEE8AHnOdBORlCU/3MkF4FF5boHiY69CLfhiE0OUX6C/TwUiusq:I9l/5Mwq8usriT1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766747579, "uuid": "242af6ba-5d72-446d-a449-8d68a6ca7ac9", "value": 68749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766747579, "uuid": "a36bab16-2f2c-41e6-ab05-b82e8bb5bad9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766747579, "uuid": "431d23dc-ecfa-44d1-8f9b-48ccce75b535", "value": "invoice-1645080830.pdf (7).js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "173314cb-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766792785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792785, "uuid": "00eda24a-6709-485d-91c6-18983e895c7b", "comment": "Malware payload (Mirai)", "value": "b8570fcbfad2320e3d48fd78bc1d4f67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792785, "uuid": "fdcc4e57-aea9-40f5-87d0-32f6bfd13ef4", "comment": "Malware payload (Mirai)", "value": "fa6a4949cf1b6743beab7a9c2e05465639a93f3e03de959eb93935869646b010", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792785, "uuid": "ce6cbd04-2276-46cf-8c12-86952833bf5a", "comment": "Malware payload (Mirai)", "value": "2e0e9279e0139a360972f5139f5d994b3d758473", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766792785, "uuid": "f2992d2d-0632-4f11-b46f-44beba824992", "comment": "Malware payload (Mirai)", "value": "d63407fb9acd948779e1c7a4d151e32731ed0ed0c20aa3884b0ac7497a61bd8c8cd4c29b63f35a45d396b56ea058a343", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792785, "uuid": "3a231e5b-c85e-4bfa-b971-727f44a3359f", "value": "T12DF33A46F6418B13C0D62775BA9F420933239BA4E3DB73069928BFF43F8679A0E67505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792785, "uuid": "65cec5d1-b83b-4ffb-88e2-bc621f551e7c", "value": "3072:pZZR7y7SCae8RFvqgPLwM+CwhxsT+PLDpyoM/9TAe/03:pZZRGWCae8RFv/P9+Rhxe+jDpJM/9TAF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766792785, "uuid": "46ddc745-0ce9-4b43-a12d-af3e700f8517", "value": 159412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766792785, "uuid": "fa8375ad-2516-4e24-a964-0ce009f949b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766792785, "uuid": "da5aacd0-4e4d-421b-8a2e-2958e8729278", "value": "Space.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5c9114-e1fb-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766713285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713285, "uuid": "840f419e-7df8-4085-af35-e48f26fa5638", "comment": "Malware payload (Mirai)", "value": "2255f8ff1818a42152a916846f564c9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713285, "uuid": "eb2c1b86-381e-4aa4-a71a-858436133905", "comment": "Malware payload (Mirai)", "value": "faf49354acbe6863c1d3e3681729345e3f0bb3a24fddebd003f32a5283deda68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713285, "uuid": "585a0d52-adb1-45ca-9d5c-f474a57fe979", "comment": "Malware payload (Mirai)", "value": "ba965c673e7e5f4fe88aba796858e5ca16b29216", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713285, "uuid": "cb2d4b9f-0c14-4023-814c-eeb17847bbdc", "comment": "Malware payload (Mirai)", "value": "b58263454796fa67f244e2a980189fe471805aad6083b1addea457d31e8632345b8e00f6b938a81d40d32dbcf7e5bc83", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713285, "uuid": "a5718625-6030-46de-b6d3-ebf6f374ea77", "value": "T1AC930906BF640FFBD85FCD3745B95B05258D910A22E93B7A3A34D828F64B15F0AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713285, "uuid": "74ad3137-0b75-4549-8ae8-d3a0486d9f7d", "value": "1536:WE/AmVNPNSa4ecoJyGnun5UTJIGwUcMxuSH7RkaCwLzYjy5ZgEajkw86yJFxhc84:W9gN14drN862QFylTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713285, "uuid": "6bccdcc2-7a16-48a0-b940-0b4268ab8296", "value": 97448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713285, "uuid": "0de1b55e-d824-4e48-a908-31a40ddc568b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713285, "uuid": "b2be8df6-9901-4d15-9052-9d26a6631e2f", "value": "nklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad643dbf-e1fa-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766712721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712721, "uuid": "fe24280b-07b4-4af4-9825-87db9019832e", "comment": "Malware payload (Mirai)", "value": "42246bfe8565991c1a0b9399ab39517e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712721, "uuid": "bb966277-1fcb-4dd9-b850-ee06ceb2a95d", "comment": "Malware payload (Mirai)", "value": "fbb8475809fe2d0a3f65c0b9e66b0443f2af58dd12e8406081b9901a63de1045", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712721, "uuid": "f42fc278-8f33-43ab-977e-6904ad9783d9", "comment": "Malware payload (Mirai)", "value": "0c198a5be7880dc6e3a5d06c6bdb5886ff05b688", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712721, "uuid": "03fdbe66-8ef8-4c2e-ba49-7a54e6eb4761", "comment": "Malware payload (Mirai)", "value": "44e30b4fbf1609c0797cbed941d7a9f759d6ff8792c3b5395a789ff61e95dc4e9f790daeab881ba365bab756bb0c81f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712721, "uuid": "07712cf4-1a1c-478f-9167-c7c681d05cf1", "value": "T1DB634AD3F809DFB6F809D73B449305067230A3A54A825B77B353206BDD762A92973F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712721, "uuid": "e738716e-1c21-49c4-81b0-2aaee002ae25", "value": "1536:m7pDCdtR2nOXopu158ywBXpZXX6ymwHSwIryNGmcosyFebyw:mMdtRX4pu1EBXjXT7l4mcosyFe+w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712721, "uuid": "741f3c90-3c66-4ebc-9c7c-f2cdfebd5231", "value": 72568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712721, "uuid": "42513c5c-3c00-4c77-bc4f-68741dfb6822", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712721, "uuid": "86f5d34e-6a49-4f73-94f9-01f58c907670", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b7ac2f0-e277-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1766766378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766766378, "uuid": "17efd4ec-8697-4449-afcd-13f3beccce76", "comment": "Malware payload", "value": "2538e6dfcd966c2b93d46204dea0fa77", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766766378, "uuid": "8484bbc4-7e3d-43d5-ae8c-31a1ad3708d3", "comment": "Malware payload", "value": "fbbad732d1278595851b2a2d0a1a4bfd02e02bf35c1c060f9953404b6fdbce48", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766766378, "uuid": "f6d482be-cb90-49b5-ab15-b6a65cbacb34", "comment": "Malware payload", "value": "26248eaebbc98ee255ee40607e217b2c484934cb", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766766378, "uuid": "74569d57-16c9-467d-a483-704561bec7d6", "comment": "Malware payload", "value": "0538a1c5c16cbf68fef7596016a7294dd9f2d88d3524c06d4842fd2b9f1b54d099684f7d6d6e95f84ce5cc8e75372ec6", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766766378, "uuid": "428a33df-184f-4c15-992c-6d382a11d4cd", "value": "T115E1D596ACF32518740B505DCFBFA2587069A05B434ACD5CFECC66A8DF0D2A49222FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766766378, "uuid": "65a62691-4c03-41bb-bb4b-4f7b5a0c5e05", "value": "192:OZZsIE/CTK/eK00llHYoHsfOBro2Tc/OySmy:OX6/zYoHsfO2/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766766378, "uuid": "69bb75bc-870d-431a-8976-aa90ce45976a", "value": 7372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766766378, "uuid": "ec990d8d-9cd0-42f6-b257-409cabbd2771", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766766378, "uuid": "4b12b143-78d2-4812-b7df-f6a266e1b482", "value": "document.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b8c583-e27a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766767466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "de23043b-9864-4a35-a21f-641be0561356", "comment": "Malware payload (Mirai)", "value": "d319af07672619848070c357bebd9090", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "6fc24b84-f4e3-4cd3-9ecd-40480c3748a5", "comment": "Malware payload (Mirai)", "value": "fbe280fcc22fd1a5159095c1f3e5470264a88acefde7fe340e8520edc76cd340", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "e642dba5-c238-4be1-acf3-fad6689f7f3f", "comment": "Malware payload (Mirai)", "value": "0d6af0f7f3dd4ce7d5e45bb884885e2eeb4d46ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766767466, "uuid": "7d78820e-466b-4be0-97a3-689640ef3ba2", "comment": "Malware payload (Mirai)", "value": "e28327e7486f575872e7ff2dfd20e96d4f5d3cb639bf0a2cf08ce04c5e8b73d0519cf326053b7921f03db58f6b493500", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "1a2ab8fb-84de-4a23-a247-8723bfc9135d", "value": "T15E633A91BD819713C6D012BBFB6E028D372613A8D2EE7207DD266F21378785B0E77611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "f5e399d2-c3dd-4624-9506-90d21dd9d70b", "value": "1536:jLbWzyoQU0SP8rWb9BEp2vk7XrnCHAvMs/Fx:jLblorBEwWxL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766767466, "uuid": "ad3ec496-df01-4d9c-98e5-df2df7bdbc80", "value": 72688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766767466, "uuid": "f6ba2f70-582a-44da-bbf8-d0e48f6d8f09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766767466, "uuid": "954a1d9f-7175-4ad1-a3ab-c909adb29a82", "value": "parm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60a8ea49-e284-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766771863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771863, "uuid": "50f90097-603b-4f3c-99d8-ba0bb5f7fda7", "comment": "Malware payload (Mirai)", "value": "46526e92c9dcf16b1f34d6dc46d6f214", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771863, "uuid": "973b98f3-d96d-4bb6-a939-002cd7d28457", "comment": "Malware payload (Mirai)", "value": "fc2a46692f0ebc915dc13df37d2a10d5e01520d62765b700733759adca1de0e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771863, "uuid": "94efac11-4411-4820-b148-1fb031b6886f", "comment": "Malware payload (Mirai)", "value": "50398a77ff8f861fa38c466f5448a4037800fd0d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766771863, "uuid": "c976c381-521c-4b5c-bce1-54fc09c83925", "comment": "Malware payload (Mirai)", "value": "d9acfad7d0301b4b8265b6d07aea684e4b9854531b1444bc8dadcad0d99cf9728e4eda0dea35ea65669bc9b4e78ff063", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771863, "uuid": "618412a0-d42f-446c-a572-59fd752e38bd", "value": "T1C9935B23653C2A1AD1F0907312775393B0E62A5E04A4E79EFD720E8BFF662D41E2B574", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771863, "uuid": "ba05f544-18d2-4305-82d5-6e38606f026c", "value": "1536:YgqGB0aoLwTsHJ0Sm2Zw0lAXWMcazx1F4kmZOSoWIymQY2AUYci5hh1g9:fqkPExJAXWMvx1LPOqhh1g9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766771863, "uuid": "2fa14448-1b65-4a8a-aa8e-78ee3d2da007", "value": 92696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766771863, "uuid": "951cadbd-ebb9-4a7a-bd6c-62a9e7e01924", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766771863, "uuid": "db5a44a7-9e0d-47ef-939a-190efa792bd8", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa00164e-e29b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766781864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781864, "uuid": "f3534839-02d7-4752-aaa8-cadc826633b6", "comment": "Malware payload (Mirai)", "value": "5de29a6b9ab3bceb53e1d06387e10db3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781864, "uuid": "c1b8af7f-c06a-437d-8499-1c34adb6b348", "comment": "Malware payload (Mirai)", "value": "fcfd6238efaa0f360abc6215d1d42449b0c26a17f40c72724dc2cb48cd37fcf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781864, "uuid": "7281ef46-83c7-42a4-a713-000e932828b7", "comment": "Malware payload (Mirai)", "value": "fbe7e6a3ad49449e8d3eeae682f88205d9297e93", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766781864, "uuid": "e47a666b-6a5e-45a0-aa79-fee2140c0e04", "comment": "Malware payload (Mirai)", "value": "4ac5c5d3fd5d296bd6f644ff5cd1948ea6f2597ff5e125f737e20cbad3e9fd9731d1d983f9102d7513e0ed6f2489589a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781864, "uuid": "de2e5ba1-80a3-4e97-8134-dfd78a99ad49", "value": "T11D634B81F653C4F5D8531171507AB77FCB32DA164031C64BEB2A9F36DD27842AA273A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781864, "uuid": "eb533481-12f5-479c-998b-f01918f87606", "value": "1536:mMlK7eFcAWKMRcCrKICDm2l6kTAKI/bOSY9g:+NHnrKICDm2lRAKISq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766781864, "uuid": "1b426b7d-fd5d-4787-9593-d98b55b5fcde", "value": 70820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766781864, "uuid": "ca17748b-01df-4268-b9e6-a65a3b90ebc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766781864, "uuid": "0851a340-8542-48db-8df7-fc333622d3ee", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c152d6c3-e1f9-11f0-a129-42010a9c0007", "comment": "Malware payload (Gafgyt)", "timestamp": 1766712325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712325, "uuid": "11b4e0b1-95ed-43e2-8b91-6b8743cc1594", "comment": "Malware payload (Gafgyt)", "value": "d48e8ff24842dc7acafded0e86adb1d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712325, "uuid": "4a71042a-f9ff-40ac-a8a3-ef222474ac44", "comment": "Malware payload (Gafgyt)", "value": "fd99e5955b454c6fdd911426afb0a4d1283f537915c0a4409dde4b04962c786a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712325, "uuid": "33a39414-6ac8-4c59-9688-23fdfed26aa9", "comment": "Malware payload (Gafgyt)", "value": "bdf82ac9defa9f660e855c6f2aaffb48a19d0ad7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766712325, "uuid": "2d789624-f544-47b6-a410-8f8c7e441751", "comment": "Malware payload (Gafgyt)", "value": "2986034027db8f6d9af25b3c19de19a9bcf8e80e902297ec2621b6a9231c7cfdb2e16454bdb13dde2d6ad15ba8e608c3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712325, "uuid": "b11651fd-8b97-4d33-a6e3-0a2358078cc7", "value": "T121E2E17D1E40E6F9D833A93923BA13B148791FE137169C0A9B72E7236E42A533593DD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712325, "uuid": "c404fea1-9d2e-49db-920e-0f17b8723a17", "value": "768:nmQSRhK6y2j3CX+V9H2Ig88S7pGpkPBJgGlzDpxYsC:mQSRhK6y2OuLH2m6krVrY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766712325, "uuid": "8e20e51c-ff1b-42ec-b7ad-6e519d87c798", "value": 33344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766712325, "uuid": "c1834ab0-c72b-4f2d-81d6-67e97df05331", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766712325, "uuid": "57dff3f3-745e-4b59-8245-d871a7939432", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fff22672-e2b5-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766793175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793175, "uuid": "1060e93e-0da5-4a52-a673-4f9e129f215b", "comment": "Malware payload (Mirai)", "value": "58e85ba6a2f2ceba11fa97f190f6862f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793175, "uuid": "6f337b03-25d1-4ad2-929b-6cbd908df2ff", "comment": "Malware payload (Mirai)", "value": "fd9b06d85366839cd3ea6c5c9bb3e52f8982311d4dc88ac8e631d13482539e56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793175, "uuid": "2db8cfa4-cc89-4519-adff-e1ba9e4a5189", "comment": "Malware payload (Mirai)", "value": "8dd8d17056dff9a60a40ed05f3f66d6373edcf11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766793175, "uuid": "d7ec8be2-573b-484c-85d0-913096bd0a8d", "comment": "Malware payload (Mirai)", "value": "eaba4fa540bdf01a985e86cd55fdbbc50c10419b42f8e0b43660ccd8d752069bbfe66b47c1faeff937ba6d6d740bdd05", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793175, "uuid": "0170b42b-297b-4dd5-892c-1f4b7233066e", "value": "T18C249FA1A41059DBDE0088BA73AC8F7427923C70C25F0F6D5D568168A28F9DFF1D6BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793175, "uuid": "0fc76711-abaf-4966-9e35-acb8f03029fd", "value": "3072:wc+SgMYd+8yGWpz86K8bUfmCmJBMY3W6EH5r:wcDpYMfA8bUfmZkYG6Wr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766793175, "uuid": "67c8f1e2-1e8f-41b0-8175-234782666cb2", "value": 223664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766793175, "uuid": "8f5d375a-e5f1-42f1-9729-6af65995f123", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766793175, "uuid": "158a714a-86f4-468e-9839-d3b62ea93881", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35095938-e1fd-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1766713808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713808, "uuid": "2807d915-1560-42d6-acc1-33ae024669ab", "comment": "Malware payload (ValleyRAT)", "value": "93ae8fb1caa98dc0c7b909335142e34a", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713808, "uuid": "e8713f13-0364-49e5-9224-7954508974a8", "comment": "Malware payload (ValleyRAT)", "value": "fdaef1df61f8862e1007e99219de5dafe57771d8e0b887e11bbcfa86ab452ecc", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713808, "uuid": "e0942051-76ee-4367-a154-bef246f7e4fe", "comment": "Malware payload (ValleyRAT)", "value": "9100e55a3d28a30de39c2af8f8068ce73dc972b1", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766713808, "uuid": "a47cf51f-fc0d-435b-ae3a-cb21f8d3b6ee", "comment": "Malware payload (ValleyRAT)", "value": "9b15bd01a223f5e58507d8e43fb627cc6d01bd423b0175a275ebafaafa344ef117545d4ae2629ecd990e8788436d3c92", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713808, "uuid": "dd1670c7-c196-4d55-a1df-6d3334db3f3c", "value": "T190C5CF21B287C036D16E0177E968EE5E1978BE730B3145D7B7E83D6E49B08C29279B07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713808, "uuid": "39ea2fc1-f845-4a96-b8df-b4e28c28ef47", "value": "49152:ufItohlj9szAlopTyWD5L6D5jkakEv53rB3PfhPD0POjOQP1ANZoJLCN:FoSTy8wkynhugqNZK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766713808, "uuid": "23c828f3-e19e-40b3-ad44-cdf394e03a19", "value": 2686976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766713808, "uuid": "fcda46c3-0c34-4fd0-9870-937b57619723", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766713808, "uuid": "2378869b-bcc5-4510-aadd-995fcd094501", "value": "Hr.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e783bae8-e1f7-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766711530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711530, "uuid": "bcb1f446-d9c7-4b11-b920-f6950a020863", "comment": "Malware payload (Mirai)", "value": "968411a84351d27e464f1646af84cb4f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711530, "uuid": "4af815b6-a215-4f76-b5dd-4ebe2655b715", "comment": "Malware payload (Mirai)", "value": "fe11695c70283692c4c423f183fb160e7ec94c1463b4b06feaf3a6aba943c803", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711530, "uuid": "465689b3-4c17-4f5e-8948-0371691725ca", "comment": "Malware payload (Mirai)", "value": "c92a03dc3c715bc15ab0089d2ebf5821faeb4117", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766711530, "uuid": "3f04f2e9-17bc-48cb-bf91-f8c4a120eb41", "comment": "Malware payload (Mirai)", "value": "d09572b4ccd8d65b986b7c09c606520946c4801950289688363f67a3d9d31e1edaacf57e8541d5540ab973502492f54c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711530, "uuid": "d6c9f214-1091-4a8f-a1bd-281f551a68e9", "value": "T1E7735CC59B53E8F5EC26057511B6FB369E71F53A11A8EE83F394B933B813201A50A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711530, "uuid": "bff1778c-a03d-4c0b-8d0b-f9604956f848", "value": "1536:6vOgPsECUqPy2J826z321CX1qYl6UL2kG5qx/BsVXRR:62gUECXPhJFl18LlLLtaWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766711530, "uuid": "99178142-1d89-47e0-a140-d9abd054a68e", "value": 74704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766711530, "uuid": "1b9a2320-3636-436e-92e2-faf546ce0c50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766711530, "uuid": "0809c5e6-6c0c-4863-8d89-d6355c6d161c", "value": "jklx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c892f80c-e1ee-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766707613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707613, "uuid": "a120f35b-4d1b-4978-a1df-7a5e88ac48a0", "comment": "Malware payload (Mirai)", "value": "c672991fa8842ca8ddd776735228f21c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707613, "uuid": "b1c66f4a-e1b1-4ab7-a025-5bb07d1fc98b", "comment": "Malware payload (Mirai)", "value": "fe450408b02359de7cab299c2a62ddfcf3ea34b25b71d6f5d0b01fec27ae915e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707613, "uuid": "7d39bc68-b4c7-4eb4-9e2d-e57041a8b488", "comment": "Malware payload (Mirai)", "value": "d49f18aeb085470b04c0f484068f7b55a3c2a1d4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766707613, "uuid": "93c9269d-425c-4de4-86aa-bf558b04c0ad", "comment": "Malware payload (Mirai)", "value": "44d319e5a45d7e813a3c87a9ddeb2fa9c896f34905bb010c92869fad79b8186a4ac463f81bedd04fd0dfafda1be491ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707613, "uuid": "2e5f9455-5e69-402e-9121-76e5a7c4061b", "value": "T143B3D70A7B650EFBD85FCD374AB95B05258D960722E93B3A3974D818F24B24F09E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707613, "uuid": "64c90860-056b-4692-a46c-1ac4d604d42d", "value": "1536:xwqw3NpchRKdZ9Nzxzr8n1PpzDfnuIYLEaMIIFtl9PRhkUVBFxT2bVR:xi0hkdZB4PZzZVDBjT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766707613, "uuid": "5a936a29-2246-4865-a84c-77a9fd5382c4", "value": 109420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766707613, "uuid": "5434711c-51b7-45aa-b4a4-70a65ed83e66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766707613, "uuid": "36c37ec7-4eb1-408e-b795-08ad1ecb477e", "value": "jklmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4d38439-e285-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766772514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772514, "uuid": "b9e0be78-3be9-4097-ac6e-72467409e210", "comment": "Malware payload (Mirai)", "value": "4e27198d8e0928ae44695c6cc3de8645", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772514, "uuid": "48d58d96-2b4f-40b2-ab9e-e0e3674b04aa", "comment": "Malware payload (Mirai)", "value": "ff6e653830dd718cad5634acbacbf071bd298ed008ded2396afda9328691f974", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772514, "uuid": "f7d8d505-4418-48b0-ba3a-3cee382388f5", "comment": "Malware payload (Mirai)", "value": "6ce66f348591293984590079de8daeba7cfb67be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766772514, "uuid": "5bf6b40b-3f9d-41e2-8758-77583d99f2a5", "comment": "Malware payload (Mirai)", "value": "976c0f031e17c33d0985bc97d2a0fd9b050a686d84fc3adad28480a3cb7fc5090daae4f39e9156f22002d0078b3611f3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772514, "uuid": "eac4e52f-d8cd-425f-ba90-e680a8cf0201", "value": "T188F31951BC515B62C6E633BBFB5E428D371513A8D2EF72078D226F203BCA95B0E76241", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772514, "uuid": "566e4ec2-8af8-4179-a81a-75f36d5fb9b2", "value": "3072:h+O9+iJkUCFx6K5S1Us7Lyn5SXlFR/9Nb41d42+UHJaW7UVFZT:h+FSX51Nb4X4/UHAIUV3T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766772514, "uuid": "98a1dd3d-735e-45e5-8a3a-ff2bba051233", "value": 170476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766772514, "uuid": "78d1c26f-5c82-4fc8-bcb6-f38940657ff1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766772514, "uuid": "ef160c65-f3d4-4c24-9432-5e7fdd3a425a", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5914ec79-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728041, "uuid": "83580837-8720-47f2-8c85-c929b87b7f8c", "comment": "Malware payload (Mirai)", "value": "6a9a5bb8a2a599ad34513a49e0da096f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728041, "uuid": "7b12a7ac-1bd2-4ca9-9943-ff2293aff49e", "comment": "Malware payload (Mirai)", "value": "ffb290a4e1fcc48ae652125ce72dee3ecb6783d3a3c9b98e1d1d0ba8643ce7b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728041, "uuid": "2796d505-29e5-4fee-9ff3-f2ad78462d56", "comment": "Malware payload (Mirai)", "value": "8b68717f40a3fd46ca7b8be7c3474a779f44a3a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728041, "uuid": "e4108556-955a-4d27-8998-d9e8563f6a34", "comment": "Malware payload (Mirai)", "value": "b4d331d28240922d86e11dd462a62107b4e5e41ee89c82d33d5457b456ff7c38a67a5f0dcc370df2be0c91e4f5178a9b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728041, "uuid": "142bdc4d-5bb7-4282-92ad-38548620eb23", "value": "T114D37D64FE4F68C1D2C2E37ABE460FA3701B7CB49655C0B10B00A6AFD5EAFD94991613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728041, "uuid": "c1cf671e-b000-498d-badb-1c79f264a36c", "value": "1536:G2NVFDi4wkHWXov+L79+Alt0tfpynEncYDdNHN9jzPx+XTWTUr:bTWUHvYQAEh0EcYDdNNhzPxw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728041, "uuid": "460888cd-716e-423d-8ec5-3eee0d125f25", "value": 132064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728041, "uuid": "66ece051-f52a-4a81-8e8b-8b90ba08ce89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728041, "uuid": "54548b8a-ac87-4bd0-8597-27cdc24bd3db", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51c255fd-e21e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1766728029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728029, "uuid": "6c8cb948-789a-4965-bfc3-5c285d5a648f", "comment": "Malware payload (Mirai)", "value": "99591a9596933f242a29bfaeb283f9f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728029, "uuid": "bcfaf863-b4c2-4237-aaff-a4a01f1922c0", "comment": "Malware payload (Mirai)", "value": "ffebbf3307567ba601c5cd5962e380c17d63285230fe902b137734162740628b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728029, "uuid": "7d63d038-202d-4339-a3c9-f82306934267", "comment": "Malware payload (Mirai)", "value": "13e3b52f6752d25f999ae8230080bd2053145406", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1766728029, "uuid": "2fa7494d-7d91-4b83-9dc4-88c631a83cdc", "comment": "Malware payload (Mirai)", "value": "2445c1b39d0fa62b5e993fc009b14c5f587241ff97ef685b6f1ada8dfdddeef8135a91ed55a7a6c47dc6f2e0882c83cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728029, "uuid": "d31dffae-5e09-4aac-a40c-10ec4e57677c", "value": "T12CD3292F258191F0FA811BB06BCBD3D76C694BFB1099A0DF5B116329B6E4B77A02C447", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728029, "uuid": "2216e690-8293-4e4f-bf03-d78bc430d805", "value": "3072:HarwVT4hNssO9lOw6n6x3O1N98HN/kov5B55wIUyZ:6rwYhWl3+jyt/D5B5q50", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1766728029, "uuid": "860a55f3-521e-4be5-8c63-364120cac035", "value": 139896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1766728029, "uuid": "6339b679-f203-49ce-be43-92b8dfa0538a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1766728029, "uuid": "a974b130-4faa-4946-9879-20e005162e2c", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }